[{"data":1,"prerenderedAt":2505},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-8742":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":178,"related":181},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T11:49:05.682Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T11:47:56.369Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":38,"advisoryIds":106,"advisoryCount":176,"providers":177},"opencode:8742","opencode-8742",8742,"ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark","Small vibecoded benchmark meant as a smoke test for search API results.","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark","cd6b854b1b400d7e45796aaa22bded8183642916","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fcommit\u002Fcd6b854b1b400d7e45796aaa22bded8183642916","2026-05-07T14:25:51.430Z","2026-02-17T14:55:53.000Z",{"complete":91,"entryCount":92,"truncated":46},true,248,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","b8f9651f03205e9719be196d83af006415043f761f2f02bcde0cac7b36f8dca7",305255,"parsed",65,[103],"pypi",9,15,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175],"GHSA-248v-346w-9cwc","GHSA-2fqr-mr3j-6wp8","GHSA-2g6r-c272-w58r","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3644-q5cj-c5c7","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-428g-f7cq-pgp5","GHSA-45pg-36p6-83v9","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4xgf-cpjx-pc3j","GHSA-54jq-c3m8-4m76","GHSA-5chr-fjjv-38qv","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6qv9-48xg-fc7f","GHSA-926x-3r5x-gfhw","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c67j-w6g6-q2cm","GHSA-f4xh-w4cj-qxq8","GHSA-fh55-r93g-j68g","GHSA-fjqc-hq36-qh5p","GHSA-fv5p-p927-qmxr","GHSA-g3cq-j2xw-wf74","GHSA-g48c-2wqr-h844","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gr75-jv2w-4656","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pc6w-59fv-rh23","GHSA-pjwx-r37v-7724","GHSA-pq67-6m6q-mj2v","GHSA-q25c-c977-4cmh","GHSA-qccp-gfcp-xxvc","GHSA-qh6h-p6c9-ff54","GHSA-r7w7-9xr2-qq2r","GHSA-rr7j-v2q5-chgv","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w39p-vh2g-g8g5","GHSA-xcgm-r5h9-7989","PYSEC-2024-115","PYSEC-2024-323",69,[],{"files":179,"occurrenceCount":101},[180],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":182,"vulnerabilities":782},[183,194,203,213,223,235,243,252,261,271,281,290,299,308,318,327,337,346,355,364,373,382,393,402,411,421,431,440,449,458,467,476,485,494,503,512,523,532,541,550,558,567,576,584,592,601,609,619,628,638,646,655,664,673,683,692,701,710,719,728,737,746,755,764,773],{"id":184,"slug":185,"identity":186,"label":187,"aiRelevant":91,"provider":188,"advisoryCount":65,"licenseExpressions":189,"versions":191,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":193},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","LangChain Core",null,[190],"MIT",[192],"1.2.7",[55],{"id":195,"slug":196,"identity":197,"label":198,"aiRelevant":91,"provider":188,"advisoryCount":34,"licenseExpressions":199,"versions":200,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":202},"package:pypi:langchain-community","langchain-community-b296254c","pypi:langchain-community","LangChain Community",[190],[201],"0.4.1",[55],{"id":204,"slug":205,"identity":206,"label":207,"aiRelevant":91,"provider":188,"advisoryCount":208,"licenseExpressions":209,"versions":210,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":212},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","LangChain",3,[190],[211],"1.2.6",[55],{"id":214,"slug":215,"identity":216,"label":217,"aiRelevant":91,"provider":188,"advisoryCount":218,"licenseExpressions":219,"versions":220,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":222},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","LangGraph",2,[190],[221],"1.0.6",[55],{"id":224,"slug":225,"identity":226,"label":227,"aiRelevant":91,"provider":228,"advisoryCount":32,"licenseExpressions":231,"versions":232,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":234},"package:pypi:langchain-openai","langchain-openai-4985188e","pypi:langchain-openai","LangChain OpenAI",{"id":229,"label":230},"openai","OpenAI",[190],[233],"1.1.7",[55],{"id":72,"slug":73,"identity":236,"label":74,"aiRelevant":91,"provider":237,"advisoryCount":38,"licenseExpressions":238,"versions":240,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":242},"pypi:openai",{"id":229,"label":230},[239],"Apache-2.0",[241],"2.15.0",[55],{"id":244,"slug":245,"identity":246,"label":247,"aiRelevant":91,"provider":188,"advisoryCount":38,"licenseExpressions":248,"versions":249,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":251},"package:pypi:langchain-linkup","langchain-linkup-d50e0d4b","pypi:langchain-linkup","LangChain · Linkup",[190],[250],"0.1.7",[55],{"id":253,"slug":254,"identity":255,"label":256,"aiRelevant":91,"provider":188,"advisoryCount":38,"licenseExpressions":257,"versions":258,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":260},"package:pypi:langchain-tavily","langchain-tavily-432e1c93","pypi:langchain-tavily","LangChain · Tavily",[190],[259],"0.2.17",[55],{"id":262,"slug":263,"identity":264,"label":265,"aiRelevant":91,"provider":188,"advisoryCount":38,"licenseExpressions":266,"versions":268,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":270},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[267],"non-standard",[269],"0.12.0",[55],{"id":272,"slug":273,"identity":274,"label":275,"aiRelevant":46,"provider":188,"advisoryCount":30,"licenseExpressions":276,"versions":278,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":280},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[239,277],"Apache-2.0 AND MIT",[279],"3.13.3",[55],{"id":282,"slug":283,"identity":284,"label":285,"aiRelevant":46,"provider":188,"advisoryCount":65,"licenseExpressions":286,"versions":287,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":289},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[190],[288],"2.6.3",[55],{"id":291,"slug":292,"identity":293,"label":294,"aiRelevant":46,"provider":188,"advisoryCount":208,"licenseExpressions":295,"versions":296,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":298},"package:pypi:langsmith","langsmith-a7ab7b96","pypi:langsmith","langsmith",[190],[297],"0.6.4",[55],{"id":300,"slug":301,"identity":302,"label":303,"aiRelevant":46,"provider":188,"advisoryCount":208,"licenseExpressions":304,"versions":305,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":307},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[239],[306],"2.32.5",[55],{"id":309,"slug":310,"identity":311,"label":312,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":313,"versions":315,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":317},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[314],"MPL-2.0",[316],"2026.1.4",[55],{"id":319,"slug":320,"identity":321,"label":322,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":323,"versions":324,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":326},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[190],[325],"0.16.0",[55],{"id":328,"slug":329,"identity":330,"label":331,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":332,"versions":334,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":336},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[333,267],"BSD-3-Clause",[335],"3.11",[55],{"id":338,"slug":339,"identity":340,"label":341,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":342,"versions":343,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":345},"package:pypi:langchain-classic","langchain-classic-ee5360ab","pypi:langchain-classic","langchain-classic",[190],[344],"1.0.1",[55],{"id":347,"slug":348,"identity":349,"label":350,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":351,"versions":352,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":354},"package:pypi:langchain-text-splitters","langchain-text-splitters-0c057788","pypi:langchain-text-splitters","langchain-text-splitters",[190],[353],"1.1.0",[55],{"id":356,"slug":357,"identity":358,"label":359,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":360,"versions":361,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":363},"package:pypi:langgraph-checkpoint","langgraph-checkpoint-b3039a64","pypi:langgraph-checkpoint","langgraph-checkpoint",[190],[362],"4.0.0",[55],{"id":365,"slug":366,"identity":367,"label":368,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":369,"versions":370,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":372},"package:pypi:langgraph-sdk","langgraph-sdk-7670dc92","pypi:langgraph-sdk","langgraph-sdk",[190],[371],"0.3.3",[55],{"id":374,"slug":375,"identity":376,"label":377,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":378,"versions":379,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":381},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[190],[380],"3.26.2",[55],{"id":383,"slug":384,"identity":385,"label":386,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":387,"versions":390,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":392},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[388,389],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[391],"3.11.5",[55],{"id":394,"slug":395,"identity":396,"label":397,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":398,"versions":399,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":401},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[190],[400],"2.12.0",[55],{"id":403,"slug":404,"identity":405,"label":406,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":407,"versions":408,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":410},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[333],[409],"1.2.1",[55],{"id":412,"slug":413,"identity":414,"label":415,"aiRelevant":46,"provider":188,"advisoryCount":32,"licenseExpressions":416,"versions":418,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":420},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[417],"MIT AND MPL-2.0",[419],"4.67.1",[55],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":426,"versions":428,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":430},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[427],"PSF-2.0",[429],"2.6.1",[55],{"id":432,"slug":433,"identity":434,"label":435,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":436,"versions":437,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":439},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[239],[438],"1.4.0",[55],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":445,"versions":446,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":448},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[190],[447],"0.7.0",[55],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":454,"versions":455,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":457},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[190],[456],"4.12.1",[55],{"id":459,"slug":460,"identity":461,"label":462,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":463,"versions":464,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":466},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[190],[465],"25.4.0",[55],{"id":468,"slug":469,"identity":470,"label":471,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":472,"versions":473,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":475},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[190],[474],"3.4.4",[55],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":481,"versions":482,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":484},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[267],[483],"0.4.6",[55],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":490,"versions":491,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":493},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[190],[492],"0.6.7",[55],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":499,"versions":500,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":502},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[239],[501],"1.9.0",[55],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":508,"versions":509,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":511},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[239],[510],"1.8.0",[55],{"id":513,"slug":514,"identity":515,"label":516,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":517,"versions":520,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":522},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[190,518,519],"MIT AND PSF-2.0","MIT AND Python-2.0",[521],"3.3.0",[55],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":528,"versions":529,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":531},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[333],[530],"1.0.9",[55],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":537,"versions":538,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":540},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[333],[539],"0.28.1",[55],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":546,"versions":547,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":549},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[190],[548],"0.4.3",[55],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":555,"versions":556,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":557},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[190],[269],[55],{"id":559,"slug":560,"identity":561,"label":562,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":563,"versions":564,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":566},"package:pypi:jsonpatch","jsonpatch-ce7aa354","pypi:jsonpatch","jsonpatch",[267],[565],"1.33",[55],{"id":568,"slug":569,"identity":570,"label":571,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":572,"versions":573,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":575},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[267],[574],"3.0.0",[55],{"id":577,"slug":578,"identity":579,"label":580,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":581,"versions":582,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":583},"package:pypi:langgraph-prebuilt","langgraph-prebuilt-84c4e144","pypi:langgraph-prebuilt","langgraph-prebuilt",[190],[221],[55],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":589,"versions":590,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":591},"package:pypi:linkup-sdk","linkup-sdk-d56065ac","pypi:linkup-sdk","linkup-sdk",[190],[269],[55],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":597,"versions":598,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":600},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[239],[599],"6.7.0",[55],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":606,"versions":607,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":608},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[190],[353],[55],{"id":610,"slug":611,"identity":612,"label":613,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":614,"versions":616,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":618},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[615,267],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[617],"2.4.1",[55],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":624,"versions":625,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":627},"package:pypi:ormsgpack","ormsgpack-56a067ff","pypi:ormsgpack","ormsgpack",[388],[626],"1.12.2",[55],{"id":629,"slug":630,"identity":631,"label":632,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":633,"versions":635,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":637},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[634,267],"Apache-2.0 OR BSD-2-Clause",[636],"25.0",[55],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":643,"versions":644,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":645},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[239],[201],[55],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":651,"versions":652,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":654},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[190],[653],"2.12.5",[55],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":660,"versions":661,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":663},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[190],[662],"2.41.5",[55],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":669,"versions":670,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":672},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[190],[671],"6.0.3",[55],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":678,"versions":680,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":682},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[679,267],"Apache-2.0 AND CNRI-Python",[681],"2026.1.15",[55],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":688,"versions":689,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":691},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[239],[690],"1.0.0",[55],{"id":693,"slug":694,"identity":695,"label":696,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":697,"versions":698,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":700},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[388],[699],"1.3.1",[55],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":706,"versions":707,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":709},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[190],[708],"2.0.46",[55],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":715,"versions":716,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":718},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[239],[717],"9.1.2",[55],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":724,"versions":725,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":727},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[427,267],[726],"4.15.0",[55],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":733,"versions":734,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":736},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[190],[735],"0.9.0",[55],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":742,"versions":743,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":745},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[190],[744],"0.4.2",[55],{"id":747,"slug":748,"identity":749,"label":750,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":751,"versions":752,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":754},"package:pypi:uuid-utils","uuid-utils-c3d356a2","pypi:uuid-utils","uuid-utils",[333,267],[753],"0.14.0",[55],{"id":756,"slug":757,"identity":758,"label":759,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":760,"versions":761,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":763},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[267],[762],"3.6.0",[55],{"id":765,"slug":766,"identity":767,"label":768,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":769,"versions":770,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":772},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[239],[771],"1.22.0",[55],{"id":774,"slug":775,"identity":776,"label":777,"aiRelevant":46,"provider":188,"advisoryCount":38,"licenseExpressions":778,"versions":779,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":781},"package:pypi:zstandard","zstandard-8fab007a","pypi:zstandard","zstandard",[333],[780],"0.25.0",[55],[783,822,853,883,908,940,974,1000,1024,1051,1079,1105,1125,1143,1161,1186,1214,1241,1260,1286,1309,1332,1355,1381,1415,1439,1461,1495,1525,1545,1570,1604,1620,1644,1669,1691,1710,1735,1768,1793,1820,1843,1869,1891,1914,1935,1971,2007,2030,2054,2073,2095,2126,2149,2171,2193,2222,2244,2268,2296,2316,2347,2370,2391,2418,2441,2469,2488],{"id":107,"slug":784,"dossier":46,"summary":785,"aliases":786,"sourceIds":789,"published":790,"modified":791,"checkedAt":7,"severity":792,"references":796,"versionKeys":820,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[787,788],"CVE-2024-39689","PYSEC-2024-230",[107,788],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[793],{"type":794,"score":795},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[797,800,802,805,808,811,814,816,818],{"type":798,"url":799},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":798,"url":801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":803,"url":804},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":806,"url":807},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":809,"url":810},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":812,"url":813},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":809,"url":815},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":798,"url":817},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":798,"url":819},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[821],"pypi:certifi@2024.6.2",{"id":108,"slug":823,"dossier":46,"summary":824,"aliases":825,"sourceIds":828,"published":829,"modified":830,"checkedAt":7,"severity":831,"references":837,"versionKeys":844,"packageCount":32,"repositoryCount":104},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[826,827],"CVE-2026-54279","PYSEC-2026-2112",[108,827],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[832,835],{"type":833,"score":834},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":836},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[838,840,842],{"type":798,"url":839},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":806,"url":841},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":803,"url":843},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[845,846,847,848,849,850,851,852],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":109,"slug":854,"dossier":46,"summary":855,"aliases":856,"sourceIds":859,"published":860,"modified":861,"checkedAt":7,"severity":862,"references":865,"versionKeys":880,"packageCount":32,"repositoryCount":218},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[857,858],"CVE-2026-26013","PYSEC-2026-2562",[109,858],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[863],{"type":794,"score":864},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[866,868,870,872,874,876,878],{"type":809,"url":867},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":798,"url":869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":809,"url":871},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":806,"url":873},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",{"type":809,"url":875},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":806,"url":877},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":798,"url":879},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[881,882],"pypi:langchain-core@0.2.28","pypi:langchain-core@1.2.7",{"id":110,"slug":884,"dossier":46,"summary":885,"aliases":886,"sourceIds":889,"published":890,"modified":891,"checkedAt":7,"severity":892,"references":897,"versionKeys":907,"packageCount":32,"repositoryCount":104},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[887,888],"CVE-2026-34514","PYSEC-2026-2096",[110,888],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[893,895],{"type":833,"score":894},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":896},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[898,900,902,904,905],{"type":803,"url":899},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":798,"url":901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":803,"url":903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":806,"url":841},{"type":798,"url":906},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[845,846,847,848,849,850,851,852],{"id":111,"slug":909,"dossier":91,"summary":910,"aliases":911,"sourceIds":914,"published":915,"modified":916,"checkedAt":7,"severity":917,"references":920,"versionKeys":933,"packageCount":32,"repositoryCount":939},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[912,913],"CVE-2025-66471","PYSEC-2026-1994",[111,913],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[918],{"type":833,"score":919},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[921,923,925,927,929,931],{"type":809,"url":922},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":798,"url":924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":803,"url":926},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":806,"url":928},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":806,"url":930},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":798,"url":932},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[934,935,936,937,938],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":112,"slug":941,"dossier":46,"summary":942,"aliases":943,"sourceIds":948,"published":949,"modified":950,"checkedAt":7,"severity":951,"references":954,"versionKeys":969,"packageCount":208,"repositoryCount":208},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[944,945,946,947],"CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582",[112,945,946,947],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[952],{"type":794,"score":953},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[955,957,959,961,963,965,967],{"type":809,"url":956},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":798,"url":958},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":806,"url":960},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":806,"url":962},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":798,"url":964},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":806,"url":966},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":806,"url":968},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[970,971,972,973],"pypi:langchain-classic@1.0.1","pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langsmith@0.6.4",{"id":113,"slug":975,"dossier":91,"summary":976,"aliases":977,"sourceIds":980,"published":981,"modified":982,"checkedAt":7,"severity":983,"references":986,"versionKeys":999,"packageCount":32,"repositoryCount":939},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[978,979],"CVE-2026-21441","PYSEC-2026-1996",[113,979],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[984,985],{"type":794,"score":836},{"type":833,"score":919},[987,989,991,993,994,996,997],{"type":809,"url":988},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":798,"url":990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":803,"url":992},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":806,"url":928},{"type":809,"url":995},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":806,"url":930},{"type":798,"url":998},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[934,935,936,937,938],{"id":114,"slug":1001,"dossier":46,"summary":1002,"aliases":1003,"sourceIds":1006,"published":1007,"modified":1008,"checkedAt":7,"severity":1009,"references":1014,"versionKeys":1023,"packageCount":32,"repositoryCount":104},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1004,1005],"CVE-2026-34517","PYSEC-2026-2099",[114,1005],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[1010,1012],{"type":833,"score":1011},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":1013},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1015,1017,1019,1021,1022],{"type":803,"url":1016},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":798,"url":1018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":803,"url":1020},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":115,"slug":1025,"dossier":46,"summary":1026,"aliases":1027,"sourceIds":1030,"published":1031,"modified":1032,"checkedAt":7,"severity":1033,"references":1035,"versionKeys":1048,"packageCount":32,"repositoryCount":218},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[1028,1029],"CVE-2025-68480","PYSEC-2026-1605",[115,1029],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[1034],{"type":794,"score":1013},[1036,1038,1040,1042,1044,1046],{"type":809,"url":1037},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":798,"url":1039},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":809,"url":1041},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":806,"url":1043},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":806,"url":1045},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":798,"url":1047},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[1049,1050],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":116,"slug":1052,"dossier":46,"summary":1053,"aliases":1054,"sourceIds":1057,"published":1058,"modified":1059,"checkedAt":7,"severity":1060,"references":1065,"versionKeys":1077,"packageCount":32,"repositoryCount":32},"ghsa-45pg-36p6-83v9-9505da12","Langchain SQL Injection vulnerability",[1055,174,1056],"CVE-2024-8309","PYSEC-2026-1507",[116],"2024-10-29T15:32:05Z","2026-07-07T17:57:12.591755527Z",[1061,1063],{"type":794,"score":1062},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":833,"score":1064},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1066,1068,1070,1072,1073,1075],{"type":798,"url":1067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8309",{"type":809,"url":1069},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F64c317eba05fbac0c6a6fc5aa192bc0d7130972e",{"type":809,"url":1071},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc2a3021bb0c5f54649d380b42a0684ca5778c255",{"type":806,"url":873},{"type":809,"url":1074},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain\u002FPYSEC-2024-115.yaml",{"type":809,"url":1076},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5",[1078],"pypi:langchain-community@0.2.7",{"id":117,"slug":1080,"dossier":46,"summary":1081,"aliases":1082,"sourceIds":1085,"published":1086,"modified":1087,"checkedAt":7,"severity":1088,"references":1091,"versionKeys":1104,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1083,1084],"CVE-2025-50182","PYSEC-2026-1997",[117,1084],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1089],{"type":794,"score":1090},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1092,1094,1096,1098,1099,1101,1102],{"type":809,"url":1093},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":798,"url":1095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":803,"url":1097},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":806,"url":928},{"type":809,"url":1100},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":806,"url":930},{"type":798,"url":1103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[934,935,936,937],{"id":118,"slug":1106,"dossier":46,"summary":1107,"aliases":1108,"sourceIds":1111,"published":1112,"modified":1113,"checkedAt":7,"severity":1114,"references":1118,"versionKeys":1124,"packageCount":32,"repositoryCount":104},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1109,1110],"CVE-2026-54273","PYSEC-2026-2107",[118,1110],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[1115,1117],{"type":833,"score":1116},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":836},[1119,1121,1123],{"type":798,"url":1120},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":803,"url":1122},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":119,"slug":1126,"dossier":46,"summary":1127,"aliases":1128,"sourceIds":1131,"published":1132,"modified":1133,"checkedAt":7,"severity":1134,"references":1138,"versionKeys":1142,"packageCount":32,"repositoryCount":104},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1129,1130],"CVE-2026-54275","PYSEC-2026-237",[119,1130],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[1135,1137],{"type":833,"score":1136},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":836},[1139,1141],{"type":798,"url":1140},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":120,"slug":1144,"dossier":46,"summary":1145,"aliases":1146,"sourceIds":1148,"published":1149,"modified":1150,"checkedAt":7,"severity":1151,"references":1154,"versionKeys":1159,"packageCount":32,"repositoryCount":218},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[1147],"CVE-2026-58203",[120],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[1152],{"type":794,"score":1153},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1155,1157],{"type":809,"url":1156},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":806,"url":1158},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[1160],"pypi:pydantic-settings@2.12.0",{"id":121,"slug":1162,"dossier":46,"summary":1163,"aliases":1164,"sourceIds":1167,"published":1168,"modified":1169,"checkedAt":7,"severity":1170,"references":1173,"versionKeys":1185,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1165,1166],"CVE-2025-69226","PYSEC-2026-1097",[121,1166],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[1171],{"type":833,"score":1172},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1174,1176,1178,1180,1181,1183],{"type":809,"url":1175},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":798,"url":1177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":803,"url":1179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":806,"url":841},{"type":806,"url":1182},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":798,"url":1184},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[845,846,847,848,849,850,851],{"id":122,"slug":1187,"dossier":46,"summary":1188,"aliases":1189,"sourceIds":1192,"published":1193,"modified":1194,"checkedAt":7,"severity":1195,"references":1198,"versionKeys":1213,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[1190,1191],"CVE-2024-10940","PYSEC-2026-1517",[122,1191],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[1196],{"type":794,"score":1197},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1199,1201,1203,1205,1207,1208,1210,1211],{"type":798,"url":1200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":809,"url":1202},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":809,"url":1204},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":809,"url":1206},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":806,"url":873},{"type":809,"url":1209},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":806,"url":877},{"type":798,"url":1212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[881],{"id":123,"slug":1215,"dossier":46,"summary":1216,"aliases":1217,"sourceIds":1220,"published":1221,"modified":1222,"checkedAt":7,"severity":1223,"references":1229,"versionKeys":1240,"packageCount":32,"repositoryCount":104},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1218,1219],"CVE-2026-34520","PYSEC-2026-2102",[123,1219],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[1224,1226,1227],{"type":794,"score":1225},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":833,"score":894},{"type":833,"score":1228},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1230,1232,1234,1236,1237,1238],{"type":803,"url":1231},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":798,"url":1233},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":803,"url":1235},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":806,"url":841},{"type":798,"url":906},{"type":809,"url":1239},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[845,846,847,848,849,850,851,852],{"id":124,"slug":1242,"dossier":46,"summary":1243,"aliases":1244,"sourceIds":1247,"published":1248,"modified":1249,"checkedAt":7,"severity":1250,"references":1253,"versionKeys":1259,"packageCount":32,"repositoryCount":104},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[1245,1246],"CVE-2026-54277","PYSEC-2026-2110",[124,1246],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[1251,1252],{"type":833,"score":1116},{"type":794,"score":836},[1254,1256,1258],{"type":798,"url":1255},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":803,"url":1257},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":125,"slug":1261,"dossier":91,"summary":1262,"aliases":1263,"sourceIds":1266,"published":1267,"modified":1268,"checkedAt":7,"severity":1269,"references":1273,"versionKeys":1282,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1264,1265],"CVE-2026-45409","PYSEC-2026-215",[125,1265],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1270,1271],{"type":794,"score":1013},{"type":833,"score":1272},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1274,1276,1278,1280],{"type":798,"url":1275},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":798,"url":1277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":806,"url":1279},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":809,"url":1281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1283,1284,1285],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":126,"slug":1287,"dossier":46,"summary":1288,"aliases":1289,"sourceIds":1292,"published":1293,"modified":1294,"checkedAt":7,"severity":1295,"references":1297,"versionKeys":1308,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[1290,1291],"CVE-2025-69224","PYSEC-2026-1099",[126,1291],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[1296],{"type":833,"score":894},[1298,1300,1302,1304,1305,1306],{"type":809,"url":1299},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":798,"url":1301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":803,"url":1303},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[845,846,847,848,849,850,851],{"id":127,"slug":1310,"dossier":46,"summary":1311,"aliases":1312,"sourceIds":1315,"published":1316,"modified":1317,"checkedAt":7,"severity":1318,"references":1320,"versionKeys":1331,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[1313,1314],"CVE-2025-69228","PYSEC-2026-1100",[127,1314],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[1319],{"type":833,"score":1116},[1321,1323,1325,1327,1328,1329],{"type":809,"url":1322},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":798,"url":1324},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":803,"url":1326},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1330},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[845,846,847,848,849,850,851],{"id":128,"slug":1333,"dossier":46,"summary":1334,"aliases":1335,"sourceIds":1338,"published":1339,"modified":1340,"checkedAt":7,"severity":1341,"references":1343,"versionKeys":1354,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[1336,1337],"CVE-2025-69223","PYSEC-2026-1101",[128,1337],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[1342],{"type":794,"score":836},[1344,1346,1348,1350,1351,1352],{"type":809,"url":1345},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":798,"url":1347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":803,"url":1349},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1353},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[845,846,847,848,849,850,851],{"id":129,"slug":1356,"dossier":46,"summary":1357,"aliases":1358,"sourceIds":1361,"published":1362,"modified":1363,"checkedAt":7,"severity":1364,"references":1367,"versionKeys":1380,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[1359,1360],"CVE-2025-65106","PYSEC-2026-1518",[129,1360],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[1365],{"type":833,"score":1366},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1368,1370,1372,1374,1376,1377,1378],{"type":809,"url":1369},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":798,"url":1371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":809,"url":1373},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":809,"url":1375},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":806,"url":873},{"type":806,"url":877},{"type":798,"url":1379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[881],{"id":130,"slug":1382,"dossier":46,"summary":1383,"aliases":1384,"sourceIds":1387,"published":1388,"modified":1389,"checkedAt":7,"severity":1390,"references":1393,"versionKeys":1414,"packageCount":32,"repositoryCount":218},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[1385,1386],"CVE-2026-40087","PYSEC-2026-2563",[130,1386],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[1391],{"type":794,"score":1392},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1394,1396,1398,1400,1402,1404,1406,1407,1409,1411,1412],{"type":809,"url":1395},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":798,"url":1397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":809,"url":1399},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":809,"url":1401},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":809,"url":1403},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":809,"url":1405},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":806,"url":873},{"type":809,"url":1408},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":809,"url":1410},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":806,"url":877},{"type":798,"url":1413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[881,882],{"id":131,"slug":1416,"dossier":46,"summary":1417,"aliases":1418,"sourceIds":1421,"published":1422,"modified":1423,"checkedAt":7,"severity":1424,"references":1427,"versionKeys":1438,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[1419,1420],"CVE-2025-53643","PYSEC-2026-1104",[131,1420],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[1425],{"type":833,"score":1426},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1428,1430,1432,1434,1435,1436],{"type":809,"url":1429},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":798,"url":1431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":803,"url":1433},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[845,846,847,848],{"id":132,"slug":1440,"dossier":46,"summary":1441,"aliases":1442,"sourceIds":1445,"published":1446,"modified":1447,"checkedAt":7,"severity":1448,"references":1451,"versionKeys":1460,"packageCount":32,"repositoryCount":104},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[1443,1444],"CVE-2026-34518","PYSEC-2026-2100",[132,1444],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[1449,1450],{"type":794,"score":1392},{"type":833,"score":1172},[1452,1454,1456,1458,1459],{"type":803,"url":1453},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":798,"url":1455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":803,"url":1457},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":133,"slug":1462,"dossier":46,"summary":1463,"aliases":1464,"sourceIds":1467,"published":1468,"modified":1469,"checkedAt":7,"severity":1470,"references":1473,"versionKeys":1492,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1465,1466],"CVE-2024-47081","PYSEC-2026-1872",[133,1466],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1471],{"type":794,"score":1472},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1474,1476,1478,1480,1482,1484,1486,1488,1490],{"type":809,"url":1475},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":798,"url":1477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":809,"url":1479},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":803,"url":1481},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":806,"url":1483},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":809,"url":1485},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":809,"url":1487},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":806,"url":1489},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":798,"url":1491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1493,1494],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":134,"slug":1496,"dossier":46,"summary":1497,"aliases":1498,"sourceIds":1501,"published":1502,"modified":1503,"checkedAt":7,"severity":1504,"references":1507,"versionKeys":1524,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1499,1500],"CVE-2024-35195","PYSEC-2026-1873",[134,1500],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1505],{"type":794,"score":1506},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1508,1510,1512,1514,1516,1517,1519,1521,1522],{"type":809,"url":1509},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":798,"url":1511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":809,"url":1513},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":803,"url":1515},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":806,"url":1483},{"type":809,"url":1518},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":809,"url":1520},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":806,"url":1489},{"type":798,"url":1523},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1493],{"id":135,"slug":1526,"dossier":46,"summary":1527,"aliases":1528,"sourceIds":1531,"published":1532,"modified":1533,"checkedAt":7,"severity":1534,"references":1538,"versionKeys":1544,"packageCount":32,"repositoryCount":104},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[1529,1530],"CVE-2026-54280","PYSEC-2026-2113",[135,1530],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[1535,1537],{"type":833,"score":1536},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":836},[1539,1541,1543],{"type":798,"url":1540},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":803,"url":1542},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":136,"slug":1546,"dossier":46,"summary":1547,"aliases":1548,"sourceIds":1551,"published":1552,"modified":1553,"checkedAt":7,"severity":1554,"references":1558,"versionKeys":1569,"packageCount":32,"repositoryCount":104},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[1549,1550],"CVE-2026-34525","PYSEC-2026-2103",[136,1550],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[1555,1557],{"type":833,"score":1556},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":794,"score":896},[1559,1561,1563,1565,1567,1568],{"type":803,"url":1560},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":798,"url":1562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":803,"url":1564},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":803,"url":1566},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":137,"slug":1571,"dossier":46,"summary":1572,"aliases":1573,"sourceIds":1576,"published":1577,"modified":1578,"checkedAt":7,"severity":1579,"references":1582,"versionKeys":1603,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[1574,1575],"CVE-2025-68664","PYSEC-2026-373",[137,1575],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[1580],{"type":794,"score":1581},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[1583,1585,1587,1589,1591,1593,1595,1596,1598,1600,1601],{"type":809,"url":1584},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":798,"url":1586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":809,"url":1588},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":809,"url":1590},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":809,"url":1592},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":809,"url":1594},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":806,"url":873},{"type":809,"url":1597},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":809,"url":1599},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":806,"url":877},{"type":798,"url":1602},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[881],{"id":138,"slug":1605,"dossier":46,"summary":1606,"aliases":1607,"sourceIds":1609,"published":1610,"modified":1611,"checkedAt":7,"severity":1612,"references":1615,"versionKeys":1619,"packageCount":32,"repositoryCount":32},"ghsa-f4xh-w4cj-qxq8-981d76df","LangSmith SDK TracingMiddleware: Arbitrary server-side file read",[1608],"CVE-2026-59152",[138],"2026-06-19T22:10:34Z","2026-07-08T08:26:43.324048749Z",[1613],{"type":794,"score":1614},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1616,1618],{"type":809,"url":1617},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-f4xh-w4cj-qxq8",{"type":806,"url":960},[973],{"id":139,"slug":1621,"dossier":46,"summary":1622,"aliases":1623,"sourceIds":1626,"published":1627,"modified":1628,"checkedAt":7,"severity":1629,"references":1632,"versionKeys":1643,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[1624,1625],"CVE-2025-69230","PYSEC-2026-1105",[139,1625],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[1630],{"type":833,"score":1631},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1633,1635,1637,1639,1640,1641],{"type":809,"url":1634},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":798,"url":1636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":803,"url":1638},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1642},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[845,846,847,848,849,850,851],{"id":140,"slug":1645,"dossier":46,"summary":1646,"aliases":1647,"sourceIds":1650,"published":1651,"modified":1652,"checkedAt":7,"severity":1653,"references":1656,"versionKeys":1667,"packageCount":32,"repositoryCount":32},"ghsa-fjqc-hq36-qh5p-fbc7458c","LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading",[1648,1649],"CVE-2026-48775","PYSEC-2026-2573",[140,1649],"2026-06-25T18:25:42Z","2026-07-13T16:42:57.455268050Z",[1654],{"type":794,"score":1655},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1657,1659,1661,1663,1665],{"type":809,"url":1658},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",{"type":798,"url":1660},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48775",{"type":806,"url":1662},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",{"type":806,"url":1664},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-checkpoint",{"type":798,"url":1666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",[1668],"pypi:langgraph-checkpoint@4.0.0",{"id":141,"slug":1670,"dossier":46,"summary":1671,"aliases":1672,"sourceIds":1675,"published":1676,"modified":1677,"checkedAt":7,"severity":1678,"references":1681,"versionKeys":1689,"packageCount":32,"repositoryCount":32},"ghsa-fv5p-p927-qmxr-2692dd04","LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass",[1673,1674],"CVE-2026-41481","PYSEC-2026-77",[141,1674],"2026-04-16T22:53:32Z","2026-06-06T01:15:07.890699366Z",[1679],{"type":794,"score":1680},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1682,1684,1686,1687],{"type":798,"url":1683},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-fv5p-p927-qmxr",{"type":798,"url":1685},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41481",{"type":806,"url":873},{"type":809,"url":1688},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-text-splitters\u002FPYSEC-2026-77.yaml",[1690],"pypi:langchain-text-splitters@1.1.0",{"id":142,"slug":1692,"dossier":46,"summary":1693,"aliases":1694,"sourceIds":1697,"published":1698,"modified":1699,"checkedAt":7,"severity":1700,"references":1703,"versionKeys":1709,"packageCount":32,"repositoryCount":104},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[1695,1696],"CVE-2026-54278","PYSEC-2026-2111",[142,1696],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[1701,1702],{"type":833,"score":1116},{"type":794,"score":836},[1704,1706,1707],{"type":798,"url":1705},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":806,"url":841},{"type":803,"url":1708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[845,846,847,848,849,850,851,852],{"id":143,"slug":1711,"dossier":46,"summary":1712,"aliases":1713,"sourceIds":1716,"published":1717,"modified":1718,"checkedAt":7,"severity":1719,"references":1723,"versionKeys":1731,"packageCount":32,"repositoryCount":208},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[1714,1715],"CVE-2026-28277","PYSEC-2026-83",[143,1715],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[1720,1721],{"type":794,"score":1655},{"type":794,"score":1722},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1724,1726,1728,1729],{"type":798,"url":1725},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":798,"url":1727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":806,"url":1662},{"type":809,"url":1730},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[1732,1733,1734],"pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@1.0.6",{"id":144,"slug":1736,"dossier":46,"summary":1737,"aliases":1738,"sourceIds":1741,"published":1742,"modified":1743,"checkedAt":7,"severity":1744,"references":1747,"versionKeys":1766,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1739,1740],"CVE-2024-34062","PYSEC-2026-1976",[144,1740],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1745],{"type":794,"score":1746},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1748,1750,1752,1754,1756,1758,1760,1762,1764],{"type":809,"url":1749},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":798,"url":1751},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":809,"url":1753},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":806,"url":1755},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":809,"url":1757},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":809,"url":1759},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":809,"url":1761},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":806,"url":1763},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":798,"url":1765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1767],"pypi:tqdm@4.66.2",{"id":145,"slug":1769,"dossier":46,"summary":1770,"aliases":1771,"sourceIds":1774,"published":1775,"modified":1776,"checkedAt":7,"severity":1777,"references":1779,"versionKeys":1792,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[1772,1773],"CVE-2025-69229","PYSEC-2026-1106",[145,1773],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[1778],{"type":833,"score":1116},[1780,1782,1784,1786,1788,1789,1790],{"type":809,"url":1781},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":798,"url":1783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":809,"url":1785},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":809,"url":1787},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":1791},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[845,846,847,848,849,850,851],{"id":146,"slug":1794,"dossier":91,"summary":1795,"aliases":1796,"sourceIds":1799,"published":1800,"modified":1801,"checkedAt":7,"severity":1802,"references":1807,"versionKeys":1817,"packageCount":32,"repositoryCount":105},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1797,1798],"CVE-2026-25645","PYSEC-2026-2275",[146,1798],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1803,1805],{"type":794,"score":1804},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":794,"score":1806},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1808,1810,1812,1814,1815],{"type":798,"url":1809},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":798,"url":1811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":803,"url":1813},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":806,"url":1483},{"type":798,"url":1816},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1493,1494,1818,1819],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":147,"slug":1821,"dossier":91,"summary":1822,"aliases":1823,"sourceIds":1826,"published":1827,"modified":1828,"checkedAt":7,"severity":1829,"references":1831,"versionKeys":1842,"packageCount":32,"repositoryCount":939},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1824,1825],"CVE-2025-66418","PYSEC-2026-1998",[147,1825],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1830],{"type":833,"score":919},[1832,1834,1836,1838,1839,1840],{"type":809,"url":1833},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":798,"url":1835},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":803,"url":1837},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":806,"url":928},{"type":806,"url":930},{"type":798,"url":1841},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[934,935,936,937,938],{"id":148,"slug":1844,"dossier":46,"summary":1845,"aliases":1846,"sourceIds":1850,"published":1851,"modified":1852,"checkedAt":7,"severity":1853,"references":1858,"versionKeys":1866,"packageCount":32,"repositoryCount":34},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[1847,1848,1849],"CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556",[148,1848],"2026-06-16T15:03:14Z","2026-07-13T16:43:09.845932020Z",[1854,1856],{"type":794,"score":1855},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":794,"score":1857},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1859,1861,1863,1865],{"type":798,"url":1860},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":798,"url":1862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":803,"url":1864},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":806,"url":873},[971,972,1867,1868],"pypi:langchain@1.2.6","pypi:langchain@1.3.8",{"id":149,"slug":1870,"dossier":46,"summary":1871,"aliases":1872,"sourceIds":1875,"published":1876,"modified":1877,"checkedAt":7,"severity":1878,"references":1881,"versionKeys":1890,"packageCount":32,"repositoryCount":104},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[1873,1874],"CVE-2026-34513","PYSEC-2026-2095",[149,1874],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[1879,1880],{"type":833,"score":1011},{"type":794,"score":836},[1882,1884,1886,1888,1889],{"type":803,"url":1883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":798,"url":1885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":803,"url":1887},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":150,"slug":1892,"dossier":46,"summary":1893,"aliases":1894,"sourceIds":1897,"published":1898,"modified":1899,"checkedAt":7,"severity":1900,"references":1905,"versionKeys":1913,"packageCount":32,"repositoryCount":104},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[1895,1896],"CVE-2026-47265","PYSEC-2026-2105",[150,1896],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[1901,1903],{"type":833,"score":1902},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":794,"score":1904},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1906,1908,1910,1912],{"type":803,"url":1907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":798,"url":1909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":803,"url":1911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":151,"slug":1915,"dossier":46,"summary":1916,"aliases":1917,"sourceIds":1920,"published":1921,"modified":1922,"checkedAt":7,"severity":1923,"references":1928,"versionKeys":1934,"packageCount":32,"repositoryCount":104},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[1918,1919],"CVE-2026-54276","PYSEC-2026-2109",[151,1919],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[1924,1926],{"type":833,"score":1925},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":794,"score":1927},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[1929,1931,1933],{"type":798,"url":1930},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":803,"url":1932},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":152,"slug":1936,"dossier":46,"summary":1937,"aliases":1938,"sourceIds":1941,"published":1942,"modified":1943,"checkedAt":7,"severity":1944,"references":1948,"versionKeys":1966,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[1939,1940],"CVE-2025-67221","PYSEC-2026-107",[152,1940],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[1945,1947],{"type":833,"score":1946},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":794,"score":836},[1949,1951,1953,1955,1957,1959,1962,1964],{"type":798,"url":1950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":809,"url":1952},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":809,"url":1954},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":809,"url":1956},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":806,"url":1958},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1960,"url":1961},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":809,"url":1963},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":798,"url":1965},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[1967,1968,1969,1970],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":153,"slug":1972,"dossier":46,"summary":1973,"aliases":1974,"sourceIds":1977,"published":1978,"modified":1979,"checkedAt":7,"severity":1980,"references":1985,"versionKeys":2006,"packageCount":32,"repositoryCount":104},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[1975,1976],"CVE-2026-34993","PYSEC-2026-2104",[153,1976],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[1981,1983],{"type":794,"score":1982},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":794,"score":1984},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1986,1988,1990,1992,1993,1995,1997,1999,2001,2003],{"type":803,"url":1987},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":798,"url":1989},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":803,"url":1991},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":806,"url":841},{"type":809,"url":1994},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":809,"url":1996},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":798,"url":1998},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":798,"url":2000},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":798,"url":2002},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2004,"url":2005},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[845,846,847,848,849,850,851,852],{"id":154,"slug":2008,"dossier":46,"summary":2009,"aliases":2010,"sourceIds":2013,"published":2014,"modified":2015,"checkedAt":7,"severity":2016,"references":2018,"versionKeys":2029,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[2011,2012],"CVE-2025-69227","PYSEC-2026-1107",[154,2012],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[2017],{"type":833,"score":1116},[2019,2021,2023,2025,2026,2027],{"type":809,"url":2020},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":798,"url":2022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":809,"url":2024},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":2028},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[845,846,847,848,849,850,851],{"id":155,"slug":2031,"dossier":46,"summary":2032,"aliases":2033,"sourceIds":2036,"published":2037,"modified":2038,"checkedAt":7,"severity":2039,"references":2044,"versionKeys":2053,"packageCount":32,"repositoryCount":104},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[2034,2035],"CVE-2026-34516","PYSEC-2026-2098",[155,2035],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[2040,2041,2042],{"type":794,"score":836},{"type":833,"score":1116},{"type":833,"score":2043},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2045,2047,2049,2051,2052],{"type":803,"url":2046},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":798,"url":2048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":803,"url":2050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":156,"slug":2055,"dossier":46,"summary":2056,"aliases":2057,"sourceIds":2060,"published":2061,"modified":2062,"checkedAt":7,"severity":2063,"references":2066,"versionKeys":2072,"packageCount":32,"repositoryCount":104},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[2058,2059],"CVE-2026-50269","PYSEC-2026-2106",[156,2059],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[2064,2065],{"type":833,"score":894},{"type":794,"score":836},[2067,2069,2071],{"type":798,"url":2068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":803,"url":2070},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":806,"url":841},[845,846,847,848,849,850,851,852],{"id":157,"slug":2074,"dossier":46,"summary":2075,"aliases":2076,"sourceIds":2079,"published":2080,"modified":2081,"checkedAt":7,"severity":2082,"references":2085,"versionKeys":2093,"packageCount":32,"repositoryCount":208},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2077,2078],"CVE-2026-44432","PYSEC-2026-142",[157,2078],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2083,2084],{"type":794,"score":836},{"type":833,"score":919},[2086,2088,2090,2092],{"type":798,"url":2087},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":798,"url":2089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":809,"url":2091},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":806,"url":928},[2094],"pypi:urllib3@2.6.3",{"id":158,"slug":2096,"dossier":46,"summary":2097,"aliases":2098,"sourceIds":2101,"published":2102,"modified":2103,"checkedAt":7,"severity":2104,"references":2107,"versionKeys":2120,"packageCount":32,"repositoryCount":2125},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[2099,2100],"CVE-2026-28684","PYSEC-2026-2270",[158,2100],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[2105],{"type":794,"score":2106},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2108,2110,2112,2114,2116,2118],{"type":803,"url":2109},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":798,"url":2111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":803,"url":2113},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":809,"url":2115},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":806,"url":2117},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":798,"url":2119},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[2121,2122,2123,2124],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":159,"slug":2127,"dossier":46,"summary":2128,"aliases":2129,"sourceIds":2132,"published":2133,"modified":2134,"checkedAt":7,"severity":2135,"references":2137,"versionKeys":2148,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[2130,2131],"CVE-2025-69225","PYSEC-2026-1109",[159,2131],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[2136],{"type":833,"score":894},[2138,2140,2142,2144,2145,2146],{"type":809,"url":2139},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":798,"url":2141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":803,"url":2143},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":806,"url":841},{"type":806,"url":1182},{"type":798,"url":2147},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[845,846,847,848,849,850,851],{"id":160,"slug":2150,"dossier":46,"summary":2151,"aliases":2152,"sourceIds":2155,"published":2156,"modified":2157,"checkedAt":7,"severity":2158,"references":2161,"versionKeys":2170,"packageCount":32,"repositoryCount":104},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[2153,2154],"CVE-2026-34519","PYSEC-2026-2101",[160,2154],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[2159,2160],{"type":833,"score":894},{"type":794,"score":896},[2162,2164,2166,2168,2169],{"type":803,"url":2163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":798,"url":2165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":803,"url":2167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":161,"slug":2172,"dossier":46,"summary":2173,"aliases":2174,"sourceIds":2177,"published":2178,"modified":2179,"checkedAt":7,"severity":2180,"references":2183,"versionKeys":2192,"packageCount":32,"repositoryCount":104},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[2175,2176],"CVE-2026-34515","PYSEC-2026-2097",[161,2176],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[2181,2182],{"type":833,"score":1902},{"type":794,"score":1904},[2184,2186,2188,2190,2191],{"type":803,"url":2185},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":798,"url":2187},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":803,"url":2189},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":162,"slug":2194,"dossier":46,"summary":2195,"aliases":2196,"sourceIds":2199,"published":2200,"modified":2201,"checkedAt":7,"severity":2202,"references":2205,"versionKeys":2220,"packageCount":32,"repositoryCount":218},"ghsa-pc6w-59fv-rh23-cab9cb2f","Langchain Community Vulnerable to XML External Entity (XXE) Attacks",[2197,2198],"CVE-2025-6984","PYSEC-2026-1515",[162,2198],"2025-09-04T12:30:42Z","2026-07-07T17:56:45.822570559Z",[2203],{"type":794,"score":2204},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2206,2208,2210,2212,2214,2216,2218],{"type":798,"url":2207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6984",{"type":809,"url":2209},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community\u002Fcommit\u002Fe842452108089524e22c3a2ced851c021884556f",{"type":806,"url":2211},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community",{"type":809,"url":2213},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fblob\u002Fd79b5813a0b3b243c612b77013768995e46c4337\u002Flibs\u002Flangchain\u002Flangchain\u002Fdocument_loaders\u002Fevernote.py#L1-L23",{"type":809,"url":2215},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa6b521cf-258c-41c0-9edb-d8ef976abb2a",{"type":806,"url":2217},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-community",{"type":798,"url":2219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pc6w-59fv-rh23",[1078,2221],"pypi:langchain-community@0.3.7",{"id":163,"slug":2223,"dossier":46,"summary":2224,"aliases":2225,"sourceIds":2228,"published":2229,"modified":2230,"checkedAt":7,"severity":2231,"references":2234,"versionKeys":2243,"packageCount":32,"repositoryCount":218},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[2226,2227],"CVE-2026-44843","PYSEC-2026-2564",[163,2227],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[2232],{"type":794,"score":2233},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2235,2237,2239,2240,2241],{"type":809,"url":2236},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":798,"url":2238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":806,"url":873},{"type":806,"url":877},{"type":798,"url":2242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[881,882],{"id":164,"slug":2245,"dossier":46,"summary":2246,"aliases":2247,"sourceIds":2250,"published":2251,"modified":2252,"checkedAt":7,"severity":2253,"references":2255,"versionKeys":2267,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2248,2249],"CVE-2025-50181","PYSEC-2026-1999",[164,2249],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2254],{"type":794,"score":1090},[2256,2258,2260,2262,2263,2264,2265],{"type":809,"url":2257},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":798,"url":2259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":803,"url":2261},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":806,"url":928},{"type":809,"url":1100},{"type":806,"url":930},{"type":798,"url":2266},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[934,935,936,937],{"id":165,"slug":2269,"dossier":46,"summary":2270,"aliases":2271,"sourceIds":2274,"published":2275,"modified":2276,"checkedAt":7,"severity":2277,"references":2280,"versionKeys":2295,"packageCount":32,"repositoryCount":32},"ghsa-q25c-c977-4cmh-8e74e348","Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever",[2272,2273],"CVE-2024-3095","PYSEC-2026-1516",[165,2273],"2024-06-06T21:30:36Z","2026-07-07T17:57:27.127785500Z",[2278],{"type":794,"score":2279},"CVSS:3.0\u002FAV:P\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2281,2283,2285,2287,2288,2290,2292,2293],{"type":798,"url":2282},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-3095",{"type":809,"url":2284},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F24451",{"type":809,"url":2286},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":806,"url":873},{"type":809,"url":2289},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-community%3D%3D0.2.9",{"type":809,"url":2291},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe62d4895-2901-405b-9559-38276b6a5273",{"type":806,"url":2217},{"type":798,"url":2294},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q25c-c977-4cmh",[1078],{"id":166,"slug":2297,"dossier":91,"summary":2298,"aliases":2299,"sourceIds":2302,"published":2303,"modified":2304,"checkedAt":7,"severity":2305,"references":2309,"versionKeys":2315,"packageCount":32,"repositoryCount":105},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2300,2301],"CVE-2026-44431","PYSEC-2026-141",[166,2301],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2306,2307],{"type":794,"score":1392},{"type":833,"score":2308},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2310,2312,2314],{"type":798,"url":2311},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":798,"url":2313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":806,"url":928},[934,935,936,937,938,2094],{"id":167,"slug":2317,"dossier":46,"summary":2318,"aliases":2319,"sourceIds":2322,"published":2323,"modified":2324,"checkedAt":7,"severity":2325,"references":2327,"versionKeys":2346,"packageCount":32,"repositoryCount":218},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[2320,2321],"CVE-2026-34070","PYSEC-2026-2193",[167,2321],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[2326],{"type":794,"score":1904},[2328,2330,2332,2334,2335,2337,2339,2341,2343,2344],{"type":1960,"url":2329},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":798,"url":2331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":803,"url":2333},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":806,"url":873},{"type":798,"url":2336},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":809,"url":2338},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":809,"url":2340},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":798,"url":2342},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":798,"url":2002},{"type":2004,"url":2345},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[881,882],{"id":168,"slug":2348,"dossier":46,"summary":2349,"aliases":2350,"sourceIds":2353,"published":2354,"modified":2355,"checkedAt":7,"severity":2356,"references":2359,"versionKeys":2367,"packageCount":32,"repositoryCount":218},"ghsa-r7w7-9xr2-qq2r-7a3a0a91","langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding",[2351,2352],"CVE-2026-41488","PYSEC-2026-76",[168,2352],"2026-04-16T23:00:12Z","2026-06-06T01:15:07.912179267Z",[2357],{"type":794,"score":2358},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2360,2362,2364,2365],{"type":798,"url":2361},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-r7w7-9xr2-qq2r",{"type":798,"url":2363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41488",{"type":806,"url":873},{"type":809,"url":2366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-openai\u002FPYSEC-2026-76.yaml",[2368,2369],"pypi:langchain-openai@0.2.8","pypi:langchain-openai@1.1.7",{"id":169,"slug":2371,"dossier":46,"summary":2372,"aliases":2373,"sourceIds":2376,"published":2377,"modified":2378,"checkedAt":7,"severity":2379,"references":2381,"versionKeys":2390,"packageCount":32,"repositoryCount":32},"ghsa-rr7j-v2q5-chgv-a773969e","LangSmith SDK: Streaming token events bypass output redaction",[2374,2375],"CVE-2026-41182","PYSEC-2026-2583",[169,2375],"2026-04-16T01:20:37Z","2026-07-13T16:43:37.566182133Z",[2380],{"type":794,"score":1392},[2382,2384,2386,2387,2388],{"type":809,"url":2383},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",{"type":798,"url":2385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41182",{"type":806,"url":960},{"type":806,"url":968},{"type":798,"url":2389},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",[973],{"id":170,"slug":2392,"dossier":46,"summary":2393,"aliases":2394,"sourceIds":2397,"published":2398,"modified":2399,"checkedAt":7,"severity":2400,"references":2403,"versionKeys":2416,"packageCount":32,"repositoryCount":208},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[2395,2396],"CVE-2025-43859","PYSEC-2026-348",[170,2396],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[2401],{"type":794,"score":2402},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2404,2406,2408,2410,2412,2414],{"type":809,"url":2405},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":798,"url":2407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":809,"url":2409},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":806,"url":2411},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":806,"url":2413},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":798,"url":2415},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[2417],"pypi:h11@0.14.0",{"id":171,"slug":2419,"dossier":46,"summary":2420,"aliases":2421,"sourceIds":2424,"published":2425,"modified":2426,"checkedAt":7,"severity":2427,"references":2431,"versionKeys":2440,"packageCount":32,"repositoryCount":104},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[2422,2423],"CVE-2026-22815","PYSEC-2026-2094",[171,2423],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[2428,2429],{"type":833,"score":1272},{"type":833,"score":2430},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2432,2434,2436,2438,2439],{"type":803,"url":2433},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":798,"url":2435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":803,"url":2437},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":806,"url":841},{"type":798,"url":906},[845,846,847,848,849,850,851,852],{"id":172,"slug":2442,"dossier":46,"summary":2443,"aliases":2444,"sourceIds":2448,"published":2449,"modified":2450,"checkedAt":7,"severity":2451,"references":2455,"versionKeys":2467,"packageCount":218,"repositoryCount":218},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[2445,2446,2447],"CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575",[172,2446,2447],"2026-06-17T10:55:15.113Z","2026-07-13T16:42:27.619863658Z",[2452,2454],{"type":794,"score":2453},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":794,"score":2402},[2456,2458,2460,2461,2463,2465],{"type":809,"url":2457},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":798,"url":2459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":806,"url":1662},{"type":809,"url":2462},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":806,"url":2464},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",{"type":798,"url":2466},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",[2468,1732],"pypi:langgraph-sdk@0.3.3",{"id":173,"slug":2470,"dossier":46,"summary":2471,"aliases":2472,"sourceIds":2475,"published":2476,"modified":2477,"checkedAt":7,"severity":2478,"references":2481,"versionKeys":2487,"packageCount":32,"repositoryCount":104},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[2473,2474],"CVE-2026-54274","PYSEC-2026-2108",[173,2474],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[2479,2480],{"type":833,"score":1116},{"type":794,"score":836},[2482,2484,2485],{"type":798,"url":2483},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":806,"url":841},{"type":803,"url":2486},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[845,846,847,848,849,850,851,852],{"id":175,"slug":2489,"dossier":46,"summary":188,"aliases":2490,"sourceIds":2494,"published":2495,"modified":2496,"checkedAt":7,"severity":2497,"references":2500,"versionKeys":2504,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[2491,2492,2493],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[175],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[2498],{"type":794,"score":2499},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2501,2502],{"type":803,"url":2286},{"type":1960,"url":2503},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[971],1784548466760]