{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-08-13T03:52:27.520Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-08-13T03:50:55.687Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":31,"completeTreeCount":30,"incompleteTreeCount":1,"lockfileRepositoryCount":18,"sbomRepositoryCount":4,"artifactRepositoryCount":21,"resolvedRepositoryCount":30,"resolvedArtifactRepositoryCount":21,"dependencyFileCount":32,"parsedFileCount":31,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":3642,"metadataResolvedCount":3632,"metadataNotFoundCount":10,"osvEvaluatedVersionCount":3642,"codeRadarRepositoryCount":31},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":31,"packageCount":2274,"aiPackageCount":44,"resolvedComponentCount":5994,"resolvedVersionCount":3642,"providerExposureRepositoryCount":6,"licenseExpressionCount":53,"knownLicensePackageCount":2244,"unknownLicensePackageCount":30,"advisoryCount":640,"matchedAdvisoryRepositoryCount":26,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":19,"repositoryShare":0.6129032258064516}},"kind":"repository","entity":{"id":"opencode:10162","slug":"opencode-10162","gitlabProjectId":10162,"name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","description":null,"webUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","commitUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/commit/1d70807d48a8fae19711b10422c3417ab5d05d0f","lastActivityAt":"2026-05-05T08:21:41.798Z","headCommittedAt":"2026-04-21T12:43:43.000Z","tree":{"complete":true,"entryCount":151,"truncated":false},"files":[{"path":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json","kind":"npm-lock","blobSha":"85ce34d08ec17ad3a2acf0b5c33d7b57954d5164","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"d6cf494bd944eff796a59b32b36c8214816e3be6639d5c2ea67893310aa39322","byteCount":57396,"state":"parsed","componentCount":123},{"path":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","kind":"poetry-lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"834ae2be07a53839d9a28b3e1f69e45e947515a00364ef07871b6fc47c379933","byteCount":168848,"state":"parsed","componentCount":78},{"path":"poetry.lock","kind":"poetry-lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"aeab690097e8e006cb4680cb53d452b805b943ab2091762607ff4d493cc71549","byteCount":378939,"state":"parsed","componentCount":117}],"resolvedComponentCount":318,"artifactResolvedComponentCount":318,"exactManifestPinCount":0,"packageCount":266,"ecosystems":["npm","pypi"],"aiPackageCount":1,"licenseExpressionCount":19,"unknownLicensePackageCount":5,"advisoryIds":["GHSA-248v-346w-9cwc","GHSA-28wg-ghj8-5hjv","GHSA-2f96-g7mh-g2hx","GHSA-2v37-7h3g-55p8","GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3j69-69wj-xqx2","GHSA-3rp5-jjmw-4wv2","GHSA-3v7f-55p6-f55p","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4w7w-66w2-5vf9","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-539m-9xh6-q6rr","GHSA-597g-3phw-6986","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-67mh-4wv8-2f99","GHSA-6g55-p6wh-862q","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-6w46-j5rx-g56g","GHSA-7545-fcxq-7j24","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-93m4-6634-74q7","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-c2c7-rcm5-vvqj","GHSA-c38f-wx89-p2xg","GHSA-c8rr-9gxc-jprv","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fx2h-pf6j-xcff","GHSA-fxqj-rqcc-2cmp","GHSA-g4jq-h2w9-997c","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hh9p-6wh2-4mfc","GHSA-hmq2-w58f-27jc","GHSA-j225-cvw7-qrx7","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jm78-9fvv-mhgr","GHSA-jqfw-vq24-v9c3","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mv93-w799-cj2w","GHSA-mw96-cpmx-2vgc","GHSA-p538-c434-8v24","GHSA-p9ff-h696-f583","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qx2v-qp2m-jg93","GHSA-r28c-9q8g-f849","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rwj8-pgh3-r573","GHSA-v6wh-96g9-6wx3","GHSA-v87r-6q3f-2j67","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-w853-jp5j-5j7f","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wvpp-8hx9-p66j","GHSA-x2qx-6953-8485","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2026-2132"],"advisoryCount":108,"providers":[]},"evidence":{"files":[{"path":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json","kind":"npm-lock","blobSha":"85ce34d08ec17ad3a2acf0b5c33d7b57954d5164","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"d6cf494bd944eff796a59b32b36c8214816e3be6639d5c2ea67893310aa39322","byteCount":57396,"state":"parsed","componentCount":123},{"path":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","kind":"poetry-lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"834ae2be07a53839d9a28b3e1f69e45e947515a00364ef07871b6fc47c379933","byteCount":168848,"state":"parsed","componentCount":78},{"path":"poetry.lock","kind":"poetry-lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f","contentSha256":"aeab690097e8e006cb4680cb53d452b805b943ab2091762607ff4d493cc71549","byteCount":378939,"state":"parsed","componentCount":117}],"occurrenceCount":318},"related":{"packages":[{"id":"package:pypi:opencv-python","slug":"opencv-python-bfa06e24","identity":"pypi:opencv-python","label":"OpenCV","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["4.12.0.88","4.13.0.92"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:gitpython","slug":"gitpython-dcd13009","identity":"pypi:gitpython","label":"gitpython","aiRelevant":false,"provider":null,"advisoryCount":22,"licenseExpressions":["BSD-3-Clause"],"versions":["3.1.45","3.1.46"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pillow","slug":"pillow-834347dd","identity":"pypi:pillow","label":"pillow","aiRelevant":false,"provider":null,"advisoryCount":20,"licenseExpressions":["HPND","MIT-CMU"],"versions":["11.3.0","12.1.1"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:tornado","slug":"tornado-ab0f364e","identity":"pypi:tornado","label":"tornado","aiRelevant":false,"provider":null,"advisoryCount":10,"licenseExpressions":["Apache-2.0"],"versions":["6.5.2","6.5.5"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:urllib3","slug":"urllib3-fa68f32c","identity":"pypi:urllib3","label":"urllib3","aiRelevant":false,"provider":null,"advisoryCount":7,"licenseExpressions":["MIT"],"versions":["2.5.0","2.6.3"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:vite","slug":"vite-d48e852f","identity":"npm:vite","label":"vite","aiRelevant":false,"provider":null,"advisoryCount":7,"licenseExpressions":["MIT"],"versions":["6.3.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:jinja2","slug":"jinja2-f7d34747","identity":"pypi:jinja2","label":"jinja2","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["3.1.6"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:postcss","slug":"postcss-6e1650ce","identity":"npm:postcss","label":"postcss","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["MIT"],"versions":["8.5.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:ujson","slug":"ujson-337faf21","identity":"pypi:ujson","label":"ujson","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["BSD-3-Clause","BSD-3-Clause AND TCL","TCL"],"versions":["5.12.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:requests","slug":"requests-53653f76","identity":"pypi:requests","label":"requests","aiRelevant":false,"provider":null,"advisoryCount":3,"licenseExpressions":["Apache-2.0"],"versions":["2.32.5","2.33.1"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:setuptools","slug":"setuptools-fe37c31a","identity":"pypi:setuptools","label":"setuptools","aiRelevant":false,"provider":null,"advisoryCount":3,"licenseExpressions":["MIT"],"versions":["80.9.0","82.0.1"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:filelock","slug":"filelock-b1c63968","identity":"pypi:filelock","label":"filelock","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT","Unlicense"],"versions":["3.19.1","3.25.2"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:nanoid","slug":"nanoid-93076b34","identity":"npm:nanoid","label":"nanoid","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["3.3.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:picomatch","slug":"picomatch-a3008e9b","identity":"npm:picomatch","label":"picomatch","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["4.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:protobuf","slug":"protobuf-6e30009a","identity":"pypi:protobuf","label":"protobuf","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["BSD-3-Clause"],"versions":["6.32.0","6.33.6"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:streamlit","slug":"streamlit-b61aa01e","identity":"pypi:streamlit","label":"streamlit","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["Apache-2.0"],"versions":["1.49.0","1.55.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:certifi","slug":"certifi-d4f0c37e","identity":"pypi:certifi","label":"certifi","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MPL-2.0"],"versions":["2025.8.3","2026.2.25"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:click","slug":"click-ef97f731","identity":"pypi:click","label":"click","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["8.1.8","8.3.1"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:esbuild","slug":"esbuild-65fe29d5","identity":"npm:esbuild","label":"esbuild","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:fonttools","slug":"fonttools-d2488ea8","identity":"pypi:fonttools","label":"fonttools","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.62.1"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:geopandas","slug":"geopandas-968b51b0","identity":"pypi:geopandas","label":"geopandas","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause"],"versions":["1.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:h11","slug":"h11-48165ab1","identity":"pypi:h11","label":"h11","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.16.0"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:idna","slug":"idna-994c9929","identity":"pypi:idna","label":"idna","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["3.10","3.11"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pyarrow","slug":"pyarrow-facb8516","identity":"pypi:pyarrow","label":"pyarrow","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["Apache-2.0","non-standard"],"versions":["21.0.0","23.0.1"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pycryptodome","slug":"pycryptodome-44737a20","identity":"pypi:pycryptodome","label":"pycryptodome","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["non-standard"],"versions":["3.23.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pygments","slug":"pygments-ad71bc11","identity":"pypi:pygments","label":"pygments","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-2-Clause"],"versions":["2.19.2","2.20.0"],"dossier":true,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pytest","slug":"pytest-07c6f86c","identity":"pypi:pytest","label":"pytest","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["8.3.2"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:rollup","slug":"rollup-1742bf3c","identity":"npm:rollup","label":"rollup","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:tqdm","slug":"tqdm-04b01f90","identity":"pypi:tqdm","label":"tqdm","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT AND MPL-2.0"],"versions":["4.67.3"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:virtualenv","slug":"virtualenv-aeb2a546","identity":"pypi:virtualenv","label":"virtualenv","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["20.34.0"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:@esbuild/aix-ppc64","slug":"esbuild-aix-ppc64-ff62d0c3","identity":"npm:@esbuild/aix-ppc64","label":"@esbuild/aix-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/android-arm","slug":"esbuild-android-arm-6d6a793e","identity":"npm:@esbuild/android-arm","label":"@esbuild/android-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/android-arm64","slug":"esbuild-android-arm64-774120d0","identity":"npm:@esbuild/android-arm64","label":"@esbuild/android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/android-x64","slug":"esbuild-android-x64-e3983566","identity":"npm:@esbuild/android-x64","label":"@esbuild/android-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/darwin-arm64","slug":"esbuild-darwin-arm64-7825afb9","identity":"npm:@esbuild/darwin-arm64","label":"@esbuild/darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/darwin-x64","slug":"esbuild-darwin-x64-53715141","identity":"npm:@esbuild/darwin-x64","label":"@esbuild/darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-arm64","slug":"esbuild-freebsd-arm64-782f5ad9","identity":"npm:@esbuild/freebsd-arm64","label":"@esbuild/freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-x64","slug":"esbuild-freebsd-x64-98044ed2","identity":"npm:@esbuild/freebsd-x64","label":"@esbuild/freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm","slug":"esbuild-linux-arm-3041c0e3","identity":"npm:@esbuild/linux-arm","label":"@esbuild/linux-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm64","slug":"esbuild-linux-arm64-383e4f4d","identity":"npm:@esbuild/linux-arm64","label":"@esbuild/linux-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-ia32","slug":"esbuild-linux-ia32-e3f7f680","identity":"npm:@esbuild/linux-ia32","label":"@esbuild/linux-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-loong64","slug":"esbuild-linux-loong64-99975fa3","identity":"npm:@esbuild/linux-loong64","label":"@esbuild/linux-loong64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-mips64el","slug":"esbuild-linux-mips64el-198b328b","identity":"npm:@esbuild/linux-mips64el","label":"@esbuild/linux-mips64el","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-ppc64","slug":"esbuild-linux-ppc64-2ce9b1d5","identity":"npm:@esbuild/linux-ppc64","label":"@esbuild/linux-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-riscv64","slug":"esbuild-linux-riscv64-e52b37cd","identity":"npm:@esbuild/linux-riscv64","label":"@esbuild/linux-riscv64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-s390x","slug":"esbuild-linux-s390x-a378f043","identity":"npm:@esbuild/linux-s390x","label":"@esbuild/linux-s390x","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/linux-x64","slug":"esbuild-linux-x64-6ab2d953","identity":"npm:@esbuild/linux-x64","label":"@esbuild/linux-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-arm64","slug":"esbuild-netbsd-arm64-8089135a","identity":"npm:@esbuild/netbsd-arm64","label":"@esbuild/netbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-x64","slug":"esbuild-netbsd-x64-8422547c","identity":"npm:@esbuild/netbsd-x64","label":"@esbuild/netbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-arm64","slug":"esbuild-openbsd-arm64-7c050374","identity":"npm:@esbuild/openbsd-arm64","label":"@esbuild/openbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-x64","slug":"esbuild-openbsd-x64-c7ebdb2d","identity":"npm:@esbuild/openbsd-x64","label":"@esbuild/openbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/openharmony-arm64","slug":"esbuild-openharmony-arm64-fd4b1b7a","identity":"npm:@esbuild/openharmony-arm64","label":"@esbuild/openharmony-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/sunos-x64","slug":"esbuild-sunos-x64-580d2b14","identity":"npm:@esbuild/sunos-x64","label":"@esbuild/sunos-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/win32-arm64","slug":"esbuild-win32-arm64-15462cb5","identity":"npm:@esbuild/win32-arm64","label":"@esbuild/win32-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/win32-ia32","slug":"esbuild-win32-ia32-8f5f9f68","identity":"npm:@esbuild/win32-ia32","label":"@esbuild/win32-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@esbuild/win32-x64","slug":"esbuild-win32-x64-204cfc99","identity":"npm:@esbuild/win32-x64","label":"@esbuild/win32-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rolldown/pluginutils","slug":"rolldown-pluginutils-73ff273e","identity":"npm:@rolldown/pluginutils","label":"@rolldown/pluginutils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0-beta.27"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm-eabi","slug":"rollup-rollup-android-arm-eabi-6fe9e830","identity":"npm:@rollup/rollup-android-arm-eabi","label":"@rollup/rollup-android-arm-eabi","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm64","slug":"rollup-rollup-android-arm64-110a0008","identity":"npm:@rollup/rollup-android-arm64","label":"@rollup/rollup-android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-arm64","slug":"rollup-rollup-darwin-arm64-a7104e2d","identity":"npm:@rollup/rollup-darwin-arm64","label":"@rollup/rollup-darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-x64","slug":"rollup-rollup-darwin-x64-9d553e48","identity":"npm:@rollup/rollup-darwin-x64","label":"@rollup/rollup-darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-arm64","slug":"rollup-rollup-freebsd-arm64-d05763b3","identity":"npm:@rollup/rollup-freebsd-arm64","label":"@rollup/rollup-freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-x64","slug":"rollup-rollup-freebsd-x64-9389d83a","identity":"npm:@rollup/rollup-freebsd-x64","label":"@rollup/rollup-freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-gnueabihf","slug":"rollup-rollup-linux-arm-gnueabihf-ea274b24","identity":"npm:@rollup/rollup-linux-arm-gnueabihf","label":"@rollup/rollup-linux-arm-gnueabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-musleabihf","slug":"rollup-rollup-linux-arm-musleabihf-d17800dc","identity":"npm:@rollup/rollup-linux-arm-musleabihf","label":"@rollup/rollup-linux-arm-musleabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-gnu","slug":"rollup-rollup-linux-arm64-gnu-2692ccaa","identity":"npm:@rollup/rollup-linux-arm64-gnu","label":"@rollup/rollup-linux-arm64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-musl","slug":"rollup-rollup-linux-arm64-musl-69ba6707","identity":"npm:@rollup/rollup-linux-arm64-musl","label":"@rollup/rollup-linux-arm64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-loongarch64-gnu","slug":"rollup-rollup-linux-loongarch64-gnu-2c23d926","identity":"npm:@rollup/rollup-linux-loongarch64-gnu","label":"@rollup/rollup-linux-loongarch64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-ppc64-gnu","slug":"rollup-rollup-linux-ppc64-gnu-99cbedb8","identity":"npm:@rollup/rollup-linux-ppc64-gnu","label":"@rollup/rollup-linux-ppc64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-gnu","slug":"rollup-rollup-linux-riscv64-gnu-c8854adc","identity":"npm:@rollup/rollup-linux-riscv64-gnu","label":"@rollup/rollup-linux-riscv64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-musl","slug":"rollup-rollup-linux-riscv64-musl-2308f5c4","identity":"npm:@rollup/rollup-linux-riscv64-musl","label":"@rollup/rollup-linux-riscv64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-s390x-gnu","slug":"rollup-rollup-linux-s390x-gnu-2efcfaef","identity":"npm:@rollup/rollup-linux-s390x-gnu","label":"@rollup/rollup-linux-s390x-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-gnu","slug":"rollup-rollup-linux-x64-gnu-800335dd","identity":"npm:@rollup/rollup-linux-x64-gnu","label":"@rollup/rollup-linux-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-musl","slug":"rollup-rollup-linux-x64-musl-6959d376","identity":"npm:@rollup/rollup-linux-x64-musl","label":"@rollup/rollup-linux-x64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-arm64-msvc","slug":"rollup-rollup-win32-arm64-msvc-9b8297fc","identity":"npm:@rollup/rollup-win32-arm64-msvc","label":"@rollup/rollup-win32-arm64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-ia32-msvc","slug":"rollup-rollup-win32-ia32-msvc-37230ee2","identity":"npm:@rollup/rollup-win32-ia32-msvc","label":"@rollup/rollup-win32-ia32-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-x64-msvc","slug":"rollup-rollup-win32-x64-msvc-6081dd46","identity":"npm:@rollup/rollup-win32-x64-msvc","label":"@rollup/rollup-win32-x64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.46.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core","slug":"swc-core-f74a2ac5","identity":"npm:@swc/core","label":"@swc/core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-darwin-arm64","slug":"swc-core-darwin-arm64-6247fd94","identity":"npm:@swc/core-darwin-arm64","label":"@swc/core-darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-darwin-x64","slug":"swc-core-darwin-x64-055aaa9f","identity":"npm:@swc/core-darwin-x64","label":"@swc/core-darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-linux-arm-gnueabihf","slug":"swc-core-linux-arm-gnueabihf-6390b310","identity":"npm:@swc/core-linux-arm-gnueabihf","label":"@swc/core-linux-arm-gnueabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-linux-arm64-gnu","slug":"swc-core-linux-arm64-gnu-f2facbf0","identity":"npm:@swc/core-linux-arm64-gnu","label":"@swc/core-linux-arm64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-linux-arm64-musl","slug":"swc-core-linux-arm64-musl-a0c39efb","identity":"npm:@swc/core-linux-arm64-musl","label":"@swc/core-linux-arm64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-linux-x64-gnu","slug":"swc-core-linux-x64-gnu-1aeb9490","identity":"npm:@swc/core-linux-x64-gnu","label":"@swc/core-linux-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-linux-x64-musl","slug":"swc-core-linux-x64-musl-f3e8bb6e","identity":"npm:@swc/core-linux-x64-musl","label":"@swc/core-linux-x64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-win32-arm64-msvc","slug":"swc-core-win32-arm64-msvc-68ea39b6","identity":"npm:@swc/core-win32-arm64-msvc","label":"@swc/core-win32-arm64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-win32-ia32-msvc","slug":"swc-core-win32-ia32-msvc-dcb96713","identity":"npm:@swc/core-win32-ia32-msvc","label":"@swc/core-win32-ia32-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/core-win32-x64-msvc","slug":"swc-core-win32-x64-msvc-e3838160","identity":"npm:@swc/core-win32-x64-msvc","label":"@swc/core-win32-x64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 AND MIT"],"versions":["1.13.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/counter","slug":"swc-counter-78b046ef","identity":"npm:@swc/counter","label":"@swc/counter","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@swc/types","slug":"swc-types-bf509804","identity":"npm:@swc/types","label":"@swc/types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.1.23"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/command-line-args","slug":"types-command-line-args-ee930845","identity":"npm:@types/command-line-args","label":"@types/command-line-args","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/command-line-usage","slug":"types-command-line-usage-c50b461e","identity":"npm:@types/command-line-usage","label":"@types/command-line-usage","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/estree","slug":"types-estree-8dde2b7e","identity":"npm:@types/estree","label":"@types/estree","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/flatbuffers","slug":"types-flatbuffers-b726b945","identity":"npm:@types/flatbuffers","label":"@types/flatbuffers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/node","slug":"types-node-893179a0","identity":"npm:@types/node","label":"@types/node","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["18.7.23","22.16.5"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":2,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/pad-left","slug":"types-pad-left-b6a1e169","identity":"npm:@types/pad-left","label":"@types/pad-left","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/prop-types","slug":"types-prop-types-dc4bb417","identity":"npm:@types/prop-types","label":"@types/prop-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["15.7.15"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/react","slug":"types-react-1801b994","identity":"npm:@types/react","label":"@types/react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["18.3.23"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@types/react-dom","slug":"types-react-dom-0822f902","identity":"npm:@types/react-dom","label":"@types/react-dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["18.3.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:@vitejs/plugin-react-swc","slug":"vitejs-plugin-react-swc-b266da33","identity":"npm:@vitejs/plugin-react-swc","label":"@vitejs/plugin-react-swc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.11.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:affine","slug":"affine-44cc504f","identity":"pypi:affine","label":"affine","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["2.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:aistudio-sdk","slug":"aistudio-sdk-2b1939af","identity":"pypi:aistudio-sdk","label":"aistudio-sdk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["0.3.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:altair","slug":"altair-01b7f976","identity":"pypi:altair","label":"altair","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["5.5.0","6.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:annotated-doc","slug":"annotated-doc-9568e1af","identity":"pypi:annotated-doc","label":"annotated-doc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:annotated-types","slug":"annotated-types-2304c38b","identity":"pypi:annotated-types","label":"annotated-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:ansi-styles","slug":"ansi-styles-1f68187d","identity":"npm:ansi-styles","label":"ansi-styles","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:anyio","slug":"anyio-399e5280","identity":"pypi:anyio","label":"anyio","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.13.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:apache-arrow","slug":"apache-arrow-402d2a56","identity":"npm:apache-arrow","label":"apache-arrow","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["11.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:array-back","slug":"array-back-58abba0d","identity":"npm:array-back","label":"array-back","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0","4.0.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:attrs","slug":"attrs-2e7954ac","identity":"pypi:attrs","label":"attrs","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["25.3.0","26.1.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:bandit","slug":"bandit-b6566895","identity":"pypi:bandit","label":"bandit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.7.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:bce-python-sdk","slug":"bce-python-sdk-58803754","identity":"pypi:bce-python-sdk","label":"bce-python-sdk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.9.68"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:blinker","slug":"blinker-409e1445","identity":"pypi:blinker","label":"blinker","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.9.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:cachetools","slug":"cachetools-84fe6563","identity":"pypi:cachetools","label":"cachetools","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.2.0","7.0.5"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:cfgv","slug":"cfgv-4583061f","identity":"pypi:cfgv","label":"cfgv","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:chalk","slug":"chalk-8df0bdaf","identity":"npm:chalk","label":"chalk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:chardet","slug":"chardet-69451fbd","identity":"pypi:chardet","label":"chardet","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["0BSD","non-standard"],"versions":["7.4.0.post2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:charset-normalizer","slug":"charset-normalizer-74ccb20a","identity":"pypi:charset-normalizer","label":"charset-normalizer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.4.3","3.4.6"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:cligj","slug":"cligj-f69f4bb0","identity":"pypi:cligj","label":"cligj","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.7.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:color-convert","slug":"color-convert-85ffcc60","identity":"npm:color-convert","label":"color-convert","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.9.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:color-name","slug":"color-name-8d5a2a87","identity":"npm:color-name","label":"color-name","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:colorama","slug":"colorama-abaf57c3","identity":"pypi:colorama","label":"colorama","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.4.6"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:colorlog","slug":"colorlog-a388001c","identity":"pypi:colorlog","label":"colorlog","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.10.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:command-line-args","slug":"command-line-args-8330b072","identity":"npm:command-line-args","label":"command-line-args","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:command-line-usage","slug":"command-line-usage-5528c3cc","identity":"npm:command-line-usage","label":"command-line-usage","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:contextily","slug":"contextily-8bb6f862","identity":"pypi:contextily","label":"contextily","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:contourpy","slug":"contourpy-f86f9e10","identity":"pypi:contourpy","label":"contourpy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:coverage","slug":"coverage-7ba89558","identity":"pypi:coverage","label":"coverage","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.10.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:crc32c","slug":"crc32c-b326a331","identity":"pypi:crc32c","label":"crc32c","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["LGPL-2.1-or-later"],"versions":["2.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:csstype","slug":"csstype-64cd134e","identity":"npm:csstype","label":"csstype","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:cycler","slug":"cycler-3e14883d","identity":"pypi:cycler","label":"cycler","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.12.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:deep-extend","slug":"deep-extend-360b394e","identity":"npm:deep-extend","label":"deep-extend","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:distlib","slug":"distlib-d66be865","identity":"pypi:distlib","label":"distlib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["PSF-2.0"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:draw-image-mask","slug":"draw-image-mask-2dd08e8e","identity":"pypi:draw-image-mask","label":"draw-image-mask","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["1.0.3a0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:escape-string-regexp","slug":"escape-string-regexp-48b4cb67","identity":"npm:escape-string-regexp","label":"escape-string-regexp","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:exceptiongroup","slug":"exceptiongroup-316db5d9","identity":"pypi:exceptiongroup","label":"exceptiongroup","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:fdir","slug":"fdir-d78fecd4","identity":"npm:fdir","label":"fdir","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.4.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:find-replace","slug":"find-replace-f25bd2df","identity":"npm:find-replace","label":"find-replace","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:flake8","slug":"flake8-03083a13","identity":"pypi:flake8","label":"flake8","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:flake8-bugbear","slug":"flake8-bugbear-d7b81407","identity":"pypi:flake8-bugbear","label":"flake8-bugbear","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["24.4.26"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:flake8-pyproject","slug":"flake8-pyproject-419b5f84","identity":"pypi:flake8-pyproject","label":"flake8-pyproject","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:flatbuffers","slug":"flatbuffers-0d5c5f0a","identity":"npm:flatbuffers","label":"flatbuffers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0","non-standard"],"versions":["2.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:flatbuffers","slug":"flatbuffers-90c67795","identity":"pypi:flatbuffers","label":"flatbuffers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["25.12.19"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:fsevents","slug":"fsevents-f43d69ec","identity":"npm:fsevents","label":"fsevents","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:fsspec","slug":"fsspec-b1a7c311","identity":"pypi:fsspec","label":"fsspec","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["2026.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:future","slug":"future-3018bb21","identity":"pypi:future","label":"future","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:geographiclib","slug":"geographiclib-501d9aee","identity":"pypi:geographiclib","label":"geographiclib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:geopy","slug":"geopy-a289936e","identity":"pypi:geopy","label":"geopy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:gitdb","slug":"gitdb-dac4580b","identity":"pypi:gitdb","label":"gitdb","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["4.0.12"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:has-flag","slug":"has-flag-45a1a13f","identity":"npm:has-flag","label":"has-flag","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:hf-xet","slug":"hf-xet-732ec6c8","identity":"pypi:hf-xet","label":"hf-xet","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:hoist-non-react-statics","slug":"hoist-non-react-statics-cd62e457","identity":"npm:hoist-non-react-statics","label":"hoist-non-react-statics","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["3.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:httpcore","slug":"httpcore-ba6ae671","identity":"pypi:httpcore","label":"httpcore","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.0.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:httpx","slug":"httpx-a512a166","identity":"pypi:httpx","label":"httpx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["0.28.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:huggingface-hub","slug":"huggingface-hub-443ec6ef","identity":"pypi:huggingface-hub","label":"huggingface-hub","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0","non-standard"],"versions":["1.8.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:identify","slug":"identify-bd45ae56","identity":"pypi:identify","label":"identify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.6.13"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:imagesize","slug":"imagesize-6607709a","identity":"pypi:imagesize","label":"imagesize","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:iniconfig","slug":"iniconfig-1f66e358","identity":"pypi:iniconfig","label":"iniconfig","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:isort","slug":"isort-a8397697","identity":"pypi:isort","label":"isort","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.12.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:joblib","slug":"joblib-8cbb7872","identity":"pypi:joblib","label":"joblib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.5.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:js-tokens","slug":"js-tokens-8b3f06fa","identity":"npm:js-tokens","label":"js-tokens","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:json-bignum","slug":"json-bignum-6595b520","identity":"npm:json-bignum","label":"json-bignum","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["0.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:jsonschema","slug":"jsonschema-df23f5cd","identity":"pypi:jsonschema","label":"jsonschema","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.25.1","4.26.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:jsonschema-specifications","slug":"jsonschema-specifications-5d87863a","identity":"pypi:jsonschema-specifications","label":"jsonschema-specifications","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2025.4.1","2025.9.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:kiwisolver","slug":"kiwisolver-41b47c33","identity":"pypi:kiwisolver","label":"kiwisolver","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:lodash.camelcase","slug":"lodash-camelcase-707d82c7","identity":"npm:lodash.camelcase","label":"lodash.camelcase","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:loose-envify","slug":"loose-envify-73b7e932","identity":"npm:loose-envify","label":"loose-envify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:markdown-it-py","slug":"markdown-it-py-27073f5e","identity":"pypi:markdown-it-py","label":"markdown-it-py","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0","4.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:markupsafe","slug":"markupsafe-1bdd4c7f","identity":"pypi:markupsafe","label":"markupsafe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["3.0.2","3.0.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:matplotlib","slug":"matplotlib-9dc72309","identity":"pypi:matplotlib","label":"matplotlib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["3.10.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:mccabe","slug":"mccabe-dd4f88ab","identity":"pypi:mccabe","label":"mccabe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:mdurl","slug":"mdurl-e6f5f075","identity":"pypi:mdurl","label":"mdurl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.1.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:mercantile","slug":"mercantile-5a933d0e","identity":"pypi:mercantile","label":"mercantile","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:modelscope","slug":"modelscope-2938e006","identity":"pypi:modelscope","label":"modelscope","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.35.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:mpmath","slug":"mpmath-4ccb7a41","identity":"pypi:mpmath","label":"mpmath","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:narwhals","slug":"narwhals-24e2f721","identity":"pypi:narwhals","label":"narwhals","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT","non-standard"],"versions":["2.18.1","2.2.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:networkx","slug":"networkx-c2336a8d","identity":"pypi:networkx","label":"networkx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["3.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:nodeenv","slug":"nodeenv-71203cea","identity":"pypi:nodeenv","label":"nodeenv","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.9.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:numpy","slug":"numpy-ba79b98d","identity":"pypi:numpy","label":"numpy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib","non-standard"],"versions":["2.0.2","2.4.4"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:object-assign","slug":"object-assign-fa9dc3dc","identity":"npm:object-assign","label":"object-assign","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:onnxruntime","slug":"onnxruntime-5acdb617","identity":"pypi:onnxruntime","label":"onnxruntime","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.24.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:opencv-contrib-python","slug":"opencv-contrib-python-a645c612","identity":"pypi:opencv-contrib-python","label":"opencv-contrib-python","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["4.10.0.84"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:opt-einsum","slug":"opt-einsum-73c64c2e","identity":"pypi:opt-einsum","label":"opt-einsum","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:packaging","slug":"packaging-78ee1f47","identity":"pypi:packaging","label":"packaging","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0 OR BSD-2-Clause","non-standard"],"versions":["25.0","26.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:pad-left","slug":"pad-left-e0445ba1","identity":"npm:pad-left","label":"pad-left","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:paddleocr","slug":"paddleocr-650f320c","identity":"pypi:paddleocr","label":"paddleocr","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["3.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:paddlepaddle","slug":"paddlepaddle-a94fa107","identity":"pypi:paddlepaddle","label":"paddlepaddle","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["3.2.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:paddlex","slug":"paddlex-27e22e83","identity":"pypi:paddlex","label":"paddlex","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["3.3.13"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pandas","slug":"pandas-e8d52445","identity":"pypi:pandas","label":"pandas","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["2.3.2","2.3.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pbr","slug":"pbr-85b8cfd6","identity":"pypi:pbr","label":"pbr","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pdf2image","slug":"pdf2image-0ecc86ea","identity":"pypi:pdf2image","label":"pdf2image","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.17.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:picocolors","slug":"picocolors-63d33c23","identity":"npm:picocolors","label":"picocolors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:platformdirs","slug":"platformdirs-e64002f0","identity":"pypi:platformdirs","label":"platformdirs","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pluggy","slug":"pluggy-24479aaf","identity":"pypi:pluggy","label":"pluggy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pre-commit","slug":"pre-commit-6a196b54","identity":"pypi:pre-commit","label":"pre-commit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.6.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:prettytable","slug":"prettytable-961eb4af","identity":"pypi:prettytable","label":"prettytable","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["3.17.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:prop-types","slug":"prop-types-cbf4f9fe","identity":"npm:prop-types","label":"prop-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["15.8.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:psutil","slug":"psutil-840b9a74","identity":"pypi:psutil","label":"psutil","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["7.2.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:py-cpuinfo","slug":"py-cpuinfo-5ef63954","identity":"pypi:py-cpuinfo","label":"py-cpuinfo","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pyclipper","slug":"pyclipper-aa2323ab","identity":"pypi:pyclipper","label":"pyclipper","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pycodestyle","slug":"pycodestyle-2b26445c","identity":"pypi:pycodestyle","label":"pycodestyle","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.12.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pydantic","slug":"pydantic-4ac148ca","identity":"pypi:pydantic","label":"pydantic","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.12.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pydantic-core","slug":"pydantic-core-f9814ebc","identity":"pypi:pydantic-core","label":"pydantic-core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.41.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pydeck","slug":"pydeck-75380c92","identity":"pypi:pydeck","label":"pydeck","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.9.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pydocstyle","slug":"pydocstyle-983e75d2","identity":"pypi:pydocstyle","label":"pydocstyle","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pyflakes","slug":"pyflakes-9bd8cac4","identity":"pypi:pyflakes","label":"pyflakes","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pyogrio","slug":"pyogrio-ff34272a","identity":"pypi:pyogrio","label":"pyogrio","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.12.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pyparsing","slug":"pyparsing-a28b9b62","identity":"pypi:pyparsing","label":"pyparsing","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pypdfium2","slug":"pypdfium2-940917eb","identity":"pypi:pypdfium2","label":"pypdfium2","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["5.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pyproj","slug":"pyproj-cd69d38f","identity":"pypi:pyproj","label":"pyproj","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.7.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:pytest-bandit","slug":"pytest-bandit-6f4ffa7e","identity":"pypi:pytest-bandit","label":"pytest-bandit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.6.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pytest-cov","slug":"pytest-cov-1f608c88","identity":"pypi:pytest-cov","label":"pytest-cov","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pytest-isort","slug":"pytest-isort-23575273","identity":"pypi:pytest-isort","label":"pytest-isort","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pytest-mock","slug":"pytest-mock-525732b9","identity":"pypi:pytest-mock","label":"pytest-mock","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.14.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pytest-pydocstyle","slug":"pytest-pydocstyle-f4233c79","identity":"pypi:pytest-pydocstyle","label":"pytest-pydocstyle","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:pytest-ruff","slug":"pytest-ruff-3045362a","identity":"pypi:pytest-ruff","label":"pytest-ruff","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["0.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:python-bidi","slug":"python-bidi-1d37aaff","identity":"pypi:python-bidi","label":"python-bidi","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.6.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:python-dateutil","slug":"python-dateutil-8eac96b7","identity":"pypi:python-dateutil","label":"python-dateutil","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["2.9.0.post0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pytz","slug":"pytz-cbf1d95c","identity":"pypi:pytz","label":"pytz","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2025.2","2026.1.post1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:pyyaml","slug":"pyyaml-16000901","identity":"pypi:pyyaml","label":"pyyaml","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:rasterio","slug":"rasterio-8127369d","identity":"pypi:rasterio","label":"rasterio","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["1.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:react","slug":"react-29607ded","identity":"npm:react","label":"react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["16.14.0","18.3.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":2,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:react-dom","slug":"react-dom-fb4a1520","identity":"npm:react-dom","label":"react-dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["16.14.0","18.3.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":2,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:react-is","slug":"react-is-d95e9978","identity":"npm:react-is","label":"react-is","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["16.13.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:reduce-flatten","slug":"reduce-flatten-94232739","identity":"npm:reduce-flatten","label":"reduce-flatten","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:referencing","slug":"referencing-b8d98ce1","identity":"pypi:referencing","label":"referencing","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.36.2","0.37.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:repeat-string","slug":"repeat-string-86165878","identity":"npm:repeat-string","label":"repeat-string","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.6.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:rich","slug":"rich-23b343f7","identity":"pypi:rich","label":"rich","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["14.1.0","14.3.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:rpds-py","slug":"rpds-py-67c64be8","identity":"pypi:rpds-py","label":"rpds-py","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.27.1","0.30.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:ruamel-yaml","slug":"ruamel-yaml-4c58c99d","identity":"pypi:ruamel-yaml","label":"ruamel-yaml","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.19.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:ruff","slug":"ruff-d5943bdf","identity":"pypi:ruff","label":"ruff","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.6.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:pypi:safetensors","slug":"safetensors-2a32c77a","identity":"pypi:safetensors","label":"safetensors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:scheduler","slug":"scheduler-f5eceb7d","identity":"npm:scheduler","label":"scheduler","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.19.1","0.23.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:scipy","slug":"scipy-215f884d","identity":"pypi:scipy","label":"scipy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.17.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:shapely","slug":"shapely-1cd2f2ba","identity":"pypi:shapely","label":"shapely","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["2.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:shellingham","slug":"shellingham-fceabe5b","identity":"pypi:shellingham","label":"shellingham","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.5.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:six","slug":"six-3c3888bd","identity":"pypi:six","label":"six","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.17.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:smmap","slug":"smmap-943fc5aa","identity":"pypi:smmap","label":"smmap","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["5.0.2","5.0.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:snowballstemmer","slug":"snowballstemmer-1fdc23ac","identity":"pypi:snowballstemmer","label":"snowballstemmer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:source-map-js","slug":"source-map-js-41a605c1","identity":"npm:source-map-js","label":"source-map-js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:stevedore","slug":"stevedore-32e10f96","identity":"pypi:stevedore","label":"stevedore","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["5.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:streamlit-component-lib","slug":"streamlit-component-lib-5fd54b8d","identity":"npm:streamlit-component-lib","label":"streamlit-component-lib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:streamlit-container-width","slug":"streamlit-container-width-78298a4f","identity":"pypi:streamlit-container-width","label":"streamlit-container-width","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["1.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:streamlit-image-coordinates","slug":"streamlit-image-coordinates-f9931b41","identity":"pypi:streamlit-image-coordinates","label":"streamlit-image-coordinates","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:streamlit-image-zoom","slug":"streamlit-image-zoom-5a3158bf","identity":"pypi:streamlit-image-zoom","label":"streamlit-image-zoom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:supports-color","slug":"supports-color-50cc0404","identity":"npm:supports-color","label":"supports-color","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:svgpathtools","slug":"svgpathtools-46c70661","identity":"pypi:svgpathtools","label":"svgpathtools","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.7.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:svgwrite","slug":"svgwrite-bbc1acd6","identity":"pypi:svgwrite","label":"svgwrite","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:sympy","slug":"sympy-b30cb89e","identity":"pypi:sympy","label":"sympy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.14.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:table-layout","slug":"table-layout-5f8f6da5","identity":"npm:table-layout","label":"table-layout","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:tenacity","slug":"tenacity-415454f8","identity":"pypi:tenacity","label":"tenacity","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["9.1.2","9.1.4"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:tinyglobby","slug":"tinyglobby-dc19540c","identity":"npm:tinyglobby","label":"tinyglobby","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.14"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:toml","slug":"toml-490ac3c8","identity":"pypi:toml","label":"toml","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.10.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:tomli","slug":"tomli-e09082bd","identity":"pypi:tomli","label":"tomli","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock"]},{"id":"package:npm:tslib","slug":"tslib-d05e0935","identity":"npm:tslib","label":"tslib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["0BSD"],"versions":["2.8.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:typer","slug":"typer-b291ff1c","identity":"pypi:typer","label":"typer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.24.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:typescript","slug":"typescript-9b49e36c","identity":"npm:typescript","label":"typescript","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["5.8.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:npm:typical","slug":"typical-c90e017c","identity":"npm:typical","label":"typical","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0","5.2.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:typing-extensions","slug":"typing-extensions-87d153eb","identity":"pypi:typing-extensions","label":"typing-extensions","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["PSF-2.0","non-standard"],"versions":["4.15.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:typing-inspection","slug":"typing-inspection-0abeb500","identity":"pypi:typing-inspection","label":"typing-inspection","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:pypi:tzdata","slug":"tzdata-f80b3bb7","identity":"pypi:tzdata","label":"tzdata","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["2025.2","2025.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:npm:undici-types","slug":"undici-types-385a20bc","identity":"npm:undici-types","label":"undici-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.21.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:watchdog","slug":"watchdog-55ddb444","identity":"pypi:watchdog","label":"watchdog","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["6.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","poetry.lock"]},{"id":"package:pypi:wcwidth","slug":"wcwidth-038a8957","identity":"pypi:wcwidth","label":"wcwidth","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]},{"id":"package:npm:wordwrapjs","slug":"wordwrapjs-05c30a41","identity":"npm:wordwrapjs","label":"wordwrapjs","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/draw_image_mask/draw_image_mask/frontend/package-lock.json"]},{"id":"package:pypi:xyzservices","slug":"xyzservices-a1955a18","identity":"pypi:xyzservices","label":"xyzservices","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["2026.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["poetry.lock"]}],"vulnerabilities":[{"id":"GHSA-248v-346w-9cwc","slug":"ghsa-248v-346w-9cwc-8a7dbdf1","dossier":false,"summary":"Certifi removes GLOBALTRUST root certificate","aliases":["CVE-2024-39689","PYSEC-2024-230"],"sourceIds":["GHSA-248v-346w-9cwc","PYSEC-2024-230"],"published":"2024-07-05T19:15:10Z","modified":"2026-06-10T17:14:18.786020835Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689"},{"type":"FIX","url":"https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463"},{"type":"PACKAGE","url":"https://github.com/certifi/python-certifi"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2024-230.yaml"},{"type":"ARTICLE","url":"https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI"},{"type":"WEB","url":"https://security.netapp.com/advisory/ntap-20241206-0001"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20241206-0001/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-248v-346w-9cwc"}],"versionKeys":["pypi:certifi@2024.6.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-28wg-ghj8-5hjv","slug":"ghsa-28wg-ghj8-5hjv-10215c04","dossier":false,"summary":"nanoid: non-secure generators can loop indefinitely with negative size","aliases":["CVE-2026-67214"],"sourceIds":["GHSA-28wg-ghj8-5hjv"],"published":"2026-07-29T15:31:12Z","modified":"2026-08-10T10:11:52.814463935Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67214"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/600"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/601"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/e835c9b71eab832bc6106944bdd26ea96cf2c66d"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.16"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"}],"versionKeys":["npm:nanoid@3.3.11"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-2f96-g7mh-g2hx","slug":"ghsa-2f96-g7mh-g2hx-dd7ec02d","dossier":false,"summary":"GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist","aliases":["CVE-2026-67325"],"sourceIds":["GHSA-2f96-g7mh-g2hx"],"published":"2026-07-21T19:43:43Z","modified":"2026-08-02T03:56:45.052208380Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2161"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-2v37-7h3g-55p8","slug":"ghsa-2v37-7h3g-55p8-563431fd","dossier":false,"summary":"nanoid: custom generators can loop indefinitely when size is zero","aliases":["CVE-2026-67213"],"sourceIds":["GHSA-2v37-7h3g-55p8"],"published":"2026-07-29T15:31:12Z","modified":"2026-08-08T21:41:53.760174244Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67213"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.17"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.6"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"}],"versionKeys":["npm:nanoid@3.3.11","npm:nanoid@3.3.16"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-2xpw-w6gg-jr37","slug":"ghsa-2xpw-w6gg-jr37-91cead57","dossier":true,"summary":"urllib3 streaming API improperly handles highly compressed data","aliases":["CVE-2025-66471","PYSEC-2026-1994"],"sourceIds":["GHSA-2xpw-w6gg-jr37","PYSEC-2026-1994"],"published":"2025-12-05T18:15:54Z","modified":"2026-07-07T17:56:33.872074196Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2xpw-w6gg-jr37"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-38jv-5279-wg99","slug":"ghsa-38jv-5279-wg99-c9df8f7b","dossier":true,"summary":"Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)","aliases":["CVE-2026-21441","PYSEC-2026-1996"],"sourceIds":["GHSA-38jv-5279-wg99","PYSEC-2026-1996"],"published":"2026-01-07T19:18:14Z","modified":"2026-07-07T17:56:31.346111893Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-38jv-5279-wg99"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-3f7w-8rr8-f37f","slug":"ghsa-3f7w-8rr8-f37f-9cab61a6","dossier":false,"summary":"GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read","aliases":[],"sourceIds":["GHSA-3f7w-8rr8-f37f"],"published":"2026-08-03T20:09:56Z","modified":"2026-08-08T03:26:54.875954204Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2193"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/3af0c2516c5e18c829da30338614688f6b69b49c"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.57"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-3j69-69wj-xqx2","slug":"ghsa-3j69-69wj-xqx2-6b8725d1","dossier":false,"summary":"UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()","aliases":["CVE-2026-54911","PYSEC-2026-2294"],"sourceIds":["GHSA-3j69-69wj-xqx2","PYSEC-2026-2294"],"published":"2026-06-19T20:47:43Z","modified":"2026-07-18T17:45:20.862335233Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"references":[{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/security/advisories/GHSA-3j69-69wj-xqx2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54911"},{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/commit/169eaf36b1116fece5034ee79a7a0ef3f6deedcf"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/ujson/PYSEC-2026-2294.yaml"},{"type":"PACKAGE","url":"https://github.com/ultrajson/ultrajson"},{"type":"ADVISORY","url":"https://github.com/ultrajson/ultrajson/releases/tag/5.13.0"}],"versionKeys":["pypi:ujson@5.10.0","pypi:ujson@5.12.0"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-3rp5-jjmw-4wv2","slug":"ghsa-3rp5-jjmw-4wv2-6d7352e6","dossier":false,"summary":"GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)","aliases":["CVE-2026-69097"],"sourceIds":["GHSA-3rp5-jjmw-4wv2"],"published":"2026-07-24T16:22:02Z","modified":"2026-08-04T05:41:05.585188057Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.53"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-3v7f-55p6-f55p","slug":"ghsa-3v7f-55p6-f55p-cfa06046","dossier":false,"summary":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","aliases":["CVE-2026-33672"],"sourceIds":["GHSA-3v7f-55p6-f55p"],"published":"2026-03-25T21:13:39Z","modified":"2026-03-28T00:14:20.953909Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33672"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-3x9g-8vmp-wqvf","slug":"ghsa-3x9g-8vmp-wqvf-6d03bf5f","dossier":false,"summary":"Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient","aliases":["CVE-2026-49853","PYSEC-2026-3387"],"sourceIds":["GHSA-3x9g-8vmp-wqvf","PYSEC-2026-3387"],"published":"2026-06-15T20:20:00Z","modified":"2026-07-13T16:42:55.378655356Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-3x9g-8vmp-wqvf"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"PACKAGE","url":"https://pypi.org/project/tornado"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-3x9g-8vmp-wqvf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49853"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-45hq-cxwh-f6vc","slug":"ghsa-45hq-cxwh-f6vc-d18d2872","dossier":true,"summary":"Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading","aliases":["BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255"],"sourceIds":["GHSA-45hq-cxwh-f6vc","PYSEC-2026-2255"],"published":"2026-07-06T19:17:08.577Z","modified":"2026-07-22T02:59:39.058744123Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55379"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2255.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-48p4-8xcf-vxj5","slug":"ghsa-48p4-8xcf-vxj5-13f12656","dossier":false,"summary":"urllib3 does not control redirects in browsers and Node.js","aliases":["CVE-2025-50182","PYSEC-2026-1997"],"sourceIds":["GHSA-48p4-8xcf-vxj5","PYSEC-2026-1997"],"published":"2025-06-18T17:50:11Z","modified":"2026-07-07T17:57:08.881416805Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50182"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://github.com/urllib3/urllib3/releases/tag/2.5.0"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-48p4-8xcf-vxj5"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-4gmw-gg2m-w46p","slug":"ghsa-4gmw-gg2m-w46p-58f27cb8","dossier":false,"summary":"GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite","aliases":[],"sourceIds":["GHSA-4gmw-gg2m-w46p"],"published":"2026-08-07T15:33:57Z","modified":"2026-08-09T02:56:50.755731198Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2204"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-4w7w-66w2-5vf9","slug":"ghsa-4w7w-66w2-5vf9-1ec64746","dossier":false,"summary":"Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling","aliases":["CVE-2026-39365"],"sourceIds":["GHSA-4w7w-66w2-5vf9"],"published":"2026-04-06T18:03:46Z","modified":"2026-04-09T14:59:24.646487988Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39365"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22161"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-4x4j-2g7c-83w6","slug":"ghsa-4x4j-2g7c-83w6-326c14d2","dossier":true,"summary":"Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path","aliases":["BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257"],"sourceIds":["GHSA-4x4j-2g7c-83w6","PYSEC-2026-2257"],"published":"2026-07-06T19:17:08.830Z","modified":"2026-07-22T02:59:40.755856576Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55798"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/8404ea5fe5df40fc34aa1e51403dd6fce0778b8a"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/88194166691b7b603529b8b036ab3ab9cedd2de4"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/b0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2257.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-5239-wwwm-4pmq","slug":"ghsa-5239-wwwm-4pmq-228840e4","dossier":true,"summary":"Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching","aliases":["CVE-2026-4539","PYSEC-2026-2987"],"sourceIds":["GHSA-5239-wwwm-4pmq","PYSEC-2026-2987"],"published":"2026-03-22T06:30:15Z","modified":"2026-07-13T16:42:36.989801915Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4539"},{"type":"WEB","url":"https://github.com/pygments/pygments/issues/3058"},{"type":"WEB","url":"https://github.com/pygments/pygments/pull/3064"},{"type":"WEB","url":"https://github.com/pygments/pygments/commit/24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc"},{"type":"PACKAGE","url":"https://github.com/pygments/pygments"},{"type":"WEB","url":"https://github.com/pygments/pygments/releases/tag/2.20.0"},{"type":"WEB","url":"https://vuldb.com/?ctiid.352327"},{"type":"WEB","url":"https://vuldb.com/?id.352327"},{"type":"WEB","url":"https://vuldb.com/?submit.774685"},{"type":"PACKAGE","url":"https://pypi.org/project/pygments"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-5239-wwwm-4pmq"}],"versionKeys":["pypi:pygments@2.19.1","pypi:pygments@2.19.2"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-539m-9xh6-q6rr","slug":"ghsa-539m-9xh6-q6rr-c4575e3c","dossier":false,"summary":"GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()","aliases":[],"sourceIds":["GHSA-539m-9xh6-q6rr"],"published":"2026-08-03T20:14:28Z","modified":"2026-08-08T03:26:54.618366791Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2193"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.57"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-597g-3phw-6986","slug":"ghsa-597g-3phw-6986-6d75801e","dossier":false,"summary":"virtualenv Has TOCTOU Vulnerabilities in Directory Creation","aliases":["BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009"],"sourceIds":["GHSA-597g-3phw-6986","PYSEC-2026-2009"],"published":"2026-01-13T18:45:57Z","modified":"2026-07-07T17:57:28.238961214Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"}],"references":[{"type":"WEB","url":"https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22702"},{"type":"WEB","url":"https://github.com/pypa/virtualenv/pull/3013"},{"type":"FIX","url":"https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc"},{"type":"PACKAGE","url":"https://github.com/pypa/virtualenv"},{"type":"PACKAGE","url":"https://pypi.org/project/virtualenv"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-597g-3phw-6986"}],"versionKeys":["pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-5rjg-fvgr-3xxf","slug":"ghsa-5rjg-fvgr-3xxf-79d39e6b","dossier":false,"summary":"setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write","aliases":["BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49"],"sourceIds":["GHSA-5rjg-fvgr-3xxf","PYSEC-2025-49"],"published":"2025-05-17T16:15:19Z","modified":"2026-05-11T00:26:34.671259971Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47273"},{"type":"REPORT","url":"https://github.com/pypa/setuptools/issues/4946"},{"type":"FIX","url":"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml"},{"type":"PACKAGE","url":"https://github.com/pypa/setuptools"},{"type":"WEB","url":"https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html"}],"versionKeys":["pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-5x94-69rx-g8h2","slug":"ghsa-5x94-69rx-g8h2-0bc05f88","dossier":true,"summary":"Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`","aliases":["BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254"],"sourceIds":["GHSA-5x94-69rx-g8h2","PYSEC-2026-2254"],"published":"2026-07-06T19:17:08.270Z","modified":"2026-07-22T02:59:38.824757212Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54060"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2254.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-5xmw-vc9v-4wf2","slug":"ghsa-5xmw-vc9v-4wf2-86a8861a","dossier":false,"summary":"Pillow has a heap buffer overflow with nested list coordinates","aliases":["BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251"],"sourceIds":["GHSA-5xmw-vc9v-4wf2","PYSEC-2026-2251"],"published":"2026-05-04T20:18:27Z","modified":"2026-07-13T07:26:28.768890335Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xmw-vc9v-4wf2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42309"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.2.0"}],"versionKeys":["pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-62p4-gmf7-7g93","slug":"ghsa-62p4-gmf7-7g93-cb81341c","dossier":true,"summary":"Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)","aliases":["BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493"],"sourceIds":["GHSA-62p4-gmf7-7g93","PYSEC-2026-3493"],"published":"2026-07-20T21:08:13Z","modified":"2026-07-23T15:11:42.568996050Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54058"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9719"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"},{"type":"PACKAGE","url":"https://pypi.org/project/pillow"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-62p4-gmf7-7g93"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-6497-prx7-gpmq","slug":"ghsa-6497-prx7-gpmq-2b8ee85d","dossier":false,"summary":"geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure","aliases":["CVE-2025-69662","PYSEC-2026-62"],"sourceIds":["GHSA-6497-prx7-gpmq","PYSEC-2026-62"],"published":"2026-01-30T19:16:11.967Z","modified":"2026-06-10T17:01:18.172032507Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69662"},{"type":"WEB","url":"https://github.com/geopandas/geopandas/issues/3679"},{"type":"FIX","url":"https://github.com/geopandas/geopandas/pull/3681"},{"type":"WEB","url":"https://github.com/geopandas/geopandas/commit/6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419"},{"type":"WEB","url":"https://aydinnyunus.github.io/2025/12/27/sql-injection-geopandas"},{"type":"PACKAGE","url":"https://github.com/geopandas/geopandas"},{"type":"WEB","url":"https://github.com/geopandas/geopandas/releases/tag/v1.1.2"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/geopandas/PYSEC-2026-62.yaml"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/04/msg00025.html"},{"type":"EVIDENCE","url":"https://aydinnyunus.github.io/2025/12/27/sql-injection-geopandas/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6497-prx7-gpmq"}],"versionKeys":["pypi:geopandas@1.0.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-65pc-fj4g-8rjx","slug":"ghsa-65pc-fj4g-8rjx-9fe9e88a","dossier":true,"summary":"Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix","aliases":["CVE-2026-45409","PYSEC-2026-215"],"sourceIds":["GHSA-65pc-fj4g-8rjx","PYSEC-2026-215"],"published":"2026-05-19T14:34:32Z","modified":"2026-07-08T17:45:15.021597323Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},{"type":"PACKAGE","url":"https://github.com/kjd/idna"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/idna/PYSEC-2026-215.yaml"}],"versionKeys":["pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7"],"packageCount":1,"repositoryCount":17},{"id":"GHSA-67mh-4wv8-2f99","slug":"ghsa-67mh-4wv8-2f99-854f0a14","dossier":false,"summary":"esbuild enables any website to send any requests to the development server and read the response","aliases":[],"sourceIds":["GHSA-67mh-4wv8-2f99"],"published":"2025-02-10T17:48:07Z","modified":"2026-02-04T02:50:58.022803Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99"},{"type":"WEB","url":"https://github.com/evanw/esbuild/commit/de85afd65edec9ebc44a11e245fd9e9a2e99760d"},{"type":"PACKAGE","url":"https://github.com/evanw/esbuild"}],"versionKeys":["npm:esbuild@0.21.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-6g55-p6wh-862q","slug":"ghsa-6g55-p6wh-862q-12f1aeab","dossier":false,"summary":"PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments","aliases":["CVE-2026-45623"],"sourceIds":["GHSA-6g55-p6wh-862q"],"published":"2026-07-23T15:06:16Z","modified":"2026-07-28T03:14:45.311216468Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/aaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/c64b7488d2731dfa16213739b42c34faf5a9eba3"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.12"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-6p8h-3wgx-97gf","slug":"ghsa-6p8h-3wgx-97gf-635a010c","dossier":false,"summary":"GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks","aliases":[],"sourceIds":["GHSA-6p8h-3wgx-97gf"],"published":"2026-07-24T16:42:09Z","modified":"2026-07-25T21:44:40.055637633Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2180"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-6r8x-57c9-28j4","slug":"ghsa-6r8x-57c9-28j4-3a620dbf","dossier":true,"summary":"Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow","aliases":["BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451"],"sourceIds":["GHSA-6r8x-57c9-28j4","PYSEC-2026-3451"],"published":"2026-07-14T16:17:01.937Z","modified":"2026-07-22T02:59:40.188047466Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59199"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/pull/9703"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3451.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-6w46-j5rx-g56g","slug":"ghsa-6w46-j5rx-g56g-5324d549","dossier":false,"summary":"pytest has vulnerable tmpdir handling","aliases":["CVE-2025-71176","PYSEC-2026-1845"],"sourceIds":["GHSA-6w46-j5rx-g56g","PYSEC-2026-1845"],"published":"2026-01-22T06:30:29Z","modified":"2026-07-07T17:56:26.471696626Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71176"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/issues/13669"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/pull/14343"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/commit/95d8423bd24992deea5b9df32555fa1741679e2c"},{"type":"PACKAGE","url":"https://github.com/pytest-dev/pytes"},{"type":"WEB","url":"https://github.com/pytest-dev/pytest/releases/tag/9.0.3"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/01/21/5"},{"type":"PACKAGE","url":"https://pypi.org/project/pytest"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6w46-j5rx-g56g"}],"versionKeys":["pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-7545-fcxq-7j24","slug":"ghsa-7545-fcxq-7j24-84dd19fd","dossier":false,"summary":"GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository","aliases":["CVE-2026-44243","PYSEC-2026-2162"],"sourceIds":["GHSA-7545-fcxq-7j24","PYSEC-2026-2162"],"published":"2026-05-06T19:38:48Z","modified":"2026-07-13T07:26:30.186818349Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"EVIDENCE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44243"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"FIX","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-768j-98cg-p3fv","slug":"ghsa-768j-98cg-p3fv-0815ff07","dossier":false,"summary":"fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib","aliases":["CVE-2025-66034","PYSEC-2026-1389"],"sourceIds":["GHSA-768j-98cg-p3fv","PYSEC-2026-1389"],"published":"2025-12-01T19:07:00Z","modified":"2026-07-07T17:57:24.966058048Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L"}],"references":[{"type":"WEB","url":"https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66034"},{"type":"WEB","url":"https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32"},{"type":"PACKAGE","url":"https://github.com/fonttools/fonttools"},{"type":"PACKAGE","url":"https://pypi.org/project/fonttools"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-768j-98cg-p3fv"}],"versionKeys":["pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-78cv-mqj4-43f7","slug":"ghsa-78cv-mqj4-43f7-2021f695","dossier":false,"summary":"Tornado has incomplete validation of cookie attributes","aliases":["CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287"],"sourceIds":["GHSA-78cv-mqj4-43f7","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287"],"published":"2026-03-11T22:17:00Z","modified":"2026-07-13T16:45:06.531920939Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-78cv-mqj4-43f7"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/commit/24a2d96ea115f663b223887deb0060f13974c104"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35536"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fqwm-6jpj-5wxc"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-7cx3-6m66-7c5m","slug":"ghsa-7cx3-6m66-7c5m-cde5125c","dossier":false,"summary":"Tornado vulnerable to excessive logging caused by malformed multipart form data","aliases":["CVE-2025-47287","PYSEC-2026-1974"],"sourceIds":["GHSA-7cx3-6m66-7c5m","PYSEC-2026-1974"],"published":"2025-05-16T14:12:40Z","modified":"2026-07-07T17:56:45.268719923Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47287"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00038.html"},{"type":"PACKAGE","url":"https://pypi.org/project/tornado"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-7cx3-6m66-7c5m"}],"versionKeys":["pypi:tornado@6.4.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-7gcm-g887-7qv7","slug":"ghsa-7gcm-g887-7qv7-55bb9ff1","dossier":false,"summary":"protobuf affected by a JSON recursion depth bypass","aliases":["CVE-2026-0994","PYSEC-2026-1805"],"sourceIds":["GHSA-7gcm-g887-7qv7","PYSEC-2026-1805"],"published":"2026-01-23T15:31:35Z","modified":"2026-07-07T17:56:36.712428283Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0994"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/issues/25070"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/pull/25239"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/5ebddcb1bcbe51d1fe323baa145e85f4f23128cf"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/d2b001626d137c62dfee6c88c87324102531868b"},{"type":"PACKAGE","url":"https://github.com/protocolbuffers/protobuf"},{"type":"PACKAGE","url":"https://pypi.org/project/protobuf"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-7gcm-g887-7qv7"}],"versionKeys":["pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-7p48-42j8-8846","slug":"ghsa-7p48-42j8-8846-584b0522","dossier":false,"summary":"Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)","aliases":["CVE-2026-33682","PYSEC-2026-2285"],"sourceIds":["GHSA-7p48-42j8-8846","PYSEC-2026-2285"],"published":"2026-03-25T21:20:52Z","modified":"2026-07-13T07:26:25.253864212Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/streamlit/streamlit/security/advisories/GHSA-7p48-42j8-8846"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33682"},{"type":"FIX","url":"https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76"},{"type":"PACKAGE","url":"https://github.com/streamlit/streamlit"},{"type":"ADVISORY","url":"https://github.com/streamlit/streamlit/releases/tag/1.54.0"}],"versionKeys":["pypi:streamlit@1.49.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-8qvm-5x2c-j2w7","slug":"ghsa-8qvm-5x2c-j2w7-8a075519","dossier":false,"summary":"protobuf-python has a potential Denial of Service issue","aliases":["CVE-2025-4565","PYSEC-2026-1806"],"sourceIds":["GHSA-8qvm-5x2c-j2w7","PYSEC-2026-1806"],"published":"2025-06-16T16:02:58Z","modified":"2026-07-07T17:57:09.877491994Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-8qvm-5x2c-j2w7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4565"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/commit/17838beda2943d08b8a9d4df5b68f5f04f26d901"},{"type":"PACKAGE","url":"https://github.com/protocolbuffers/protobuf"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/blob/main/python/google/protobuf/internal/decoder_test.py#L87-L98"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/blob/main/python/google/protobuf/internal/message_test.py#L1436-L1478"},{"type":"WEB","url":"https://github.com/protocolbuffers/protobuf/tree/main/python#implementation-backends"},{"type":"PACKAGE","url":"https://pypi.org/project/protobuf"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-8qvm-5x2c-j2w7"}],"versionKeys":["pypi:protobuf@4.25.7","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-8v84-f9pq-wr9x","slug":"ghsa-8v84-f9pq-wr9x-6c1b185f","dossier":true,"summary":"Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading","aliases":["BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253"],"sourceIds":["GHSA-8v84-f9pq-wr9x","PYSEC-2026-2253"],"published":"2026-07-06T19:17:08.127Z","modified":"2026-07-22T02:59:41.148041376Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54059"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2253.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-93m4-6634-74q7","slug":"ghsa-93m4-6634-74q7-557bfeeb","dossier":false,"summary":"vite allows server.fs.deny bypass via backslash on Windows","aliases":["CVE-2025-62522"],"sourceIds":["GHSA-93m4-6634-74q7"],"published":"2025-10-20T19:54:28Z","modified":"2026-02-04T04:13:38.886554Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62522"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-94p4-4cq8-9g67","slug":"ghsa-94p4-4cq8-9g67-9a288a09","dossier":false,"summary":"GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)","aliases":[],"sourceIds":["GHSA-94p4-4cq8-9g67"],"published":"2026-07-24T21:45:16Z","modified":"2026-07-25T21:44:41.451010015Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.55"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-956x-8gvw-wg5v","slug":"ghsa-956x-8gvw-wg5v-f5d32b2d","dossier":false,"summary":"GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`","aliases":["CVE-2026-67323"],"sourceIds":["GHSA-956x-8gvw-wg5v"],"published":"2026-07-21T20:10:06Z","modified":"2026-08-02T03:56:47.832026599Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2163"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-9hjg-9r4m-mvj7","slug":"ghsa-9hjg-9r4m-mvj7-32d7b63e","dossier":false,"summary":"Requests vulnerable to .netrc credentials leak via malicious URLs","aliases":["CVE-2024-47081","PYSEC-2026-1872"],"sourceIds":["GHSA-9hjg-9r4m-mvj7","PYSEC-2026-1872"],"published":"2025-06-09T19:06:08Z","modified":"2026-07-07T17:56:56.234172558Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081"},{"type":"WEB","url":"https://github.com/psf/requests/pull/6965"},{"type":"FIX","url":"https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef"},{"type":"PACKAGE","url":"https://github.com/psf/requests"},{"type":"WEB","url":"https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env"},{"type":"WEB","url":"https://seclists.org/fulldisclosure/2025/Jun/2"},{"type":"PACKAGE","url":"https://pypi.org/project/requests"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9hjg-9r4m-mvj7"}],"versionKeys":["pypi:requests@2.31.0","pypi:requests@2.32.3"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-9hw9-ch79-4vh6","slug":"ghsa-9hw9-ch79-4vh6-1ebda54f","dossier":true,"summary":"Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch","aliases":["BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453"],"sourceIds":["GHSA-9hw9-ch79-4vh6","PYSEC-2026-3453"],"published":"2026-07-14T16:17:02.370Z","modified":"2026-07-22T02:59:40.628222965Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59205"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/pull/9715"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3453.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-9rj7-rf2p-w77r","slug":"ghsa-9rj7-rf2p-w77r-996a0359","dossier":false,"summary":"GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks","aliases":[],"sourceIds":["GHSA-9rj7-rf2p-w77r"],"published":"2026-08-07T15:36:43Z","modified":"2026-08-09T02:56:51.068532802Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2204"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-9wx4-h78v-vm56","slug":"ghsa-9wx4-h78v-vm56-6a334c57","dossier":false,"summary":"Requests `Session` object does not verify requests after making first request with verify=False","aliases":["CVE-2024-35195","PYSEC-2026-1873"],"sourceIds":["GHSA-9wx4-h78v-vm56","PYSEC-2026-1873"],"published":"2024-05-20T20:15:00Z","modified":"2026-07-07T17:57:17.012984050Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195"},{"type":"WEB","url":"https://github.com/psf/requests/pull/6655"},{"type":"FIX","url":"https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac"},{"type":"PACKAGE","url":"https://github.com/psf/requests"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ"},{"type":"PACKAGE","url":"https://pypi.org/project/requests"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9wx4-h78v-vm56"}],"versionKeys":["pypi:requests@2.31.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-c2c7-rcm5-vvqj","slug":"ghsa-c2c7-rcm5-vvqj-6ccdec4e","dossier":false,"summary":"Picomatch has a ReDoS vulnerability via extglob quantifiers","aliases":["CVE-2026-33671"],"sourceIds":["GHSA-c2c7-rcm5-vvqj"],"published":"2026-03-25T21:12:07Z","modified":"2026-03-28T00:14:20.889784Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33671"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-c38f-wx89-p2xg","slug":"ghsa-c38f-wx89-p2xg-d717e000","dossier":false,"summary":"UltraJSON has a Memory Leak in ujson.dump() on Write Failure","aliases":["CVE-2026-44660","PYSEC-2026-2293"],"sourceIds":["GHSA-c38f-wx89-p2xg","PYSEC-2026-2293"],"published":"2026-05-12T22:25:11Z","modified":"2026-07-13T07:26:16.152348068Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/security/advisories/GHSA-c38f-wx89-p2xg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44660"},{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/commit/82af1d0ac01d09aa40c887b460d44b9d9f4bccd9"},{"type":"PACKAGE","url":"https://github.com/ultrajson/ultrajson"},{"type":"ADVISORY","url":"https://github.com/ultrajson/ultrajson/releases/tag/5.12.1"}],"versionKeys":["pypi:ujson@5.10.0","pypi:ujson@5.12.0"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-c8rr-9gxc-jprv","slug":"ghsa-c8rr-9gxc-jprv-33d752b4","dossier":false,"summary":"UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop","aliases":["CVE-2026-32875","PYSEC-2026-2292"],"sourceIds":["GHSA-c8rr-9gxc-jprv","PYSEC-2026-2292"],"published":"2026-03-18T13:01:24Z","modified":"2026-07-13T07:26:19.649502948Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/ultrajson/ultrajson/security/advisories/GHSA-c8rr-9gxc-jprv"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32875"},{"type":"REPORT","url":"https://github.com/ultrajson/ultrajson/issues/700"},{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/commit/486bd4553dc471a1de11613bc7347a6b318e37ea"},{"type":"PACKAGE","url":"https://github.com/ultrajson/ultrajson"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-32875"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32875.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449400"}],"versionKeys":["pypi:ujson@5.10.0"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-c98p-7wgm-6p64","slug":"ghsa-c98p-7wgm-6p64-ef7ac7e3","dossier":false,"summary":"Tornado: Quadratic DoS via Repeated Header Coalescing","aliases":["CVE-2025-67725","PYSEC-2025-266"],"sourceIds":["GHSA-c98p-7wgm-6p64","PYSEC-2025-266"],"published":"2025-12-12T06:15:41.380Z","modified":"2026-07-20T19:15:27.567094965Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67725"},{"type":"FIX","url":"https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-266.yaml"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-cfh3-3jmp-rvhc","slug":"ghsa-cfh3-3jmp-rvhc-4e95572c","dossier":false,"summary":"Pillow affected by out-of-bounds write when loading PSD images","aliases":["BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249"],"sourceIds":["GHSA-cfh3-3jmp-rvhc","PYSEC-2026-2249"],"published":"2026-02-11T14:22:50Z","modified":"2026-07-13T07:26:49.514806069Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25990"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9427"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/54ba4db542ad3c7b918812a4e2d69c27735a3199"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-25990"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25990.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:14873"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:14874"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:16174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28385"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3461"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3462"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4128"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4942"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:5168"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0"],"packageCount":1,"repositoryCount":12},{"id":"GHSA-cpwx-vrp4-4pq7","slug":"ghsa-cpwx-vrp4-4pq7-799bdc98","dossier":false,"summary":"Jinja2 vulnerable to sandbox breakout through attr filter selecting format method","aliases":["CVE-2025-27516","PYSEC-2026-1471"],"sourceIds":["GHSA-cpwx-vrp4-4pq7","PYSEC-2026-1471"],"published":"2025-03-05T20:40:14Z","modified":"2026-07-07T17:56:16.836141266Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516"},{"type":"FIX","url":"https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403"},{"type":"PACKAGE","url":"https://github.com/pallets/jinja"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00045.html"},{"type":"PACKAGE","url":"https://pypi.org/project/jinja2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-cpwx-vrp4-4pq7"}],"versionKeys":["pypi:jinja2@3.1.3","pypi:jinja2@3.1.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-cx3h-4qpv-8hc9","slug":"ghsa-cx3h-4qpv-8hc9-3078b6fa","dossier":false,"summary":"Tornado has out-of-bounds memory access via C extension","aliases":["CVE-2026-49854","PYSEC-2026-3388"],"sourceIds":["GHSA-cx3h-4qpv-8hc9","PYSEC-2026-3388"],"published":"2026-06-12T18:30:19Z","modified":"2026-07-13T16:43:34.663472817Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-cx3h-4qpv-8hc9"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.6"},{"type":"PACKAGE","url":"https://pypi.org/project/tornado"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-cx3h-4qpv-8hc9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49854"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-cx63-2mw6-8hw5","slug":"ghsa-cx63-2mw6-8hw5-1754ad59","dossier":false,"summary":"setuptools vulnerable to Command Injection via package URL","aliases":["BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918"],"sourceIds":["GHSA-cx63-2mw6-8hw5","PYSEC-2026-1918"],"published":"2024-07-15T03:30:57Z","modified":"2026-07-07T17:57:13.326243614Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6345"},{"type":"WEB","url":"https://github.com/pypa/setuptools/pull/4332"},{"type":"WEB","url":"https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0"},{"type":"PACKAGE","url":"https://github.com/pypa/setuptools"},{"type":"WEB","url":"https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html"},{"type":"PACKAGE","url":"https://pypi.org/project/setuptools"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-cx63-2mw6-8hw5"}],"versionKeys":["pypi:setuptools@69.2.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-fj7v-r99m-22gq","slug":"ghsa-fj7v-r99m-22gq-e36cfebd","dossier":true,"summary":"Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images","aliases":["BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494"],"sourceIds":["GHSA-fj7v-r99m-22gq","PYSEC-2026-3494"],"published":"2026-07-20T23:09:36Z","modified":"2026-07-23T15:11:28.382441947Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59198"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9709"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/eada3cbd7fb9963ee90673fb7b5270124a0d5f4b"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"},{"type":"PACKAGE","url":"https://pypi.org/project/pillow"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fj7v-r99m-22gq"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-fjr4-x663-mwxc","slug":"ghsa-fjr4-x663-mwxc-324b7aa5","dossier":false,"summary":"GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)","aliases":[],"sourceIds":["GHSA-fjr4-x663-mwxc"],"published":"2026-07-24T16:41:20Z","modified":"2026-07-25T21:44:39.974035175Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2180"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-fx2h-pf6j-xcff","slug":"ghsa-fx2h-pf6j-xcff-156ab351","dossier":false,"summary":"vite: `server.fs.deny` bypass on Windows alternate paths","aliases":["CVE-2026-53571"],"sourceIds":["GHSA-fx2h-pf6j-xcff"],"published":"2026-06-15T17:17:45Z","modified":"2026-07-15T22:30:44.486843817Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-fx2h-pf6j-xcff"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53571"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-fxqj-rqcc-2cmp","slug":"ghsa-fxqj-rqcc-2cmp-34c312ef","dossier":false,"summary":"PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","aliases":["CVE-2026-69153"],"sourceIds":["GHSA-fxqj-rqcc-2cmp"],"published":"2026-08-03T17:11:39Z","modified":"2026-08-04T21:26:59.056562955Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.19"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.20","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-g4jq-h2w9-997c","slug":"ghsa-g4jq-h2w9-997c-b5be310c","dossier":false,"summary":"Vite middleware may serve files starting with the same name with the public directory","aliases":["CVE-2025-58751"],"sourceIds":["GHSA-g4jq-h2w9-997c"],"published":"2025-09-09T20:55:56Z","modified":"2026-02-04T04:33:22.508417Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58751"},{"type":"WEB","url":"https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/63e2a5d232218f3f8d852056751e609a5367aaec"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-g7vv-2v7x-gj9p","slug":"ghsa-g7vv-2v7x-gj9p-5ef970c3","dossier":false,"summary":"tqdm CLI arguments injection attack","aliases":["CVE-2024-34062","PYSEC-2026-1976"],"sourceIds":["GHSA-g7vv-2v7x-gj9p","PYSEC-2026-1976"],"published":"2024-05-03T19:33:28Z","modified":"2026-07-07T17:56:20.187915678Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34062"},{"type":"WEB","url":"https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316"},{"type":"PACKAGE","url":"https://github.com/tqdm/tqdm"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRECVQCCESHBS3UJOWNXQUIX725TKNY6"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VA337CYUS4SLRFV2P6MX6MZ2LKFURKJC"},{"type":"PACKAGE","url":"https://pypi.org/project/tqdm"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-g7vv-2v7x-gj9p"}],"versionKeys":["pypi:tqdm@4.66.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-gc5v-m9x4-r6x2","slug":"ghsa-gc5v-m9x4-r6x2-b9828ad8","dossier":true,"summary":"Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function","aliases":["CVE-2026-25645","PYSEC-2026-2275"],"sourceIds":["GHSA-gc5v-m9x4-r6x2","PYSEC-2026-2275"],"published":"2026-03-25T16:56:28Z","modified":"2026-07-13T07:26:34.091663004Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},{"type":"FIX","url":"https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"},{"type":"PACKAGE","url":"https://github.com/psf/requests"},{"type":"ADVISORY","url":"https://github.com/psf/requests/releases/tag/v2.33.0"}],"versionKeys":["pypi:requests@2.31.0","pypi:requests@2.32.3","pypi:requests@2.32.4","pypi:requests@2.32.5"],"packageCount":1,"repositoryCount":15},{"id":"GHSA-gm62-xv2j-4w53","slug":"ghsa-gm62-xv2j-4w53-5befa184","dossier":true,"summary":"urllib3 allows an unbounded number of links in the decompression chain","aliases":["CVE-2025-66418","PYSEC-2026-1998"],"sourceIds":["GHSA-gm62-xv2j-4w53","PYSEC-2026-1998"],"published":"2025-12-05T18:15:19Z","modified":"2026-07-07T17:57:28.931610368Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gm62-xv2j-4w53"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-gmj6-6f8f-6699","slug":"ghsa-gmj6-6f8f-6699-e3e02f35","dossier":false,"summary":"Jinja has a sandbox breakout through malicious filenames","aliases":["CVE-2024-56201","PYSEC-2026-1472"],"sourceIds":["GHSA-gmj6-6f8f-6699","PYSEC-2026-1472"],"published":"2024-12-23T17:54:12Z","modified":"2026-07-07T17:56:55.074166933Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},{"type":"WEB","url":"https://github.com/pallets/jinja/issues/1792"},{"type":"FIX","url":"https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f"},{"type":"PACKAGE","url":"https://github.com/pallets/jinja"},{"type":"WEB","url":"https://github.com/pallets/jinja/releases/tag/3.1.5"},{"type":"PACKAGE","url":"https://pypi.org/project/jinja2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gmj6-6f8f-6699"}],"versionKeys":["pypi:jinja2@3.1.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-h35f-9h28-mq5c","slug":"ghsa-h35f-9h28-mq5c-f3238ba1","dossier":true,"summary":"setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+","aliases":["BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447"],"sourceIds":["GHSA-h35f-9h28-mq5c","PYSEC-2026-3447"],"published":"2026-07-08T17:17:27.020Z","modified":"2026-07-23T09:29:39.408842775Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N"}],"references":[{"type":"EVIDENCE","url":"https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59890"},{"type":"FIX","url":"https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2026-3447.yaml"},{"type":"PACKAGE","url":"https://github.com/pypa/setuptools"},{"type":"ADVISORY","url":"https://github.com/pypa/setuptools/releases/tag/v83.0.0"}],"versionKeys":["pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1"],"packageCount":1,"repositoryCount":14},{"id":"GHSA-h75v-3vvj-5mfj","slug":"ghsa-h75v-3vvj-5mfj-d8fc6bb7","dossier":false,"summary":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","aliases":["CVE-2024-34064","PYSEC-2026-1474"],"sourceIds":["GHSA-h75v-3vvj-5mfj","PYSEC-2026-1474"],"published":"2024-05-06T14:20:59Z","modified":"2026-07-07T17:57:30.872296178Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064"},{"type":"FIX","url":"https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb"},{"type":"PACKAGE","url":"https://github.com/pallets/jinja"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS"},{"type":"PACKAGE","url":"https://pypi.org/project/jinja2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-h75v-3vvj-5mfj"}],"versionKeys":["pypi:jinja2@3.1.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-hh9p-6wh2-4mfc","slug":"ghsa-hh9p-6wh2-4mfc-8e33cff1","dossier":false,"summary":"GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()","aliases":[],"sourceIds":["GHSA-hh9p-6wh2-4mfc"],"published":"2026-08-07T15:43:56Z","modified":"2026-08-09T02:56:50.509044228Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hh9p-6wh2-4mfc"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2204"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/f2550b65bf60ca087190981e2c7b6865e201f40c"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-hmq2-w58f-27jc","slug":"ghsa-hmq2-w58f-27jc-f0b0fe70","dossier":false,"summary":"GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython","aliases":[],"sourceIds":["GHSA-hmq2-w58f-27jc"],"published":"2026-08-07T15:45:39Z","modified":"2026-08-09T02:56:50.891058419Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2202"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/4299c990e1ca21896f9485277caf7bb0ae5b404c"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/e4b8e7d026ca6abb4cf604f8e77093432ce23c06"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-j225-cvw7-qrx7","slug":"ghsa-j225-cvw7-qrx7-11bb0227","dossier":false,"summary":"PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption","aliases":["CVE-2023-52323","PYSEC-2024-3","PYSEC-2026-1811"],"sourceIds":["GHSA-j225-cvw7-qrx7","PYSEC-2026-1811"],"published":"2024-01-05T06:30:19Z","modified":"2026-07-07T17:56:21.566071405Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52323"},{"type":"WEB","url":"https://github.com/Legrandin/pycryptodome/commit/0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd"},{"type":"PACKAGE","url":"https://github.com/Legrandin/pycryptodome"},{"type":"WEB","url":"https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pycryptodomex/PYSEC-2024-3.yaml"},{"type":"WEB","url":"https://pypi.org/project/pycryptodomex/#history"},{"type":"PACKAGE","url":"https://pypi.org/project/pycryptodome"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-j225-cvw7-qrx7"}],"versionKeys":["pypi:pycryptodome@3.10.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jhmp-mqwm-3gq8","slug":"ghsa-jhmp-mqwm-3gq8-3b1c10a9","dossier":false,"summary":"Tornado: Quadratic DoS via Crafted Multipart Parameters","aliases":["CVE-2025-67726","PYSEC-2025-267"],"sourceIds":["GHSA-jhmp-mqwm-3gq8","PYSEC-2025-267"],"published":"2025-12-12T07:15:44.920Z","modified":"2026-07-20T19:15:27.583657512Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67726"},{"type":"FIX","url":"https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-267.yaml"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-jjj6-mw9f-p565","slug":"ghsa-jjj6-mw9f-p565-ed2d1f46","dossier":true,"summary":"Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()","aliases":["BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495"],"sourceIds":["GHSA-jjj6-mw9f-p565","PYSEC-2026-3495"],"published":"2026-07-20T23:11:29Z","modified":"2026-07-23T15:11:28.034031834Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59200"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9718"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"},{"type":"PACKAGE","url":"https://pypi.org/project/pillow"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-jjj6-mw9f-p565"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-jm78-9fvv-mhgr","slug":"ghsa-jm78-9fvv-mhgr-2c167ddc","dossier":false,"summary":"GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)","aliases":[],"sourceIds":["GHSA-jm78-9fvv-mhgr"],"published":"2026-08-07T15:46:35Z","modified":"2026-08-09T02:56:51.296995647Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2204"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/a495ccd3b547ccd60b2187215823b72a9c0188bf"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-jqfw-vq24-v9c3","slug":"ghsa-jqfw-vq24-v9c3-2de51aa4","dossier":false,"summary":"Vite's `server.fs` settings were not applied to HTML files","aliases":["CVE-2025-58752"],"sourceIds":["GHSA-jqfw-vq24-v9c3"],"published":"2025-09-09T20:54:42Z","modified":"2026-02-04T04:35:16.287471Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58752"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/6f01ff4fe072bcfcd4e2a84811772b818cd51fe6"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/blob/v7.1.5/packages/vite/CHANGELOG.md"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-mf9v-mfxr-j63j","slug":"ghsa-mf9v-mfxr-j63j-1a7db6d4","dossier":false,"summary":"urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API","aliases":["CVE-2026-44432","PYSEC-2026-142"],"sourceIds":["GHSA-mf9v-mfxr-j63j","PYSEC-2026-142"],"published":"2026-05-11T14:51:45Z","modified":"2026-06-08T20:00:12.284378628Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44432"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-142.yaml"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"}],"versionKeys":["pypi:urllib3@2.6.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-mgf9-4vpg-hj56","slug":"ghsa-mgf9-4vpg-hj56-00729355","dossier":false,"summary":"tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)","aliases":["CVE-2026-49855","PYSEC-2026-3389"],"sourceIds":["GHSA-mgf9-4vpg-hj56","PYSEC-2026-3389"],"published":"2026-06-15T20:19:28Z","modified":"2026-07-13T16:43:27.241564365Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-mgf9-4vpg-hj56"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"PACKAGE","url":"https://pypi.org/project/tornado"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-mgf9-4vpg-hj56"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49855"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-mv93-w799-cj2w","slug":"ghsa-mv93-w799-cj2w-4413137a","dossier":false,"summary":"GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath","aliases":["CVE-2026-67326"],"sourceIds":["GHSA-mv93-w799-cj2w"],"published":"2026-05-08T23:19:02Z","modified":"2026-08-02T03:56:45.346497199Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rpm5-65cw-6hj4"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-mw96-cpmx-2vgc","slug":"ghsa-mw96-cpmx-2vgc-209d101c","dossier":false,"summary":"Rollup 4 has Arbitrary File Write via Path Traversal","aliases":["CVE-2026-27606"],"sourceIds":["GHSA-mw96-cpmx-2vgc"],"published":"2026-02-25T22:37:26Z","modified":"2026-03-02T12:59:05.159604Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"WEB","url":"https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27606"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"},{"type":"PACKAGE","url":"https://github.com/rollup/rollup"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v2.80.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v3.30.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v4.59.0"}],"versionKeys":["npm:rollup@4.46.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-p538-c434-8v24","slug":"ghsa-p538-c434-8v24-c303e516","dossier":false,"summary":"GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count","aliases":[],"sourceIds":["GHSA-p538-c434-8v24"],"published":"2026-08-03T20:23:17Z","modified":"2026-08-08T03:26:54.523343843Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2184"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/38553b6fddc7f6a667cdb45a6762343a08fc72b2"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.56"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-p9ff-h696-f583","slug":"ghsa-p9ff-h696-f583-155b7820","dossier":false,"summary":"Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket","aliases":["CVE-2026-39363"],"sourceIds":["GHSA-p9ff-h696-f583"],"published":"2026-04-06T18:03:24Z","modified":"2026-04-09T14:59:25.151835620Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39363"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22159"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-pg7v-jwj7-p798","slug":"ghsa-pg7v-jwj7-p798-7c77aab5","dossier":false,"summary":"Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service","aliases":["BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452"],"sourceIds":["GHSA-pg7v-jwj7-p798","PYSEC-2026-3452"],"published":"2026-07-14T16:17:02.063Z","modified":"2026-07-22T02:59:40.501589790Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59203"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/pull/9708"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd684133b83"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3452.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"}],"versionKeys":["pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-phj9-mv4w-65pm","slug":"ghsa-phj9-mv4w-65pm-481e7dc3","dossier":true,"summary":"Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`","aliases":["BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256"],"sourceIds":["GHSA-phj9-mv4w-65pm","PYSEC-2026-2256"],"published":"2026-07-06T19:17:08.703Z","modified":"2026-07-22T02:59:41.562749940Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55380"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2256.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-pq67-6m6q-mj2v","slug":"ghsa-pq67-6m6q-mj2v-3522d1d4","dossier":false,"summary":"urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation","aliases":["CVE-2025-50181","PYSEC-2026-1999"],"sourceIds":["GHSA-pq67-6m6q-mj2v","PYSEC-2026-1999"],"published":"2025-06-18T17:50:00Z","modified":"2026-07-07T17:56:41.872294653Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://github.com/urllib3/urllib3/releases/tag/2.5.0"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-pq67-6m6q-mj2v"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-pr2v-jx2c-wg9f","slug":"ghsa-pr2v-jx2c-wg9f-1ca6d67c","dossier":false,"summary":"Tornado vulnerable to Header Injection and XSS via reason argument","aliases":["CVE-2025-67724","PYSEC-2025-265"],"sourceIds":["GHSA-pr2v-jx2c-wg9f","PYSEC-2025-265"],"published":"2025-12-12T06:15:41.213Z","modified":"2026-07-20T19:00:24.953994999Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-pr2v-jx2c-wg9f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67724"},{"type":"FIX","url":"https://github.com/tornadoweb/tornado/commit/9c163aebeaad9e6e7d28bac1f33580eb00b0e421"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-265.yaml"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-pw6j-qg29-8w7f","slug":"ghsa-pw6j-qg29-8w7f-fb4d7ed6","dossier":false,"summary":"Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse","aliases":[],"sourceIds":["GHSA-pw6j-qg29-8w7f"],"published":"2026-06-15T20:37:24Z","modified":"2026-06-16T22:59:25.768721886Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-pw6j-qg29-8w7f"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-pwv6-vv43-88gr","slug":"ghsa-pwv6-vv43-88gr-c5f811d0","dossier":true,"summary":"Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)","aliases":["BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252"],"sourceIds":["GHSA-pwv6-vv43-88gr","PYSEC-2026-2252"],"published":"2026-05-04T20:20:31Z","modified":"2026-07-13T07:26:52.198871129Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42311"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/pull/9520"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.2.0"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-q2x7-8rv6-6q7h","slug":"ghsa-q2x7-8rv6-6q7h-1113a288","dossier":false,"summary":"Jinja has a sandbox breakout through indirect reference to format method","aliases":["CVE-2024-56326","PYSEC-2026-1475"],"sourceIds":["GHSA-q2x7-8rv6-6q7h","PYSEC-2026-1475"],"published":"2024-12-23T17:56:08Z","modified":"2026-07-07T17:56:44.376174317Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},{"type":"FIX","url":"https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4"},{"type":"PACKAGE","url":"https://github.com/pallets/jinja"},{"type":"WEB","url":"https://github.com/pallets/jinja/releases/tag/3.1.5"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"},{"type":"PACKAGE","url":"https://pypi.org/project/jinja2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q2x7-8rv6-6q7h"}],"versionKeys":["pypi:jinja2@3.1.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-qccp-gfcp-xxvc","slug":"ghsa-qccp-gfcp-xxvc-0d988969","dossier":true,"summary":"urllib3: Sensitive headers forwarded across origins in proxied low-level redirects","aliases":["CVE-2026-44431","PYSEC-2026-141"],"sourceIds":["GHSA-qccp-gfcp-xxvc","PYSEC-2026-141"],"published":"2026-05-11T14:51:20Z","modified":"2026-05-20T09:19:20.983812Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0","pypi:urllib3@2.6.3"],"packageCount":1,"repositoryCount":15},{"id":"GHSA-qjxf-f2mg-c6mc","slug":"ghsa-qjxf-f2mg-c6mc-58d52008","dossier":false,"summary":"Tornado is vulnerable to DoS due to too many multipart parts","aliases":["CVE-2026-31958","PYSEC-2026-140"],"sourceIds":["GHSA-qjxf-f2mg-c6mc","PYSEC-2026-140"],"published":"2026-03-11T20:16:16.617Z","modified":"2026-06-08T20:00:14.385003861Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-qjxf-f2mg-c6mc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31958"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/commit/119a195e290c43ad2d63a2cf012c29d43d6ed839"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2026-140.yaml"},{"type":"PACKAGE","url":"https://github.com/tornadoweb/tornado"},{"type":"WEB","url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.5"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/04/msg00000.html"}],"versionKeys":["pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4"],"packageCount":1,"repositoryCount":6},{"id":"GHSA-qmgc-5h2g-mvrw","slug":"ghsa-qmgc-5h2g-mvrw-199eacc8","dossier":false,"summary":"filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock","aliases":["CVE-2026-22701","PYSEC-2026-1374"],"sourceIds":["GHSA-qmgc-5h2g-mvrw","PYSEC-2026-1374"],"published":"2026-01-13T18:44:55Z","modified":"2026-07-07T17:56:19.485233787Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"}],"references":[{"type":"WEB","url":"https://github.com/tox-dev/filelock/security/advisories/GHSA-qmgc-5h2g-mvrw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22701"},{"type":"WEB","url":"https://github.com/tox-dev/filelock/commit/255ed068bc85d1ef406e50a135e1459170dd1bf0"},{"type":"WEB","url":"https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5"},{"type":"PACKAGE","url":"https://github.com/tox-dev/filelock"},{"type":"PACKAGE","url":"https://pypi.org/project/filelock"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qmgc-5h2g-mvrw"}],"versionKeys":["pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-qx2v-qp2m-jg93","slug":"ghsa-qx2v-qp2m-jg93-0a55e142","dossier":false,"summary":"PostCSS has XSS via Unescaped </style> in its CSS Stringify Output","aliases":["CVE-2026-41305"],"sourceIds":["GHSA-qx2v-qp2m-jg93"],"published":"2026-04-24T15:31:42Z","modified":"2026-05-06T17:44:15.783349140Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41305"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.10"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-r28c-9q8g-f849","slug":"ghsa-r28c-9q8g-f849-c8b68fa5","dossier":false,"summary":"PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure","aliases":[],"sourceIds":["GHSA-r28c-9q8g-f849"],"published":"2026-07-24T16:24:55Z","modified":"2026-07-28T03:14:45.565217341Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.18"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-r73j-pqj5-w3x7","slug":"ghsa-r73j-pqj5-w3x7-8d4d543f","dossier":false,"summary":"Pillow has a PDF Parsing Trailer Infinite Loop (DoS)","aliases":["BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874"],"sourceIds":["GHSA-r73j-pqj5-w3x7","PYSEC-2026-2874"],"published":"2026-05-04T20:19:30Z","modified":"2026-07-13T16:42:37.358429541Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42310"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9519"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/12.2.0"},{"type":"PACKAGE","url":"https://pypi.org/project/pillow"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-r73j-pqj5-w3x7"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-r9mr-m37c-5fr3","slug":"ghsa-r9mr-m37c-5fr3-d43000fc","dossier":false,"summary":"GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution","aliases":[],"sourceIds":["GHSA-r9mr-m37c-5fr3"],"published":"2026-07-24T16:42:57Z","modified":"2026-07-25T21:44:41.709665254Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2180"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-rgxp-2hwp-jwgg","slug":"ghsa-rgxp-2hwp-jwgg-76cdda06","dossier":false,"summary":"Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering","aliases":["CVE-2026-25087","PYSEC-2026-113"],"sourceIds":["GHSA-rgxp-2hwp-jwgg","PYSEC-2026-113"],"published":"2026-02-17T14:16:01.947Z","modified":"2026-06-12T10:29:15.451071539Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25087"},{"type":"FIX","url":"https://github.com/apache/arrow/pull/48925"},{"type":"PACKAGE","url":"https://github.com/apache/arrow"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2026-113.yaml"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/mpm4ld1qony30tchfpjtk5b11tcyvmwh"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rgxp-2hwp-jwgg"}],"versionKeys":["pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-rpm5-65cw-6hj4","slug":"ghsa-rpm5-65cw-6hj4-6c97dd77","dossier":false,"summary":"GitPython has Command Injection via Git options bypass","aliases":["CVE-2026-42215","PYSEC-2026-2160"],"sourceIds":["GHSA-rpm5-65cw-6hj4","PYSEC-2026-2160"],"published":"2026-04-25T23:42:16Z","modified":"2026-07-13T07:26:42.486885613Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42215"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"FIX","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-rwj8-pgh3-r573","slug":"ghsa-rwj8-pgh3-r573-0bf779f8","dossier":false,"summary":"GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL","aliases":["CVE-2026-67322"],"sourceIds":["GHSA-rwj8-pgh3-r573"],"published":"2026-07-21T22:06:09Z","modified":"2026-08-02T03:56:46.931996040Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2172"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.52"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-v6wh-96g9-6wx3","slug":"ghsa-v6wh-96g9-6wx3-0e881d08","dossier":false,"summary":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","aliases":["CVE-2026-53632"],"sourceIds":["GHSA-v6wh-96g9-6wx3"],"published":"2026-06-15T17:18:31Z","modified":"2026-07-02T19:59:25.649988255Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-v87r-6q3f-2j67","slug":"ghsa-v87r-6q3f-2j67-81913ca6","dossier":false,"summary":"GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath","aliases":["CVE-2026-44244","PYSEC-2026-2163"],"sourceIds":["GHSA-v87r-6q3f-2j67","PYSEC-2026-2163"],"published":"2026-05-06T21:58:00Z","modified":"2026-07-13T07:26:38.585123077Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44244"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"FIX","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-vjc4-5qp5-m44j","slug":"ghsa-vjc4-5qp5-m44j-08063b19","dossier":false,"summary":"Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service","aliases":["BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496"],"sourceIds":["GHSA-vjc4-5qp5-m44j","PYSEC-2026-3496"],"published":"2026-07-20T23:18:32Z","modified":"2026-07-23T15:11:20.720915099Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59204"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9704"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"},{"type":"PACKAGE","url":"https://pypi.org/project/pillow"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vjc4-5qp5-m44j"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-vqfr-h8mv-ghfj","slug":"ghsa-vqfr-h8mv-ghfj-49515033","dossier":false,"summary":"h11 accepts some malformed Chunked-Encoding bodies","aliases":["CVE-2025-43859","PYSEC-2026-348"],"sourceIds":["GHSA-vqfr-h8mv-ghfj","PYSEC-2026-348"],"published":"2025-04-24T16:07:56Z","modified":"2026-07-01T20:22:54.082067Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43859"},{"type":"WEB","url":"https://github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed"},{"type":"PACKAGE","url":"https://github.com/python-hyper/h11"},{"type":"PACKAGE","url":"https://pypi.org/project/h11"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vqfr-h8mv-ghfj"}],"versionKeys":["pypi:h11@0.14.0"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-vqwp-45wm-r9r5","slug":"ghsa-vqwp-45wm-r9r5-eaa960a2","dossier":false,"summary":"Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission","aliases":["CVE-2026-10804","PYSEC-2026-212"],"sourceIds":["GHSA-vqwp-45wm-r9r5","PYSEC-2026-212"],"published":"2026-06-04T12:16:24.620Z","modified":"2026-07-23T15:00:23.893493649Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10804"},{"type":"FIX","url":"https://github.com/streamlit/streamlit/issues/14622"},{"type":"FIX","url":"https://github.com/streamlit/streamlit/pull/14635"},{"type":"WEB","url":"https://github.com/streamlit/streamlit/pull/15397"},{"type":"WEB","url":"https://github.com/streamlit/streamlit/commit/fec0f584dae9261abed16cad35b32922104bb933"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/streamlit/PYSEC-2026-212.yaml"},{"type":"PACKAGE","url":"https://github.com/streamlit/streamlit"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-10804"},{"type":"ADVISORY","url":"https://vuldb.com/submit/831508"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/368253"},{"type":"REPORT","url":"https://vuldb.com/vuln/368253/cti"},{"type":"WEB","url":"https://github.com/streamlit/streamlit/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vqwp-45wm-r9r5"}],"versionKeys":["pypi:streamlit@1.49.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-w853-jp5j-5j7f","slug":"ghsa-w853-jp5j-5j7f-2786386f","dossier":false,"summary":"filelock has a TOCTOU race condition which allows symlink attacks during lock file creation","aliases":["CVE-2025-68146","PYSEC-2026-1375"],"sourceIds":["GHSA-w853-jp5j-5j7f","PYSEC-2026-1375"],"published":"2025-12-16T20:52:55Z","modified":"2026-07-07T17:56:10.949145470Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/tox-dev/filelock/security/advisories/GHSA-w853-jp5j-5j7f"},{"type":"WEB","url":"https://github.com/tox-dev/filelock/commit/4724d7f8c3393ec1f048c93933e6e3e6ec321f0e"},{"type":"PACKAGE","url":"https://github.com/tox-dev/filelock"},{"type":"WEB","url":"https://github.com/tox-dev/filelock/releases/tag/3.20.1"},{"type":"WEB","url":"https://learn.microsoft.com/en-us/windows/win32/fileio/file-attribute-constants"},{"type":"WEB","url":"https://pubs.opengroup.org/onlinepubs/9699919799/functions/open.html"},{"type":"PACKAGE","url":"https://pypi.org/project/filelock"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-w853-jp5j-5j7f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68146"}],"versionKeys":["pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0"],"packageCount":1,"repositoryCount":10},{"id":"GHSA-wgvc-ghv9-3pmm","slug":"ghsa-wgvc-ghv9-3pmm-9038f7ef","dossier":false,"summary":"UltraJSON has a Memory Leak parsing large integers allows DoS","aliases":["CVE-2026-32874","PYSEC-2026-2291"],"sourceIds":["GHSA-wgvc-ghv9-3pmm","PYSEC-2026-2291"],"published":"2026-03-18T13:01:15Z","modified":"2026-07-13T07:26:54.389124194Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/ultrajson/ultrajson/security/advisories/GHSA-wgvc-ghv9-3pmm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32874"},{"type":"FIX","url":"https://github.com/ultrajson/ultrajson/commit/4baeb950df780092bd3c89fc702a868e99a3a1d2"},{"type":"PACKAGE","url":"https://github.com/ultrajson/ultrajson"},{"type":"ADVISORY","url":"https://github.com/ultrajson/ultrajson/releases/tag/5.12.0"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-32874"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32874.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449411"}],"versionKeys":["pypi:ujson@5.10.0"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-whj4-6x5x-4v2j","slug":"ghsa-whj4-6x5x-4v2j-eb5fc6a1","dossier":false,"summary":"FITS GZIP decompression bomb in Pillow","aliases":["BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250"],"sourceIds":["GHSA-whj4-6x5x-4v2j","PYSEC-2026-2250"],"published":"2026-04-13T19:22:35Z","modified":"2026-07-13T07:26:24.246094941Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40192"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9521"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-40192"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40192.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:16008"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:16009"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:16030"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:16174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17609"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17611"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22465"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22629"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22840"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-wjx4-4jcj-g98j","slug":"ghsa-wjx4-4jcj-g98j-e937161b","dossier":false,"summary":"Pillow has an integer overflow when processing fonts","aliases":["BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165"],"sourceIds":["GHSA-wjx4-4jcj-g98j","PYSEC-2026-165"],"published":"2026-05-04T20:18:45Z","modified":"2026-06-08T23:45:16.414580348Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42308"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-165.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.2.0"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-wvpp-8hx9-p66j","slug":"ghsa-wvpp-8hx9-p66j-188b3951","dossier":false,"summary":"GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution","aliases":[],"sourceIds":["GHSA-wvpp-8hx9-p66j"],"published":"2026-08-07T15:49:07Z","modified":"2026-08-09T02:56:51.363626854Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/pull/2204"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"WEB","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-x2qx-6953-8485","slug":"ghsa-x2qx-6953-8485-107f8fe2","dossier":false,"summary":"GitPython: Unsafe option check validates multi_options before shlex.split transformation","aliases":["CVE-2026-42284","PYSEC-2026-2161"],"sourceIds":["GHSA-x2qx-6953-8485","PYSEC-2026-2161"],"published":"2026-04-25T23:41:49Z","modified":"2026-07-13T07:26:44.494568822Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42284"},{"type":"PACKAGE","url":"https://github.com/gitpython-developers/GitPython"},{"type":"FIX","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"},{"type":"WEB","url":"https://www.tenable.com/cve/CVE-2026-32686"}],"versionKeys":["pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-xg8h-j46f-w952","slug":"ghsa-xg8h-j46f-w952-da36a616","dossier":false,"summary":"Pillow vulnerability can cause write buffer overflow on BCn encoding","aliases":["BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61"],"sourceIds":["GHSA-xg8h-j46f-w952","PYSEC-2025-61"],"published":"2025-07-01T17:29:37Z","modified":"2026-02-04T03:49:31.268130Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xg8h-j46f-w952"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48379"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/pull/9041"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/ef98b3510e3e4f14b547762764813d7e5ca3c5a4"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2025-61.yaml"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"WEB","url":"https://github.com/python-pillow/Pillow/releases/tag/11.3.0"}],"versionKeys":["pypi:pillow@11.2.1"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-xj96-63gp-2gmr","slug":"ghsa-xj96-63gp-2gmr-85e1cf15","dossier":false,"summary":"Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`","aliases":["BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454"],"sourceIds":["GHSA-xj96-63gp-2gmr","PYSEC-2026-3454"],"published":"2026-07-14T17:17:14.487Z","modified":"2026-07-22T11:11:36.231472645Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"references":[{"type":"EVIDENCE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59197"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/pull/9695"},{"type":"FIX","url":"https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1"},{"type":"PACKAGE","url":"https://github.com/python-pillow/Pillow"},{"type":"ADVISORY","url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"}],"versionKeys":["pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1"],"packageCount":1,"repositoryCount":13},{"id":"PYSEC-2026-2132","slug":"pysec-2026-2132-627bf7c7","dossier":true,"summary":null,"aliases":["CVE-2026-7246","GHSA-47fr-3ffg-hgmw"],"sourceIds":["PYSEC-2026-2132"],"published":"2026-04-30T14:16:36.433Z","modified":"2026-07-13T07:15:21.899333658Z","checkedAt":"2026-08-13T03:52:27.520Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-7246"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7246.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24761"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24762"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464121"},{"type":"FIX","url":"https://github.com/pallets/click/releases/tag/8.3.3"},{"type":"EVIDENCE","url":"https://github.com/tsigouris007/security-advisories/security/advisories/GHSA-47fr-3ffg-hgmw"}],"versionKeys":["pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1"],"packageCount":1,"repositoryCount":14}]}}