{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-08-13T03:52:27.520Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-08-13T03:50:55.687Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":640,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"paket","entity":{"id":"package:pypi:protobuf","slug":"protobuf-6e30009a","identity":"pypi:protobuf","ecosystem":"pypi","name":"protobuf","label":"protobuf","category":null,"aiRelevant":false,"provider":null,"repositoryCount":12,"occurrenceCount":13,"directRepositoryCount":0,"versionCount":11,"licenseExpressions":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7"],"advisoryCount":2,"verifiedAttestation":false,"repositories":[{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["6.32.0","6.33.6"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["4.25.8"],"evidenceCount":1},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["5.29.4"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["6.33.6"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["5.29.6"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["6.33.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["6.31.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["6.32.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["4.25.7"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["5.29.3"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["6.33.4"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["6.33.1"],"evidenceCount":1}],"versions":[{"version":"4.25.7","repositoryCount":1,"occurrenceCount":1,"ageDays":476,"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-04-24T02:56:48Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7","PYSEC-2026-1805","PYSEC-2026-1806"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"4.25.8","repositoryCount":1,"occurrenceCount":1,"ageDays":441,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-05-28T14:22:17Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"5.29.3","repositoryCount":1,"occurrenceCount":1,"ageDays":581,"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-01-08T21:38:40Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7","PYSEC-2026-1805","PYSEC-2026-1806"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"5.29.4","repositoryCount":1,"occurrenceCount":1,"ageDays":511,"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-03-19T21:23:15Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","GHSA-8qvm-5x2c-j2w7","PYSEC-2026-1805","PYSEC-2026-1806"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"5.29.6","repositoryCount":1,"occurrenceCount":1,"ageDays":189,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-02-04T22:54:32Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":[],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.31.1","repositoryCount":1,"occurrenceCount":1,"ageDays":441,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-05-28T19:25:50Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.32.0","repositoryCount":2,"occurrenceCount":2,"ageDays":363,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-08-14T21:21:19Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.33.0","repositoryCount":1,"occurrenceCount":1,"ageDays":301,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-10-15T20:39:47Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.33.1","repositoryCount":1,"occurrenceCount":1,"ageDays":272,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2025-11-13T16:44:14Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.33.4","repositoryCount":1,"occurrenceCount":1,"ageDays":212,"advisoryIds":["GHSA-7gcm-g887-7qv7"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-01-12T18:33:36Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"6.33.6","repositoryCount":2,"occurrenceCount":2,"ageDays":147,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-03-18T19:04:55Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":[],"links":[],"relatedProjects":[],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:d886ac839e6e252f25e1477e","repositoryId":"opencode:7674","repositorySlug":"opencode-7674","repositoryName":"Coding Agent Usage Simulation","repositoryPathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.33.0","versionKey":"pypi:protobuf@6.33.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b1464cf01496db34285bf91f7841aed50559816","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/coding-agent-usage-simulation/-/blob/fe8ab81af4926a34c6cf1f3a807ffeda2b398f32/uv.lock","commitSha":"fe8ab81af4926a34c6cf1f3a807ffeda2b398f32"},{"id":"component:ccb799f3a50817324bc43715","repositoryId":"opencode:6174","repositorySlug":"opencode-6174","repositoryName":"Energieautarkes Wohnquartier - Backend","repositoryPathWithNamespace":"energieautarkes-wohnquartier/backend","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"5.29.4","versionKey":"pypi:protobuf@5.29.4","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","sourceUrl":"https://gitlab.opencode.de/energieautarkes-wohnquartier/backend/-/blob/fc7e24cd546449ac9fdee4ad78aab861e0c89666/poetry.lock","commitSha":"fc7e24cd546449ac9fdee4ad78aab861e0c89666"},{"id":"component:340ee45e723226c205aa1d64","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.31.1","versionKey":"pypi:protobuf@6.31.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:30644e374aad9e18cdfeb22a","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"4.25.8","versionKey":"pypi:protobuf@4.25.8","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:96f094e3610794f3554396c3","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.32.0","versionKey":"pypi:protobuf@6.32.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:cecd729fcc47e509eced5e0d","repositoryId":"opencode:12239","repositorySlug":"opencode-12239","repositoryName":"LLM Service","repositoryPathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"5.29.6","versionKey":"pypi:protobuf@5.29.6","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"5c34ec93b8f084fb238b9dfb84642a3091538e9d","sourceUrl":"https://gitlab.opencode.de/sh/diwish/splitbot/kosmo/llm-service/-/blob/318cda8c49da743f2c4a18a4f4d5c36fc22102fc/uv.lock","commitSha":"318cda8c49da743f2c4a18a4f4d5c36fc22102fc"},{"id":"component:beb2737100401fb8e89f5e69","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"4.25.7","versionKey":"pypi:protobuf@4.25.7","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:71fb360d7955da5244027e7b","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.33.6","versionKey":"pypi:protobuf@6.33.6","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-core-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"},{"id":"component:cc32e9776f575f0f1fec705b","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"5.29.3","versionKey":"pypi:protobuf@5.29.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:0852c518c5fa0eb00523267b","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.33.4","versionKey":"pypi:protobuf@6.33.4","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:2c8b00794234abbcb56baa1b","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.33.1","versionKey":"pypi:protobuf@6.33.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"},{"id":"component:915163b381b5fca658ebf590","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.32.0","versionKey":"pypi:protobuf@6.32.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:50dceb9a613208b87ffcf702","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"protobuf","identity":"pypi:protobuf","version":"6.33.6","versionKey":"pypi:protobuf@6.33.6","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"}],"occurrenceCount":13},"related":{"repositories":[{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["6.32.0","6.33.6"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["4.25.8"],"evidenceCount":1},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["5.29.4"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["6.33.6"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["5.29.6"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["6.33.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["6.31.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["6.32.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["4.25.7"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["5.29.3"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["6.33.4"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["6.33.1"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-7gcm-g887-7qv7","slug":"ghsa-7gcm-g887-7qv7-55bb9ff1","dossier":false,"summary":"protobuf affected by a JSON recursion depth bypass","aliases":["CVE-2026-0994","PYSEC-2026-1805"],"sourceIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"published":"2026-01-23T15:31:35Z","modified":"2026-07-07T17:56:36.712428283Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0994"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/issues/25070"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/pull/25239"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/5ebddcb1bcbe51d1fe323baa145e85f4f23128cf"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/d2b001626d137c62dfee6c88c87324102531868b"},{"type":"PACKAGE","url":"https://github.com/protocolbuffers/protobuf"},{"type":"PACKAGE","url":"https://pypi.org/project/protobuf"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-7gcm-g887-7qv7"}],"versionKeys":["pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-8qvm-5x2c-j2w7","slug":"ghsa-8qvm-5x2c-j2w7-8a075519","dossier":false,"summary":"protobuf-python has a potential Denial of Service issue","aliases":["CVE-2025-4565","PYSEC-2026-1806"],"sourceIds":["GHSA-8qvm-5x2c-j2w7","PYSEC-2026-1806"],"published":"2025-06-16T16:02:58Z","modified":"2026-07-07T17:57:09.877491994Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-8qvm-5x2c-j2w7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4565"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/17838beda2943d08b8a9d4df5b68f5f04f26d901"},{"type":"PACKAGE","url":"https://github.com/protocolbuffers/protobuf"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/blob/main/python/google/protobuf/internal/decoder_test.py#L87-L98"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/blob/main/python/google/protobuf/internal/message_test.py#L1436-L1478"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/tree/main/python#implementation-backends"},{"type":"PACKAGE","url":"https://pypi.org/project/protobuf"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-8qvm-5x2c-j2w7"}],"versionKeys":["pypi:protobuf@4.25.7","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4"],"packageCount":1,"repositoryCount":3}]}}