[{"data":1,"prerenderedAt":5473},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-10162":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":232,"related":237},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":115,"artifactResolvedComponentCount":115,"exactManifestPinCount":37,"packageCount":116,"ecosystems":117,"aiPackageCount":32,"licenseExpressionCount":73,"unknownLicensePackageCount":120,"advisoryIds":121,"advisoryCount":230,"providers":231},"opencode:10162","opencode-10162",10162,"SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung","1d70807d48a8fae19711b10422c3417ab5d05d0f","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fcommit\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f","2026-05-05T08:21:41.798Z","2026-04-21T12:43:43.000Z",{"complete":89,"entryCount":90,"truncated":45},true,151,[92,101,109],{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fdraw_image_mask\u002Fdraw_image_mask\u002Ffrontend\u002Fpackage-lock.json","npm-lock","85ce34d08ec17ad3a2acf0b5c33d7b57954d5164","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fdraw_image_mask\u002Fdraw_image_mask\u002Ffrontend\u002Fpackage-lock.json","d6cf494bd944eff796a59b32b36c8214816e3be6639d5c2ea67893310aa39322",57396,"parsed",123,{"path":102,"kind":103,"blobSha":104,"sourceUrl":105,"commitSha":84,"contentSha256":106,"byteCount":107,"state":99,"componentCount":108},"blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","poetry-lock","40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","834ae2be07a53839d9a28b3e1f69e45e947515a00364ef07871b6fc47c379933",168848,78,{"path":55,"kind":103,"blobSha":110,"sourceUrl":111,"commitSha":84,"contentSha256":112,"byteCount":113,"state":99,"componentCount":114},"6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock","aeab690097e8e006cb4680cb53d452b805b943ab2091762607ff4d493cc71549",378939,117,318,266,[118,119],"npm","pypi",5,[122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229],"GHSA-248v-346w-9cwc","GHSA-28wg-ghj8-5hjv","GHSA-2f96-g7mh-g2hx","GHSA-2v37-7h3g-55p8","GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3j69-69wj-xqx2","GHSA-3rp5-jjmw-4wv2","GHSA-3v7f-55p6-f55p","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4w7w-66w2-5vf9","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-539m-9xh6-q6rr","GHSA-597g-3phw-6986","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-67mh-4wv8-2f99","GHSA-6g55-p6wh-862q","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-6w46-j5rx-g56g","GHSA-7545-fcxq-7j24","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-93m4-6634-74q7","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-c2c7-rcm5-vvqj","GHSA-c38f-wx89-p2xg","GHSA-c8rr-9gxc-jprv","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fx2h-pf6j-xcff","GHSA-fxqj-rqcc-2cmp","GHSA-g4jq-h2w9-997c","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hh9p-6wh2-4mfc","GHSA-hmq2-w58f-27jc","GHSA-j225-cvw7-qrx7","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jm78-9fvv-mhgr","GHSA-jqfw-vq24-v9c3","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mv93-w799-cj2w","GHSA-mw96-cpmx-2vgc","GHSA-p538-c434-8v24","GHSA-p9ff-h696-f583","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qx2v-qp2m-jg93","GHSA-r28c-9q8g-f849","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rwj8-pgh3-r573","GHSA-v6wh-96g9-6wx3","GHSA-v87r-6q3f-2j67","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-w853-jp5j-5j7f","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wvpp-8hx9-p66j","GHSA-x2qx-6953-8485","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2026-2132",108,[],{"files":233,"occurrenceCount":115},[234,235,236],{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"path":102,"kind":103,"blobSha":104,"sourceUrl":105,"commitSha":84,"contentSha256":106,"byteCount":107,"state":99,"componentCount":108},{"path":55,"kind":103,"blobSha":110,"sourceUrl":111,"commitSha":84,"contentSha256":112,"byteCount":113,"state":99,"componentCount":114},{"packages":238,"vulnerabilities":2605},[239,251,263,276,286,298,307,317,326,337,348,358,369,378,387,397,407,418,428,437,446,455,464,474,484,493,504,513,522,532,541,549,557,565,573,581,589,597,605,613,621,629,637,645,653,661,669,677,685,693,701,709,717,725,733,741,749,758,766,774,782,790,798,806,814,822,830,838,846,854,862,870,878,886,894,902,910,918,927,936,944,952,960,968,976,984,992,1000,1008,1017,1026,1035,1044,1053,1062,1072,1081,1090,1099,1108,1117,1126,1135,1145,1154,1163,1172,1181,1190,1200,1210,1219,1228,1237,1247,1256,1265,1275,1285,1294,1303,1311,1320,1329,1338,1347,1356,1365,1374,1384,1393,1402,1411,1421,1430,1439,1448,1457,1466,1475,1484,1493,1502,1510,1519,1528,1537,1546,1555,1564,1572,1581,1590,1599,1608,1617,1626,1635,1644,1652,1661,1670,1679,1689,1699,1708,1717,1726,1734,1744,1753,1761,1770,1779,1788,1796,1806,1815,1824,1835,1844,1853,1862,1871,1882,1890,1898,1907,1916,1925,1934,1943,1953,1962,1971,1980,1989,1998,2007,2016,2024,2033,2042,2051,2060,2069,2078,2086,2094,2103,2112,2121,2130,2138,2147,2155,2164,2173,2182,2192,2201,2209,2219,2227,2236,2244,2254,2263,2273,2283,2292,2301,2309,2318,2327,2336,2345,2353,2362,2371,2379,2387,2395,2404,2412,2420,2428,2437,2446,2455,2464,2474,2483,2492,2501,2510,2519,2528,2536,2545,2554,2563,2572,2580,2588,2597],{"id":240,"slug":241,"identity":242,"label":243,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":244,"versions":246,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":250},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[245],"Apache-2.0",[247,248],"4.12.0.88","4.13.0.92",2,[102,55],{"id":252,"slug":253,"identity":254,"label":255,"aiRelevant":45,"provider":82,"advisoryCount":256,"licenseExpressions":257,"versions":259,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":262},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",22,[258],"BSD-3-Clause",[260,261],"3.1.45","3.1.46",[102,55],{"id":264,"slug":265,"identity":266,"label":267,"aiRelevant":45,"provider":82,"advisoryCount":268,"licenseExpressions":269,"versions":272,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":275},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[270,271],"HPND","MIT-CMU",[273,274],"11.3.0","12.1.1",[102,55],{"id":277,"slug":278,"identity":279,"label":280,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":281,"versions":282,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":285},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[245],[283,284],"6.5.2","6.5.5",[102,55],{"id":287,"slug":288,"identity":289,"label":290,"aiRelevant":45,"provider":82,"advisoryCount":291,"licenseExpressions":292,"versions":294,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":297},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[293],"MIT",[295,296],"2.5.0","2.6.3",[102,55],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":45,"provider":82,"advisoryCount":291,"licenseExpressions":303,"versions":304,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":306},"package:npm:vite","vite-d48e852f","npm:vite","vite",[293],[305],"6.3.5",[93],{"id":308,"slug":309,"identity":310,"label":311,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":312,"versions":314,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":316},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[258,313],"non-standard",[315],"3.1.6",[102,55],{"id":318,"slug":319,"identity":320,"label":321,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":322,"versions":323,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":325},"package:npm:postcss","postcss-6e1650ce","npm:postcss","postcss",[293],[324],"8.5.6",[93],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":331,"versions":334,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":336},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[258,332,333],"BSD-3-Clause AND TCL","TCL",[335],"5.12.0",[55],{"id":338,"slug":339,"identity":340,"label":341,"aiRelevant":45,"provider":82,"advisoryCount":342,"licenseExpressions":343,"versions":344,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":347},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[245],[345,346],"2.32.5","2.33.1",[102,55],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":45,"provider":82,"advisoryCount":342,"licenseExpressions":353,"versions":354,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":357},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[293],[355,356],"80.9.0","82.0.1",[102,55],{"id":359,"slug":360,"identity":361,"label":362,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":363,"versions":365,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":368},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[293,364],"Unlicense",[366,367],"3.19.1","3.25.2",[102,55],{"id":370,"slug":371,"identity":372,"label":373,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":374,"versions":375,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":377},"package:npm:nanoid","nanoid-93076b34","npm:nanoid","nanoid",[293],[376],"3.3.11",[93],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":383,"versions":384,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":386},"package:npm:picomatch","picomatch-a3008e9b","npm:picomatch","picomatch",[293],[385],"4.0.3",[93],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":392,"versions":393,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":396},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[258],[394,395],"6.32.0","6.33.6",[102,55],{"id":398,"slug":399,"identity":400,"label":401,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":402,"versions":403,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":406},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[245],[404,405],"1.49.0","1.55.0",[102,55],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":412,"versions":414,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":417},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[413],"MPL-2.0",[415,416],"2025.8.3","2026.2.25",[102,55],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":423,"versions":424,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":427},"package:pypi:click","click-ef97f731","pypi:click","click",[258,313],[425,426],"8.1.8","8.3.1",[102,55],{"id":429,"slug":430,"identity":431,"label":432,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":433,"versions":434,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":436},"package:npm:esbuild","esbuild-65fe29d5","npm:esbuild","esbuild",[293],[435],"0.25.8",[93],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":442,"versions":443,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":445},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[293],[444],"4.62.1",[55],{"id":447,"slug":448,"identity":449,"label":450,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":451,"versions":452,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":454},"package:pypi:geopandas","geopandas-968b51b0","pypi:geopandas","geopandas",[258],[453],"1.1.3",[55],{"id":456,"slug":457,"identity":458,"label":459,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":460,"versions":461,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":463},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[293],[462],"0.16.0",[55],{"id":465,"slug":466,"identity":467,"label":468,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":469,"versions":470,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":473},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[258,313],[471,472],"3.10","3.11",[102,55],{"id":475,"slug":476,"identity":477,"label":478,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":479,"versions":480,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":483},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[245,313],[481,482],"21.0.0","23.0.1",[102,55],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":489,"versions":490,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":492},"package:pypi:pycryptodome","pycryptodome-44737a20","pypi:pycryptodome","pycryptodome",[313],[491],"3.23.0",[55],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":498,"versions":500,"dossier":89,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":503},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[499],"BSD-2-Clause",[501,502],"2.19.2","2.20.0",[102,55],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":509,"versions":510,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":512},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[293],[511],"8.3.2",[102],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":518,"versions":519,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":521},"package:npm:rollup","rollup-1742bf3c","npm:rollup","rollup",[293],[520],"4.46.1",[93],{"id":523,"slug":524,"identity":525,"label":526,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":527,"versions":529,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":531},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[528],"MIT AND MPL-2.0",[530],"4.67.3",[55],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":537,"versions":538,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":540},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[293],[539],"20.34.0",[102],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":546,"versions":547,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":548},"package:npm:@esbuild\u002Faix-ppc64","esbuild-aix-ppc64-ff62d0c3","npm:@esbuild\u002Faix-ppc64","@esbuild\u002Faix-ppc64",[293],[435],[93],{"id":550,"slug":551,"identity":552,"label":553,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":554,"versions":555,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":556},"package:npm:@esbuild\u002Fandroid-arm","esbuild-android-arm-6d6a793e","npm:@esbuild\u002Fandroid-arm","@esbuild\u002Fandroid-arm",[293],[435],[93],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":562,"versions":563,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":564},"package:npm:@esbuild\u002Fandroid-arm64","esbuild-android-arm64-774120d0","npm:@esbuild\u002Fandroid-arm64","@esbuild\u002Fandroid-arm64",[293],[435],[93],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":570,"versions":571,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":572},"package:npm:@esbuild\u002Fandroid-x64","esbuild-android-x64-e3983566","npm:@esbuild\u002Fandroid-x64","@esbuild\u002Fandroid-x64",[293],[435],[93],{"id":574,"slug":575,"identity":576,"label":577,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":578,"versions":579,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":580},"package:npm:@esbuild\u002Fdarwin-arm64","esbuild-darwin-arm64-7825afb9","npm:@esbuild\u002Fdarwin-arm64","@esbuild\u002Fdarwin-arm64",[293],[435],[93],{"id":582,"slug":583,"identity":584,"label":585,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":586,"versions":587,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":588},"package:npm:@esbuild\u002Fdarwin-x64","esbuild-darwin-x64-53715141","npm:@esbuild\u002Fdarwin-x64","@esbuild\u002Fdarwin-x64",[293],[435],[93],{"id":590,"slug":591,"identity":592,"label":593,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":594,"versions":595,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":596},"package:npm:@esbuild\u002Ffreebsd-arm64","esbuild-freebsd-arm64-782f5ad9","npm:@esbuild\u002Ffreebsd-arm64","@esbuild\u002Ffreebsd-arm64",[293],[435],[93],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":602,"versions":603,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":604},"package:npm:@esbuild\u002Ffreebsd-x64","esbuild-freebsd-x64-98044ed2","npm:@esbuild\u002Ffreebsd-x64","@esbuild\u002Ffreebsd-x64",[293],[435],[93],{"id":606,"slug":607,"identity":608,"label":609,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":610,"versions":611,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":612},"package:npm:@esbuild\u002Flinux-arm","esbuild-linux-arm-3041c0e3","npm:@esbuild\u002Flinux-arm","@esbuild\u002Flinux-arm",[293],[435],[93],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":618,"versions":619,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":620},"package:npm:@esbuild\u002Flinux-arm64","esbuild-linux-arm64-383e4f4d","npm:@esbuild\u002Flinux-arm64","@esbuild\u002Flinux-arm64",[293],[435],[93],{"id":622,"slug":623,"identity":624,"label":625,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":626,"versions":627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":628},"package:npm:@esbuild\u002Flinux-ia32","esbuild-linux-ia32-e3f7f680","npm:@esbuild\u002Flinux-ia32","@esbuild\u002Flinux-ia32",[293],[435],[93],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":634,"versions":635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":636},"package:npm:@esbuild\u002Flinux-loong64","esbuild-linux-loong64-99975fa3","npm:@esbuild\u002Flinux-loong64","@esbuild\u002Flinux-loong64",[293],[435],[93],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":642,"versions":643,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":644},"package:npm:@esbuild\u002Flinux-mips64el","esbuild-linux-mips64el-198b328b","npm:@esbuild\u002Flinux-mips64el","@esbuild\u002Flinux-mips64el",[293],[435],[93],{"id":646,"slug":647,"identity":648,"label":649,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":650,"versions":651,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":652},"package:npm:@esbuild\u002Flinux-ppc64","esbuild-linux-ppc64-2ce9b1d5","npm:@esbuild\u002Flinux-ppc64","@esbuild\u002Flinux-ppc64",[293],[435],[93],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":658,"versions":659,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":660},"package:npm:@esbuild\u002Flinux-riscv64","esbuild-linux-riscv64-e52b37cd","npm:@esbuild\u002Flinux-riscv64","@esbuild\u002Flinux-riscv64",[293],[435],[93],{"id":662,"slug":663,"identity":664,"label":665,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":666,"versions":667,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":668},"package:npm:@esbuild\u002Flinux-s390x","esbuild-linux-s390x-a378f043","npm:@esbuild\u002Flinux-s390x","@esbuild\u002Flinux-s390x",[293],[435],[93],{"id":670,"slug":671,"identity":672,"label":673,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":674,"versions":675,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":676},"package:npm:@esbuild\u002Flinux-x64","esbuild-linux-x64-6ab2d953","npm:@esbuild\u002Flinux-x64","@esbuild\u002Flinux-x64",[293],[435],[93],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":682,"versions":683,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":684},"package:npm:@esbuild\u002Fnetbsd-arm64","esbuild-netbsd-arm64-8089135a","npm:@esbuild\u002Fnetbsd-arm64","@esbuild\u002Fnetbsd-arm64",[293],[435],[93],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":690,"versions":691,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":692},"package:npm:@esbuild\u002Fnetbsd-x64","esbuild-netbsd-x64-8422547c","npm:@esbuild\u002Fnetbsd-x64","@esbuild\u002Fnetbsd-x64",[293],[435],[93],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":698,"versions":699,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":700},"package:npm:@esbuild\u002Fopenbsd-arm64","esbuild-openbsd-arm64-7c050374","npm:@esbuild\u002Fopenbsd-arm64","@esbuild\u002Fopenbsd-arm64",[293],[435],[93],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":706,"versions":707,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":708},"package:npm:@esbuild\u002Fopenbsd-x64","esbuild-openbsd-x64-c7ebdb2d","npm:@esbuild\u002Fopenbsd-x64","@esbuild\u002Fopenbsd-x64",[293],[435],[93],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":714,"versions":715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":716},"package:npm:@esbuild\u002Fopenharmony-arm64","esbuild-openharmony-arm64-fd4b1b7a","npm:@esbuild\u002Fopenharmony-arm64","@esbuild\u002Fopenharmony-arm64",[293],[435],[93],{"id":718,"slug":719,"identity":720,"label":721,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":722,"versions":723,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":724},"package:npm:@esbuild\u002Fsunos-x64","esbuild-sunos-x64-580d2b14","npm:@esbuild\u002Fsunos-x64","@esbuild\u002Fsunos-x64",[293],[435],[93],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":730,"versions":731,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":732},"package:npm:@esbuild\u002Fwin32-arm64","esbuild-win32-arm64-15462cb5","npm:@esbuild\u002Fwin32-arm64","@esbuild\u002Fwin32-arm64",[293],[435],[93],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":738,"versions":739,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":740},"package:npm:@esbuild\u002Fwin32-ia32","esbuild-win32-ia32-8f5f9f68","npm:@esbuild\u002Fwin32-ia32","@esbuild\u002Fwin32-ia32",[293],[435],[93],{"id":742,"slug":743,"identity":744,"label":745,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":746,"versions":747,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":748},"package:npm:@esbuild\u002Fwin32-x64","esbuild-win32-x64-204cfc99","npm:@esbuild\u002Fwin32-x64","@esbuild\u002Fwin32-x64",[293],[435],[93],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":754,"versions":755,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":757},"package:npm:@rolldown\u002Fpluginutils","rolldown-pluginutils-73ff273e","npm:@rolldown\u002Fpluginutils","@rolldown\u002Fpluginutils",[293],[756],"1.0.0-beta.27",[93],{"id":759,"slug":760,"identity":761,"label":762,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":763,"versions":764,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":765},"package:npm:@rollup\u002Frollup-android-arm-eabi","rollup-rollup-android-arm-eabi-6fe9e830","npm:@rollup\u002Frollup-android-arm-eabi","@rollup\u002Frollup-android-arm-eabi",[293],[520],[93],{"id":767,"slug":768,"identity":769,"label":770,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":771,"versions":772,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":773},"package:npm:@rollup\u002Frollup-android-arm64","rollup-rollup-android-arm64-110a0008","npm:@rollup\u002Frollup-android-arm64","@rollup\u002Frollup-android-arm64",[293],[520],[93],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":779,"versions":780,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":781},"package:npm:@rollup\u002Frollup-darwin-arm64","rollup-rollup-darwin-arm64-a7104e2d","npm:@rollup\u002Frollup-darwin-arm64","@rollup\u002Frollup-darwin-arm64",[293],[520],[93],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":787,"versions":788,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":789},"package:npm:@rollup\u002Frollup-darwin-x64","rollup-rollup-darwin-x64-9d553e48","npm:@rollup\u002Frollup-darwin-x64","@rollup\u002Frollup-darwin-x64",[293],[520],[93],{"id":791,"slug":792,"identity":793,"label":794,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":795,"versions":796,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":797},"package:npm:@rollup\u002Frollup-freebsd-arm64","rollup-rollup-freebsd-arm64-d05763b3","npm:@rollup\u002Frollup-freebsd-arm64","@rollup\u002Frollup-freebsd-arm64",[293],[520],[93],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":803,"versions":804,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":805},"package:npm:@rollup\u002Frollup-freebsd-x64","rollup-rollup-freebsd-x64-9389d83a","npm:@rollup\u002Frollup-freebsd-x64","@rollup\u002Frollup-freebsd-x64",[293],[520],[93],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":811,"versions":812,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":813},"package:npm:@rollup\u002Frollup-linux-arm-gnueabihf","rollup-rollup-linux-arm-gnueabihf-ea274b24","npm:@rollup\u002Frollup-linux-arm-gnueabihf","@rollup\u002Frollup-linux-arm-gnueabihf",[293],[520],[93],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":819,"versions":820,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":821},"package:npm:@rollup\u002Frollup-linux-arm-musleabihf","rollup-rollup-linux-arm-musleabihf-d17800dc","npm:@rollup\u002Frollup-linux-arm-musleabihf","@rollup\u002Frollup-linux-arm-musleabihf",[293],[520],[93],{"id":823,"slug":824,"identity":825,"label":826,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":827,"versions":828,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":829},"package:npm:@rollup\u002Frollup-linux-arm64-gnu","rollup-rollup-linux-arm64-gnu-2692ccaa","npm:@rollup\u002Frollup-linux-arm64-gnu","@rollup\u002Frollup-linux-arm64-gnu",[293],[520],[93],{"id":831,"slug":832,"identity":833,"label":834,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":835,"versions":836,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":837},"package:npm:@rollup\u002Frollup-linux-arm64-musl","rollup-rollup-linux-arm64-musl-69ba6707","npm:@rollup\u002Frollup-linux-arm64-musl","@rollup\u002Frollup-linux-arm64-musl",[293],[520],[93],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":843,"versions":844,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":845},"package:npm:@rollup\u002Frollup-linux-loongarch64-gnu","rollup-rollup-linux-loongarch64-gnu-2c23d926","npm:@rollup\u002Frollup-linux-loongarch64-gnu","@rollup\u002Frollup-linux-loongarch64-gnu",[293],[520],[93],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":851,"versions":852,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":853},"package:npm:@rollup\u002Frollup-linux-ppc64-gnu","rollup-rollup-linux-ppc64-gnu-99cbedb8","npm:@rollup\u002Frollup-linux-ppc64-gnu","@rollup\u002Frollup-linux-ppc64-gnu",[293],[520],[93],{"id":855,"slug":856,"identity":857,"label":858,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":859,"versions":860,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":861},"package:npm:@rollup\u002Frollup-linux-riscv64-gnu","rollup-rollup-linux-riscv64-gnu-c8854adc","npm:@rollup\u002Frollup-linux-riscv64-gnu","@rollup\u002Frollup-linux-riscv64-gnu",[293],[520],[93],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":867,"versions":868,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":869},"package:npm:@rollup\u002Frollup-linux-riscv64-musl","rollup-rollup-linux-riscv64-musl-2308f5c4","npm:@rollup\u002Frollup-linux-riscv64-musl","@rollup\u002Frollup-linux-riscv64-musl",[293],[520],[93],{"id":871,"slug":872,"identity":873,"label":874,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":875,"versions":876,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":877},"package:npm:@rollup\u002Frollup-linux-s390x-gnu","rollup-rollup-linux-s390x-gnu-2efcfaef","npm:@rollup\u002Frollup-linux-s390x-gnu","@rollup\u002Frollup-linux-s390x-gnu",[293],[520],[93],{"id":879,"slug":880,"identity":881,"label":882,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":883,"versions":884,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":885},"package:npm:@rollup\u002Frollup-linux-x64-gnu","rollup-rollup-linux-x64-gnu-800335dd","npm:@rollup\u002Frollup-linux-x64-gnu","@rollup\u002Frollup-linux-x64-gnu",[293],[520],[93],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":891,"versions":892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":893},"package:npm:@rollup\u002Frollup-linux-x64-musl","rollup-rollup-linux-x64-musl-6959d376","npm:@rollup\u002Frollup-linux-x64-musl","@rollup\u002Frollup-linux-x64-musl",[293],[520],[93],{"id":895,"slug":896,"identity":897,"label":898,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":899,"versions":900,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":901},"package:npm:@rollup\u002Frollup-win32-arm64-msvc","rollup-rollup-win32-arm64-msvc-9b8297fc","npm:@rollup\u002Frollup-win32-arm64-msvc","@rollup\u002Frollup-win32-arm64-msvc",[293],[520],[93],{"id":903,"slug":904,"identity":905,"label":906,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":907,"versions":908,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":909},"package:npm:@rollup\u002Frollup-win32-ia32-msvc","rollup-rollup-win32-ia32-msvc-37230ee2","npm:@rollup\u002Frollup-win32-ia32-msvc","@rollup\u002Frollup-win32-ia32-msvc",[293],[520],[93],{"id":911,"slug":912,"identity":913,"label":914,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":915,"versions":916,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":917},"package:npm:@rollup\u002Frollup-win32-x64-msvc","rollup-rollup-win32-x64-msvc-6081dd46","npm:@rollup\u002Frollup-win32-x64-msvc","@rollup\u002Frollup-win32-x64-msvc",[293],[520],[93],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":923,"versions":924,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":926},"package:npm:@swc\u002Fcore","swc-core-f74a2ac5","npm:@swc\u002Fcore","@swc\u002Fcore",[245],[925],"1.13.3",[93],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":932,"versions":934,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":935},"package:npm:@swc\u002Fcore-darwin-arm64","swc-core-darwin-arm64-6247fd94","npm:@swc\u002Fcore-darwin-arm64","@swc\u002Fcore-darwin-arm64",[933],"Apache-2.0 AND MIT",[925],[93],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":941,"versions":942,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":943},"package:npm:@swc\u002Fcore-darwin-x64","swc-core-darwin-x64-055aaa9f","npm:@swc\u002Fcore-darwin-x64","@swc\u002Fcore-darwin-x64",[933],[925],[93],{"id":945,"slug":946,"identity":947,"label":948,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":949,"versions":950,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":951},"package:npm:@swc\u002Fcore-linux-arm-gnueabihf","swc-core-linux-arm-gnueabihf-6390b310","npm:@swc\u002Fcore-linux-arm-gnueabihf","@swc\u002Fcore-linux-arm-gnueabihf",[245],[925],[93],{"id":953,"slug":954,"identity":955,"label":956,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":957,"versions":958,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":959},"package:npm:@swc\u002Fcore-linux-arm64-gnu","swc-core-linux-arm64-gnu-f2facbf0","npm:@swc\u002Fcore-linux-arm64-gnu","@swc\u002Fcore-linux-arm64-gnu",[933],[925],[93],{"id":961,"slug":962,"identity":963,"label":964,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":965,"versions":966,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":967},"package:npm:@swc\u002Fcore-linux-arm64-musl","swc-core-linux-arm64-musl-a0c39efb","npm:@swc\u002Fcore-linux-arm64-musl","@swc\u002Fcore-linux-arm64-musl",[933],[925],[93],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":973,"versions":974,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":975},"package:npm:@swc\u002Fcore-linux-x64-gnu","swc-core-linux-x64-gnu-1aeb9490","npm:@swc\u002Fcore-linux-x64-gnu","@swc\u002Fcore-linux-x64-gnu",[933],[925],[93],{"id":977,"slug":978,"identity":979,"label":980,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":981,"versions":982,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":983},"package:npm:@swc\u002Fcore-linux-x64-musl","swc-core-linux-x64-musl-f3e8bb6e","npm:@swc\u002Fcore-linux-x64-musl","@swc\u002Fcore-linux-x64-musl",[933],[925],[93],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":989,"versions":990,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":991},"package:npm:@swc\u002Fcore-win32-arm64-msvc","swc-core-win32-arm64-msvc-68ea39b6","npm:@swc\u002Fcore-win32-arm64-msvc","@swc\u002Fcore-win32-arm64-msvc",[933],[925],[93],{"id":993,"slug":994,"identity":995,"label":996,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":997,"versions":998,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":999},"package:npm:@swc\u002Fcore-win32-ia32-msvc","swc-core-win32-ia32-msvc-dcb96713","npm:@swc\u002Fcore-win32-ia32-msvc","@swc\u002Fcore-win32-ia32-msvc",[933],[925],[93],{"id":1001,"slug":1002,"identity":1003,"label":1004,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1005,"versions":1006,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1007},"package:npm:@swc\u002Fcore-win32-x64-msvc","swc-core-win32-x64-msvc-e3838160","npm:@swc\u002Fcore-win32-x64-msvc","@swc\u002Fcore-win32-x64-msvc",[933],[925],[93],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1013,"versions":1014,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1016},"package:npm:@swc\u002Fcounter","swc-counter-78b046ef","npm:@swc\u002Fcounter","@swc\u002Fcounter",[245],[1015],"0.1.3",[93],{"id":1018,"slug":1019,"identity":1020,"label":1021,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1022,"versions":1023,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1025},"package:npm:@swc\u002Ftypes","swc-types-bf509804","npm:@swc\u002Ftypes","@swc\u002Ftypes",[245],[1024],"0.1.23",[93],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1031,"versions":1032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1034},"package:npm:@types\u002Fcommand-line-args","types-command-line-args-ee930845","npm:@types\u002Fcommand-line-args","@types\u002Fcommand-line-args",[293],[1033],"5.2.0",[93],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1040,"versions":1041,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1043},"package:npm:@types\u002Fcommand-line-usage","types-command-line-usage-c50b461e","npm:@types\u002Fcommand-line-usage","@types\u002Fcommand-line-usage",[293],[1042],"5.0.2",[93],{"id":1045,"slug":1046,"identity":1047,"label":1048,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1049,"versions":1050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1052},"package:npm:@types\u002Festree","types-estree-8dde2b7e","npm:@types\u002Festree","@types\u002Festree",[293],[1051],"1.0.8",[93],{"id":1054,"slug":1055,"identity":1056,"label":1057,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1058,"versions":1059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1061},"package:npm:@types\u002Fflatbuffers","types-flatbuffers-b726b945","npm:@types\u002Fflatbuffers","@types\u002Fflatbuffers",[293],[1060],"2.0.1",[93],{"id":1063,"slug":1064,"identity":1065,"label":1066,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1067,"versions":1068,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":249,"evidenceFiles":1071},"package:npm:@types\u002Fnode","types-node-893179a0","npm:@types\u002Fnode","@types\u002Fnode",[293],[1069,1070],"18.7.23","22.16.5",[93],{"id":1073,"slug":1074,"identity":1075,"label":1076,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1077,"versions":1078,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1080},"package:npm:@types\u002Fpad-left","types-pad-left-b6a1e169","npm:@types\u002Fpad-left","@types\u002Fpad-left",[293],[1079],"2.1.1",[93],{"id":1082,"slug":1083,"identity":1084,"label":1085,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1086,"versions":1087,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1089},"package:npm:@types\u002Fprop-types","types-prop-types-dc4bb417","npm:@types\u002Fprop-types","@types\u002Fprop-types",[293],[1088],"15.7.15",[93],{"id":1091,"slug":1092,"identity":1093,"label":1094,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1095,"versions":1096,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1098},"package:npm:@types\u002Freact","types-react-1801b994","npm:@types\u002Freact","@types\u002Freact",[293],[1097],"18.3.23",[93],{"id":1100,"slug":1101,"identity":1102,"label":1103,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1104,"versions":1105,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1107},"package:npm:@types\u002Freact-dom","types-react-dom-0822f902","npm:@types\u002Freact-dom","@types\u002Freact-dom",[293],[1106],"18.3.7",[93],{"id":1109,"slug":1110,"identity":1111,"label":1112,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1113,"versions":1114,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1116},"package:npm:@vitejs\u002Fplugin-react-swc","vitejs-plugin-react-swc-b266da33","npm:@vitejs\u002Fplugin-react-swc","@vitejs\u002Fplugin-react-swc",[293],[1115],"3.11.0",[93],{"id":1118,"slug":1119,"identity":1120,"label":1121,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1122,"versions":1123,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1125},"package:pypi:affine","affine-44cc504f","pypi:affine","affine",[313],[1124],"2.4.0",[55],{"id":1127,"slug":1128,"identity":1129,"label":1130,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1131,"versions":1132,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1134},"package:pypi:aistudio-sdk","aistudio-sdk-2b1939af","pypi:aistudio-sdk","aistudio-sdk",[],[1133],"0.3.8",[55],{"id":1136,"slug":1137,"identity":1138,"label":1139,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1140,"versions":1141,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1144},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[313],[1142,1143],"5.5.0","6.0.0",[102,55],{"id":1146,"slug":1147,"identity":1148,"label":1149,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1150,"versions":1151,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1153},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[293],[1152],"0.0.4",[55],{"id":1155,"slug":1156,"identity":1157,"label":1158,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1159,"versions":1160,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1162},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[293],[1161],"0.7.0",[55],{"id":1164,"slug":1165,"identity":1166,"label":1167,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1168,"versions":1169,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1171},"package:npm:ansi-styles","ansi-styles-1f68187d","npm:ansi-styles","ansi-styles",[293],[1170],"3.2.1",[93],{"id":1173,"slug":1174,"identity":1175,"label":1176,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1177,"versions":1178,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1180},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[293],[1179],"4.13.0",[55],{"id":1182,"slug":1183,"identity":1184,"label":1185,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1186,"versions":1187,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1189},"package:npm:apache-arrow","apache-arrow-402d2a56","npm:apache-arrow","apache-arrow",[245],[1188],"11.0.0",[93],{"id":1191,"slug":1192,"identity":1193,"label":1194,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1195,"versions":1196,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1199},"package:npm:array-back","array-back-58abba0d","npm:array-back","array-back",[293],[1197,1198],"3.1.0","4.0.2",[93],{"id":1201,"slug":1202,"identity":1203,"label":1204,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1205,"versions":1206,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1209},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[293],[1207,1208],"25.3.0","26.1.0",[102,55],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1215,"versions":1216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1218},"package:pypi:bandit","bandit-b6566895","pypi:bandit","bandit",[245],[1217],"1.7.5",[102],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1224,"versions":1225,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1227},"package:pypi:bce-python-sdk","bce-python-sdk-58803754","pypi:bce-python-sdk","bce-python-sdk",[245],[1226],"0.9.68",[55],{"id":1229,"slug":1230,"identity":1231,"label":1232,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1233,"versions":1234,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1236},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[293],[1235],"1.9.0",[102,55],{"id":1238,"slug":1239,"identity":1240,"label":1241,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1242,"versions":1243,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1246},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[293],[1244,1245],"6.2.0","7.0.5",[102,55],{"id":1248,"slug":1249,"identity":1250,"label":1251,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1252,"versions":1253,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1255},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[293],[1254],"3.4.0",[102],{"id":1257,"slug":1258,"identity":1259,"label":1260,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1261,"versions":1262,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1264},"package:npm:chalk","chalk-8df0bdaf","npm:chalk","chalk",[293],[1263],"2.4.2",[93],{"id":1266,"slug":1267,"identity":1268,"label":1269,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1270,"versions":1272,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1274},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[1271,313],"0BSD",[1273],"7.4.0.post2",[55],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1280,"versions":1281,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1284},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[293],[1282,1283],"3.4.3","3.4.6",[102,55],{"id":1286,"slug":1287,"identity":1288,"label":1289,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1290,"versions":1291,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1293},"package:pypi:cligj","cligj-f69f4bb0","pypi:cligj","cligj",[313],[1292],"0.7.2",[55],{"id":1295,"slug":1296,"identity":1297,"label":1298,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1299,"versions":1300,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1302},"package:npm:color-convert","color-convert-85ffcc60","npm:color-convert","color-convert",[293],[1301],"1.9.3",[93],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1308,"versions":1309,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1310},"package:npm:color-name","color-name-8d5a2a87","npm:color-name","color-name",[293],[453],[93],{"id":1312,"slug":1313,"identity":1314,"label":1315,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1316,"versions":1317,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1319},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[313],[1318],"0.4.6",[102,55],{"id":1321,"slug":1322,"identity":1323,"label":1324,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1325,"versions":1326,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1328},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[293],[1327],"6.10.1",[55],{"id":1330,"slug":1331,"identity":1332,"label":1333,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1334,"versions":1335,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1337},"package:npm:command-line-args","command-line-args-8330b072","npm:command-line-args","command-line-args",[293],[1336],"5.2.1",[93],{"id":1339,"slug":1340,"identity":1341,"label":1342,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1343,"versions":1344,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1346},"package:npm:command-line-usage","command-line-usage-5528c3cc","npm:command-line-usage","command-line-usage",[293],[1345],"6.1.3",[93],{"id":1348,"slug":1349,"identity":1350,"label":1351,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1352,"versions":1353,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1355},"package:pypi:contextily","contextily-8bb6f862","pypi:contextily","contextily",[258],[1354],"1.7.0",[55],{"id":1357,"slug":1358,"identity":1359,"label":1360,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1361,"versions":1362,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1364},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[313],[1363],"1.3.3",[55],{"id":1366,"slug":1367,"identity":1368,"label":1369,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1370,"versions":1371,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1373},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[245],[1372],"7.10.6",[102],{"id":1375,"slug":1376,"identity":1377,"label":1378,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1379,"versions":1381,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1383},"package:pypi:crc32c","crc32c-b326a331","pypi:crc32c","crc32c",[1380],"LGPL-2.1-or-later",[1382],"2.8",[55],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1389,"versions":1390,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1392},"package:npm:csstype","csstype-64cd134e","npm:csstype","csstype",[293],[1391],"3.1.3",[93],{"id":1394,"slug":1395,"identity":1396,"label":1397,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1398,"versions":1399,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1401},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[313],[1400],"0.12.1",[55],{"id":1403,"slug":1404,"identity":1405,"label":1406,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1407,"versions":1408,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1410},"package:npm:deep-extend","deep-extend-360b394e","npm:deep-extend","deep-extend",[293],[1409],"0.6.0",[93],{"id":1412,"slug":1413,"identity":1414,"label":1415,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1416,"versions":1418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1420},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[1417],"PSF-2.0",[1419],"0.4.0",[102],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1426,"versions":1427,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1429},"package:pypi:draw-image-mask","draw-image-mask-2dd08e8e","pypi:draw-image-mask","draw-image-mask",[],[1428],"1.0.3a0",[55],{"id":1431,"slug":1432,"identity":1433,"label":1434,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1435,"versions":1436,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1438},"package:npm:escape-string-regexp","escape-string-regexp-48b4cb67","npm:escape-string-regexp","escape-string-regexp",[293],[1437],"1.0.5",[93],{"id":1440,"slug":1441,"identity":1442,"label":1443,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1444,"versions":1445,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1447},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[293],[1446],"1.3.0",[102],{"id":1449,"slug":1450,"identity":1451,"label":1452,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1453,"versions":1454,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1456},"package:npm:fdir","fdir-d78fecd4","npm:fdir","fdir",[293],[1455],"6.4.6",[93],{"id":1458,"slug":1459,"identity":1460,"label":1461,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1462,"versions":1463,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1465},"package:npm:find-replace","find-replace-f25bd2df","npm:find-replace","find-replace",[293],[1464],"3.0.0",[93],{"id":1467,"slug":1468,"identity":1469,"label":1470,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1471,"versions":1472,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1474},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[293],[1473],"7.1.0",[102],{"id":1476,"slug":1477,"identity":1478,"label":1479,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1480,"versions":1481,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1483},"package:pypi:flake8-bugbear","flake8-bugbear-d7b81407","pypi:flake8-bugbear","flake8-bugbear",[293],[1482],"24.4.26",[102],{"id":1485,"slug":1486,"identity":1487,"label":1488,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1489,"versions":1490,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1492},"package:pypi:flake8-pyproject","flake8-pyproject-419b5f84","pypi:flake8-pyproject","flake8-pyproject",[293],[1491],"1.2.3",[102],{"id":1494,"slug":1495,"identity":1496,"label":1497,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1498,"versions":1499,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1501},"package:npm:flatbuffers","flatbuffers-0d5c5f0a","npm:flatbuffers","flatbuffers",[245,313],[1500],"2.0.4",[93],{"id":1503,"slug":1504,"identity":1505,"label":1497,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1506,"versions":1507,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1509},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers",[245],[1508],"25.12.19",[55],{"id":1511,"slug":1512,"identity":1513,"label":1514,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1515,"versions":1516,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1518},"package:npm:fsevents","fsevents-f43d69ec","npm:fsevents","fsevents",[293],[1517],"2.3.3",[93],{"id":1520,"slug":1521,"identity":1522,"label":1523,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1524,"versions":1525,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1527},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[258,313],[1526],"2026.3.0",[55],{"id":1529,"slug":1530,"identity":1531,"label":1532,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1533,"versions":1534,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1536},"package:pypi:future","future-3018bb21","pypi:future","future",[293],[1535],"1.0.0",[55],{"id":1538,"slug":1539,"identity":1540,"label":1541,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1542,"versions":1543,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1545},"package:pypi:geographiclib","geographiclib-501d9aee","pypi:geographiclib","geographiclib",[293],[1544],"2.1",[55],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1551,"versions":1552,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1554},"package:pypi:geopy","geopy-a289936e","pypi:geopy","geopy",[293],[1553],"2.4.1",[55],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1560,"versions":1561,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1563},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[313],[1562],"4.0.12",[102,55],{"id":1565,"slug":1566,"identity":1567,"label":1568,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1569,"versions":1570,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1571},"package:npm:has-flag","has-flag-45a1a13f","npm:has-flag","has-flag",[293],[1464],[93],{"id":1573,"slug":1574,"identity":1575,"label":1576,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1577,"versions":1578,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1580},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[245],[1579],"1.4.2",[55],{"id":1582,"slug":1583,"identity":1584,"label":1585,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1586,"versions":1587,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1589},"package:npm:hoist-non-react-statics","hoist-non-react-statics-cd62e457","npm:hoist-non-react-statics","hoist-non-react-statics",[258],[1588],"3.3.2",[93],{"id":1591,"slug":1592,"identity":1593,"label":1594,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1595,"versions":1596,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1598},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[258],[1597],"1.0.9",[55],{"id":1600,"slug":1601,"identity":1602,"label":1603,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1604,"versions":1605,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1607},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[258],[1606],"0.28.1",[55],{"id":1609,"slug":1610,"identity":1611,"label":1612,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1613,"versions":1614,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1616},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[245,313],[1615],"1.8.0",[55],{"id":1618,"slug":1619,"identity":1620,"label":1621,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1622,"versions":1623,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1625},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[293],[1624],"2.6.13",[102],{"id":1627,"slug":1628,"identity":1629,"label":1630,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1631,"versions":1632,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1634},"package:pypi:imagesize","imagesize-6607709a","pypi:imagesize","imagesize",[293],[1633],"2.0.0",[55],{"id":1636,"slug":1637,"identity":1638,"label":1639,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1640,"versions":1641,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1643},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[293],[1642],"2.1.0",[102],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1649,"versions":1650,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1651},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[293],[335],[102],{"id":1653,"slug":1654,"identity":1655,"label":1656,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1657,"versions":1658,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1660},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[258],[1659],"1.5.3",[55],{"id":1662,"slug":1663,"identity":1664,"label":1665,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1666,"versions":1667,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1669},"package:npm:js-tokens","js-tokens-8b3f06fa","npm:js-tokens","js-tokens",[293],[1668],"4.0.0",[93],{"id":1671,"slug":1672,"identity":1673,"label":1674,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1675,"versions":1676,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1678},"package:npm:json-bignum","json-bignum-6595b520","npm:json-bignum","json-bignum",[],[1677],"0.0.3",[93],{"id":1680,"slug":1681,"identity":1682,"label":1683,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1684,"versions":1685,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1688},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[293],[1686,1687],"4.25.1","4.26.0",[102,55],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1694,"versions":1695,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1698},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[293],[1696,1697],"2025.4.1","2025.9.1",[102,55],{"id":1700,"slug":1701,"identity":1702,"label":1703,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1704,"versions":1705,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1707},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[313],[1706],"1.5.0",[55],{"id":1709,"slug":1710,"identity":1711,"label":1712,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1713,"versions":1714,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1716},"package:npm:lodash.camelcase","lodash-camelcase-707d82c7","npm:lodash.camelcase","lodash.camelcase",[293],[1715],"4.3.0",[93],{"id":1718,"slug":1719,"identity":1720,"label":1721,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1722,"versions":1723,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1725},"package:npm:loose-envify","loose-envify-73b7e932","npm:loose-envify","loose-envify",[293],[1724],"1.4.0",[93],{"id":1727,"slug":1728,"identity":1729,"label":1730,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1731,"versions":1732,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1733},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[293],[1464,1668],[102,55],{"id":1735,"slug":1736,"identity":1737,"label":1738,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1739,"versions":1740,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1743},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[258,313],[1741,1742],"3.0.2","3.0.3",[102,55],{"id":1745,"slug":1746,"identity":1747,"label":1748,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1749,"versions":1750,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1752},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[313],[1751],"3.10.8",[55],{"id":1754,"slug":1755,"identity":1756,"label":1757,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1758,"versions":1759,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1760},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[313],[1161],[102],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1766,"versions":1767,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1769},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[293],[1768],"0.1.2",[102,55],{"id":1771,"slug":1772,"identity":1773,"label":1774,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1775,"versions":1776,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1778},"package:pypi:mercantile","mercantile-5a933d0e","pypi:mercantile","mercantile",[313],[1777],"1.2.1",[55],{"id":1780,"slug":1781,"identity":1782,"label":1783,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1784,"versions":1785,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1787},"package:pypi:modelscope","modelscope-2938e006","pypi:modelscope","modelscope",[245],[1786],"1.35.3",[55],{"id":1789,"slug":1790,"identity":1791,"label":1792,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1793,"versions":1794,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1795},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[313],[1446],[55],{"id":1797,"slug":1798,"identity":1799,"label":1800,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1801,"versions":1802,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1805},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[293,313],[1803,1804],"2.18.1","2.2.0",[102,55],{"id":1807,"slug":1808,"identity":1809,"label":1810,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1811,"versions":1812,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1814},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[258,313],[1813],"3.6",[55],{"id":1816,"slug":1817,"identity":1818,"label":1819,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1820,"versions":1821,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1823},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[313],[1822],"1.9.1",[102],{"id":1825,"slug":1826,"identity":1827,"label":1828,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1829,"versions":1831,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1834},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1830,313],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1832,1833],"2.0.2","2.4.4",[102,55],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1840,"versions":1841,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1843},"package:npm:object-assign","object-assign-fa9dc3dc","npm:object-assign","object-assign",[293],[1842],"4.1.1",[93],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1849,"versions":1850,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1852},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[293],[1851],"1.24.4",[55],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1858,"versions":1859,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1861},"package:pypi:opencv-contrib-python","opencv-contrib-python-a645c612","pypi:opencv-contrib-python","opencv-contrib-python",[245],[1860],"4.10.0.84",[55],{"id":1863,"slug":1864,"identity":1865,"label":1866,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1867,"versions":1868,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1870},"package:pypi:opt-einsum","opt-einsum-73c64c2e","pypi:opt-einsum","opt-einsum",[293],[1869],"3.3.0",[55],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1876,"versions":1878,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1881},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1877,313],"Apache-2.0 OR BSD-2-Clause",[1879,1880],"25.0","26.0",[102,55],{"id":1883,"slug":1884,"identity":1885,"label":1886,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1887,"versions":1888,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1889},"package:npm:pad-left","pad-left-e0445ba1","npm:pad-left","pad-left",[293],[1642],[93],{"id":1891,"slug":1892,"identity":1893,"label":1894,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1895,"versions":1896,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1897},"package:pypi:paddleocr","paddleocr-650f320c","pypi:paddleocr","paddleocr",[245],[1588],[55],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1903,"versions":1904,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1906},"package:pypi:paddlepaddle","paddlepaddle-a94fa107","pypi:paddlepaddle","paddlepaddle",[313],[1905],"3.2.2",[55],{"id":1908,"slug":1909,"identity":1910,"label":1911,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1912,"versions":1913,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1915},"package:pypi:paddlex","paddlex-27e22e83","pypi:paddlex","paddlex",[245],[1914],"3.3.13",[55],{"id":1917,"slug":1918,"identity":1919,"label":1920,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1921,"versions":1922,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":1924},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[313],[1923,1517],"2.3.2",[102,55],{"id":1926,"slug":1927,"identity":1928,"label":1929,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1930,"versions":1931,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1933},"package:pypi:pbr","pbr-85b8cfd6","pypi:pbr","pbr",[245],[1932],"7.0.1",[102],{"id":1935,"slug":1936,"identity":1937,"label":1938,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1939,"versions":1940,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1942},"package:pypi:pdf2image","pdf2image-0ecc86ea","pypi:pdf2image","pdf2image",[293],[1941],"1.17.0",[55],{"id":1944,"slug":1945,"identity":1946,"label":1947,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1948,"versions":1950,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1952},"package:npm:picocolors","picocolors-63d33c23","npm:picocolors","picocolors",[1949],"ISC",[1951],"1.1.1",[93],{"id":1954,"slug":1955,"identity":1956,"label":1957,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1958,"versions":1959,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1961},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[293],[1960],"4.4.0",[102],{"id":1963,"slug":1964,"identity":1965,"label":1966,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1967,"versions":1968,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1970},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[293],[1969],"1.6.0",[102],{"id":1972,"slug":1973,"identity":1974,"label":1975,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1976,"versions":1977,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1979},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[293],[1978],"3.6.2",[102],{"id":1981,"slug":1982,"identity":1983,"label":1984,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1985,"versions":1986,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1988},"package:pypi:prettytable","prettytable-961eb4af","pypi:prettytable","prettytable",[258],[1987],"3.17.0",[55],{"id":1990,"slug":1991,"identity":1992,"label":1993,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1994,"versions":1995,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1997},"package:npm:prop-types","prop-types-cbf4f9fe","npm:prop-types","prop-types",[293],[1996],"15.8.1",[93],{"id":1999,"slug":2000,"identity":2001,"label":2002,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2003,"versions":2004,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2006},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[258],[2005],"7.2.2",[55],{"id":2008,"slug":2009,"identity":2010,"label":2011,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2012,"versions":2013,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2015},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[293],[2014],"9.0.0",[55],{"id":2017,"slug":2018,"identity":2019,"label":2020,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2021,"versions":2022,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2023},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[293],[1724],[55],{"id":2025,"slug":2026,"identity":2027,"label":2028,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2029,"versions":2030,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2032},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[293],[2031],"2.12.1",[102],{"id":2034,"slug":2035,"identity":2036,"label":2037,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2038,"versions":2039,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2041},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[293],[2040],"2.12.5",[55],{"id":2043,"slug":2044,"identity":2045,"label":2046,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2047,"versions":2048,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2050},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[293],[2049],"2.41.5",[55],{"id":2052,"slug":2053,"identity":2054,"label":2055,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2056,"versions":2057,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2059},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[245],[2058],"0.9.1",[102,55],{"id":2061,"slug":2062,"identity":2063,"label":2064,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2065,"versions":2066,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2068},"package:pypi:pydocstyle","pydocstyle-983e75d2","pypi:pydocstyle","pydocstyle",[293],[2067],"6.3.0",[102],{"id":2070,"slug":2071,"identity":2072,"label":2073,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2074,"versions":2075,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2077},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[293],[2076],"3.2.0",[102],{"id":2079,"slug":2080,"identity":2081,"label":2082,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2083,"versions":2084,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2085},"package:pypi:pyogrio","pyogrio-ff34272a","pypi:pyogrio","pyogrio",[313],[1400],[55],{"id":2087,"slug":2088,"identity":2089,"label":2090,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2091,"versions":2092,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2093},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[293],[1588],[55],{"id":2095,"slug":2096,"identity":2097,"label":2098,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2099,"versions":2100,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2102},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[313],[2101],"5.6.0",[55],{"id":2104,"slug":2105,"identity":2106,"label":2107,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2108,"versions":2109,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2111},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[293],[2110],"3.7.2",[55],{"id":2113,"slug":2114,"identity":2115,"label":2116,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2117,"versions":2118,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2120},"package:pypi:pytest-bandit","pytest-bandit-6f4ffa7e","pypi:pytest-bandit","pytest-bandit",[293],[2119],"0.6.1",[102],{"id":2122,"slug":2123,"identity":2124,"label":2125,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2126,"versions":2127,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2129},"package:pypi:pytest-cov","pytest-cov-1f608c88","pypi:pytest-cov","pytest-cov",[293],[2128],"7.0.0",[102],{"id":2131,"slug":2132,"identity":2133,"label":2134,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2135,"versions":2136,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2137},"package:pypi:pytest-isort","pytest-isort-23575273","pypi:pytest-isort","pytest-isort",[293],[1668],[102],{"id":2139,"slug":2140,"identity":2141,"label":2142,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2143,"versions":2144,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2146},"package:pypi:pytest-mock","pytest-mock-525732b9","pypi:pytest-mock","pytest-mock",[293],[2145],"3.14.0",[102],{"id":2148,"slug":2149,"identity":2150,"label":2151,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2152,"versions":2153,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2154},"package:pypi:pytest-pydocstyle","pytest-pydocstyle-f4233c79","pypi:pytest-pydocstyle","pytest-pydocstyle",[293],[1923],[102],{"id":2156,"slug":2157,"identity":2158,"label":2159,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2160,"versions":2161,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2163},"package:pypi:pytest-ruff","pytest-ruff-3045362a","pypi:pytest-ruff","pytest-ruff",[],[2162],"0.4.1",[102],{"id":2165,"slug":2166,"identity":2167,"label":2168,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2169,"versions":2170,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2172},"package:pypi:python-bidi","python-bidi-1d37aaff","pypi:python-bidi","python-bidi",[313],[2171],"0.6.7",[55],{"id":2174,"slug":2175,"identity":2176,"label":2177,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2178,"versions":2179,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2181},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[313],[2180],"2.9.0.post0",[102,55],{"id":2183,"slug":2184,"identity":2185,"label":2186,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2187,"versions":2188,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2191},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[293],[2189,2190],"2025.2","2026.1.post1",[102,55],{"id":2193,"slug":2194,"identity":2195,"label":2196,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2197,"versions":2198,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2200},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[293],[2199],"6.0.2",[102,55],{"id":2202,"slug":2203,"identity":2204,"label":2205,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2206,"versions":2207,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2208},"package:pypi:rasterio","rasterio-8127369d","pypi:rasterio","rasterio",[258,313],[1706],[55],{"id":2210,"slug":2211,"identity":2212,"label":2213,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2214,"versions":2215,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":249,"evidenceFiles":2218},"package:npm:react","react-29607ded","npm:react","react",[293],[2216,2217],"16.14.0","18.3.1",[93],{"id":2220,"slug":2221,"identity":2222,"label":2223,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2224,"versions":2225,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":249,"evidenceFiles":2226},"package:npm:react-dom","react-dom-fb4a1520","npm:react-dom","react-dom",[293],[2216,2217],[93],{"id":2228,"slug":2229,"identity":2230,"label":2231,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2232,"versions":2233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2235},"package:npm:react-is","react-is-d95e9978","npm:react-is","react-is",[293],[2234],"16.13.1",[93],{"id":2237,"slug":2238,"identity":2239,"label":2240,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2241,"versions":2242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2243},"package:npm:reduce-flatten","reduce-flatten-94232739","npm:reduce-flatten","reduce-flatten",[293],[1633],[93],{"id":2245,"slug":2246,"identity":2247,"label":2248,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2249,"versions":2250,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2253},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[293],[2251,2252],"0.36.2","0.37.0",[102,55],{"id":2255,"slug":2256,"identity":2257,"label":2258,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2259,"versions":2260,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2262},"package:npm:repeat-string","repeat-string-86165878","npm:repeat-string","repeat-string",[293],[2261],"1.6.1",[93],{"id":2264,"slug":2265,"identity":2266,"label":2267,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2268,"versions":2269,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2272},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[293],[2270,2271],"14.1.0","14.3.3",[102,55],{"id":2274,"slug":2275,"identity":2276,"label":2277,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2278,"versions":2279,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2282},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[293],[2280,2281],"0.27.1","0.30.0",[102,55],{"id":2284,"slug":2285,"identity":2286,"label":2287,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2288,"versions":2289,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2291},"package:pypi:ruamel-yaml","ruamel-yaml-4c58c99d","pypi:ruamel-yaml","ruamel-yaml",[293],[2290],"0.19.1",[55],{"id":2293,"slug":2294,"identity":2295,"label":2296,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2297,"versions":2298,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2300},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[293],[2299],"0.6.9",[102],{"id":2302,"slug":2303,"identity":2304,"label":2305,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2306,"versions":2307,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2308},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[313],[1161],[55],{"id":2310,"slug":2311,"identity":2312,"label":2313,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2314,"versions":2315,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2317},"package:npm:scheduler","scheduler-f5eceb7d","npm:scheduler","scheduler",[293],[2290,2316],"0.23.2",[93],{"id":2319,"slug":2320,"identity":2321,"label":2322,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2323,"versions":2324,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2326},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[313],[2325],"1.17.1",[55],{"id":2328,"slug":2329,"identity":2330,"label":2331,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2332,"versions":2333,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2335},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[258],[2334],"2.1.2",[55],{"id":2337,"slug":2338,"identity":2339,"label":2340,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2341,"versions":2342,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2344},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[313],[2343],"1.5.4",[55],{"id":2346,"slug":2347,"identity":2348,"label":2349,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2350,"versions":2351,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2352},"package:pypi:six","six-3c3888bd","pypi:six","six",[293],[1941],[102,55],{"id":2354,"slug":2355,"identity":2356,"label":2357,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2358,"versions":2359,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2361},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[258],[1042,2360],"5.0.3",[102,55],{"id":2363,"slug":2364,"identity":2365,"label":2366,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2367,"versions":2368,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2370},"package:pypi:snowballstemmer","snowballstemmer-1fdc23ac","pypi:snowballstemmer","snowballstemmer",[258],[2369],"3.0.1",[102],{"id":2372,"slug":2373,"identity":2374,"label":2375,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2376,"versions":2377,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2378},"package:npm:source-map-js","source-map-js-41a605c1","npm:source-map-js","source-map-js",[258],[1777],[93],{"id":2380,"slug":2381,"identity":2382,"label":2383,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2384,"versions":2385,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2386},"package:pypi:stevedore","stevedore-32e10f96","pypi:stevedore","stevedore",[245],[1142],[102],{"id":2388,"slug":2389,"identity":2390,"label":2391,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2392,"versions":2393,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":2394},"package:npm:streamlit-component-lib","streamlit-component-lib-5fd54b8d","npm:streamlit-component-lib","streamlit-component-lib",[245],[1633],[93],{"id":2396,"slug":2397,"identity":2398,"label":2399,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2400,"versions":2401,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2403},"package:pypi:streamlit-container-width","streamlit-container-width-78298a4f","pypi:streamlit-container-width","streamlit-container-width",[],[2402],"1.0.3",[55],{"id":2405,"slug":2406,"identity":2407,"label":2408,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2409,"versions":2410,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2411},"package:pypi:streamlit-image-coordinates","streamlit-image-coordinates-f9931b41","pypi:streamlit-image-coordinates","streamlit-image-coordinates",[313],[1419],[55],{"id":2413,"slug":2414,"identity":2415,"label":2416,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2417,"versions":2418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2419},"package:pypi:streamlit-image-zoom","streamlit-image-zoom-5a3158bf","pypi:streamlit-image-zoom","streamlit-image-zoom",[293],[1152],[55],{"id":2421,"slug":2422,"identity":2423,"label":2424,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2425,"versions":2426,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2427},"package:npm:supports-color","supports-color-50cc0404","npm:supports-color","supports-color",[293],[1142],[93],{"id":2429,"slug":2430,"identity":2431,"label":2432,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2433,"versions":2434,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2436},"package:pypi:svgpathtools","svgpathtools-46c70661","pypi:svgpathtools","svgpathtools",[293],[2435],"1.7.2",[55],{"id":2438,"slug":2439,"identity":2440,"label":2441,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2442,"versions":2443,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2445},"package:pypi:svgwrite","svgwrite-bbc1acd6","pypi:svgwrite","svgwrite",[293],[2444],"1.4.3",[55],{"id":2447,"slug":2448,"identity":2449,"label":2450,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2451,"versions":2452,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2454},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[313],[2453],"1.14.0",[55],{"id":2456,"slug":2457,"identity":2458,"label":2459,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2460,"versions":2461,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2463},"package:npm:table-layout","table-layout-5f8f6da5","npm:table-layout","table-layout",[293],[2462],"1.0.2",[93],{"id":2465,"slug":2466,"identity":2467,"label":2468,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2469,"versions":2470,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2473},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[245],[2471,2472],"9.1.2","9.1.4",[102,55],{"id":2475,"slug":2476,"identity":2477,"label":2478,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2479,"versions":2480,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2482},"package:npm:tinyglobby","tinyglobby-dc19540c","npm:tinyglobby","tinyglobby",[293],[2481],"0.2.14",[93],{"id":2484,"slug":2485,"identity":2486,"label":2487,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2488,"versions":2489,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2491},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[293],[2490],"0.10.2",[102,55],{"id":2493,"slug":2494,"identity":2495,"label":2496,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2497,"versions":2498,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2500},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[293],[2499],"2.2.1",[102],{"id":2502,"slug":2503,"identity":2504,"label":2505,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2506,"versions":2507,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2509},"package:npm:tslib","tslib-d05e0935","npm:tslib","tslib",[1271],[2508],"2.8.1",[93],{"id":2511,"slug":2512,"identity":2513,"label":2514,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2515,"versions":2516,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2518},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[293],[2517],"0.24.1",[55],{"id":2520,"slug":2521,"identity":2522,"label":2523,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2524,"versions":2525,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":2527},"package:npm:typescript","typescript-9b49e36c","npm:typescript","typescript",[245],[2526],"5.8.3",[93],{"id":2529,"slug":2530,"identity":2531,"label":2532,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2533,"versions":2534,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2535},"package:npm:typical","typical-c90e017c","npm:typical","typical",[293],[1668,1033],[93],{"id":2537,"slug":2538,"identity":2539,"label":2540,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2541,"versions":2542,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2544},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[1417,313],[2543],"4.15.0",[102,55],{"id":2546,"slug":2547,"identity":2548,"label":2549,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2550,"versions":2551,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2553},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[293],[2552],"0.4.2",[55],{"id":2555,"slug":2556,"identity":2557,"label":2558,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2559,"versions":2560,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2562},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[245],[2189,2561],"2025.3",[102,55],{"id":2564,"slug":2565,"identity":2566,"label":2567,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2568,"versions":2569,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2571},"package:npm:undici-types","undici-types-385a20bc","npm:undici-types","undici-types",[293],[2570],"6.21.0",[93],{"id":2573,"slug":2574,"identity":2575,"label":2576,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2577,"versions":2578,"dossier":45,"occurrenceCount":249,"directOccurrenceCount":37,"evidenceFiles":2579},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[245],[1143],[102,55],{"id":2581,"slug":2582,"identity":2583,"label":2584,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2585,"versions":2586,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2587},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[293],[1409],[55],{"id":2589,"slug":2590,"identity":2591,"label":2592,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2593,"versions":2594,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2596},"package:npm:wordwrapjs","wordwrapjs-05c30a41","npm:wordwrapjs","wordwrapjs",[293],[2595],"4.0.1",[93],{"id":2598,"slug":2599,"identity":2600,"label":2601,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2602,"versions":2603,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2604},"package:pypi:xyzservices","xyzservices-a1955a18","pypi:xyzservices","xyzservices",[258],[1526],[55],[2606,2645,2678,2704,2730,2762,2789,2810,2838,2858,2881,2910,2945,2971,2991,3022,3051,3091,3110,3143,3179,3202,3226,3256,3293,3321,3340,3365,3386,3412,3448,3471,3502,3531,3556,3595,3622,3653,3676,3696,3714,3735,3768,3794,3812,3842,3861,3885,3913,3937,3993,4025,4049,4081,4109,4127,4146,4166,4194,4227,4255,4278,4306,4340,4373,4391,4413,4446,4468,4495,4513,4540,4562,4583,4600,4632,4653,4677,4704,4728,4752,4777,4792,4819,4846,4867,4893,4925,4944,4962,4990,5008,5038,5058,5079,5096,5116,5143,5170,5213,5243,5271,5323,5346,5364,5388,5415,5440],{"id":122,"slug":2607,"dossier":45,"summary":2608,"aliases":2609,"sourceIds":2612,"published":2613,"modified":2614,"checkedAt":7,"severity":2615,"references":2619,"versionKeys":2643,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2610,2611],"CVE-2024-39689","PYSEC-2024-230",[122,2611],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2616],{"type":2617,"score":2618},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2620,2623,2625,2628,2631,2634,2637,2639,2641],{"type":2621,"url":2622},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2621,"url":2624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2626,"url":2627},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2629,"url":2630},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2632,"url":2633},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2635,"url":2636},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2632,"url":2638},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2621,"url":2640},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2621,"url":2642},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2644],"pypi:certifi@2024.6.2",{"id":123,"slug":2646,"dossier":45,"summary":2647,"aliases":2648,"sourceIds":2650,"published":2651,"modified":2652,"checkedAt":7,"severity":2653,"references":2659,"versionKeys":2676,"packageCount":32,"repositoryCount":249},"ghsa-28wg-ghj8-5hjv-10215c04","nanoid: non-secure generators can loop indefinitely with negative size",[2649],"CVE-2026-67214",[123],"2026-07-29T15:31:12Z","2026-08-10T10:11:52.814463935Z",[2654,2656],{"type":2617,"score":2655},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2657,"score":2658},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2660,2662,2664,2666,2668,2670,2672,2674],{"type":2621,"url":2661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67214",{"type":2632,"url":2663},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F600",{"type":2632,"url":2665},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F601",{"type":2632,"url":2667},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F6ccc67bbaba71d3d77a21d9b636f4171a268ce49",{"type":2632,"url":2669},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fe835c9b71eab832bc6106944bdd26ea96cf2c66d",{"type":2629,"url":2671},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid",{"type":2632,"url":2673},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.16",{"type":2632,"url":2675},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-negative-size-in-non-secure-module",[2677],"npm:nanoid@3.3.11",{"id":124,"slug":2679,"dossier":45,"summary":2680,"aliases":2681,"sourceIds":2683,"published":2684,"modified":2685,"checkedAt":7,"severity":2686,"references":2689,"versionKeys":2700,"packageCount":32,"repositoryCount":34},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[2682],"CVE-2026-67325",[124],"2026-07-21T19:43:43Z","2026-08-02T03:56:45.052208380Z",[2687],{"type":2617,"score":2688},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2690,2692,2694,2696,2698],{"type":2632,"url":2691},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":2632,"url":2693},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":2632,"url":2695},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":2629,"url":2697},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2632,"url":2699},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",[2701,2702,2703],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":125,"slug":2705,"dossier":45,"summary":2706,"aliases":2707,"sourceIds":2709,"published":2651,"modified":2710,"checkedAt":7,"severity":2711,"references":2714,"versionKeys":2728,"packageCount":32,"repositoryCount":34},"ghsa-2v37-7h3g-55p8-563431fd","nanoid: custom generators can loop indefinitely when size is zero",[2708],"CVE-2026-67213",[125],"2026-08-08T21:41:53.760174244Z",[2712,2713],{"type":2617,"score":2655},{"type":2657,"score":2658},[2715,2717,2719,2721,2722,2724,2726],{"type":2621,"url":2716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67213",{"type":2632,"url":2718},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fcb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",{"type":2632,"url":2720},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Ff9d13f150847d117877adee3460a46eceb0cf49b",{"type":2629,"url":2671},{"type":2632,"url":2723},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.17",{"type":2632,"url":2725},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.6",{"type":2632,"url":2727},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",[2677,2729],"npm:nanoid@3.3.16",{"id":126,"slug":2731,"dossier":89,"summary":2732,"aliases":2733,"sourceIds":2736,"published":2737,"modified":2738,"checkedAt":7,"severity":2739,"references":2742,"versionKeys":2755,"packageCount":32,"repositoryCount":2761},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2734,2735],"CVE-2025-66471","PYSEC-2026-1994",[126,2735],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2740],{"type":2657,"score":2741},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2743,2745,2747,2749,2751,2753],{"type":2632,"url":2744},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2621,"url":2746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2626,"url":2748},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2629,"url":2750},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2629,"url":2752},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2621,"url":2754},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2756,2757,2758,2759,2760],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":127,"slug":2763,"dossier":89,"summary":2764,"aliases":2765,"sourceIds":2768,"published":2769,"modified":2770,"checkedAt":7,"severity":2771,"references":2775,"versionKeys":2788,"packageCount":32,"repositoryCount":2761},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2766,2767],"CVE-2026-21441","PYSEC-2026-1996",[127,2767],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2772,2774],{"type":2617,"score":2773},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2657,"score":2741},[2776,2778,2780,2782,2783,2785,2786],{"type":2632,"url":2777},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2621,"url":2779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2626,"url":2781},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2629,"url":2750},{"type":2632,"url":2784},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2629,"url":2752},{"type":2621,"url":2787},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2756,2757,2758,2759,2760],{"id":128,"slug":2790,"dossier":45,"summary":2791,"aliases":2792,"sourceIds":2793,"published":2794,"modified":2795,"checkedAt":7,"severity":2796,"references":2799,"versionKeys":2809,"packageCount":32,"repositoryCount":34},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[],[128],"2026-08-03T20:09:56Z","2026-08-08T03:26:54.875954204Z",[2797],{"type":2617,"score":2798},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2800,2802,2804,2806,2807],{"type":2632,"url":2801},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":2632,"url":2803},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":2632,"url":2805},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":2629,"url":2697},{"type":2632,"url":2808},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",[2701,2702,2703],{"id":129,"slug":2811,"dossier":45,"summary":2812,"aliases":2813,"sourceIds":2816,"published":2817,"modified":2818,"checkedAt":7,"severity":2819,"references":2822,"versionKeys":2835,"packageCount":32,"repositoryCount":120},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[2814,2815],"CVE-2026-54911","PYSEC-2026-2294",[129,2815],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[2820],{"type":2617,"score":2821},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2823,2825,2827,2829,2831,2833],{"type":2626,"url":2824},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2621,"url":2826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2626,"url":2828},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2632,"url":2830},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2629,"url":2832},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2621,"url":2834},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[2836,2837],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":130,"slug":2839,"dossier":45,"summary":2840,"aliases":2841,"sourceIds":2843,"published":2844,"modified":2845,"checkedAt":7,"severity":2846,"references":2849,"versionKeys":2857,"packageCount":32,"repositoryCount":34},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[2842],"CVE-2026-69097",[130],"2026-07-24T16:22:02Z","2026-08-04T05:41:05.585188057Z",[2847],{"type":2617,"score":2848},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2850,2852,2854,2855],{"type":2632,"url":2851},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":2632,"url":2853},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":2629,"url":2697},{"type":2632,"url":2856},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",[2701,2702,2703],{"id":131,"slug":2859,"dossier":45,"summary":2860,"aliases":2861,"sourceIds":2863,"published":2864,"modified":2865,"checkedAt":7,"severity":2866,"references":2869,"versionKeys":2878,"packageCount":32,"repositoryCount":249},"ghsa-3v7f-55p6-f55p-cfa06046","Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",[2862],"CVE-2026-33672",[131],"2026-03-25T21:13:39Z","2026-03-28T00:14:20.953909Z",[2867],{"type":2617,"score":2868},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2870,2872,2874,2876],{"type":2632,"url":2871},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-3v7f-55p6-f55p",{"type":2621,"url":2873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33672",{"type":2632,"url":2875},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903",{"type":2629,"url":2877},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch",[2879,2880],"npm:picomatch@2.3.1","npm:picomatch@4.0.3",{"id":132,"slug":2882,"dossier":45,"summary":2883,"aliases":2884,"sourceIds":2887,"published":2888,"modified":2889,"checkedAt":7,"severity":2890,"references":2893,"versionKeys":2904,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[2885,2886],"CVE-2026-49853","PYSEC-2026-3387",[132,2886],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[2891],{"type":2617,"score":2892},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2894,2896,2898,2900,2902],{"type":2632,"url":2895},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2629,"url":2897},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2629,"url":2899},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2621,"url":2901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2621,"url":2903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[2905,2906,2907,2908,2909],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":133,"slug":2911,"dossier":89,"summary":2912,"aliases":2913,"sourceIds":2917,"published":2918,"modified":2919,"checkedAt":7,"severity":2920,"references":2922,"versionKeys":2936,"packageCount":32,"repositoryCount":2761},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2914,2915,2916],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[133,2916],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[2921],{"type":2617,"score":2773},[2923,2926,2928,2930,2932,2934],{"type":2924,"url":2925},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2621,"url":2927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2626,"url":2929},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2632,"url":2931},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2629,"url":2933},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2621,"url":2935},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2937,2938,2939,2940,2941,2942,2943,2944],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":134,"slug":2946,"dossier":45,"summary":2947,"aliases":2948,"sourceIds":2951,"published":2952,"modified":2953,"checkedAt":7,"severity":2954,"references":2957,"versionKeys":2970,"packageCount":32,"repositoryCount":291},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2949,2950],"CVE-2025-50182","PYSEC-2026-1997",[134,2950],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2955],{"type":2617,"score":2956},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2958,2960,2962,2964,2965,2967,2968],{"type":2632,"url":2959},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2621,"url":2961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2626,"url":2963},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2629,"url":2750},{"type":2632,"url":2966},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2629,"url":2752},{"type":2621,"url":2969},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2756,2757,2758,2759],{"id":135,"slug":2972,"dossier":45,"summary":2973,"aliases":2974,"sourceIds":2975,"published":2976,"modified":2977,"checkedAt":7,"severity":2978,"references":2980,"versionKeys":2990,"packageCount":32,"repositoryCount":34},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[],[135],"2026-08-07T15:33:57Z","2026-08-09T02:56:50.755731198Z",[2979],{"type":2617,"score":2798},[2981,2983,2985,2987,2988],{"type":2632,"url":2982},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":2632,"url":2984},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":2632,"url":2986},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":2629,"url":2697},{"type":2632,"url":2989},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",[2701,2702,2703],{"id":136,"slug":2992,"dossier":45,"summary":2993,"aliases":2994,"sourceIds":2996,"published":2997,"modified":2998,"checkedAt":7,"severity":2999,"references":3002,"versionKeys":3019,"packageCount":32,"repositoryCount":249},"ghsa-4w7w-66w2-5vf9-1ec64746","Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",[2995],"CVE-2026-39365",[136],"2026-04-06T18:03:46Z","2026-04-09T14:59:24.646487988Z",[3000],{"type":2657,"score":3001},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3003,3005,3007,3009,3011,3013,3015,3017],{"type":2632,"url":3004},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-4w7w-66w2-5vf9",{"type":2621,"url":3006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39365",{"type":2632,"url":3008},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22161",{"type":2632,"url":3010},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F79f002f2286c03c88c7b74c511c7f9fc6dc46694",{"type":2629,"url":3012},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite",{"type":2632,"url":3014},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv6.4.2",{"type":2632,"url":3016},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv7.3.2",{"type":2632,"url":3018},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv8.0.5",[3020,3021],"npm:vite@5.4.21","npm:vite@6.3.5",{"id":137,"slug":3023,"dossier":89,"summary":3024,"aliases":3025,"sourceIds":3029,"published":3030,"modified":3031,"checkedAt":7,"severity":3032,"references":3035,"versionKeys":3050,"packageCount":32,"repositoryCount":2761},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3026,3027,3028],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[137,3028],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3033],{"type":2617,"score":3034},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3036,3038,3040,3042,3044,3046,3048,3049],{"type":2924,"url":3037},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2621,"url":3039},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2626,"url":3041},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2626,"url":3043},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2626,"url":3045},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2632,"url":3047},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2629,"url":2933},{"type":2621,"url":2935},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":138,"slug":3052,"dossier":89,"summary":3053,"aliases":3054,"sourceIds":3057,"published":3058,"modified":3059,"checkedAt":7,"severity":3060,"references":3065,"versionKeys":3088,"packageCount":32,"repositoryCount":2761},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3055,3056],"CVE-2026-4539","PYSEC-2026-2987",[138,3056],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3061,3063],{"type":2617,"score":3062},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2657,"score":3064},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3066,3068,3070,3072,3074,3076,3078,3080,3082,3084,3086],{"type":2621,"url":3067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2632,"url":3069},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2632,"url":3071},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2632,"url":3073},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2629,"url":3075},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2632,"url":3077},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2632,"url":3079},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2632,"url":3081},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2632,"url":3083},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2629,"url":3085},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2621,"url":3087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3089,3090],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":139,"slug":3092,"dossier":45,"summary":3093,"aliases":3094,"sourceIds":3095,"published":3096,"modified":3097,"checkedAt":7,"severity":3098,"references":3101,"versionKeys":3109,"packageCount":32,"repositoryCount":34},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[],[139],"2026-08-03T20:14:28Z","2026-08-08T03:26:54.618366791Z",[3099],{"type":2617,"score":3100},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3102,3104,3105,3107,3108],{"type":2632,"url":3103},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":2632,"url":2803},{"type":2632,"url":3106},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":2629,"url":2697},{"type":2632,"url":2808},[2701,2702,2703],{"id":140,"slug":3111,"dossier":45,"summary":3112,"aliases":3113,"sourceIds":3117,"published":3118,"modified":3119,"checkedAt":7,"severity":3120,"references":3123,"versionKeys":3138,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3114,3115,3116],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[140,3116],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3121],{"type":2617,"score":3122},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3124,3126,3128,3130,3132,3134,3136],{"type":2632,"url":3125},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2621,"url":3127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2632,"url":3129},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2626,"url":3131},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2629,"url":3133},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2629,"url":3135},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2621,"url":3137},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3139,3140,3141,3142],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":141,"slug":3144,"dossier":45,"summary":3145,"aliases":3146,"sourceIds":3150,"published":3151,"modified":3152,"checkedAt":7,"severity":3153,"references":3157,"versionKeys":3175,"packageCount":32,"repositoryCount":342},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3147,3148,3149],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[141,3149],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3154,3156],{"type":2657,"score":3155},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2617,"score":2688},[3158,3160,3162,3165,3167,3169,3171,3173],{"type":2924,"url":3159},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2621,"url":3161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3163,"url":3164},"REPORT","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2626,"url":3166},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2632,"url":3168},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2629,"url":3170},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2632,"url":3172},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2635,"url":3174},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3176,3177,3178],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":142,"slug":3180,"dossier":89,"summary":3181,"aliases":3182,"sourceIds":3186,"published":3187,"modified":3188,"checkedAt":7,"severity":3189,"references":3191,"versionKeys":3201,"packageCount":32,"repositoryCount":2761},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3183,3184,3185],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[142,3185],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[3190],{"type":2617,"score":2773},[3192,3194,3196,3197,3199,3200],{"type":2924,"url":3193},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2621,"url":3195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2626,"url":2929},{"type":2632,"url":3198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2629,"url":2933},{"type":2621,"url":2935},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":143,"slug":3203,"dossier":45,"summary":3204,"aliases":3205,"sourceIds":3209,"published":3210,"modified":3211,"checkedAt":7,"severity":3212,"references":3217,"versionKeys":3225,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3206,3207,3208],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[143,3208],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3213,3215],{"type":2617,"score":3214},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2657,"score":3216},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3218,3220,3222,3223],{"type":2621,"url":3219},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2621,"url":3221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2629,"url":2933},{"type":2621,"url":3224},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2940,2941,2942,2943,2944],{"id":144,"slug":3227,"dossier":89,"summary":3228,"aliases":3229,"sourceIds":3233,"published":3234,"modified":3235,"checkedAt":7,"severity":3236,"references":3239,"versionKeys":3255,"packageCount":32,"repositoryCount":2761},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3230,3231,3232],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[144,3232],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[3237],{"type":2657,"score":3238},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3240,3242,3244,3246,3248,3249,3251,3253],{"type":2632,"url":3241},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2621,"url":3243},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2632,"url":3245},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2632,"url":3247},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2629,"url":2933},{"type":2632,"url":3250},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2629,"url":3252},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2621,"url":3254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":145,"slug":3257,"dossier":45,"summary":3258,"aliases":3259,"sourceIds":3262,"published":3263,"modified":3264,"checkedAt":7,"severity":3265,"references":3268,"versionKeys":3291,"packageCount":32,"repositoryCount":32},"ghsa-6497-prx7-gpmq-2b8ee85d","geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure",[3260,3261],"CVE-2025-69662","PYSEC-2026-62",[145,3261],"2026-01-30T19:16:11.967Z","2026-06-10T17:01:18.172032507Z",[3266],{"type":2617,"score":3267},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[3269,3271,3273,3275,3277,3279,3281,3283,3285,3287,3289],{"type":2621,"url":3270},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69662",{"type":2632,"url":3272},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fissues\u002F3679",{"type":2626,"url":3274},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fpull\u002F3681",{"type":2632,"url":3276},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fcommit\u002F6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419",{"type":2632,"url":3278},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas",{"type":2629,"url":3280},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas",{"type":2632,"url":3282},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Freleases\u002Ftag\u002Fv1.1.2",{"type":2632,"url":3284},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgeopandas\u002FPYSEC-2026-62.yaml",{"type":2632,"url":3286},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00025.html",{"type":2924,"url":3288},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas\u002F",{"type":2621,"url":3290},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6497-prx7-gpmq",[3292],"pypi:geopandas@1.0.1",{"id":146,"slug":3294,"dossier":89,"summary":3295,"aliases":3296,"sourceIds":3299,"published":3300,"modified":3301,"checkedAt":7,"severity":3302,"references":3307,"versionKeys":3316,"packageCount":32,"repositoryCount":3320},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3297,3298],"CVE-2026-45409","PYSEC-2026-215",[146,3298],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3303,3305],{"type":2617,"score":3304},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2657,"score":3306},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3308,3310,3312,3314],{"type":2621,"url":3309},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2621,"url":3311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2629,"url":3313},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2632,"url":3315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3317,3318,3319],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":147,"slug":3322,"dossier":45,"summary":3323,"aliases":3324,"sourceIds":3325,"published":3326,"modified":3327,"checkedAt":7,"severity":3328,"references":3331,"versionKeys":3338,"packageCount":32,"repositoryCount":32},"ghsa-67mh-4wv8-2f99-854f0a14","esbuild enables any website to send any requests to the development server and read the response",[],[147],"2025-02-10T17:48:07Z","2026-02-04T02:50:58.022803Z",[3329],{"type":2617,"score":3330},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3332,3334,3336],{"type":2632,"url":3333},"https:\u002F\u002Fgithub.com\u002Fevanw\u002Fesbuild\u002Fsecurity\u002Fadvisories\u002FGHSA-67mh-4wv8-2f99",{"type":2632,"url":3335},"https:\u002F\u002Fgithub.com\u002Fevanw\u002Fesbuild\u002Fcommit\u002Fde85afd65edec9ebc44a11e245fd9e9a2e99760d",{"type":2629,"url":3337},"https:\u002F\u002Fgithub.com\u002Fevanw\u002Fesbuild",[3339],"npm:esbuild@0.21.5",{"id":148,"slug":3341,"dossier":45,"summary":3342,"aliases":3343,"sourceIds":3345,"published":3346,"modified":3347,"checkedAt":7,"severity":3348,"references":3351,"versionKeys":3362,"packageCount":32,"repositoryCount":249},"ghsa-6g55-p6wh-862q-12f1aeab","PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",[3344],"CVE-2026-45623",[148],"2026-07-23T15:06:16Z","2026-07-28T03:14:45.311216468Z",[3349],{"type":2617,"score":3350},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3352,3354,3356,3358,3360],{"type":2632,"url":3353},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-6g55-p6wh-862q",{"type":2632,"url":3355},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Faaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad",{"type":2632,"url":3357},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Fc64b7488d2731dfa16213739b42c34faf5a9eba3",{"type":2629,"url":3359},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss",{"type":2632,"url":3361},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.12",[3363,3364],"npm:postcss@8.4.49","npm:postcss@8.5.6",{"id":149,"slug":3366,"dossier":45,"summary":3367,"aliases":3368,"sourceIds":3369,"published":3370,"modified":3371,"checkedAt":7,"severity":3372,"references":3375,"versionKeys":3385,"packageCount":32,"repositoryCount":34},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[],[149],"2026-07-24T16:42:09Z","2026-07-25T21:44:40.055637633Z",[3373],{"type":2617,"score":3374},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3376,3378,3380,3382,3383],{"type":2632,"url":3377},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":2632,"url":3379},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":2632,"url":3381},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":2629,"url":2697},{"type":2632,"url":3384},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",[2701,2702,2703],{"id":150,"slug":3387,"dossier":89,"summary":3388,"aliases":3389,"sourceIds":3393,"published":3394,"modified":3395,"checkedAt":7,"severity":3396,"references":3398,"versionKeys":3411,"packageCount":32,"repositoryCount":2761},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[3390,3391,3392],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[150,3392],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[3397],{"type":2617,"score":2773},[3399,3401,3403,3405,3407,3409,3410],{"type":2924,"url":3400},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2621,"url":3402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2626,"url":3404},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2626,"url":3406},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2632,"url":3408},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2629,"url":2933},{"type":2621,"url":3250},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":151,"slug":3413,"dossier":45,"summary":3414,"aliases":3415,"sourceIds":3418,"published":3419,"modified":3420,"checkedAt":7,"severity":3421,"references":3424,"versionKeys":3443,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[3416,3417],"CVE-2025-71176","PYSEC-2026-1845",[151,3417],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[3422],{"type":2617,"score":3423},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[3425,3427,3429,3431,3433,3435,3437,3439,3441],{"type":2621,"url":3426},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":2632,"url":3428},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":2632,"url":3430},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":2632,"url":3432},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":2629,"url":3434},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":2632,"url":3436},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":2632,"url":3438},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":2629,"url":3440},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":2621,"url":3442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[3444,3445,3446,3447],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":152,"slug":3449,"dossier":45,"summary":3450,"aliases":3451,"sourceIds":3454,"published":3455,"modified":3456,"checkedAt":7,"severity":3457,"references":3462,"versionKeys":3470,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[3452,3453],"CVE-2026-44243","PYSEC-2026-2162",[152,3453],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[3458,3460],{"type":2617,"score":3459},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2657,"score":3461},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3463,3465,3467,3468],{"type":2924,"url":3464},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2621,"url":3466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2629,"url":2697},{"type":2626,"url":3469},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[2701,2702,2703],{"id":153,"slug":3472,"dossier":45,"summary":3473,"aliases":3474,"sourceIds":3477,"published":3478,"modified":3479,"checkedAt":7,"severity":3480,"references":3483,"versionKeys":3496,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[3475,3476],"CVE-2025-66034","PYSEC-2026-1389",[153,3476],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[3481],{"type":2617,"score":3482},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[3484,3486,3488,3490,3492,3494],{"type":2632,"url":3485},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2621,"url":3487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2632,"url":3489},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2629,"url":3491},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2629,"url":3493},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2621,"url":3495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[3497,3498,3499,3500,3501],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":154,"slug":3503,"dossier":45,"summary":3504,"aliases":3505,"sourceIds":3509,"published":3510,"modified":3511,"checkedAt":7,"severity":3512,"references":3518,"versionKeys":3530,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[3506,3507,3508],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[154,3507,3508],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[3513,3515,3517],{"type":2617,"score":3514},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2617,"score":3516},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2617,"score":2868},[3519,3521,3523,3524,3526,3528],{"type":2621,"url":3520},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2632,"url":3522},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2629,"url":2897},{"type":2632,"url":3525},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2621,"url":3527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2621,"url":3529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[2905,2906,2907,2908],{"id":155,"slug":3532,"dossier":45,"summary":3533,"aliases":3534,"sourceIds":3537,"published":3538,"modified":3539,"checkedAt":7,"severity":3540,"references":3542,"versionKeys":3555,"packageCount":32,"repositoryCount":249},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[3535,3536],"CVE-2025-47287","PYSEC-2026-1974",[155,3536],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[3541],{"type":2617,"score":2773},[3543,3545,3547,3549,3550,3552,3553],{"type":2632,"url":3544},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2621,"url":3546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2632,"url":3548},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2629,"url":2897},{"type":2632,"url":3551},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2629,"url":2899},{"type":2621,"url":3554},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[2905],{"id":156,"slug":3557,"dossier":45,"summary":3558,"aliases":3559,"sourceIds":3562,"published":3563,"modified":3564,"checkedAt":7,"severity":3565,"references":3568,"versionKeys":3585,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3560,3561],"CVE-2026-0994","PYSEC-2026-1805",[156,3561],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3566],{"type":2657,"score":3567},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3569,3571,3573,3575,3577,3579,3581,3583],{"type":2621,"url":3570},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2632,"url":3572},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2632,"url":3574},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2632,"url":3576},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2632,"url":3578},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2629,"url":3580},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2629,"url":3582},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2621,"url":3584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3586,3587,3588,3589,3590,3591,3592,3593,3594],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":157,"slug":3596,"dossier":45,"summary":3597,"aliases":3598,"sourceIds":3601,"published":3602,"modified":3603,"checkedAt":7,"severity":3604,"references":3609,"versionKeys":3620,"packageCount":32,"repositoryCount":32},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[3599,3600],"CVE-2026-33682","PYSEC-2026-2285",[157,3600],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[3605,3607],{"type":2617,"score":3606},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2617,"score":3608},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3610,3612,3614,3616,3618],{"type":2621,"url":3611},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":2621,"url":3613},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":2626,"url":3615},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":2629,"url":3617},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":2621,"url":3619},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[3621],"pypi:streamlit@1.49.0",{"id":158,"slug":3623,"dossier":45,"summary":3624,"aliases":3625,"sourceIds":3628,"published":3629,"modified":3630,"checkedAt":7,"severity":3631,"references":3633,"versionKeys":3652,"packageCount":32,"repositoryCount":342},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3626,3627],"CVE-2025-4565","PYSEC-2026-1806",[158,3627],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3632],{"type":2657,"score":2658},[3634,3636,3638,3640,3642,3643,3645,3647,3649,3650],{"type":2632,"url":3635},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2632,"url":3637},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2621,"url":3639},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2632,"url":3641},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2629,"url":3580},{"type":2632,"url":3644},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2632,"url":3646},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2632,"url":3648},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2629,"url":3582},{"type":2621,"url":3651},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3586,3588,3589],{"id":159,"slug":3654,"dossier":89,"summary":3655,"aliases":3656,"sourceIds":3660,"published":3661,"modified":3662,"checkedAt":7,"severity":3663,"references":3665,"versionKeys":3675,"packageCount":32,"repositoryCount":2761},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[3657,3658,3659],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[159,3659],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[3664],{"type":2617,"score":2773},[3666,3668,3670,3671,3673,3674],{"type":2924,"url":3667},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2621,"url":3669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2626,"url":2929},{"type":2632,"url":3672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2629,"url":2933},{"type":2621,"url":2935},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":160,"slug":3677,"dossier":45,"summary":3678,"aliases":3679,"sourceIds":3681,"published":3682,"modified":3683,"checkedAt":7,"severity":3684,"references":3687,"versionKeys":3695,"packageCount":32,"repositoryCount":32},"ghsa-93m4-6634-74q7-557bfeeb","vite allows server.fs.deny bypass via backslash on Windows",[3680],"CVE-2025-62522",[160],"2025-10-20T19:54:28Z","2026-02-04T04:13:38.886554Z",[3685],{"type":2657,"score":3686},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3688,3690,3692,3694],{"type":2632,"url":3689},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-93m4-6634-74q7",{"type":2621,"url":3691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62522",{"type":2632,"url":3693},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff479cc57c425ed41ceb434fecebd63931b1ed4ed",{"type":2629,"url":3012},[3021],{"id":161,"slug":3697,"dossier":45,"summary":3698,"aliases":3699,"sourceIds":3700,"published":3701,"modified":3702,"checkedAt":7,"severity":3703,"references":3705,"versionKeys":3713,"packageCount":32,"repositoryCount":34},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[],[161],"2026-07-24T21:45:16Z","2026-07-25T21:44:41.451010015Z",[3704],{"type":2617,"score":3350},[3706,3708,3710,3711],{"type":2632,"url":3707},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":2632,"url":3709},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":2629,"url":2697},{"type":2632,"url":3712},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",[2701,2702,2703],{"id":162,"slug":3715,"dossier":45,"summary":3716,"aliases":3717,"sourceIds":3719,"published":3720,"modified":3721,"checkedAt":7,"severity":3722,"references":3725,"versionKeys":3734,"packageCount":32,"repositoryCount":34},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[3718],"CVE-2026-67323",[162],"2026-07-21T20:10:06Z","2026-08-02T03:56:47.832026599Z",[3723],{"type":2617,"score":3724},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3726,3728,3730,3732,3733],{"type":2632,"url":3727},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":2632,"url":3729},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":2632,"url":3731},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":2629,"url":2697},{"type":2632,"url":2699},[2701,2702,2703],{"id":163,"slug":3736,"dossier":45,"summary":3737,"aliases":3738,"sourceIds":3741,"published":3742,"modified":3743,"checkedAt":7,"severity":3744,"references":3746,"versionKeys":3765,"packageCount":32,"repositoryCount":291},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3739,3740],"CVE-2024-47081","PYSEC-2026-1872",[163,3740],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3745],{"type":2617,"score":3330},[3747,3749,3751,3753,3755,3757,3759,3761,3763],{"type":2632,"url":3748},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2621,"url":3750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2632,"url":3752},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2626,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2629,"url":3756},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2632,"url":3758},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2632,"url":3760},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2629,"url":3762},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2621,"url":3764},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3766,3767],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":164,"slug":3769,"dossier":89,"summary":3770,"aliases":3771,"sourceIds":3775,"published":3776,"modified":3777,"checkedAt":7,"severity":3778,"references":3780,"versionKeys":3793,"packageCount":32,"repositoryCount":2761},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[3772,3773,3774],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[164,3774],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[3779],{"type":2617,"score":2773},[3781,3783,3785,3787,3789,3791,3792],{"type":2924,"url":3782},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2621,"url":3784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2626,"url":3786},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2626,"url":3788},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2632,"url":3790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2629,"url":2933},{"type":2621,"url":3250},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":165,"slug":3795,"dossier":45,"summary":3796,"aliases":3797,"sourceIds":3798,"published":3799,"modified":3800,"checkedAt":7,"severity":3801,"references":3803,"versionKeys":3811,"packageCount":32,"repositoryCount":34},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[],[165],"2026-08-07T15:36:43Z","2026-08-09T02:56:51.068532802Z",[3802],{"type":2617,"score":3374},[3804,3806,3807,3809,3810],{"type":2632,"url":3805},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":2632,"url":2984},{"type":2632,"url":3808},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":2629,"url":2697},{"type":2632,"url":2989},[2701,2702,2703],{"id":166,"slug":3813,"dossier":45,"summary":3814,"aliases":3815,"sourceIds":3818,"published":3819,"modified":3820,"checkedAt":7,"severity":3821,"references":3824,"versionKeys":3841,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3816,3817],"CVE-2024-35195","PYSEC-2026-1873",[166,3817],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3822],{"type":2617,"score":3823},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3825,3827,3829,3831,3833,3834,3836,3838,3839],{"type":2632,"url":3826},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2621,"url":3828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2632,"url":3830},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2626,"url":3832},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2629,"url":3756},{"type":2632,"url":3835},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2632,"url":3837},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2629,"url":3762},{"type":2621,"url":3840},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3766],{"id":167,"slug":3843,"dossier":45,"summary":3844,"aliases":3845,"sourceIds":3847,"published":3848,"modified":3849,"checkedAt":7,"severity":3850,"references":3852,"versionKeys":3860,"packageCount":32,"repositoryCount":249},"ghsa-c2c7-rcm5-vvqj-6ccdec4e","Picomatch has a ReDoS vulnerability via extglob quantifiers",[3846],"CVE-2026-33671",[167],"2026-03-25T21:12:07Z","2026-03-28T00:14:20.889784Z",[3851],{"type":2617,"score":2773},[3853,3855,3857,3859],{"type":2632,"url":3854},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-c2c7-rcm5-vvqj",{"type":2621,"url":3856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33671",{"type":2632,"url":3858},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F5eceecd27543b8e056b9307d69e105ea03618a7d",{"type":2629,"url":2877},[2879,2880],{"id":168,"slug":3862,"dossier":45,"summary":3863,"aliases":3864,"sourceIds":3867,"published":3868,"modified":3869,"checkedAt":7,"severity":3870,"references":3874,"versionKeys":3884,"packageCount":32,"repositoryCount":120},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[3865,3866],"CVE-2026-44660","PYSEC-2026-2293",[168,3866],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[3871,3872],{"type":2617,"score":2773},{"type":2657,"score":3873},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3875,3877,3879,3881,3882],{"type":2626,"url":3876},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2621,"url":3878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2626,"url":3880},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2629,"url":2832},{"type":2621,"url":3883},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[2836,2837],{"id":169,"slug":3886,"dossier":45,"summary":3887,"aliases":3888,"sourceIds":3891,"published":3892,"modified":3893,"checkedAt":7,"severity":3894,"references":3896,"versionKeys":3912,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[3889,3890],"CVE-2026-32875","PYSEC-2026-2292",[169,3890],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[3895],{"type":2617,"score":2773},[3897,3899,3901,3903,3905,3906,3908,3910],{"type":2924,"url":3898},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2621,"url":3900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":3163,"url":3902},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2626,"url":3904},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2629,"url":2832},{"type":2632,"url":3907},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2632,"url":3909},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":3163,"url":3911},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[2836],{"id":170,"slug":3914,"dossier":45,"summary":3915,"aliases":3916,"sourceIds":3919,"published":3920,"modified":3921,"checkedAt":7,"severity":3922,"references":3924,"versionKeys":3936,"packageCount":32,"repositoryCount":120},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[3917,3918],"CVE-2025-67725","PYSEC-2025-266",[170,3918],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[3923],{"type":2617,"score":2773},[3925,3927,3929,3931,3933,3934],{"type":2621,"url":3926},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2621,"url":3928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":2626,"url":3930},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":2632,"url":3932},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":2629,"url":2897},{"type":2621,"url":3935},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[2905,2906,2907],{"id":171,"slug":3938,"dossier":45,"summary":3939,"aliases":3940,"sourceIds":3944,"published":3945,"modified":3946,"checkedAt":7,"severity":3947,"references":3951,"versionKeys":3991,"packageCount":32,"repositoryCount":3992},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[3941,3942,3943],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[171,3943],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[3948,3950],{"type":2657,"score":3949},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2617,"score":2773},[3952,3954,3956,3958,3960,3962,3963,3965,3967,3969,3971,3973,3975,3977,3979,3981,3983,3985,3987,3989],{"type":2632,"url":3953},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2621,"url":3955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2632,"url":3957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2632,"url":3959},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2632,"url":3961},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2629,"url":2933},{"type":2632,"url":3964},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2632,"url":3966},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2632,"url":3968},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2621,"url":3970},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2621,"url":3972},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2621,"url":3974},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2621,"url":3976},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2621,"url":3978},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2621,"url":3980},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2621,"url":3982},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2621,"url":3984},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2621,"url":3986},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2621,"url":3988},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2621,"url":3990},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2937,2938,2939,2940,2941,2942,2943],12,{"id":172,"slug":3994,"dossier":45,"summary":3995,"aliases":3996,"sourceIds":3999,"published":4000,"modified":4001,"checkedAt":7,"severity":4002,"references":4005,"versionKeys":4022,"packageCount":32,"repositoryCount":249},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[3997,3998],"CVE-2025-27516","PYSEC-2026-1471",[172,3998],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4003],{"type":2657,"score":4004},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4006,4008,4010,4012,4014,4016,4018,4020],{"type":2632,"url":4007},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2621,"url":4009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2626,"url":4011},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2629,"url":4013},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2632,"url":4015},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2632,"url":4017},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2629,"url":4019},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2621,"url":4021},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4023,4024],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":173,"slug":4026,"dossier":45,"summary":4027,"aliases":4028,"sourceIds":4031,"published":4032,"modified":4033,"checkedAt":7,"severity":4034,"references":4037,"versionKeys":4048,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[4029,4030],"CVE-2026-49854","PYSEC-2026-3388",[173,4030],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[4035],{"type":2617,"score":4036},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4038,4040,4041,4043,4044,4046],{"type":2632,"url":4039},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2629,"url":2897},{"type":2632,"url":4042},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2629,"url":2899},{"type":2621,"url":4045},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2621,"url":4047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[2905,2906,2907,2908,2909],{"id":174,"slug":4050,"dossier":45,"summary":4051,"aliases":4052,"sourceIds":4056,"published":4057,"modified":4058,"checkedAt":7,"severity":4059,"references":4064,"versionKeys":4080,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4053,4054,4055],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[174,4055],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4060,4062],{"type":2617,"score":4061},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2657,"score":4063},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4065,4067,4069,4071,4072,4074,4076,4078],{"type":2621,"url":4066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2632,"url":4068},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2632,"url":4070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2629,"url":3170},{"type":2632,"url":4073},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2632,"url":4075},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2629,"url":4077},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2621,"url":4079},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3176],{"id":175,"slug":4082,"dossier":89,"summary":4083,"aliases":4084,"sourceIds":4088,"published":4089,"modified":4090,"checkedAt":7,"severity":4091,"references":4094,"versionKeys":4108,"packageCount":32,"repositoryCount":2761},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[4085,4086,4087],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[175,4087],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[4092],{"type":2617,"score":4093},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[4095,4097,4099,4101,4103,4104,4105,4106],{"type":2632,"url":4096},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2621,"url":4098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2632,"url":4100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2632,"url":4102},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2629,"url":2933},{"type":2632,"url":3250},{"type":2629,"url":3252},{"type":2621,"url":4107},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":176,"slug":4110,"dossier":45,"summary":4111,"aliases":4112,"sourceIds":4113,"published":4114,"modified":4115,"checkedAt":7,"severity":4116,"references":4118,"versionKeys":4126,"packageCount":32,"repositoryCount":34},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[],[176],"2026-07-24T16:41:20Z","2026-07-25T21:44:39.974035175Z",[4117],{"type":2617,"score":2798},[4119,4121,4122,4124,4125],{"type":2632,"url":4120},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":2632,"url":3379},{"type":2632,"url":4123},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":2629,"url":2697},{"type":2632,"url":3384},[2701,2702,2703],{"id":177,"slug":4128,"dossier":45,"summary":4129,"aliases":4130,"sourceIds":4132,"published":4133,"modified":4134,"checkedAt":7,"severity":4135,"references":4139,"versionKeys":4145,"packageCount":32,"repositoryCount":249},"ghsa-fx2h-pf6j-xcff-156ab351","vite: `server.fs.deny` bypass on Windows alternate paths",[4131],"CVE-2026-53571",[177],"2026-06-15T17:17:45Z","2026-07-15T22:30:44.486843817Z",[4136,4137],{"type":2617,"score":3350},{"type":2657,"score":4138},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4140,4142,4144],{"type":2632,"url":4141},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-fx2h-pf6j-xcff",{"type":2621,"url":4143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53571",{"type":2629,"url":3012},[3020,3021],{"id":178,"slug":4147,"dossier":45,"summary":4148,"aliases":4149,"sourceIds":4151,"published":4152,"modified":4153,"checkedAt":7,"severity":4154,"references":4156,"versionKeys":4164,"packageCount":32,"repositoryCount":342},"ghsa-fxqj-rqcc-2cmp-34c312ef","PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",[4150],"CVE-2026-69153",[178],"2026-08-03T17:11:39Z","2026-08-04T21:26:59.056562955Z",[4155],{"type":2657,"score":3001},[4157,4159,4161,4162],{"type":2632,"url":4158},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-fxqj-rqcc-2cmp",{"type":2632,"url":4160},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F7beca139e70f9075c6b19700fcb00dd8033e5da8",{"type":2629,"url":3359},{"type":2632,"url":4163},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.19",[3363,4165,3364],"npm:postcss@8.5.20",{"id":179,"slug":4167,"dossier":45,"summary":4168,"aliases":4169,"sourceIds":4171,"published":4172,"modified":4173,"checkedAt":7,"severity":4174,"references":4177,"versionKeys":4193,"packageCount":32,"repositoryCount":32},"ghsa-g4jq-h2w9-997c-b5be310c","Vite middleware may serve files starting with the same name with the public directory",[4170],"CVE-2025-58751",[179],"2025-09-09T20:55:56Z","2026-02-04T04:33:22.508417Z",[4175],{"type":2657,"score":4176},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4178,4180,4182,4184,4186,4188,4190,4192],{"type":2632,"url":4179},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-g4jq-h2w9-997c",{"type":2621,"url":4181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58751",{"type":2632,"url":4183},"https:\u002F\u002Fgithub.com\u002Flukeed\u002Fsirv\u002Fcommit\u002Ff0113f3f8266328d804ee808f763a3c11f8997eb",{"type":2632,"url":4185},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F09f2b52e8d5907f26602653caf41b3a56692600d",{"type":2632,"url":4187},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F4f1c35bcbb5830290c694aa14b6789e07450f069",{"type":2632,"url":4189},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F63e2a5d232218f3f8d852056751e609a5367aaec",{"type":2632,"url":4191},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fe11d24008b97d4ca731ecc1a3b95260a6d12e7e0",{"type":2629,"url":3012},[3021],{"id":180,"slug":4195,"dossier":45,"summary":4196,"aliases":4197,"sourceIds":4200,"published":4201,"modified":4202,"checkedAt":7,"severity":4203,"references":4206,"versionKeys":4225,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4198,4199],"CVE-2024-34062","PYSEC-2026-1976",[180,4199],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4204],{"type":2617,"score":4205},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4207,4209,4211,4213,4215,4217,4219,4221,4223],{"type":2632,"url":4208},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2621,"url":4210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2632,"url":4212},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2629,"url":4214},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2632,"url":4216},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2632,"url":4218},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2632,"url":4220},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2629,"url":4222},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2621,"url":4224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4226],"pypi:tqdm@4.66.2",{"id":181,"slug":4228,"dossier":89,"summary":4229,"aliases":4230,"sourceIds":4233,"published":4234,"modified":4235,"checkedAt":7,"severity":4236,"references":4241,"versionKeys":4251,"packageCount":32,"repositoryCount":4254},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4231,4232],"CVE-2026-25645","PYSEC-2026-2275",[181,4232],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4237,4239],{"type":2617,"score":4238},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2617,"score":4240},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4242,4244,4246,4248,4249],{"type":2621,"url":4243},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2621,"url":4245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2626,"url":4247},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2629,"url":3756},{"type":2621,"url":4250},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3766,3767,4252,4253],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":182,"slug":4256,"dossier":89,"summary":4257,"aliases":4258,"sourceIds":4261,"published":4262,"modified":4263,"checkedAt":7,"severity":4264,"references":4266,"versionKeys":4277,"packageCount":32,"repositoryCount":2761},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4259,4260],"CVE-2025-66418","PYSEC-2026-1998",[182,4260],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4265],{"type":2657,"score":2741},[4267,4269,4271,4273,4274,4275],{"type":2632,"url":4268},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2621,"url":4270},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2626,"url":4272},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2629,"url":2750},{"type":2629,"url":2752},{"type":2621,"url":4276},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2756,2757,2758,2759,2760],{"id":183,"slug":4279,"dossier":45,"summary":4280,"aliases":4281,"sourceIds":4284,"published":4285,"modified":4286,"checkedAt":7,"severity":4287,"references":4290,"versionKeys":4305,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4282,4283],"CVE-2024-56201","PYSEC-2026-1472",[183,4283],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4288,4289],{"type":2617,"score":2688},{"type":2657,"score":4004},[4291,4293,4295,4297,4299,4300,4302,4303],{"type":2632,"url":4292},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2621,"url":4294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2632,"url":4296},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2626,"url":4298},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2629,"url":4013},{"type":2632,"url":4301},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2629,"url":4019},{"type":2621,"url":4304},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4023],{"id":184,"slug":4307,"dossier":89,"summary":4308,"aliases":4309,"sourceIds":4313,"published":4314,"modified":4315,"checkedAt":7,"severity":4316,"references":4319,"versionKeys":4331,"packageCount":32,"repositoryCount":4339},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[4310,4311,4312],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[184,4312],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[4317],{"type":2617,"score":4318},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4320,4322,4324,4326,4328,4329],{"type":2924,"url":4321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2621,"url":4323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2626,"url":4325},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2632,"url":4327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2629,"url":3170},{"type":2621,"url":4330},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3176,3177,3178,4332,4333,4334,4335,4336,4337,4338],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":185,"slug":4341,"dossier":45,"summary":4342,"aliases":4343,"sourceIds":4346,"published":4347,"modified":4348,"checkedAt":7,"severity":4349,"references":4351,"versionKeys":4372,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4344,4345],"CVE-2024-34064","PYSEC-2026-1474",[185,4345],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4350],{"type":2617,"score":3514},[4352,4354,4356,4358,4359,4361,4363,4365,4367,4369,4370],{"type":2632,"url":4353},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2621,"url":4355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2626,"url":4357},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2629,"url":4013},{"type":2632,"url":4360},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2632,"url":4362},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2632,"url":4364},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2632,"url":4366},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2632,"url":4368},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2629,"url":4019},{"type":2621,"url":4371},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4023],{"id":186,"slug":4374,"dossier":45,"summary":4375,"aliases":4376,"sourceIds":4377,"published":4378,"modified":4379,"checkedAt":7,"severity":4380,"references":4382,"versionKeys":4390,"packageCount":32,"repositoryCount":34},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[],[186],"2026-08-07T15:43:56Z","2026-08-09T02:56:50.509044228Z",[4381],{"type":2617,"score":3100},[4383,4385,4386,4388,4389],{"type":2632,"url":4384},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":2632,"url":2984},{"type":2632,"url":4387},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":2629,"url":2697},{"type":2632,"url":2989},[2701,2702,2703],{"id":187,"slug":4392,"dossier":45,"summary":4393,"aliases":4394,"sourceIds":4395,"published":4396,"modified":4397,"checkedAt":7,"severity":4398,"references":4401,"versionKeys":4412,"packageCount":32,"repositoryCount":34},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[],[187],"2026-08-07T15:45:39Z","2026-08-09T02:56:50.891058419Z",[4399],{"type":2617,"score":4400},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4402,4404,4406,4408,4410,4411],{"type":2632,"url":4403},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":2632,"url":4405},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":2632,"url":4407},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":2632,"url":4409},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":2629,"url":2697},{"type":2632,"url":2989},[2701,2702,2703],{"id":188,"slug":4414,"dossier":45,"summary":4415,"aliases":4416,"sourceIds":4420,"published":4421,"modified":4422,"checkedAt":7,"severity":4423,"references":4427,"versionKeys":4444,"packageCount":32,"repositoryCount":32},"ghsa-j225-cvw7-qrx7-11bb0227","PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption",[4417,4418,4419],"CVE-2023-52323","PYSEC-2024-3","PYSEC-2026-1811",[188,4419],"2024-01-05T06:30:19Z","2026-07-07T17:56:21.566071405Z",[4424,4425],{"type":2617,"score":2956},{"type":2657,"score":4426},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4428,4430,4432,4434,4436,4438,4440,4442],{"type":2621,"url":4429},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-52323",{"type":2632,"url":4431},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fcommit\u002F0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd",{"type":2629,"url":4433},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome",{"type":2632,"url":4435},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fblob\u002Fmaster\u002FChangelog.rst",{"type":2632,"url":4437},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycryptodomex\u002FPYSEC-2024-3.yaml",{"type":2632,"url":4439},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodomex\u002F#history",{"type":2629,"url":4441},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodome",{"type":2621,"url":4443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j225-cvw7-qrx7",[4445],"pypi:pycryptodome@3.10.1",{"id":189,"slug":4447,"dossier":45,"summary":4448,"aliases":4449,"sourceIds":4452,"published":4453,"modified":4454,"checkedAt":7,"severity":4455,"references":4457,"versionKeys":4467,"packageCount":32,"repositoryCount":120},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[4450,4451],"CVE-2025-67726","PYSEC-2025-267",[189,4451],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[4456],{"type":2617,"score":2773},[4458,4460,4462,4463,4465,4466],{"type":2621,"url":4459},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2621,"url":4461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":2626,"url":3930},{"type":2632,"url":4464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":2629,"url":2897},{"type":2621,"url":3935},[2905,2906,2907],{"id":190,"slug":4469,"dossier":89,"summary":4470,"aliases":4471,"sourceIds":4475,"published":4476,"modified":4477,"checkedAt":7,"severity":4478,"references":4480,"versionKeys":4494,"packageCount":32,"repositoryCount":2761},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[4472,4473,4474],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[190,4474],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[4479],{"type":2617,"score":2773},[4481,4483,4485,4487,4489,4490,4491,4492],{"type":2632,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2621,"url":4484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2632,"url":4486},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2632,"url":4488},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2629,"url":2933},{"type":2632,"url":3250},{"type":2629,"url":3252},{"type":2621,"url":4493},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":191,"slug":4496,"dossier":45,"summary":4497,"aliases":4498,"sourceIds":4499,"published":4500,"modified":4501,"checkedAt":7,"severity":4502,"references":4504,"versionKeys":4512,"packageCount":32,"repositoryCount":34},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[],[191],"2026-08-07T15:46:35Z","2026-08-09T02:56:51.296995647Z",[4503],{"type":2617,"score":2688},[4505,4507,4508,4510,4511],{"type":2632,"url":4506},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":2632,"url":2984},{"type":2632,"url":4509},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":2629,"url":2697},{"type":2632,"url":2989},[2701,2702,2703],{"id":192,"slug":4514,"dossier":45,"summary":4515,"aliases":4516,"sourceIds":4518,"published":4519,"modified":4520,"checkedAt":7,"severity":4521,"references":4523,"versionKeys":4539,"packageCount":32,"repositoryCount":32},"ghsa-jqfw-vq24-v9c3-2de51aa4","Vite's `server.fs` settings were not applied to HTML files",[4517],"CVE-2025-58752",[192],"2025-09-09T20:54:42Z","2026-02-04T04:35:16.287471Z",[4522],{"type":2657,"score":4176},[4524,4526,4528,4530,4532,4534,4536,4537],{"type":2632,"url":4525},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-jqfw-vq24-v9c3",{"type":2621,"url":4527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58752",{"type":2632,"url":4529},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F0ab19ea9fcb66f544328f442cf6e70f7c0528d5f",{"type":2632,"url":4531},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F14015d794f69accba68798bd0e15135bc51c9c1e",{"type":2632,"url":4533},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F482000f57f56fe6ff2e905305100cfe03043ddea",{"type":2632,"url":4535},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F6f01ff4fe072bcfcd4e2a84811772b818cd51fe6",{"type":2629,"url":3012},{"type":2632,"url":4538},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fblob\u002Fv7.1.5\u002Fpackages\u002Fvite\u002FCHANGELOG.md",[3021],{"id":193,"slug":4541,"dossier":45,"summary":4542,"aliases":4543,"sourceIds":4546,"published":4547,"modified":4548,"checkedAt":7,"severity":4549,"references":4552,"versionKeys":4560,"packageCount":32,"repositoryCount":342},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4544,4545],"CVE-2026-44432","PYSEC-2026-142",[193,4545],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4550,4551],{"type":2617,"score":2773},{"type":2657,"score":2741},[4553,4555,4557,4559],{"type":2621,"url":4554},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2621,"url":4556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2632,"url":4558},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2629,"url":2750},[4561],"pypi:urllib3@2.6.3",{"id":194,"slug":4563,"dossier":45,"summary":4564,"aliases":4565,"sourceIds":4568,"published":4569,"modified":4570,"checkedAt":7,"severity":4571,"references":4573,"versionKeys":4582,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[4566,4567],"CVE-2026-49855","PYSEC-2026-3389",[194,4567],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[4572],{"type":2617,"score":2773},[4574,4576,4577,4578,4580],{"type":2632,"url":4575},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2629,"url":2897},{"type":2629,"url":2899},{"type":2621,"url":4579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2621,"url":4581},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[2905,2906,2907,2908,2909],{"id":195,"slug":4584,"dossier":45,"summary":4585,"aliases":4586,"sourceIds":4588,"published":4589,"modified":4590,"checkedAt":7,"severity":4591,"references":4593,"versionKeys":4599,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[4587],"CVE-2026-67326",[195],"2026-05-08T23:19:02Z","2026-08-02T03:56:45.346497199Z",[4592],{"type":2617,"score":2848},[4594,4596,4598],{"type":2632,"url":4595},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2621,"url":4597},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2629,"url":2697},[2701,2702,2703],{"id":196,"slug":4601,"dossier":45,"summary":4602,"aliases":4603,"sourceIds":4605,"published":4606,"modified":4607,"checkedAt":7,"severity":4608,"references":4611,"versionKeys":4630,"packageCount":32,"repositoryCount":32},"ghsa-mw96-cpmx-2vgc-209d101c","Rollup 4 has Arbitrary File Write via Path Traversal",[4604],"CVE-2026-27606",[196],"2026-02-25T22:37:26Z","2026-03-02T12:59:05.159604Z",[4609],{"type":2657,"score":4610},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4612,4614,4616,4618,4620,4622,4624,4626,4628],{"type":2632,"url":4613},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Fsecurity\u002Fadvisories\u002FGHSA-mw96-cpmx-2vgc",{"type":2621,"url":4615},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27606",{"type":2632,"url":4617},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Fcommit\u002Fc60770d7aaf750e512c1b2774989ea4596e660b2",{"type":2632,"url":4619},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Fcommit\u002Fc8cf1f9c48c516285758c1e11f08a54f304fd44e",{"type":2632,"url":4621},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Fcommit\u002Fd6dee5e99bb82aac0bee1df4ab9efbde455452c3",{"type":2629,"url":4623},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup",{"type":2632,"url":4625},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Freleases\u002Ftag\u002Fv2.80.0",{"type":2632,"url":4627},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Freleases\u002Ftag\u002Fv3.30.0",{"type":2632,"url":4629},"https:\u002F\u002Fgithub.com\u002Frollup\u002Frollup\u002Freleases\u002Ftag\u002Fv4.59.0",[4631],"npm:rollup@4.46.1",{"id":197,"slug":4633,"dossier":45,"summary":4634,"aliases":4635,"sourceIds":4636,"published":4637,"modified":4638,"checkedAt":7,"severity":4639,"references":4642,"versionKeys":4652,"packageCount":32,"repositoryCount":34},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[],[197],"2026-08-03T20:23:17Z","2026-08-08T03:26:54.523343843Z",[4640],{"type":2617,"score":4641},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[4643,4645,4647,4649,4650],{"type":2632,"url":4644},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":2632,"url":4646},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":2632,"url":4648},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":2629,"url":2697},{"type":2632,"url":4651},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",[2701,2702,2703],{"id":198,"slug":4654,"dossier":45,"summary":4655,"aliases":4656,"sourceIds":4658,"published":4659,"modified":4660,"checkedAt":7,"severity":4661,"references":4663,"versionKeys":4676,"packageCount":32,"repositoryCount":32},"ghsa-p9ff-h696-f583-155b7820","Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket",[4657],"CVE-2026-39363",[198],"2026-04-06T18:03:24Z","2026-04-09T14:59:25.151835620Z",[4662],{"type":2657,"score":4138},[4664,4666,4668,4670,4672,4673,4674,4675],{"type":2632,"url":4665},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-p9ff-h696-f583",{"type":2621,"url":4667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39363",{"type":2632,"url":4669},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22159",{"type":2632,"url":4671},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff02d9fde0b195afe3ea2944414186962fbbe41e0",{"type":2629,"url":3012},{"type":2632,"url":3014},{"type":2632,"url":3016},{"type":2632,"url":3018},[3021],{"id":199,"slug":4678,"dossier":45,"summary":4679,"aliases":4680,"sourceIds":4684,"published":4685,"modified":4686,"checkedAt":7,"severity":4687,"references":4690,"versionKeys":4703,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[4681,4682,4683],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[199,4683],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[4688,4689],{"type":2617,"score":3304},{"type":2617,"score":2773},[4691,4693,4695,4697,4699,4701,4702],{"type":2924,"url":4692},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2621,"url":4694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2626,"url":4696},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2626,"url":4698},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2632,"url":4700},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2629,"url":2933},{"type":2621,"url":3250},[2942,2943,2944],{"id":200,"slug":4705,"dossier":89,"summary":4706,"aliases":4707,"sourceIds":4711,"published":4712,"modified":4713,"checkedAt":7,"severity":4714,"references":4716,"versionKeys":4727,"packageCount":32,"repositoryCount":2761},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[4708,4709,4710],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[200,4710],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[4715],{"type":2617,"score":2773},[4717,4719,4721,4723,4725,4726],{"type":2924,"url":4718},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2621,"url":4720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2626,"url":4722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2632,"url":4724},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2629,"url":2933},{"type":2621,"url":2935},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":201,"slug":4729,"dossier":45,"summary":4730,"aliases":4731,"sourceIds":4734,"published":4735,"modified":4736,"checkedAt":7,"severity":4737,"references":4739,"versionKeys":4751,"packageCount":32,"repositoryCount":291},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[4732,4733],"CVE-2025-50181","PYSEC-2026-1999",[201,4733],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[4738],{"type":2617,"score":2956},[4740,4742,4744,4746,4747,4748,4749],{"type":2632,"url":4741},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2621,"url":4743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2626,"url":4745},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2629,"url":2750},{"type":2632,"url":2966},{"type":2629,"url":2752},{"type":2621,"url":4750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2756,2757,2758,2759],{"id":202,"slug":4753,"dossier":45,"summary":4754,"aliases":4755,"sourceIds":4758,"published":4759,"modified":4760,"checkedAt":7,"severity":4761,"references":4765,"versionKeys":4776,"packageCount":32,"repositoryCount":120},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[4756,4757],"CVE-2025-67724","PYSEC-2025-265",[202,4757],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[4762,4763],{"type":2617,"score":3514},{"type":2617,"score":4764},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4766,4768,4770,4772,4774,4775],{"type":2621,"url":4767},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2621,"url":4769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":2626,"url":4771},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":2632,"url":4773},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":2629,"url":2897},{"type":2621,"url":3935},[2905,2906,2907],{"id":203,"slug":4778,"dossier":45,"summary":4779,"aliases":4780,"sourceIds":4781,"published":4782,"modified":4783,"checkedAt":7,"severity":4784,"references":4787,"versionKeys":4791,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[203],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[4785],{"type":2617,"score":4786},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4788,4790],{"type":2632,"url":4789},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2629,"url":2897},[2905,2906,2907,2908,2909],{"id":204,"slug":4793,"dossier":89,"summary":4794,"aliases":4795,"sourceIds":4799,"published":4800,"modified":4801,"checkedAt":7,"severity":4802,"references":4806,"versionKeys":4818,"packageCount":32,"repositoryCount":2761},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[4796,4797,4798],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[204,4798],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[4803,4804],{"type":2657,"score":3949},{"type":2617,"score":4805},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4807,4808,4810,4812,4814,4816,4817],{"type":2632,"url":3953},{"type":2626,"url":4809},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2621,"url":4811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2626,"url":4813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2626,"url":4815},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2629,"url":2933},{"type":2621,"url":3224},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":205,"slug":4820,"dossier":45,"summary":4821,"aliases":4822,"sourceIds":4825,"published":4826,"modified":4827,"checkedAt":7,"severity":4828,"references":4832,"versionKeys":4845,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[4823,4824],"CVE-2024-56326","PYSEC-2026-1475",[205,4824],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[4829,4831],{"type":2617,"score":4830},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2657,"score":4004},[4833,4835,4837,4839,4840,4841,4842,4843],{"type":2632,"url":4834},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2621,"url":4836},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2626,"url":4838},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2629,"url":4013},{"type":2632,"url":4301},{"type":2632,"url":4015},{"type":2629,"url":4019},{"type":2621,"url":4844},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4023],{"id":206,"slug":4847,"dossier":89,"summary":4848,"aliases":4849,"sourceIds":4852,"published":4853,"modified":4854,"checkedAt":7,"severity":4855,"references":4860,"versionKeys":4866,"packageCount":32,"repositoryCount":4254},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[4850,4851],"CVE-2026-44431","PYSEC-2026-141",[206,4851],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[4856,4858],{"type":2617,"score":4857},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2657,"score":4859},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4861,4863,4865],{"type":2621,"url":4862},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2621,"url":4864},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2629,"url":2750},[2756,2757,2758,2759,2760,4561],{"id":207,"slug":4868,"dossier":45,"summary":4869,"aliases":4870,"sourceIds":4873,"published":4874,"modified":4875,"checkedAt":7,"severity":4876,"references":4879,"versionKeys":4892,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[4871,4872],"CVE-2026-31958","PYSEC-2026-140",[207,4872],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[4877,4878],{"type":2617,"score":2773},{"type":2657,"score":3873},[4880,4882,4884,4886,4888,4889,4890],{"type":2621,"url":4881},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2621,"url":4883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2632,"url":4885},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2632,"url":4887},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2629,"url":2897},{"type":2632,"url":3525},{"type":2632,"url":4891},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[2905,2906,2907,2908],{"id":208,"slug":4894,"dossier":45,"summary":4895,"aliases":4896,"sourceIds":4899,"published":4900,"modified":4901,"checkedAt":7,"severity":4902,"references":4905,"versionKeys":4920,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4897,4898],"CVE-2026-22701","PYSEC-2026-1374",[208,4898],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[4903],{"type":2617,"score":4904},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4906,4908,4910,4912,4914,4916,4918],{"type":2632,"url":4907},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2621,"url":4909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2632,"url":4911},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2632,"url":4913},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2629,"url":4915},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2629,"url":4917},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2621,"url":4919},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4921,4922,4923,4924],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":209,"slug":4926,"dossier":45,"summary":4927,"aliases":4928,"sourceIds":4930,"published":4931,"modified":4932,"checkedAt":7,"severity":4933,"references":4935,"versionKeys":4943,"packageCount":32,"repositoryCount":249},"ghsa-qx2v-qp2m-jg93-0a55e142","PostCSS has XSS via Unescaped \u003C\u002Fstyle> in its CSS Stringify Output",[4929],"CVE-2026-41305",[209],"2026-04-24T15:31:42Z","2026-05-06T17:44:15.783349140Z",[4934],{"type":2617,"score":4764},[4936,4938,4940,4941],{"type":2632,"url":4937},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-qx2v-qp2m-jg93",{"type":2621,"url":4939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41305",{"type":2629,"url":3359},{"type":2632,"url":4942},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.10",[3363,3364],{"id":210,"slug":4945,"dossier":45,"summary":4946,"aliases":4947,"sourceIds":4948,"published":4949,"modified":4950,"checkedAt":7,"severity":4951,"references":4953,"versionKeys":4961,"packageCount":32,"repositoryCount":249},"ghsa-r28c-9q8g-f849-c8b68fa5","PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",[],[210],"2026-07-24T16:24:55Z","2026-07-28T03:14:45.565217341Z",[4952],{"type":2617,"score":3350},[4954,4956,4958,4959],{"type":2632,"url":4955},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-r28c-9q8g-f849",{"type":2632,"url":4957},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F95663d3eb7ba26f4854dd19d3b4f4425760cf56c",{"type":2629,"url":3359},{"type":2632,"url":4960},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.18",[3363,3364],{"id":211,"slug":4963,"dossier":45,"summary":4964,"aliases":4965,"sourceIds":4969,"published":4970,"modified":4971,"checkedAt":7,"severity":4972,"references":4975,"versionKeys":4989,"packageCount":32,"repositoryCount":2761},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4966,4967,4968],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[211,4968],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[4973,4974],{"type":2617,"score":3214},{"type":2657,"score":3216},[4976,4978,4980,4982,4984,4985,4986,4987],{"type":2632,"url":4977},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2621,"url":4979},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2632,"url":4981},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2632,"url":4983},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2629,"url":2933},{"type":2632,"url":3224},{"type":2629,"url":3252},{"type":2621,"url":4988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":212,"slug":4991,"dossier":45,"summary":4992,"aliases":4993,"sourceIds":4994,"published":4995,"modified":4996,"checkedAt":7,"severity":4997,"references":4999,"versionKeys":5007,"packageCount":32,"repositoryCount":34},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[],[212],"2026-07-24T16:42:57Z","2026-07-25T21:44:41.709665254Z",[4998],{"type":2617,"score":2688},[5000,5002,5003,5005,5006],{"type":2632,"url":5001},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":2632,"url":3379},{"type":2632,"url":5004},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":2629,"url":2697},{"type":2632,"url":3384},[2701,2702,2703],{"id":213,"slug":5009,"dossier":45,"summary":5010,"aliases":5011,"sourceIds":5014,"published":5015,"modified":5016,"checkedAt":7,"severity":5017,"references":5020,"versionKeys":5033,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[5012,5013],"CVE-2026-25087","PYSEC-2026-113",[213,5013],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[5018],{"type":2617,"score":5019},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5021,5023,5025,5027,5029,5031],{"type":2621,"url":5022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2626,"url":5024},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2629,"url":5026},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2632,"url":5028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2621,"url":5030},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2621,"url":5032},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[5034,5035,5036,5037],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":214,"slug":5039,"dossier":45,"summary":5040,"aliases":5041,"sourceIds":5044,"published":5045,"modified":5046,"checkedAt":7,"severity":5047,"references":5049,"versionKeys":5057,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[5042,5043],"CVE-2026-42215","PYSEC-2026-2160",[214,5043],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[5048],{"type":2617,"score":2688},[5050,5052,5054,5055],{"type":2924,"url":5051},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2621,"url":5053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2629,"url":2697},{"type":2626,"url":5056},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[2701,2702,2703],{"id":215,"slug":5059,"dossier":45,"summary":5060,"aliases":5061,"sourceIds":5063,"published":5064,"modified":5065,"checkedAt":7,"severity":5066,"references":5068,"versionKeys":5078,"packageCount":32,"repositoryCount":34},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[5062],"CVE-2026-67322",[215],"2026-07-21T22:06:09Z","2026-08-02T03:56:46.931996040Z",[5067],{"type":2617,"score":3350},[5069,5071,5073,5075,5076],{"type":2632,"url":5070},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":2632,"url":5072},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":2632,"url":5074},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":2629,"url":2697},{"type":2632,"url":5077},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",[2701,2702,2703],{"id":216,"slug":5080,"dossier":45,"summary":5081,"aliases":5082,"sourceIds":5084,"published":5085,"modified":5086,"checkedAt":7,"severity":5087,"references":5090,"versionKeys":5095,"packageCount":32,"repositoryCount":249},"ghsa-v6wh-96g9-6wx3-0e881d08","launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows",[5083],"CVE-2026-53632",[216],"2026-06-15T17:18:31Z","2026-07-02T19:59:25.649988255Z",[5088],{"type":2657,"score":5089},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:H",[5091,5093],{"type":2632,"url":5092},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-v6wh-96g9-6wx3",{"type":2629,"url":5094},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor",[3020,3021],{"id":217,"slug":5097,"dossier":45,"summary":5098,"aliases":5099,"sourceIds":5102,"published":5103,"modified":5104,"checkedAt":7,"severity":5105,"references":5107,"versionKeys":5115,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[5100,5101],"CVE-2026-44244","PYSEC-2026-2163",[217,5101],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[5106],{"type":2617,"score":4830},[5108,5110,5112,5113],{"type":2924,"url":5109},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2621,"url":5111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2629,"url":2697},{"type":2626,"url":5114},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[2701,2702,2703],{"id":218,"slug":5117,"dossier":45,"summary":5118,"aliases":5119,"sourceIds":5123,"published":5124,"modified":5125,"checkedAt":7,"severity":5126,"references":5128,"versionKeys":5142,"packageCount":32,"repositoryCount":2761},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[5120,5121,5122],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[218,5122],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[5127],{"type":2657,"score":3873},[5129,5131,5133,5135,5137,5138,5139,5140],{"type":2632,"url":5130},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2621,"url":5132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2632,"url":5134},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2632,"url":5136},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2629,"url":2933},{"type":2632,"url":3250},{"type":2629,"url":3252},{"type":2621,"url":5141},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":219,"slug":5144,"dossier":45,"summary":5145,"aliases":5146,"sourceIds":5149,"published":5150,"modified":5151,"checkedAt":7,"severity":5152,"references":5155,"versionKeys":5168,"packageCount":32,"repositoryCount":342},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5147,5148],"CVE-2025-43859","PYSEC-2026-348",[219,5148],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5153],{"type":2617,"score":5154},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5156,5158,5160,5162,5164,5166],{"type":2632,"url":5157},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2621,"url":5159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2632,"url":5161},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2629,"url":5163},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2629,"url":5165},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2621,"url":5167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5169],"pypi:h11@0.14.0",{"id":220,"slug":5171,"dossier":45,"summary":5172,"aliases":5173,"sourceIds":5176,"published":5177,"modified":5178,"checkedAt":7,"severity":5179,"references":5186,"versionKeys":5212,"packageCount":32,"repositoryCount":32},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[5174,5175],"CVE-2026-10804","PYSEC-2026-212",[220,5175],"2026-06-04T12:16:24.620Z","2026-07-23T15:00:23.893493649Z",[5180,5182,5184],{"type":2617,"score":5181},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2657,"score":5183},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2617,"score":5185},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5187,5189,5191,5193,5195,5197,5199,5200,5202,5204,5206,5208,5210],{"type":2621,"url":5188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":2626,"url":5190},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":2626,"url":5192},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":2632,"url":5194},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":2632,"url":5196},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":2632,"url":5198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":2629,"url":3617},{"type":2621,"url":5201},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":2621,"url":5203},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":2621,"url":5205},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":3163,"url":5207},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":2632,"url":5209},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",{"type":2621,"url":5211},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqwp-45wm-r9r5",[3621],{"id":221,"slug":5214,"dossier":45,"summary":5215,"aliases":5216,"sourceIds":5219,"published":5220,"modified":5221,"checkedAt":7,"severity":5222,"references":5225,"versionKeys":5242,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5217,5218],"CVE-2025-68146","PYSEC-2026-1375",[221,5218],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5223],{"type":2617,"score":5224},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5226,5228,5230,5231,5233,5235,5237,5238,5240],{"type":2632,"url":5227},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2632,"url":5229},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2629,"url":4915},{"type":2632,"url":5232},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2632,"url":5234},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2632,"url":5236},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2629,"url":4917},{"type":2621,"url":5239},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2621,"url":5241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4921,4922,4923,4924],{"id":222,"slug":5244,"dossier":45,"summary":5245,"aliases":5246,"sourceIds":5249,"published":5250,"modified":5251,"checkedAt":7,"severity":5252,"references":5254,"versionKeys":5270,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[5247,5248],"CVE-2026-32874","PYSEC-2026-2291",[222,5248],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[5253],{"type":2617,"score":2773},[5255,5257,5259,5261,5262,5264,5266,5268],{"type":2621,"url":5256},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2621,"url":5258},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2626,"url":5260},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2629,"url":2832},{"type":2621,"url":5263},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2632,"url":5265},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2632,"url":5267},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":3163,"url":5269},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[2836],{"id":223,"slug":5272,"dossier":45,"summary":5273,"aliases":5274,"sourceIds":5278,"published":5279,"modified":5280,"checkedAt":7,"severity":5281,"references":5284,"versionKeys":5322,"packageCount":32,"repositoryCount":2761},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[5275,5276,5277],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[223,5277],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[5282,5283],{"type":2617,"score":2773},{"type":2657,"score":3873},[5285,5287,5289,5291,5293,5294,5296,5298,5300,5302,5304,5306,5307,5309,5311,5313,5314,5316,5318,5320],{"type":2632,"url":5286},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2621,"url":5288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2632,"url":5290},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2632,"url":5292},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2629,"url":2933},{"type":2632,"url":5295},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2632,"url":5297},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2632,"url":5299},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2621,"url":5301},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2621,"url":5303},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2621,"url":5305},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2621,"url":3976},{"type":2621,"url":5308},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2621,"url":5310},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2621,"url":5312},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2621,"url":3978},{"type":2621,"url":5315},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2621,"url":5317},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2621,"url":5319},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2621,"url":5321},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2937,2938,2939,2940,2941,2942,2943,2944],{"id":224,"slug":5324,"dossier":45,"summary":5325,"aliases":5326,"sourceIds":5330,"published":5331,"modified":5332,"checkedAt":7,"severity":5333,"references":5336,"versionKeys":5345,"packageCount":32,"repositoryCount":2761},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[5327,5328,5329],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[224,5329],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[5334,5335],{"type":2617,"score":3214},{"type":2657,"score":3216},[5337,5339,5341,5343,5344],{"type":2621,"url":5338},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2621,"url":5340},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2632,"url":5342},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2629,"url":2933},{"type":2621,"url":3224},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":225,"slug":5347,"dossier":45,"summary":5348,"aliases":5349,"sourceIds":5350,"published":5351,"modified":5352,"checkedAt":7,"severity":5353,"references":5355,"versionKeys":5363,"packageCount":32,"repositoryCount":34},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[],[225],"2026-08-07T15:49:07Z","2026-08-09T02:56:51.363626854Z",[5354],{"type":2617,"score":2688},[5356,5358,5359,5361,5362],{"type":2632,"url":5357},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":2632,"url":2984},{"type":2632,"url":5360},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":2629,"url":2697},{"type":2632,"url":2989},[2701,2702,2703],{"id":226,"slug":5365,"dossier":45,"summary":5366,"aliases":5367,"sourceIds":5370,"published":5371,"modified":5372,"checkedAt":7,"severity":5373,"references":5378,"versionKeys":5387,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[5368,5369],"CVE-2026-42284","PYSEC-2026-2161",[226,5369],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[5374,5376],{"type":2617,"score":5375},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2617,"score":5377},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5379,5381,5383,5384,5385],{"type":2924,"url":5380},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2621,"url":5382},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2629,"url":2697},{"type":2626,"url":5056},{"type":2632,"url":5386},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[2701,2702,2703],{"id":227,"slug":5389,"dossier":45,"summary":5390,"aliases":5391,"sourceIds":5395,"published":5396,"modified":5397,"checkedAt":7,"severity":5398,"references":5400,"versionKeys":5414,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[5392,5393,5394],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[227,5394],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[5399],{"type":2617,"score":3459},[5401,5403,5405,5407,5409,5411,5412],{"type":2621,"url":5402},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2621,"url":5404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2632,"url":5406},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2626,"url":5408},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2632,"url":5410},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2629,"url":2933},{"type":2632,"url":5413},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2940],{"id":228,"slug":5416,"dossier":45,"summary":5417,"aliases":5418,"sourceIds":5422,"published":5423,"modified":5424,"checkedAt":7,"severity":5425,"references":5428,"versionKeys":5439,"packageCount":32,"repositoryCount":2761},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[5419,5420,5421],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[228,5421],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[5426],{"type":2617,"score":5427},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5429,5431,5433,5435,5437,5438],{"type":2924,"url":5430},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2621,"url":5432},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2626,"url":5434},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2626,"url":5436},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2629,"url":2933},{"type":2621,"url":3250},[2937,2938,2939,2940,2941,2942,2943,2944],{"id":229,"slug":5441,"dossier":89,"summary":82,"aliases":5442,"sourceIds":5445,"published":5446,"modified":5447,"checkedAt":7,"severity":5448,"references":5451,"versionKeys":5466,"packageCount":32,"repositoryCount":4339},"pysec-2026-2132-627bf7c7",[5443,5444],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[229],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5449],{"type":2617,"score":5450},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5452,5454,5456,5458,5460,5462,5464],{"type":2632,"url":5453},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2632,"url":5455},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2621,"url":5457},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2621,"url":5459},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3163,"url":5461},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2626,"url":5463},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2924,"url":5465},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5467,5468,5469,5470,5471,5472],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",1786593597681]