{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-08-13T03:52:27.520Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-08-13T03:50:55.687Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":640,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"paket","entity":{"id":"package:pypi:pyasn1","slug":"pyasn1-348780fa","identity":"pypi:pyasn1","ecosystem":"pypi","name":"pyasn1","label":"pyasn1","category":null,"aiRelevant":false,"provider":null,"repositoryCount":9,"occurrenceCount":9,"directRepositoryCount":0,"versionCount":3,"licenseExpressions":["BSD-2-Clause"],"advisoryIds":["GHSA-63vm-454h-vhhq","GHSA-8ppf-4f7h-5ppj","GHSA-hm4w-wwcw-mr6r","GHSA-jr27-m4p2-rc6r","GHSA-m4p7-r5rc-7g4j"],"advisoryCount":5,"verifiedAttestation":false,"repositories":[{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["0.6.3"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["0.6.4"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["0.6.1"],"evidenceCount":1}],"versions":[{"version":"0.6.1","repositoryCount":7,"occurrenceCount":7,"ageDays":700,"advisoryIds":["GHSA-63vm-454h-vhhq","GHSA-8ppf-4f7h-5ppj","GHSA-hm4w-wwcw-mr6r","GHSA-jr27-m4p2-rc6r","GHSA-m4p7-r5rc-7g4j"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2024-09-11T16:00:36Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-2-Clause"],"advisoryIds":["GHSA-63vm-454h-vhhq","GHSA-8ppf-4f7h-5ppj","GHSA-hm4w-wwcw-mr6r","GHSA-jr27-m4p2-rc6r","GHSA-m4p7-r5rc-7g4j","PYSEC-2026-1810","PYSEC-2026-2263","PYSEC-2026-3455","PYSEC-2026-3456","PYSEC-2026-3457"],"links":[{"label":"DOCUMENTATION","url":"https://pyasn1.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/pyasn1/pyasn1/issues"},{"label":"SOURCE_REPO","url":"https://github.com/pyasn1/pyasn1"}],"relatedProjects":[{"id":"github.com/pyasn1/pyasn1","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pyasn1/pyasn1","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.6.3","repositoryCount":1,"occurrenceCount":1,"ageDays":149,"advisoryIds":["GHSA-8ppf-4f7h-5ppj","GHSA-hm4w-wwcw-mr6r","GHSA-m4p7-r5rc-7g4j"],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-03-17T01:06:52Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-2-Clause"],"advisoryIds":["GHSA-8ppf-4f7h-5ppj","GHSA-hm4w-wwcw-mr6r","GHSA-m4p7-r5rc-7g4j","PYSEC-2026-3455","PYSEC-2026-3456","PYSEC-2026-3457"],"links":[{"label":"HOMEPAGE","url":"https://github.com/pyasn1/pyasn1"},{"label":"DOCUMENTATION","url":"https://pyasn1.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/pyasn1/pyasn1/issues"},{"label":"SOURCE_REPO","url":"https://github.com/pyasn1/pyasn1"}],"relatedProjects":[{"id":"github.com/pyasn1/pyasn1","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pyasn1/pyasn1","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.6.4","repositoryCount":1,"occurrenceCount":1,"ageDays":35,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-08-13T02:29:21.454Z","publishedAt":"2026-07-09T01:12:32Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-2-Clause"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/pyasn1/pyasn1"},{"label":"DOCUMENTATION","url":"https://pyasn1.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/pyasn1/pyasn1/issues"},{"label":"SOURCE_REPO","url":"https://github.com/pyasn1/pyasn1"}],"relatedProjects":[{"id":"github.com/pyasn1/pyasn1","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/pyasn1/pyasn1","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:467743093e1608110b148b28","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:491fbe5e58a36da496a4c7ad","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:e305c115d479bf61d779d5ca","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:658c9990351455734821b0af","repositoryId":"opencode:12239","repositorySlug":"opencode-12239","repositoryName":"LLM Service","repositoryPathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.4","versionKey":"pypi:pyasn1@0.6.4","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"5c34ec93b8f084fb238b9dfb84642a3091538e9d","sourceUrl":"https://gitlab.opencode.de/sh/diwish/splitbot/kosmo/llm-service/-/blob/318cda8c49da743f2c4a18a4f4d5c36fc22102fc/uv.lock","commitSha":"318cda8c49da743f2c4a18a4f4d5c36fc22102fc"},{"id":"component:0f3d011ec09658ab20acc4cd","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:ed0022641c23f44561333c67","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.3","versionKey":"pypi:pyasn1@0.6.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/4d053562adec8962a8e523b7ed27b48a9f882d60/mucgpt-assistant-service/uv.lock","commitSha":"4d053562adec8962a8e523b7ed27b48a9f882d60"},{"id":"component:fb671d49300fa1cab8bf96b6","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:a8fe0c6c3faa4d6c28c25382","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:5b6657e87db728466955db48","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"pyasn1","identity":"pypi:pyasn1","version":"0.6.1","versionKey":"pypi:pyasn1@0.6.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"}],"occurrenceCount":9},"related":{"repositories":[{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["0.6.3"],"evidenceCount":1},{"id":"opencode:12239","slug":"opencode-12239","name":"LLM Service","pathWithNamespace":"sh/diwish/splitbot/kosmo/llm-service","versions":["0.6.4"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["0.6.1"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["0.6.1"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-63vm-454h-vhhq","slug":"ghsa-63vm-454h-vhhq-296aa7fc","dossier":false,"summary":"pyasn1 has a DoS vulnerability in decoder","aliases":["CVE-2026-23490","PYSEC-2026-1810"],"sourceIds":["GHSA-63vm-454h-vhhq","PYSEC-2026-1810"],"published":"2026-01-16T19:19:25Z","modified":"2026-07-21T15:30:39.563600361Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23490"},{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/commit/be353d755f42ea36539b4f5053c652ddf56979a6"},{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4148"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4147"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4146"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4145"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4144"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4143"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4142"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4141"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4140"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4139"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:4138"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:39894"},{"type":"PACKAGE","url":"https://github.com/pyasn1/pyasn1"},{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/blob/0f07d7242a78ab4d129b26256d7474f7168cf536/pyasn1/codec/ber/decoder.py#L496"},{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html"}],"versionKeys":["pypi:pyasn1@0.6.1"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-8ppf-4f7h-5ppj","slug":"ghsa-8ppf-4f7h-5ppj-4d7d140d","dossier":false,"summary":"pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service","aliases":["CVE-2026-59885","PYSEC-2026-3456"],"sourceIds":["GHSA-8ppf-4f7h-5ppj","PYSEC-2026-3456"],"published":"2026-07-14T17:17:14.880Z","modified":"2026-07-23T09:29:39.188829469Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59885"},{"type":"FIX","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"type":"PACKAGE","url":"https://github.com/pyasn1/pyasn1"},{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"}],"versionKeys":["pypi:pyasn1@0.6.1","pypi:pyasn1@0.6.3"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-hm4w-wwcw-mr6r","slug":"ghsa-hm4w-wwcw-mr6r-b3d243f3","dossier":false,"summary":"pyasn1: Uncontrolled resource consumption when converting decoded REAL values","aliases":["CVE-2026-59886","PYSEC-2026-3457"],"sourceIds":["GHSA-hm4w-wwcw-mr6r","PYSEC-2026-3457"],"published":"2026-07-14T17:17:15.010Z","modified":"2026-07-23T09:29:38.810475714Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59886"},{"type":"FIX","url":"https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"},{"type":"PACKAGE","url":"https://github.com/pyasn1/pyasn1"},{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"}],"versionKeys":["pypi:pyasn1@0.6.1","pypi:pyasn1@0.6.3"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-jr27-m4p2-rc6r","slug":"ghsa-jr27-m4p2-rc6r-4991bc00","dossier":false,"summary":"Denial of Service in pyasn1 via Unbounded Recursion","aliases":["CVE-2026-30922","PYSEC-2026-2263"],"sourceIds":["GHSA-jr27-m4p2-rc6r","PYSEC-2026-2263"],"published":"2026-03-17T16:17:33Z","modified":"2026-07-21T15:30:39.553074080Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30922"},{"type":"WEB","url":"https://github.com/pyasn1/pyasn1/commit/5a49bd1fe93b5b866a1210f6bf0a3924f21572c8"},{"type":"FIX","url":"https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22970"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22987"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:24761"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:24762"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6309"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6568"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6720"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6912"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6926"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html"}],"versionKeys":["pypi:pyasn1@0.6.1"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-m4p7-r5rc-7g4j","slug":"ghsa-m4p7-r5rc-7g4j-889a943d","dossier":false,"summary":"pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs","aliases":["CVE-2026-59884","PYSEC-2026-3455"],"sourceIds":["GHSA-m4p7-r5rc-7g4j","PYSEC-2026-3455"],"published":"2026-07-14T17:17:14.750Z","modified":"2026-08-02T02:59:55.269509518Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59884"},{"type":"FIX","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"type":"PACKAGE","url":"https://github.com/pyasn1/pyasn1"},{"type":"ADVISORY","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml"}],"versionKeys":["pypi:pyasn1@0.6.1","pypi:pyasn1@0.6.3"],"packageCount":1,"repositoryCount":8}]}}