[{"data":1,"prerenderedAt":10291},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-10787":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":401,"related":404},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":103,"unknownLicensePackageCount":104,"advisoryIds":105,"advisoryCount":399,"providers":400},"opencode:10787","opencode-10787",10787,"LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework","Reproducible benchmarking framework for evaluating LLMs using structured multiple-choice and numeric questionnaires","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fcommit\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd","2026-07-13T00:00:12.759Z","2026-06-28T20:48:20.000Z",{"complete":89,"entryCount":90,"truncated":45},true,120,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","e0cfb7dbb1f83b9adb3c422816068eefba3a17e5146d084022722da579e14760",734464,"parsed",241,[101],"pypi",7,27,3,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398],"GHSA-248v-346w-9cwc","GHSA-27jp-wm6q-gp25","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2f96-g7mh-g2hx","GHSA-2fqr-mr3j-6wp8","GHSA-2g68-c3qc-8985","GHSA-2h4p-vjrc-8xpq","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3c37-wwvx-h642","GHSA-3f6c-7fw2-ppm4","GHSA-3f7w-8rr8-f37f","GHSA-3mwp-wvh9-7528","GHSA-3rp5-jjmw-4wv2","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-42h5-h8qh-vv9v","GHSA-45hq-cxwh-f6vc","GHSA-46r5-x6jq-v8g6","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4gmw-gg2m-w46p","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4x5p-f36r-mxxr","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-539m-9xh6-q6rr","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5h2m-4q8j-pqpj","GHSA-5jv2-g5wq-cmr4","GHSA-5qmp-p3c4-72qj","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65h7-c7c4-mghx","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6p8h-3wgx-97gf","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7432-952r-cw78","GHSA-7545-fcxq-7j24","GHSA-75cm-x2w3-8mgf","GHSA-768j-98cg-p3fv","GHSA-7972-pg2x-xr59","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7qhf-v65m-g5f3","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8c7q-86fq-vvmh","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-94p4-4cq8-9g67","GHSA-9548-qrrj-x5pj","GHSA-956x-8gvw-wg5v","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9h52-p55h-vw2f","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9pcc-gvx5-r5wm","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c2jp-c369-7pvx","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f2m9-wcf4-cwwx","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-fg6f-75jq-6523","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fh64-r2vc-xvhr","GHSA-fhff-qmm8-h2fp","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fpwr-67px-3qhx","GHSA-g35p-px32-whv6","GHSA-g3cq-j2xw-wf74","GHSA-g6cj-pr64-35w5","GHSA-g6pg-52vf-843h","GHSA-g7f3-828f-7h7m","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq3w-7jj3-x7gr","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgf8-39gv-g3f2","GHSA-hgg8-fqqc-vfmw","GHSA-hh9p-6wh2-4mfc","GHSA-hhrp-gw25-jr43","GHSA-hm4w-wwcw-mr6r","GHSA-hmq2-w58f-27jc","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-j842-xgm4-wf88","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jj8c-mmj3-mmgv","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm78-9fvv-mhgr","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m344-f55w-2m6j","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m8x7-r2rg-vh5g","GHSA-m959-cc7f-wv43","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mv93-w799-cj2w","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-mxxr-jv3v-6pgc","GHSA-p423-j2cm-9vmq","GHSA-p538-c434-8v24","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-pgqp-8h46-6x4j","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq5p-34cr-23v9","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2r8-vmq7-fpx2","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r23q-823p-vmf7","GHSA-r5m9-wm49-959f","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-r95x-qfjj-fjj2","GHSA-r9mr-m37c-5fr3","GHSA-rcfx-77hg-w2wv","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rj5c-58rq-j5g5","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rvhj-8chj-8v3c","GHSA-rwj8-pgh3-r573","GHSA-rww4-4w9c-7733","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vhcx-3pq2-4fvc","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-vv7q-7jx5-f767","GHSA-w2fm-2cpv-w7v5","GHSA-w5xq-c4pf-ghq7","GHSA-w6q7-j642-7c25","GHSA-w6vg-jg77-2qg6","GHSA-w853-jp5j-5j7f","GHSA-w8p2-r796-3vmq","GHSA-w8v5-vhqr-4h9v","GHSA-wcj4-jw5j-44wh","GHSA-wf7f-8fxf-xfxc","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-wvpp-8hx9-p66j","GHSA-wvwj-cvrp-7pv5","GHSA-x2qx-6953-8485","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xch3-2f9x-wh9f","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-238","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-227","PYSEC-2026-2286","PYSEC-2026-2302",293,[],{"files":402,"occurrenceCount":99},[403],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":405,"vulnerabilities":2583},[406,418,431,442,451,461,470,479,490,499,509,521,531,541,551,560,569,579,588,597,608,617,626,635,644,653,664,673,682,691,700,710,719,728,737,746,755,764,773,782,791,800,808,817,826,836,845,855,864,873,882,891,900,909,917,926,936,945,954,964,973,981,990,999,1008,1017,1026,1035,1044,1053,1062,1071,1079,1087,1097,1106,1115,1124,1132,1141,1150,1159,1168,1177,1186,1195,1204,1213,1222,1231,1240,1249,1258,1266,1275,1284,1295,1304,1313,1322,1331,1340,1349,1358,1367,1376,1385,1394,1403,1412,1421,1430,1439,1448,1456,1465,1474,1483,1492,1501,1510,1519,1528,1537,1546,1555,1564,1572,1580,1589,1597,1606,1614,1622,1631,1640,1649,1658,1668,1677,1686,1695,1703,1712,1721,1730,1739,1748,1757,1766,1775,1784,1793,1801,1809,1818,1827,1836,1844,1852,1861,1870,1879,1888,1897,1906,1914,1922,1930,1939,1949,1958,1967,1976,1985,1993,2002,2011,2019,2028,2037,2046,2055,2064,2072,2081,2090,2100,2109,2118,2127,2136,2145,2154,2163,2172,2181,2190,2199,2208,2217,2226,2236,2245,2254,2263,2272,2280,2289,2298,2307,2316,2325,2334,2343,2352,2361,2370,2379,2388,2399,2408,2416,2425,2434,2442,2450,2459,2468,2477,2485,2493,2502,2511,2520,2529,2538,2547,2556,2565,2574],{"id":407,"slug":408,"identity":409,"label":410,"aiRelevant":89,"provider":411,"advisoryCount":412,"licenseExpressions":413,"versions":415,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":417},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[414],"Apache-2.0",[416],"0.10.1.1",[54],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":89,"provider":423,"advisoryCount":426,"licenseExpressions":427,"versions":428,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":430},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":424,"label":425},"hugging-face","Hugging Face",25,[414],[429],"4.57.6",[54],{"id":432,"slug":433,"identity":434,"label":435,"aiRelevant":89,"provider":411,"advisoryCount":436,"licenseExpressions":437,"versions":439,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":441},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[438],"BSD-3-Clause",[440],"2.7.1",[54],{"id":70,"slug":71,"identity":443,"label":72,"aiRelevant":89,"provider":444,"advisoryCount":37,"licenseExpressions":447,"versions":448,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":450},"pypi:openai",{"id":445,"label":446},"openai","OpenAI",[414],[449],"1.104.2",[54],{"id":452,"slug":453,"identity":454,"label":455,"aiRelevant":89,"provider":411,"advisoryCount":37,"licenseExpressions":456,"versions":458,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":460},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[457],"non-standard",[459],"0.22.0",[54],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":89,"provider":411,"advisoryCount":37,"licenseExpressions":466,"versions":467,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":469},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[438,457],[468],"1.7.1",[54],{"id":471,"slug":472,"identity":473,"label":474,"aiRelevant":89,"provider":411,"advisoryCount":37,"licenseExpressions":475,"versions":476,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":478},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[457],[477],"0.11.0",[54],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":45,"provider":411,"advisoryCount":484,"licenseExpressions":485,"versions":487,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":489},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[414,486],"Apache-2.0 AND MIT",[488],"3.12.15",[54],{"id":491,"slug":492,"identity":493,"label":494,"aiRelevant":45,"provider":411,"advisoryCount":436,"licenseExpressions":495,"versions":496,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":498},"package:pypi:mlflow","mlflow-43f98b3c","pypi:mlflow","mlflow",[457],[497],"3.4.0",[54],{"id":500,"slug":501,"identity":502,"label":503,"aiRelevant":45,"provider":411,"advisoryCount":504,"licenseExpressions":505,"versions":506,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":508},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",22,[438],[507],"3.1.45",[54],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":45,"provider":411,"advisoryCount":514,"licenseExpressions":515,"versions":518,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":520},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[516,517],"HPND","MIT-CMU",[519],"11.3.0",[54],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":45,"provider":411,"advisoryCount":526,"licenseExpressions":527,"versions":528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":530},"package:pypi:authlib","authlib-c1d999b9","pypi:authlib","authlib",9,[438],[529],"1.6.4",[54],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":45,"provider":411,"advisoryCount":526,"licenseExpressions":536,"versions":538,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":540},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",[537],"Apache-2.0 OR BSD-3-Clause",[539],"45.0.7",[54],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":45,"provider":411,"advisoryCount":546,"licenseExpressions":547,"versions":548,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":550},"package:pypi:fastmcp","fastmcp-62abcf82","pypi:fastmcp","fastmcp",8,[414],[549],"2.12.3",[54],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":45,"provider":411,"advisoryCount":546,"licenseExpressions":556,"versions":557,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[414],[558],"0.0.20",[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":411,"advisoryCount":546,"licenseExpressions":565,"versions":566,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[438],[567],"0.47.3",[54],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":411,"advisoryCount":102,"licenseExpressions":574,"versions":576,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":578},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[575],"MIT",[577],"2.5.0",[54],{"id":580,"slug":581,"identity":582,"label":583,"aiRelevant":45,"provider":411,"advisoryCount":64,"licenseExpressions":584,"versions":585,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":587},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",[414],[586],"2.49.1",[54],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":45,"provider":411,"advisoryCount":64,"licenseExpressions":593,"versions":594,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":596},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[438,457],[595],"3.1.1",[54],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":45,"provider":411,"advisoryCount":602,"licenseExpressions":603,"versions":605,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":607},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[604],"BSD-2-Clause",[606],"0.6.1",[54],{"id":609,"slug":610,"identity":611,"label":612,"aiRelevant":45,"provider":411,"advisoryCount":34,"licenseExpressions":613,"versions":614,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":616},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[438,457],[615],"3.1.6",[54],{"id":618,"slug":619,"identity":620,"label":621,"aiRelevant":45,"provider":411,"advisoryCount":104,"licenseExpressions":622,"versions":623,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":625},"package:pypi:cbor2","cbor2-9a57866f","pypi:cbor2","cbor2",[575],[624],"5.7.0",[54],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":45,"provider":411,"advisoryCount":104,"licenseExpressions":631,"versions":632,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":634},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[575],[633],"1.14.1",[54],{"id":636,"slug":637,"identity":638,"label":639,"aiRelevant":45,"provider":411,"advisoryCount":104,"licenseExpressions":640,"versions":641,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":643},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[414],[642],"2.32.5",[54],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":45,"provider":411,"advisoryCount":104,"licenseExpressions":649,"versions":650,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":652},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[575],[651],"79.0.1",[54],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":45,"provider":411,"advisoryCount":658,"licenseExpressions":659,"versions":661,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":663},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[575,660],"Unlicense",[662],"3.19.1",[54],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":45,"provider":411,"advisoryCount":658,"licenseExpressions":669,"versions":670,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":672},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[575],[671],"1.3.10",[54],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":45,"provider":411,"advisoryCount":658,"licenseExpressions":678,"versions":679,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":681},"package:pypi:mlx","mlx-6c82b549","pypi:mlx","mlx",[575],[680],"0.29.0",[54],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":45,"provider":411,"advisoryCount":658,"licenseExpressions":687,"versions":688,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":690},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[438],[689],"6.32.0",[54],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":45,"provider":411,"advisoryCount":658,"licenseExpressions":696,"versions":697,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":699},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[414],[698],"0.1.21",[54],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":705,"versions":707,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":709},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[706],"MPL-2.0",[708],"2025.8.3",[54],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":715,"versions":716,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":718},"package:pypi:click","click-ef97f731","pypi:click","click",[438,457],[717],"8.2.1",[54],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":724,"versions":725,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":727},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[414],[726],"5.6.3",[54],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":733,"versions":734,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":736},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[438,457],[735],"3.1.2",[54],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":742,"versions":743,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":745},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[575],[744],"4.59.2",[54],{"id":747,"slug":748,"identity":749,"label":750,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":751,"versions":752,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":754},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[575],[753],"0.16.0",[54],{"id":756,"slug":757,"identity":758,"label":759,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":760,"versions":761,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":763},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[438,457],[762],"3.10",[54],{"id":765,"slug":766,"identity":767,"label":768,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":769,"versions":770,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":772},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[414],[771],"1.1.1",[54],{"id":774,"slug":775,"identity":776,"label":777,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":778,"versions":779,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":781},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[414,457],[780],"21.0.0",[54],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":787,"versions":788,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":790},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[575],[789],"2.10.1",[54],{"id":792,"slug":793,"identity":794,"label":795,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":796,"versions":797,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":799},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[604],[798],"2.19.2",[54],{"id":801,"slug":802,"identity":803,"label":804,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":805,"versions":806,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":807},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[438],[771],[54],{"id":809,"slug":810,"identity":811,"label":812,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":813,"versions":814,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":816},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[457],[815],"0.2.1",[54],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":822,"versions":823,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":825},"package:pypi:sqlparse","sqlparse-96380dda","pypi:sqlparse","sqlparse",[457],[824],"0.5.3",[54],{"id":827,"slug":828,"identity":829,"label":830,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":831,"versions":833,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":835},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[832],"MIT AND MPL-2.0",[834],"4.67.1",[54],{"id":837,"slug":838,"identity":839,"label":840,"aiRelevant":45,"provider":411,"advisoryCount":32,"licenseExpressions":841,"versions":842,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":844},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[575],[843],"20.34.0",[54],{"id":846,"slug":847,"identity":848,"label":849,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":850,"versions":852,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":854},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[851],"PSF-2.0",[853],"2.6.1",[54],{"id":856,"slug":857,"identity":858,"label":859,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":860,"versions":861,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":863},"package:pypi:aiohttp-cors","aiohttp-cors-2026df90","pypi:aiohttp-cors","aiohttp-cors",[414],[862],"0.8.1",[54],{"id":865,"slug":866,"identity":867,"label":868,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":869,"versions":870,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":872},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[414],[871],"1.4.0",[54],{"id":874,"slug":875,"identity":876,"label":877,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":878,"versions":879,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":881},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[575],[880],"1.16.5",[54],{"id":883,"slug":884,"identity":885,"label":886,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":887,"versions":888,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":890},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[575],[889],"0.7.0",[54],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":896,"versions":897,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":899},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[457],[898],"4.9.3",[54],{"id":901,"slug":902,"identity":903,"label":904,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":905,"versions":906,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":908},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[575],[907],"4.10.0",[54],{"id":910,"slug":911,"identity":912,"label":913,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":914,"versions":915,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":916},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[438],[862],[54],{"id":918,"slug":919,"identity":920,"label":921,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":922,"versions":923,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":925},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[575],[924],"25.3.0",[54],{"id":927,"slug":928,"identity":929,"label":930,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":931,"versions":933,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":935},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[932],"Apache-2.0 OR CC0-1.0",[934],"1.0.5",[54],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":941,"versions":942,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":944},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[575],[943],"1.9.0",[54],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":950,"versions":951,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":953},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[575],[952],"5.5.2",[54],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":959,"versions":961,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":963},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[575,960],"MIT-0",[962],"1.17.1",[54],{"id":965,"slug":966,"identity":967,"label":968,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":969,"versions":970,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":972},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[575],[971],"3.4.3",[54],{"id":974,"slug":975,"identity":976,"label":977,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":978,"versions":979,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":980},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[438],[595],[54],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":986,"versions":987,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":989},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[457],[988],"0.4.6",[54],{"id":991,"slug":992,"identity":993,"label":994,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":995,"versions":996,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":998},"package:pypi:colorful","colorful-3d452f6a","pypi:colorful","colorful",[575],[997],"0.5.7",[54],{"id":1000,"slug":1001,"identity":1002,"label":1003,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1004,"versions":1005,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1007},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[414],[1006],"0.10.2",[54],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1013,"versions":1014,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1016},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[457],[1015],"1.3.3",[54],{"id":1018,"slug":1019,"identity":1020,"label":1021,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1022,"versions":1023,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1025},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[575],[1024],"13.6.0",[54],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1031,"versions":1032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1034},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[457],[1033],"0.12.1",[54],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1040,"versions":1041,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1043},"package:pypi:cyclopts","cyclopts-479397c2","pypi:cyclopts","cyclopts",[414],[1042],"3.24.0",[54],{"id":1045,"slug":1046,"identity":1047,"label":1048,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1049,"versions":1050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1052},"package:pypi:databricks-sdk","databricks-sdk-26867d3a","pypi:databricks-sdk","databricks-sdk",[457],[1051],"0.65.0",[54],{"id":1054,"slug":1055,"identity":1056,"label":1057,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1058,"versions":1059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1061},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[575],[1060],"0.19.0",[54],{"id":1063,"slug":1064,"identity":1065,"label":1066,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1067,"versions":1068,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1070},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[438],[1069],"0.4.0",[54],{"id":1072,"slug":1073,"identity":1074,"label":1075,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1076,"versions":1077,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1078},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[851],[1069],[54],{"id":1080,"slug":1081,"identity":1082,"label":1083,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1084,"versions":1085,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1086},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[414],[943],[54],{"id":1088,"slug":1089,"identity":1090,"label":1091,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1092,"versions":1094,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1096},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1093],"ISC",[1095],"2.7.0",[54],{"id":1098,"slug":1099,"identity":1100,"label":1101,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1102,"versions":1103,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1105},"package:pypi:docker","docker-fa61cb72","pypi:docker","docker",[414],[1104],"7.1.0",[54],{"id":1107,"slug":1108,"identity":1109,"label":1110,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1111,"versions":1112,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1114},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[575],[1113],"0.17.0",[54],{"id":1116,"slug":1117,"identity":1118,"label":1119,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1120,"versions":1121,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1123},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[457],[1122],"0.22.1",[54],{"id":1125,"slug":1126,"identity":1127,"label":1128,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1129,"versions":1130,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1131},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[575],[862],[54],{"id":1133,"slug":1134,"identity":1135,"label":1136,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1137,"versions":1138,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1140},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[660],[1139],"2.3.0",[54],{"id":1142,"slug":1143,"identity":1144,"label":1145,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1146,"versions":1147,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1149},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[575],[1148],"2.0.0",[54],{"id":1151,"slug":1152,"identity":1153,"label":1154,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1155,"versions":1156,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1158},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[575],[1157],"1.3.0",[54],{"id":1160,"slug":1161,"identity":1162,"label":1163,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1164,"versions":1165,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1167},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[575],[1166],"0.116.1",[54],{"id":1169,"slug":1170,"identity":1171,"label":1172,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1173,"versions":1174,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1176},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[575],[1175],"0.0.10",[54],{"id":1178,"slug":1179,"identity":1180,"label":1181,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1182,"versions":1183,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1185},"package:pypi:fastapi-cloud-cli","fastapi-cloud-cli-9011df6b","pypi:fastapi-cloud-cli","fastapi-cloud-cli",[575],[1184],"0.1.5",[54],{"id":1187,"slug":1188,"identity":1189,"label":1190,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1191,"versions":1192,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1194},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[457],[1193],"0.8.3",[54],{"id":1196,"slug":1197,"identity":1198,"label":1199,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1200,"versions":1201,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1203},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[414],[1202],"1.7.0",[54],{"id":1205,"slug":1206,"identity":1207,"label":1208,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1209,"versions":1210,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1212},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[438,457],[1211],"2025.9.0",[54],{"id":1214,"slug":1215,"identity":1216,"label":1217,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1218,"versions":1219,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1221},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[575],[1220],"0.17.1",[54],{"id":1223,"slug":1224,"identity":1225,"label":1226,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1227,"versions":1228,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1230},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[457],[1229],"4.0.12",[54],{"id":1232,"slug":1233,"identity":1234,"label":1235,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1236,"versions":1237,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1239},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[414],[1238],"2.25.1",[54],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1245,"versions":1246,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1248},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[414],[1247],"2.40.3",[54],{"id":1250,"slug":1251,"identity":1252,"label":1253,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1254,"versions":1255,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1257},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[414],[1256],"1.70.0",[54],{"id":1259,"slug":1260,"identity":1261,"label":1262,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1263,"versions":1264,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1265},"package:pypi:graphene","graphene-e89251f5","pypi:graphene","graphene",[575],[971],[54],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1271,"versions":1272,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1274},"package:pypi:graphql-core","graphql-core-6d217145","pypi:graphql-core","graphql-core",[575],[1273],"3.2.6",[54],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1280,"versions":1281,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1283},"package:pypi:graphql-relay","graphql-relay-f4584f38","pypi:graphql-relay","graphql-relay",[575],[1282],"3.2.0",[54],{"id":1285,"slug":1286,"identity":1287,"label":1288,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1289,"versions":1292,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1294},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[575,1290,1291],"MIT AND PSF-2.0","MIT AND Python-2.0",[1293],"3.2.4",[54],{"id":1296,"slug":1297,"identity":1298,"label":1299,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1300,"versions":1301,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1303},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[414],[1302],"1.74.0",[54],{"id":1305,"slug":1306,"identity":1307,"label":1308,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1309,"versions":1310,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1312},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[575],[1311],"23.0.0",[54],{"id":1314,"slug":1315,"identity":1316,"label":1317,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1318,"versions":1319,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1321},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[414],[1320],"1.1.9",[54],{"id":1323,"slug":1324,"identity":1325,"label":1326,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1327,"versions":1328,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1330},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[438],[1329],"1.0.9",[54],{"id":1332,"slug":1333,"identity":1334,"label":1335,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1336,"versions":1337,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1339},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[575],[1338],"0.6.4",[54],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1345,"versions":1346,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1348},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[438],[1347],"0.28.1",[54],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1354,"versions":1355,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1357},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[575],[1356],"0.4.1",[54],{"id":1359,"slug":1360,"identity":1361,"label":1362,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1363,"versions":1364,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1366},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[414,457],[1365],"0.34.4",[54],{"id":1368,"slug":1369,"identity":1370,"label":1371,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1372,"versions":1373,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1375},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[575],[1374],"1.3.2",[54],{"id":1377,"slug":1378,"identity":1379,"label":1380,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1381,"versions":1382,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1384},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[414,457],[1383],"8.7.0",[54],{"id":1386,"slug":1387,"identity":1388,"label":1389,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1390,"versions":1391,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1393},"package:pypi:inquirerpy","inquirerpy-7155acae","pypi:inquirerpy","inquirerpy",[575],[1392],"0.3.4",[54],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1399,"versions":1400,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1402},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[575],[1401],"0.3.3",[54],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1408,"versions":1409,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1411},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[457],[1410],"0.7.2",[54],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1417,"versions":1418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1420},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[438,457],[1419],"2.2.0",[54],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1426,"versions":1427,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1429},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[575],[1428],"0.10.0",[54],{"id":1431,"slug":1432,"identity":1433,"label":1434,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1435,"versions":1436,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1438},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[438],[1437],"1.5.2",[54],{"id":1440,"slug":1441,"identity":1442,"label":1443,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1444,"versions":1445,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1447},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[575],[1446],"4.25.1",[54],{"id":1449,"slug":1450,"identity":1451,"label":1452,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1453,"versions":1454,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1455},"package:pypi:jsonschema-path","jsonschema-path-7b9c625e","pypi:jsonschema-path","jsonschema-path",[414],[1392],[54],{"id":1457,"slug":1458,"identity":1459,"label":1460,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1461,"versions":1462,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1464},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[575],[1463],"2025.4.1",[54],{"id":1466,"slug":1467,"identity":1468,"label":1469,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1470,"versions":1471,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1473},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[457],[1472],"1.4.9",[54],{"id":1475,"slug":1476,"identity":1477,"label":1478,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1479,"versions":1480,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1482},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[575],[1481],"1.2.2",[54],{"id":1484,"slug":1485,"identity":1486,"label":1487,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1488,"versions":1489,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1491},"package:pypi:lazy-object-proxy","lazy-object-proxy-a9867681","pypi:lazy-object-proxy","lazy-object-proxy",[604],[1490],"1.12.0",[54],{"id":1493,"slug":1494,"identity":1495,"label":1496,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1497,"versions":1498,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1500},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[575],[1499],"0.7.30",[54],{"id":1502,"slug":1503,"identity":1504,"label":1505,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1506,"versions":1507,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1509},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[457],[1508],"0.44.0",[54],{"id":1511,"slug":1512,"identity":1513,"label":1514,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1515,"versions":1516,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1518},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[575],[1517],"0.10.12",[54],{"id":1520,"slug":1521,"identity":1522,"label":1523,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1524,"versions":1525,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1527},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[575],[1526],"4.0.0",[54],{"id":1529,"slug":1530,"identity":1531,"label":1532,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1533,"versions":1534,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1536},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[438,457],[1535],"3.0.2",[54],{"id":1538,"slug":1539,"identity":1540,"label":1541,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1542,"versions":1543,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1545},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[457],[1544],"3.10.6",[54],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1551,"versions":1552,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1554},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[575],[1553],"0.1.2",[54],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1560,"versions":1561,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1563},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[414],[1562],"1.8.4",[54],{"id":1565,"slug":1566,"identity":1567,"label":1568,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1569,"versions":1570,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1571},"package:pypi:mlflow-skinny","mlflow-skinny-05e8b169","pypi:mlflow-skinny","mlflow-skinny",[457],[497],[54],{"id":1573,"slug":1574,"identity":1575,"label":1576,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1577,"versions":1578,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1579},"package:pypi:mlflow-tracing","mlflow-tracing-6ac72d11","pypi:mlflow-tracing","mlflow-tracing",[457],[497],[54],{"id":1581,"slug":1582,"identity":1583,"label":1584,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1585,"versions":1586,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1588},"package:pypi:mlx-lm","mlx-lm-c2e88814","pypi:mlx-lm","mlx-lm",[575],[1587],"0.27.0",[54],{"id":1590,"slug":1591,"identity":1592,"label":1593,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1594,"versions":1595,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1596},"package:pypi:mlx-metal","mlx-metal-fdc0094a","pypi:mlx-metal","mlx-metal",[],[680],[54],{"id":1598,"slug":1599,"identity":1600,"label":1601,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1602,"versions":1603,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1605},"package:pypi:more-itertools","more-itertools-fa46f32b","pypi:more-itertools","more-itertools",[575],[1604],"10.8.0",[54],{"id":1607,"slug":1608,"identity":1609,"label":1610,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1611,"versions":1612,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1613},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[457],[1157],[54],{"id":1615,"slug":1616,"identity":1617,"label":1618,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1619,"versions":1620,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1621},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[438,457],[1060],[54],{"id":1623,"slug":1624,"identity":1625,"label":1626,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1627,"versions":1628,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1630},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[414],[1629],"6.6.4",[54],{"id":1632,"slug":1633,"identity":1634,"label":1635,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1636,"versions":1637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1639},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[438,457],[1638],"3.5",[54],{"id":1641,"slug":1642,"identity":1643,"label":1644,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1645,"versions":1646,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1648},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[457],[1647],"1.13.0",[54],{"id":1650,"slug":1651,"identity":1652,"label":1653,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1654,"versions":1655,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1657},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[457],[1656],"0.61.2",[54],{"id":1659,"slug":1660,"identity":1661,"label":1662,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1663,"versions":1665,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1667},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1664,457],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1666],"2.2.6",[54],{"id":1669,"slug":1670,"identity":1671,"label":1672,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1673,"versions":1674,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1676},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[457],[1675],"12.6.4.1",[54],{"id":1678,"slug":1679,"identity":1680,"label":1681,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1682,"versions":1683,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1685},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[457],[1684],"12.6.80",[54],{"id":1687,"slug":1688,"identity":1689,"label":1690,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1691,"versions":1692,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1694},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[457],[1693],"12.6.77",[54],{"id":1696,"slug":1697,"identity":1698,"label":1699,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1700,"versions":1701,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1702},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[457],[1693],[54],{"id":1704,"slug":1705,"identity":1706,"label":1707,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1708,"versions":1709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1711},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[457],[1710],"9.5.1.17",[54],{"id":1713,"slug":1714,"identity":1715,"label":1716,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1717,"versions":1718,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1720},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[457],[1719],"11.3.0.4",[54],{"id":1722,"slug":1723,"identity":1724,"label":1725,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1726,"versions":1727,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1729},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[457],[1728],"1.11.1.6",[54],{"id":1731,"slug":1732,"identity":1733,"label":1734,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1735,"versions":1736,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1738},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[457],[1737],"10.3.7.77",[54],{"id":1740,"slug":1741,"identity":1742,"label":1743,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1744,"versions":1745,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1747},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[457],[1746],"11.7.1.2",[54],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1753,"versions":1754,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1756},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[457],[1755],"12.5.4.2",[54],{"id":1758,"slug":1759,"identity":1760,"label":1761,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1762,"versions":1763,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1765},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[457],[1764],"0.6.3",[54],{"id":1767,"slug":1768,"identity":1769,"label":1770,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1771,"versions":1772,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1774},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[457],[1773],"12.575.51",[54],{"id":1776,"slug":1777,"identity":1778,"label":1779,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1780,"versions":1781,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1783},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[438,457],[1782],"2.26.2",[54],{"id":1785,"slug":1786,"identity":1787,"label":1788,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1789,"versions":1790,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1792},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[457],[1791],"12.6.85",[54],{"id":1794,"slug":1795,"identity":1796,"label":1797,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1798,"versions":1799,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1800},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[414,457],[1693],[54],{"id":1802,"slug":1803,"identity":1804,"label":1805,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1806,"versions":1807,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1808},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[438],[1139],[54],{"id":1810,"slug":1811,"identity":1812,"label":1813,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1814,"versions":1815,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1817},"package:pypi:openai-harmony","openai-harmony-030f1d71","pypi:openai-harmony","openai-harmony",[],[1816],"0.0.4",[54],{"id":1819,"slug":1820,"identity":1821,"label":1822,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1823,"versions":1824,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1826},"package:pypi:openapi-core","openapi-core-24597bf8","pypi:openapi-core","openapi-core",[438],[1825],"0.19.5",[54],{"id":1828,"slug":1829,"identity":1830,"label":1831,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1832,"versions":1833,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1835},"package:pypi:openapi-pydantic","openapi-pydantic-b637b931","pypi:openapi-pydantic","openapi-pydantic",[575],[1834],"0.5.1",[54],{"id":1837,"slug":1838,"identity":1839,"label":1840,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1841,"versions":1842,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1843},"package:pypi:openapi-schema-validator","openapi-schema-validator-fe7e601b","pypi:openapi-schema-validator","openapi-schema-validator",[438],[1764],[54],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1849,"versions":1850,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1851},"package:pypi:openapi-spec-validator","openapi-spec-validator-77311710","pypi:openapi-spec-validator","openapi-spec-validator",[414],[1410],[54],{"id":1853,"slug":1854,"identity":1855,"label":1856,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1857,"versions":1858,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1860},"package:pypi:opencensus","opencensus-a78c415d","pypi:opencensus","opencensus",[414],[1859],"0.11.4",[54],{"id":1862,"slug":1863,"identity":1864,"label":1865,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1866,"versions":1867,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1869},"package:pypi:opencensus-context","opencensus-context-22acaa15","pypi:opencensus-context","opencensus-context",[414],[1868],"0.1.3",[54],{"id":1871,"slug":1872,"identity":1873,"label":1874,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1875,"versions":1876,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1878},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[414],[1877],"4.12.0.88",[54],{"id":1880,"slug":1881,"identity":1882,"label":1883,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1884,"versions":1885,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1887},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[575],[1886],"3.1.5",[54],{"id":1889,"slug":1890,"identity":1891,"label":1892,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1893,"versions":1894,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1896},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[414],[1895],"1.36.0",[54],{"id":1898,"slug":1899,"identity":1900,"label":1901,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1902,"versions":1903,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1905},"package:pypi:opentelemetry-exporter-prometheus","opentelemetry-exporter-prometheus-512d2564","pypi:opentelemetry-exporter-prometheus","opentelemetry-exporter-prometheus",[414],[1904],"0.57b0",[54],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1911,"versions":1912,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1913},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[414],[1895],[54],{"id":1915,"slug":1916,"identity":1917,"label":1918,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1919,"versions":1920,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1921},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[414],[1895],[54],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1927,"versions":1928,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1929},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[414],[1904],[54],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1935,"versions":1936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1938},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[414],[1937],"0.2.10",[54],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1944,"versions":1946,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1948},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1945,457],"Apache-2.0 OR BSD-2-Clause",[1947],"25.0",[54],{"id":1950,"slug":1951,"identity":1952,"label":1953,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1954,"versions":1955,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1957},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[457],[1956],"2.3.2",[54],{"id":1959,"slug":1960,"identity":1961,"label":1962,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1963,"versions":1964,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1966},"package:pypi:parse","parse-31eb237c","pypi:parse","parse",[457],[1965],"1.20.2",[54],{"id":1968,"slug":1969,"identity":1970,"label":1971,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1972,"versions":1973,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1975},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[575],[1974],"0.2.1.1.post6",[54],{"id":1977,"slug":1978,"identity":1979,"label":1980,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1981,"versions":1982,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1984},"package:pypi:pathable","pathable-3c4e83c8","pypi:pathable","pathable",[414],[1983],"0.4.4",[54],{"id":1986,"slug":1987,"identity":1988,"label":1989,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1990,"versions":1991,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1992},"package:pypi:pfzy","pfzy-9297092e","pypi:pfzy","pfzy",[575],[1392],[54],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":1998,"versions":1999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2001},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[575],[2000],"4.4.0",[54],{"id":2003,"slug":2004,"identity":2005,"label":2006,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2007,"versions":2009,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2010},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[414,2008],"Apache-2.0 AND BSD-2-Clause",[1122],[54],{"id":2012,"slug":2013,"identity":2014,"label":2015,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2016,"versions":2017,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2018},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[1093],[1104],[54],{"id":2020,"slug":2021,"identity":2022,"label":2023,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2024,"versions":2025,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2027},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[438,457],[2026],"3.0.52",[54],{"id":2029,"slug":2030,"identity":2031,"label":2032,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2033,"versions":2034,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2036},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[414],[2035],"0.3.2",[54],{"id":2038,"slug":2039,"identity":2040,"label":2041,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2042,"versions":2043,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2045},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[414],[2044],"1.26.1",[54],{"id":2047,"slug":2048,"identity":2049,"label":2050,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2051,"versions":2052,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2054},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[438],[2053],"7.0.0",[54],{"id":2056,"slug":2057,"identity":2058,"label":2059,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2060,"versions":2061,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2063},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[575],[2062],"9.0.0",[54],{"id":2065,"slug":2066,"identity":2067,"label":2068,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2069,"versions":2070,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2071},"package:pypi:py-spy","py-spy-5be0886a","pypi:py-spy","py-spy",[575],[1356],[54],{"id":2073,"slug":2074,"identity":2075,"label":2076,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2077,"versions":2078,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2080},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[457],[2079],"0.4.2",[54],{"id":2082,"slug":2083,"identity":2084,"label":2085,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2086,"versions":2087,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2089},"package:pypi:pybase64","pybase64-d848d924","pypi:pybase64","pybase64",[604],[2088],"1.4.2",[54],{"id":2091,"slug":2092,"identity":2093,"label":2094,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2095,"versions":2097,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2099},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[2096],"LGPL-2.1-only",[2098],"24.6.1",[54],{"id":2101,"slug":2102,"identity":2103,"label":2104,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2105,"versions":2106,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2108},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[438],[2107],"2.22",[54],{"id":2110,"slug":2111,"identity":2112,"label":2113,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2114,"versions":2115,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2117},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[575],[2116],"2.11.7",[54],{"id":2119,"slug":2120,"identity":2121,"label":2122,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2123,"versions":2124,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2126},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[575],[2125],"2.33.2",[54],{"id":2128,"slug":2129,"identity":2130,"label":2131,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2132,"versions":2133,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2135},"package:pypi:pydantic-extra-types","pydantic-extra-types-dddc16ef","pypi:pydantic-extra-types","pydantic-extra-types",[575],[2134],"2.10.5",[54],{"id":2137,"slug":2138,"identity":2139,"label":2140,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2141,"versions":2142,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2144},"package:pypi:pynvml","pynvml-46c48fc0","pypi:pynvml","pynvml",[438],[2143],"12.0.0",[54],{"id":2146,"slug":2147,"identity":2148,"label":2149,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2150,"versions":2151,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2153},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[575],[2152],"3.2.3",[54],{"id":2155,"slug":2156,"identity":2157,"label":2158,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2159,"versions":2160,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2162},"package:pypi:pyperclip","pyperclip-4b45e1af","pypi:pyperclip","pyperclip",[457],[2161],"1.10.0",[54],{"id":2164,"slug":2165,"identity":2166,"label":2167,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2168,"versions":2169,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2171},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[457],[2170],"2.9.0.post0",[54],{"id":2173,"slug":2174,"identity":2175,"label":2176,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2177,"versions":2178,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2180},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[604,457],[2179],"3.3.0",[54],{"id":2182,"slug":2183,"identity":2184,"label":2185,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2186,"versions":2187,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2189},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[575],[2188],"2025.2",[54],{"id":2191,"slug":2192,"identity":2193,"label":2194,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2195,"versions":2196,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2198},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2197],"311",[54],{"id":2200,"slug":2201,"identity":2202,"label":2203,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2204,"versions":2205,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2207},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[575],[2206],"6.0.2",[54],{"id":2209,"slug":2210,"identity":2211,"label":2212,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2213,"versions":2214,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2216},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[457],[2215],"27.0.2",[54],{"id":2218,"slug":2219,"identity":2220,"label":2221,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2222,"versions":2223,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2225},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[575],[2224],"0.36.2",[54],{"id":2227,"slug":2228,"identity":2229,"label":2230,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2231,"versions":2233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2235},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2232,457],"Apache-2.0 AND CNRI-Python",[2234],"2025.9.1",[54],{"id":2237,"slug":2238,"identity":2239,"label":2240,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2241,"versions":2242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2244},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[575],[2243],"0.1.4",[54],{"id":2246,"slug":2247,"identity":2248,"label":2249,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2250,"versions":2251,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2253},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[575],[2252],"14.1.0",[54],{"id":2255,"slug":2256,"identity":2257,"label":2258,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2259,"versions":2260,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2262},"package:pypi:rich-rst","rich-rst-fda043f5","pypi:rich-rst","rich-rst",[575],[2261],"1.3.1",[54],{"id":2264,"slug":2265,"identity":2266,"label":2267,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2268,"versions":2269,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2271},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[575],[2270],"0.15.0",[54],{"id":2273,"slug":2274,"identity":2275,"label":2276,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2277,"versions":2278,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2279},"package:pypi:rignore","rignore-bc5396c6","pypi:rignore","rignore",[575],[1338],[54],{"id":2281,"slug":2282,"identity":2283,"label":2284,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2285,"versions":2286,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2288},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[575],[2287],"0.27.1",[54],{"id":2290,"slug":2291,"identity":2292,"label":2293,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2294,"versions":2295,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2297},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[414],[2296],"4.9.1",[54],{"id":2299,"slug":2300,"identity":2301,"label":2302,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2303,"versions":2304,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2306},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[457],[2305],"0.6.2",[54],{"id":2308,"slug":2309,"identity":2310,"label":2311,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2312,"versions":2313,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2315},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[457],[2314],"1.16.1",[54],{"id":2317,"slug":2318,"identity":2319,"label":2320,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2321,"versions":2322,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2324},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[575],[2323],"2.35.2",[54],{"id":2326,"slug":2327,"identity":2328,"label":2329,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2330,"versions":2331,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2333},"package:pypi:setproctitle","setproctitle-5acfd9d9","pypi:setproctitle","setproctitle",[438],[2332],"1.3.6",[54],{"id":2335,"slug":2336,"identity":2337,"label":2338,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2339,"versions":2340,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2342},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[457],[2341],"1.5.4",[54],{"id":2344,"slug":2345,"identity":2346,"label":2347,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2348,"versions":2349,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2351},"package:pypi:six","six-3c3888bd","pypi:six","six",[575],[2350],"1.17.0",[54],{"id":2353,"slug":2354,"identity":2355,"label":2356,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2357,"versions":2358,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2360},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[575],[2359],"7.3.0.post1",[54],{"id":2362,"slug":2363,"identity":2364,"label":2365,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2366,"versions":2367,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2369},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[438],[2368],"5.0.2",[54],{"id":2371,"slug":2372,"identity":2373,"label":2374,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2375,"versions":2377,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2378},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2376],"Apache-2.0 OR MIT",[2261],[54],{"id":2380,"slug":2381,"identity":2382,"label":2383,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2384,"versions":2385,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2387},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[438],[2386],"0.13.1",[54],{"id":2389,"slug":2390,"identity":2391,"label":2392,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2393,"versions":2396,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2398},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[2394,2395],"LGPL-2.0-or-later","LGPL-2.1-or-later",[2397],"0.5.0.post1",[54],{"id":2400,"slug":2401,"identity":2402,"label":2403,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2404,"versions":2405,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2407},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[575],[2406],"2.0.43",[54],{"id":2409,"slug":2410,"identity":2411,"label":2412,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2413,"versions":2414,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2415},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[438],[1535],[54],{"id":2417,"slug":2418,"identity":2419,"label":2420,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2421,"versions":2422,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2424},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[457],[2423],"1.14.0",[54],{"id":2426,"slug":2427,"identity":2428,"label":2429,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2430,"versions":2431,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2433},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[438],[2432],"3.6.0",[54],{"id":2435,"slug":2436,"identity":2437,"label":2438,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2439,"versions":2440,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2441},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[604,457],[440],[54],{"id":2443,"slug":2444,"identity":2445,"label":2446,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2447,"versions":2448,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2449},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[457],[1122],[54],{"id":2451,"slug":2452,"identity":2453,"label":2454,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2455,"versions":2456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2458},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[575],[2457],"3.3.1",[54],{"id":2460,"slug":2461,"identity":2462,"label":2463,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2464,"versions":2465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2467},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[575],[2466],"0.17.3",[54],{"id":2469,"slug":2470,"identity":2471,"label":2472,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2473,"versions":2474,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2476},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[851,457],[2475],"4.15.0",[54],{"id":2478,"slug":2479,"identity":2480,"label":2481,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2482,"versions":2483,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2484},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[575],[1356],[54],{"id":2486,"slug":2487,"identity":2488,"label":2489,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2490,"versions":2491,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2492},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[414],[2188],[54],{"id":2494,"slug":2495,"identity":2496,"label":2497,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2498,"versions":2499,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2501},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[438],[2500],"0.35.0",[54],{"id":2503,"slug":2504,"identity":2505,"label":2506,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2507,"versions":2508,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2510},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[575],[2509],"0.21.0",[54],{"id":2512,"slug":2513,"identity":2514,"label":2515,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2516,"versions":2518,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2519},"package:pypi:waitress","waitress-e47950e2","pypi:waitress","waitress",[2517],"ZPL-2.1",[1535],[54],{"id":2521,"slug":2522,"identity":2523,"label":2524,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2525,"versions":2526,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2528},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[575],[2527],"1.1.0",[54],{"id":2530,"slug":2531,"identity":2532,"label":2533,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2534,"versions":2535,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2537},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[575],[2536],"0.2.13",[54],{"id":2539,"slug":2540,"identity":2541,"label":2542,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2543,"versions":2544,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2546},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[438],[2545],"15.0.1",[54],{"id":2548,"slug":2549,"identity":2550,"label":2551,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2552,"versions":2553,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2555},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[457],[2554],"1.17.3",[54],{"id":2557,"slug":2558,"identity":2559,"label":2560,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2561,"versions":2562,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2564},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[438],[2563],"0.0.31",[54],{"id":2566,"slug":2567,"identity":2568,"label":2569,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2570,"versions":2571,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2573},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[414],[2572],"1.20.1",[54],{"id":2575,"slug":2576,"identity":2577,"label":2578,"aiRelevant":45,"provider":411,"advisoryCount":37,"licenseExpressions":2579,"versions":2580,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2582},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[575],[2581],"3.23.0",[54],[2584,2623,2645,2677,2708,2740,2766,2796,2829,2861,2909,2934,2966,3009,3035,3061,3088,3116,3145,3166,3201,3221,3244,3271,3301,3335,3369,3395,3415,3435,3453,3478,3520,3546,3575,3600,3618,3656,3679,3698,3723,3748,3781,3809,3832,3862,3887,3917,3957,3992,4015,4038,4061,4091,4118,4137,4191,4215,4242,4272,4295,4326,4353,4382,4407,4430,4452,4475,4496,4525,4551,4577,4600,4624,4671,4698,4721,4745,4776,4826,4854,4885,4924,4953,4975,5011,5029,5080,5104,5143,5175,5203,5235,5258,5290,5313,5338,5379,5397,5421,5442,5465,5498,5528,5552,5586,5612,5640,5658,5688,5708,5724,5749,5774,5806,5859,5891,5921,5952,5977,6010,6035,6063,6090,6127,6151,6182,6209,6237,6255,6278,6310,6329,6357,6381,6406,6439,6464,6492,6515,6543,6571,6596,6630,6664,6679,6713,6735,6757,6781,6808,6826,6860,6881,6903,6924,6949,6979,6999,7023,7055,7078,7098,7125,7150,7168,7189,7221,7267,7292,7318,7355,7378,7402,7421,7447,7469,7490,7512,7542,7570,7593,7618,7641,7668,7685,7714,7736,7762,7783,7804,7826,7853,7880,7905,7929,7958,7979,8011,8035,8059,8085,8119,8143,8165,8192,8226,8253,8285,8304,8340,8379,8411,8438,8465,8492,8517,8570,8598,8622,8640,8655,8682,8712,8734,8754,8786,8813,8834,8858,8883,8910,8930,8956,8978,9001,9029,9053,9080,9107,9134,9158,9188,9211,9234,9258,9284,9314,9336,9361,9386,9408,9460,9483,9509,9542,9571,9596,9614,9638,9661,9697,9729,9748,9767,9794,9821,9846,9866,9883,9902,9919,9940,9956,9971,9988,10003,10020,10037,10054,10067,10080,10093,10106,10119,10132,10145,10158,10175,10197,10228,10242,10271],{"id":106,"slug":2585,"dossier":45,"summary":2586,"aliases":2587,"sourceIds":2590,"published":2591,"modified":2592,"checkedAt":7,"severity":2593,"references":2597,"versionKeys":2621,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2588,2589],"CVE-2024-39689","PYSEC-2024-230",[106,2589],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2594],{"type":2595,"score":2596},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2598,2601,2603,2606,2609,2612,2615,2617,2619],{"type":2599,"url":2600},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2599,"url":2602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2604,"url":2605},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2607,"url":2608},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2610,"url":2611},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2613,"url":2614},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2610,"url":2616},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2599,"url":2618},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2599,"url":2620},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2622],"pypi:certifi@2024.6.2",{"id":107,"slug":2624,"dossier":45,"summary":2625,"aliases":2626,"sourceIds":2627,"published":2628,"modified":2629,"checkedAt":7,"severity":2630,"references":2634,"versionKeys":2643,"packageCount":32,"repositoryCount":658},"ghsa-27jp-wm6q-gp25-5ce03f88","sqlparse: formatting list of tuples leads to denial of service",[],[107],"2026-02-13T16:16:11Z","2026-02-19T02:59:07.083683Z",[2631],{"type":2632,"score":2633},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2635,2637,2639,2641],{"type":2610,"url":2636},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fsecurity\u002Fadvisories\u002FGHSA-27jp-wm6q-gp25",{"type":2610,"url":2638},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fcommit\u002F40ed3aa958657fa4a82055927fa9de70ab903360",{"type":2607,"url":2640},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse",{"type":2610,"url":2642},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Freleases\u002Ftag\u002F0.5.4",[2644],"pypi:sqlparse@0.5.3",{"id":108,"slug":2646,"dossier":45,"summary":2647,"aliases":2648,"sourceIds":2651,"published":2652,"modified":2653,"checkedAt":7,"severity":2654,"references":2657,"versionKeys":2669,"packageCount":32,"repositoryCount":546},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2649,2650],"CVE-2026-4372","PYSEC-2026-2289",[108,2650],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2655],{"type":2595,"score":2656},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2658,2660,2662,2664,2667],{"type":2599,"url":2659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2604,"url":2661},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2607,"url":2663},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2665,"url":2666},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2599,"url":2668},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2670,2671,2672,2673,2674,2675,2676],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":109,"slug":2678,"dossier":45,"summary":2679,"aliases":2680,"sourceIds":2683,"published":2684,"modified":2685,"checkedAt":7,"severity":2686,"references":2691,"versionKeys":2702,"packageCount":32,"repositoryCount":64},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2681,2682],"CVE-2026-27199","PYSEC-2026-2320",[109,2682],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2687,2689],{"type":2632,"score":2688},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":2690},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2692,2694,2696,2698,2700],{"type":2599,"url":2693},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2599,"url":2695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2604,"url":2697},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2607,"url":2699},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2599,"url":2701},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2703,2704,2705,2706,2707],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":110,"slug":2709,"dossier":45,"summary":2710,"aliases":2711,"sourceIds":2714,"published":2715,"modified":2716,"checkedAt":7,"severity":2717,"references":2719,"versionKeys":2736,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2712,2713],"CVE-2025-54121","PYSEC-2026-1941",[110,2713],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2718],{"type":2595,"score":2690},[2720,2722,2724,2726,2728,2730,2732,2734],{"type":2610,"url":2721},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2599,"url":2723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2604,"url":2725},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2607,"url":2727},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2610,"url":2729},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2610,"url":2731},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2607,"url":2733},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2599,"url":2735},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2737,2738,2739],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":111,"slug":2741,"dossier":45,"summary":2742,"aliases":2743,"sourceIds":2745,"published":2746,"modified":2747,"checkedAt":7,"severity":2748,"references":2751,"versionKeys":2762,"packageCount":32,"repositoryCount":34},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[2744],"CVE-2026-67325",[111],"2026-07-21T19:43:43Z","2026-08-02T03:56:45.052208380Z",[2749],{"type":2595,"score":2750},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2752,2754,2756,2758,2760],{"type":2610,"url":2753},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":2610,"url":2755},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":2610,"url":2757},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":2607,"url":2759},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2610,"url":2761},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",[2763,2764,2765],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":112,"slug":2767,"dossier":45,"summary":2768,"aliases":2769,"sourceIds":2772,"published":2773,"modified":2774,"checkedAt":7,"severity":2775,"references":2780,"versionKeys":2787,"packageCount":32,"repositoryCount":526},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2770,2771],"CVE-2026-54279","PYSEC-2026-2112",[112,2771],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2776,2778],{"type":2632,"score":2777},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2779},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2781,2783,2785],{"type":2599,"url":2782},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2607,"url":2784},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2604,"url":2786},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2788,2789,2790,2791,2792,2793,2794,2795],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":113,"slug":2797,"dossier":45,"summary":2798,"aliases":2799,"sourceIds":2802,"published":2803,"modified":2804,"checkedAt":7,"severity":2805,"references":2808,"versionKeys":2828,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2800,2801],"CVE-2024-34069","PYSEC-2026-2043",[113,2801],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2806],{"type":2595,"score":2807},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2809,2811,2813,2815,2816,2818,2820,2822,2824,2826],{"type":2610,"url":2810},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2599,"url":2812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2610,"url":2814},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2607,"url":2699},{"type":2610,"url":2817},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2610,"url":2819},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2610,"url":2821},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2610,"url":2823},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2607,"url":2825},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2599,"url":2827},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2703],{"id":114,"slug":2830,"dossier":45,"summary":2831,"aliases":2832,"sourceIds":2835,"published":2836,"modified":2837,"checkedAt":7,"severity":2838,"references":2841,"versionKeys":2858,"packageCount":32,"repositoryCount":602},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2833,2834],"CVE-2026-44307","PYSEC-2026-2617",[114,2834],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2839],{"type":2632,"score":2840},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2842,2844,2846,2848,2850,2852,2854,2856],{"type":2610,"url":2843},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2599,"url":2845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2610,"url":2847},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2610,"url":2849},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2607,"url":2851},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2610,"url":2853},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2607,"url":2855},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2599,"url":2857},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2859,2860],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":115,"slug":2862,"dossier":45,"summary":2863,"aliases":2864,"sourceIds":2867,"published":2868,"modified":2869,"checkedAt":7,"severity":2870,"references":2873,"versionKeys":2906,"packageCount":32,"repositoryCount":658},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2865,2866],"CVE-2026-22807","PYSEC-2026-2010",[115,2866],"2026-01-21T16:12:54Z","2026-08-07T08:11:59.370441713Z",[2871],{"type":2595,"score":2872},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2874,2876,2878,2880,2882,2884,2886,2888,2890,2892,2894,2896,2898,2900,2902,2904],{"type":2610,"url":2875},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2599,"url":2877},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":2610,"url":2879},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":2610,"url":2881},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":2610,"url":2883},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":2607,"url":2885},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":2610,"url":2887},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":2607,"url":2889},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":2610,"url":2891},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":2599,"url":2893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2610,"url":2895},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":2610,"url":2897},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":2610,"url":2899},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":2610,"url":2901},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2610,"url":2903},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":2610,"url":2905},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",[2907,2908],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":116,"slug":2910,"dossier":45,"summary":2911,"aliases":2912,"sourceIds":2915,"published":2916,"modified":2917,"checkedAt":7,"severity":2918,"references":2923,"versionKeys":2933,"packageCount":32,"repositoryCount":526},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2913,2914],"CVE-2026-34514","PYSEC-2026-2096",[116,2914],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2919,2921],{"type":2632,"score":2920},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2922},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2924,2926,2928,2930,2931],{"type":2604,"url":2925},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2599,"url":2927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2604,"url":2929},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2607,"url":2784},{"type":2599,"url":2932},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2788,2789,2790,2791,2792,2793,2794,2795],{"id":117,"slug":2935,"dossier":89,"summary":2936,"aliases":2937,"sourceIds":2940,"published":2941,"modified":2942,"checkedAt":7,"severity":2943,"references":2946,"versionKeys":2959,"packageCount":32,"repositoryCount":2965},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2938,2939],"CVE-2025-66471","PYSEC-2026-1994",[117,2939],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2944],{"type":2632,"score":2945},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2947,2949,2951,2953,2955,2957],{"type":2610,"url":2948},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2599,"url":2950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2604,"url":2952},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2607,"url":2954},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2607,"url":2956},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2599,"url":2958},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2960,2961,2962,2963,2964],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":118,"slug":2967,"dossier":45,"summary":2968,"aliases":2969,"sourceIds":2973,"published":2974,"modified":2975,"checkedAt":7,"severity":2976,"references":2983,"versionKeys":3005,"packageCount":32,"repositoryCount":104},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2970,2971,2972],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[118,2972],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2977,2979,2981],{"type":2595,"score":2978},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2632,"score":2980},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2595,"score":2982},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2984,2986,2989,2991,2993,2995,2997,2999,3001,3003],{"type":2599,"url":2985},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2987,"url":2988},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2987,"url":2990},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2610,"url":2992},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2607,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2610,"url":2996},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2987,"url":2998},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2599,"url":3000},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2599,"url":3002},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2599,"url":3004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3006,3007,3008],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":119,"slug":3010,"dossier":45,"summary":3011,"aliases":3012,"sourceIds":3015,"published":3016,"modified":3017,"checkedAt":7,"severity":3018,"references":3020,"versionKeys":3034,"packageCount":32,"repositoryCount":658},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3013,3014],"CVE-2025-3933","PYSEC-2026-1977",[119,3014],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[3019],{"type":2595,"score":2690},[3021,3023,3025,3027,3028,3030,3032],{"type":2599,"url":3022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2610,"url":3024},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2610,"url":3026},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2607,"url":2663},{"type":2610,"url":3029},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2607,"url":3031},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2599,"url":3033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2670,2671],{"id":120,"slug":3036,"dossier":89,"summary":3037,"aliases":3038,"sourceIds":3041,"published":3042,"modified":3043,"checkedAt":7,"severity":3044,"references":3047,"versionKeys":3060,"packageCount":32,"repositoryCount":2965},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3039,3040],"CVE-2026-21441","PYSEC-2026-1996",[120,3040],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[3045,3046],{"type":2595,"score":2779},{"type":2632,"score":2945},[3048,3050,3052,3054,3055,3057,3058],{"type":2610,"url":3049},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2599,"url":3051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2604,"url":3053},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2607,"url":2954},{"type":2610,"url":3056},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2607,"url":2956},{"type":2599,"url":3059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2960,2961,2962,2963,2964],{"id":121,"slug":3062,"dossier":45,"summary":3063,"aliases":3064,"sourceIds":3067,"published":3068,"modified":3069,"checkedAt":7,"severity":3070,"references":3073,"versionKeys":3086,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[3065,3066],"CVE-2026-1260","PYSEC-2026-1909",[121,3066],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[3071],{"type":2632,"score":3072},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3074,3076,3078,3080,3082,3084],{"type":2599,"url":3075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":2610,"url":3077},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":2607,"url":3079},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":2610,"url":3081},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":2607,"url":3083},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":2599,"url":3085},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[3087],"pypi:sentencepiece@0.2.0",{"id":122,"slug":3089,"dossier":45,"summary":3090,"aliases":3091,"sourceIds":3094,"published":3095,"modified":3096,"checkedAt":7,"severity":3097,"references":3100,"versionKeys":3113,"packageCount":32,"repositoryCount":658},"ghsa-3c37-wwvx-h642-8520854e","cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads",[3092,3093],"CVE-2026-26209","PYSEC-2026-2123",[122,3093],"2026-03-23T19:16:39.530Z","2026-07-13T07:26:16.551981788Z",[3098],{"type":2595,"score":3099},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3101,3103,3105,3107,3109,3111],{"type":2665,"url":3102},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-3c37-wwvx-h642",{"type":2599,"url":3104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26209",{"type":2604,"url":3106},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F275",{"type":2604,"url":3108},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Fe61a5f365ba610d5907a0ae1bc72769bba34294b",{"type":2607,"url":3110},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2",{"type":2599,"url":3112},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Freleases\u002Ftag\u002F5.9.0",[3114,3115],"pypi:cbor2@5.7.0","pypi:cbor2@5.7.1",{"id":123,"slug":3117,"dossier":45,"summary":3118,"aliases":3119,"sourceIds":3122,"published":3123,"modified":3124,"checkedAt":7,"severity":3125,"references":3128,"versionKeys":3143,"packageCount":32,"repositoryCount":658},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[3120,3121],"CVE-2025-6242","PYSEC-2026-2011",[123,3121],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[3126],{"type":2595,"score":3127},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[3129,3131,3133,3135,3137,3139,3140,3141],{"type":2610,"url":3130},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":2599,"url":3132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":2610,"url":3134},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":2610,"url":3136},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":2610,"url":3138},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":2607,"url":2889},{"type":2607,"url":2885},{"type":2599,"url":3142},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2907,3144],"pypi:vllm@0.8.5.post1",{"id":124,"slug":3146,"dossier":45,"summary":3147,"aliases":3148,"sourceIds":3149,"published":3150,"modified":3151,"checkedAt":7,"severity":3152,"references":3155,"versionKeys":3165,"packageCount":32,"repositoryCount":34},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[],[124],"2026-08-03T20:09:56Z","2026-08-08T03:26:54.875954204Z",[3153],{"type":2595,"score":3154},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3156,3158,3160,3162,3163],{"type":2610,"url":3157},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":2610,"url":3159},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":2610,"url":3161},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":2607,"url":2759},{"type":2610,"url":3164},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",[2763,2764,2765],{"id":125,"slug":3167,"dossier":45,"summary":3168,"aliases":3169,"sourceIds":3172,"published":3173,"modified":3174,"checkedAt":7,"severity":3175,"references":3178,"versionKeys":3200,"packageCount":32,"repositoryCount":104},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[3170,3171],"CVE-2026-34756","PYSEC-2026-2298",[125,3171],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[3176],{"type":2595,"score":3177},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3179,3181,3183,3185,3187,3189,3191,3193,3195,3197,3198],{"type":2604,"url":3180},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":2599,"url":3182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":2604,"url":3184},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":2604,"url":3186},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":2599,"url":3188},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":2599,"url":3190},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":2610,"url":3192},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2987,"url":3194},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":2610,"url":3196},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":2607,"url":2889},{"type":2610,"url":3199},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2907,2908,3144],{"id":126,"slug":3202,"dossier":45,"summary":3203,"aliases":3204,"sourceIds":3206,"published":3207,"modified":3208,"checkedAt":7,"severity":3209,"references":3212,"versionKeys":3220,"packageCount":32,"repositoryCount":34},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[3205],"CVE-2026-69097",[126],"2026-07-24T16:22:02Z","2026-08-04T05:41:05.585188057Z",[3210],{"type":2595,"score":3211},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3213,3215,3217,3218],{"type":2610,"url":3214},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":2610,"url":3216},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":2607,"url":2759},{"type":2610,"url":3219},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",[2763,2764,2765],{"id":127,"slug":3222,"dossier":45,"summary":3223,"aliases":3224,"sourceIds":3227,"published":3228,"modified":3229,"checkedAt":7,"severity":3230,"references":3234,"versionKeys":3243,"packageCount":32,"repositoryCount":526},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3225,3226],"CVE-2026-34517","PYSEC-2026-2099",[127,3226],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3231,3233],{"type":2632,"score":3232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2690},[3235,3237,3239,3241,3242],{"type":2604,"url":3236},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2599,"url":3238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2604,"url":3240},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":128,"slug":3245,"dossier":45,"summary":3246,"aliases":3247,"sourceIds":3250,"published":3251,"modified":3252,"checkedAt":7,"severity":3253,"references":3256,"versionKeys":3270,"packageCount":32,"repositoryCount":104},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[3248,3249],"CVE-2026-47155","PYSEC-2026-2301",[128,3249],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[3254],{"type":2595,"score":3255},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[3257,3259,3261,3263,3265,3267,3268],{"type":2599,"url":3258},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":2599,"url":3260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2987,"url":3262},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":2604,"url":3264},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":2610,"url":3266},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":2607,"url":2889},{"type":2599,"url":3269},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2907,2908,3144],{"id":129,"slug":3272,"dossier":45,"summary":3273,"aliases":3274,"sourceIds":3278,"published":3279,"modified":3280,"checkedAt":7,"severity":3281,"references":3284,"versionKeys":3297,"packageCount":32,"repositoryCount":104},"ghsa-42h5-h8qh-vv9v-4d35a1ef","MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem",[3275,3276,3277],"BIT-mlflow-2026-2614","CVE-2026-2614","PYSEC-2026-2654",[129,3277],"2026-05-11T21:31:35Z","2026-07-13T16:42:45.636199436Z",[3282],{"type":2595,"score":3283},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3285,3287,3289,3291,3293,3295],{"type":2599,"url":3286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2614",{"type":2610,"url":3288},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6e801f4259d96804c73107315b24cef0f6aa115a",{"type":2607,"url":3290},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow",{"type":2610,"url":3292},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F19380271-3fbf-4beb-987e-6fd7069c55e6",{"type":2607,"url":3294},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmlflow",{"type":2599,"url":3296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42h5-h8qh-vv9v",[3298,3299,3300],"pypi:mlflow@3.1.1","pypi:mlflow@3.4.0","pypi:mlflow@3.8.1",{"id":130,"slug":3302,"dossier":89,"summary":3303,"aliases":3304,"sourceIds":3308,"published":3309,"modified":3310,"checkedAt":7,"severity":3311,"references":3313,"versionKeys":3326,"packageCount":32,"repositoryCount":2965},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[3305,3306,3307],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[130,3307],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[3312],{"type":2595,"score":2779},[3314,3316,3318,3320,3322,3324],{"type":2665,"url":3315},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2599,"url":3317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2604,"url":3319},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2610,"url":3321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2607,"url":3323},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2599,"url":3325},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3327,3328,3329,3330,3331,3332,3333,3334],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":131,"slug":3336,"dossier":45,"summary":3337,"aliases":3338,"sourceIds":3342,"published":3343,"modified":3344,"checkedAt":7,"severity":3345,"references":3350,"versionKeys":3368,"packageCount":32,"repositoryCount":104},"ghsa-46r5-x6jq-v8g6-fda1ffbe","MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",[3339,3340,3341],"BIT-mlflow-2026-33866","CVE-2026-33866","PYSEC-2026-94",[131,3341],"2026-04-07T13:16:47Z","2026-06-10T17:02:20.749690187Z",[3346,3348],{"type":2595,"score":3347},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2632,"score":3349},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3351,3353,3355,3357,3359,3361,3362,3364,3366],{"type":2599,"url":3352},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33866",{"type":2604,"url":3354},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21708",{"type":2610,"url":3356},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F005b959cacda05d1423356cfcbd9ebeda8ff96a7",{"type":2665,"url":3358},"https:\u002F\u002Fafine.com\u002Fblogs\u002Fattacking-mlflow-how-ml-artifacts-become-attack-vectors",{"type":2610,"url":3360},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865",{"type":2607,"url":3290},{"type":2610,"url":3363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-94.yaml",{"type":2599,"url":3365},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865\u002F",{"type":2599,"url":3367},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-46r5-x6jq-v8g6",[3298,3299,3300],{"id":132,"slug":3370,"dossier":45,"summary":3371,"aliases":3372,"sourceIds":3375,"published":3376,"modified":3377,"checkedAt":7,"severity":3378,"references":3381,"versionKeys":3394,"packageCount":32,"repositoryCount":102},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3373,3374],"CVE-2025-50182","PYSEC-2026-1997",[132,3374],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3379],{"type":2595,"score":3380},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3382,3384,3386,3388,3389,3391,3392],{"type":2610,"url":3383},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2599,"url":3385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2604,"url":3387},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2607,"url":2954},{"type":2610,"url":3390},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2607,"url":2956},{"type":2599,"url":3393},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2960,2961,2962,2963],{"id":133,"slug":3396,"dossier":45,"summary":3397,"aliases":3398,"sourceIds":3401,"published":3402,"modified":3403,"checkedAt":7,"severity":3404,"references":3408,"versionKeys":3414,"packageCount":32,"repositoryCount":526},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3399,3400],"CVE-2026-54273","PYSEC-2026-2107",[133,3400],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3405,3407],{"type":2632,"score":3406},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2779},[3409,3411,3413],{"type":2599,"url":3410},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2604,"url":3412},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":134,"slug":3416,"dossier":45,"summary":3417,"aliases":3418,"sourceIds":3419,"published":3420,"modified":3421,"checkedAt":7,"severity":3422,"references":3424,"versionKeys":3434,"packageCount":32,"repositoryCount":34},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[],[134],"2026-08-07T15:33:57Z","2026-08-09T02:56:50.755731198Z",[3423],{"type":2595,"score":3154},[3425,3427,3429,3431,3432],{"type":2610,"url":3426},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":2610,"url":3428},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":2610,"url":3430},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":2607,"url":2759},{"type":2610,"url":3433},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",[2763,2764,2765],{"id":135,"slug":3436,"dossier":45,"summary":3437,"aliases":3438,"sourceIds":3441,"published":3442,"modified":3443,"checkedAt":7,"severity":3444,"references":3448,"versionKeys":3452,"packageCount":32,"repositoryCount":526},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3439,3440],"CVE-2026-54275","PYSEC-2026-237",[135,3440],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3445,3447],{"type":2632,"score":3446},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2779},[3449,3451],{"type":2599,"url":3450},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":136,"slug":3454,"dossier":45,"summary":3455,"aliases":3456,"sourceIds":3459,"published":3460,"modified":3461,"checkedAt":7,"severity":3462,"references":3465,"versionKeys":3477,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[3457,3458],"CVE-2025-46570","PYSEC-2025-53",[136,3458],"2025-05-28T18:02:24Z","2026-08-07T08:12:07.737844771Z",[3463],{"type":2595,"score":3464},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3466,3468,3470,3472,3474,3476],{"type":2599,"url":3467},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":2599,"url":3469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2987,"url":3471},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":2604,"url":3473},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":2610,"url":3475},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":2607,"url":2889},[3144],{"id":137,"slug":3479,"dossier":45,"summary":3480,"aliases":3481,"sourceIds":3484,"published":3485,"modified":3486,"checkedAt":7,"severity":3487,"references":3490,"versionKeys":3519,"packageCount":32,"repositoryCount":104},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[3482,3483],"CVE-2026-22778","PYSEC-2026-565",[137,3483],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[3488],{"type":2595,"score":3489},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3491,3493,3495,3497,3499,3501,3502,3504,3505,3507,3509,3511,3513,3514,3515,3517],{"type":2610,"url":3492},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2599,"url":3494},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":2610,"url":3496},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":2610,"url":3498},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":2610,"url":3500},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":2607,"url":2885},{"type":2610,"url":3503},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":2607,"url":2889},{"type":2610,"url":3506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":2599,"url":3508},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2610,"url":3510},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":2610,"url":3512},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":2610,"url":2903},{"type":2610,"url":2905},{"type":2610,"url":3516},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2610,"url":3518},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2907,2908,3144],{"id":138,"slug":3521,"dossier":45,"summary":3522,"aliases":3523,"sourceIds":3526,"published":3527,"modified":3528,"checkedAt":7,"severity":3529,"references":3532,"versionKeys":3545,"packageCount":32,"repositoryCount":658},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3524,3525],"CVE-2025-6921","PYSEC-2026-1980",[138,3525],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[3530],{"type":2595,"score":3531},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3533,3535,3537,3539,3540,3542,3543],{"type":2599,"url":3534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2610,"url":3536},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2610,"url":3538},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2607,"url":2663},{"type":2610,"url":3541},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2607,"url":3031},{"type":2599,"url":3544},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2670,2671],{"id":139,"slug":3547,"dossier":89,"summary":3548,"aliases":3549,"sourceIds":3553,"published":3554,"modified":3555,"checkedAt":7,"severity":3556,"references":3559,"versionKeys":3574,"packageCount":32,"repositoryCount":2965},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3550,3551,3552],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[139,3552],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3557],{"type":2595,"score":3558},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3560,3562,3564,3566,3568,3570,3572,3573],{"type":2665,"url":3561},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2599,"url":3563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2604,"url":3565},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2604,"url":3567},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2604,"url":3569},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2610,"url":3571},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2607,"url":3323},{"type":2599,"url":3325},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":140,"slug":3576,"dossier":45,"summary":3577,"aliases":3578,"sourceIds":3582,"published":3583,"modified":3584,"checkedAt":7,"severity":3585,"references":3588,"versionKeys":3599,"packageCount":32,"repositoryCount":32},"ghsa-4x5p-f36r-mxxr-f02b9eff","mlflow Creates of Temporary File in Directory with Insecure Permissions",[3579,3580,3581],"BIT-mlflow-2025-10279","CVE-2025-10279","PYSEC-2026-1639",[140,3581],"2026-02-02T12:31:14Z","2026-07-07T17:56:10.135090160Z",[3586],{"type":2595,"score":3587},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3589,3591,3593,3594,3596,3597],{"type":2599,"url":3590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-10279",{"type":2610,"url":3592},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a",{"type":2607,"url":3290},{"type":2610,"url":3595},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F01d3b81e-13d1-43aa-b91a-443aec68bdc8",{"type":2607,"url":3294},{"type":2599,"url":3598},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4x5p-f36r-mxxr",[3298],{"id":141,"slug":3601,"dossier":45,"summary":3602,"aliases":3603,"sourceIds":3605,"published":3606,"modified":3607,"checkedAt":7,"severity":3608,"references":3611,"versionKeys":3616,"packageCount":32,"repositoryCount":658},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[3604],"CVE-2026-58203",[141],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[3609],{"type":2595,"score":3610},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3612,3614],{"type":2610,"url":3613},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":2607,"url":3615},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[3617],"pypi:pydantic-settings@2.12.0",{"id":142,"slug":3619,"dossier":89,"summary":3620,"aliases":3621,"sourceIds":3624,"published":3625,"modified":3626,"checkedAt":7,"severity":3627,"references":3630,"versionKeys":3653,"packageCount":32,"repositoryCount":2965},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3622,3623],"CVE-2026-4539","PYSEC-2026-2987",[142,3623],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3628,3629],{"type":2595,"score":2978},{"type":2632,"score":2980},[3631,3633,3635,3637,3639,3641,3643,3645,3647,3649,3651],{"type":2599,"url":3632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2610,"url":3634},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2610,"url":3636},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2610,"url":3638},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2607,"url":3640},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2610,"url":3642},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2610,"url":3644},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2610,"url":3646},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2610,"url":3648},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2607,"url":3650},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2599,"url":3652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3654,3655],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":143,"slug":3657,"dossier":45,"summary":3658,"aliases":3659,"sourceIds":3660,"published":3661,"modified":3662,"checkedAt":7,"severity":3663,"references":3665,"versionKeys":3672,"packageCount":32,"repositoryCount":102},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[143],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3664],{"type":2595,"score":2779},[3666,3668,3670],{"type":2610,"url":3667},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2607,"url":3669},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2610,"url":3671},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3673,3674,3675,3676,3677,3678],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":144,"slug":3680,"dossier":45,"summary":3681,"aliases":3682,"sourceIds":3683,"published":3684,"modified":3685,"checkedAt":7,"severity":3686,"references":3689,"versionKeys":3697,"packageCount":32,"repositoryCount":34},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[],[144],"2026-08-03T20:14:28Z","2026-08-08T03:26:54.618366791Z",[3687],{"type":2595,"score":3688},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3690,3692,3693,3695,3696],{"type":2610,"url":3691},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":2610,"url":3159},{"type":2610,"url":3694},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":2607,"url":2759},{"type":2610,"url":3164},[2763,2764,2765],{"id":145,"slug":3699,"dossier":45,"summary":3700,"aliases":3701,"sourceIds":3705,"published":3706,"modified":3707,"checkedAt":7,"severity":3708,"references":3712,"versionKeys":3722,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3702,3703,3704],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[145,3704],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3709,3711],{"type":2632,"score":3710},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":3489},[3713,3715,3717,3719,3721],{"type":2599,"url":3714},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2599,"url":3716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2610,"url":3718},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2610,"url":3720},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2607,"url":2994},[3006],{"id":146,"slug":3724,"dossier":45,"summary":3725,"aliases":3726,"sourceIds":3729,"published":3730,"modified":3731,"checkedAt":7,"severity":3732,"references":3735,"versionKeys":3747,"packageCount":32,"repositoryCount":102},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3727,3728],"CVE-2025-69226","PYSEC-2026-1097",[146,3728],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3733],{"type":2632,"score":3734},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3736,3738,3740,3742,3743,3745],{"type":2610,"url":3737},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2599,"url":3739},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2604,"url":3741},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2607,"url":2784},{"type":2607,"url":3744},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2599,"url":3746},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2788,2789,2790,2791,2792,2793,2794],{"id":147,"slug":3749,"dossier":45,"summary":3750,"aliases":3751,"sourceIds":3755,"published":3756,"modified":3757,"checkedAt":7,"severity":3758,"references":3761,"versionKeys":3776,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3752,3753,3754],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[147,3754],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3759],{"type":2595,"score":3760},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3762,3764,3766,3768,3770,3772,3774],{"type":2610,"url":3763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2599,"url":3765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2610,"url":3767},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2604,"url":3769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2607,"url":3771},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2607,"url":3773},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2599,"url":3775},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3777,3778,3779,3780],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":148,"slug":3782,"dossier":45,"summary":3783,"aliases":3784,"sourceIds":3787,"published":3788,"modified":3789,"checkedAt":7,"severity":3790,"references":3794,"versionKeys":3807,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3785,3786],"CVE-2024-53981","PYSEC-2026-1851",[148,3786],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3791,3792],{"type":2595,"score":2779},{"type":2632,"score":3793},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3795,3797,3799,3801,3803,3805],{"type":2610,"url":3796},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2599,"url":3798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2610,"url":3800},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2607,"url":3802},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2607,"url":3804},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2599,"url":3806},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3808],"pypi:python-multipart@0.0.9",{"id":149,"slug":3810,"dossier":45,"summary":3811,"aliases":3812,"sourceIds":3815,"published":3816,"modified":3817,"checkedAt":7,"severity":3818,"references":3820,"versionKeys":3831,"packageCount":32,"repositoryCount":658},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3813,3814],"CVE-2025-6638","PYSEC-2026-1981",[149,3814],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3819],{"type":2595,"score":3531},[3821,3823,3824,3825,3826,3828,3829],{"type":2599,"url":3822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2610,"url":3536},{"type":2610,"url":3538},{"type":2607,"url":2663},{"type":2610,"url":3827},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2607,"url":3031},{"type":2599,"url":3830},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2670,2671],{"id":150,"slug":3833,"dossier":45,"summary":3834,"aliases":3835,"sourceIds":3838,"published":3839,"modified":3840,"checkedAt":7,"severity":3841,"references":3845,"versionKeys":3860,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[3836,3837],"CVE-2025-57809","PYSEC-2026-2054",[150,3837],"2025-08-25T20:43:45Z","2026-08-07T08:12:03.416511779Z",[3842,3843],{"type":2595,"score":2779},{"type":2632,"score":3844},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3846,3848,3850,3852,3854,3856,3858],{"type":2610,"url":3847},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":2599,"url":3849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":2610,"url":3851},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":2610,"url":3853},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":2607,"url":3855},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":2607,"url":3857},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":2599,"url":3859},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[3861],"pypi:xgrammar@0.1.18",{"id":151,"slug":3863,"dossier":45,"summary":3864,"aliases":3865,"sourceIds":3868,"published":3869,"modified":3870,"checkedAt":7,"severity":3871,"references":3874,"versionKeys":3885,"packageCount":32,"repositoryCount":32},"ghsa-5h2m-4q8j-pqpj-f167fb9b","FastMCP OAuth Proxy token reuse across MCP servers",[3866,3867],"CVE-2025-69196","PYSEC-2026-2474",[151,3867],"2026-03-16T15:14:55Z","2026-07-13T16:43:46.045162193Z",[3872],{"type":2632,"score":3873},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3875,3877,3879,3881,3883],{"type":2610,"url":3876},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-5h2m-4q8j-pqpj",{"type":2599,"url":3878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69196",{"type":2607,"url":3880},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp",{"type":2607,"url":3882},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffastmcp",{"type":2599,"url":3884},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5h2m-4q8j-pqpj",[3886],"pypi:fastmcp@2.12.3",{"id":152,"slug":3888,"dossier":45,"summary":3889,"aliases":3890,"sourceIds":3893,"published":3894,"modified":3895,"checkedAt":7,"severity":3896,"references":3901,"versionKeys":3916,"packageCount":32,"repositoryCount":104},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[3891,3892],"CVE-2026-53923","PYSEC-2026-3403",[152,3892],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[3897,3899],{"type":2595,"score":3898},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2632,"score":3900},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3902,3904,3906,3908,3910,3912,3914,3915],{"type":2610,"url":3903},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2599,"url":3905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":2610,"url":3907},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":2610,"url":3909},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":2599,"url":3911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2610,"url":3913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":153,"slug":3918,"dossier":45,"summary":3919,"aliases":3920,"sourceIds":3924,"published":3925,"modified":3926,"checkedAt":7,"severity":3927,"references":3934,"versionKeys":3956,"packageCount":32,"repositoryCount":104},"ghsa-5qmp-p3c4-72qj-0f202987","MLflow: Deterministic sampling in dataset digest enables predictable collisions",[3921,3922,3923],"BIT-mlflow-2026-10803","CVE-2026-10803","PYSEC-2026-195",[153,3923],"2026-06-04T12:16:24.440Z","2026-07-23T15:00:15.414047693Z",[3928,3930,3932],{"type":2595,"score":3929},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2632,"score":3931},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2632,"score":3933},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3935,3937,3939,3941,3942,3944,3946,3948,3950,3952,3954],{"type":2599,"url":3936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10803",{"type":2987,"url":3938},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fissues\u002F22419",{"type":2987,"url":3940},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F22420",{"type":2607,"url":3290},{"type":2610,"url":3943},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-195.yaml",{"type":2599,"url":3945},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10803",{"type":2599,"url":3947},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831462",{"type":2599,"url":3949},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252",{"type":2987,"url":3951},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252\u002Fcti",{"type":2610,"url":3953},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002F",{"type":2599,"url":3955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qmp-p3c4-72qj",[3298,3299,3300],{"id":154,"slug":3958,"dossier":45,"summary":3959,"aliases":3960,"sourceIds":3964,"published":3965,"modified":3966,"checkedAt":7,"severity":3967,"references":3971,"versionKeys":3988,"packageCount":32,"repositoryCount":104},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3961,3962,3963],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[154,3963],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3968,3970],{"type":2632,"score":3969},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2595,"score":2750},[3972,3974,3976,3978,3980,3982,3984,3986],{"type":2665,"url":3973},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2599,"url":3975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2987,"url":3977},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2604,"url":3979},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2610,"url":3981},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2607,"url":3983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2610,"url":3985},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2613,"url":3987},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3989,3990,3991],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":155,"slug":3993,"dossier":45,"summary":3994,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4003,"versionKeys":4012,"packageCount":32,"repositoryCount":602},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3996,3997],"CVE-2026-53539","PYSEC-2026-3036",[155,3997],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[4002],{"type":2595,"score":2779},[4004,4006,4007,4008,4010],{"type":2610,"url":4005},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2607,"url":3802},{"type":2607,"url":3804},{"type":2599,"url":4009},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2599,"url":4011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4013,4014,3808],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":156,"slug":4016,"dossier":89,"summary":4017,"aliases":4018,"sourceIds":4022,"published":4023,"modified":4024,"checkedAt":7,"severity":4025,"references":4027,"versionKeys":4037,"packageCount":32,"repositoryCount":2965},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4019,4020,4021],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[156,4021],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[4026],{"type":2595,"score":2779},[4028,4030,4032,4033,4035,4036],{"type":2665,"url":4029},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2599,"url":4031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2604,"url":3319},{"type":2610,"url":4034},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2607,"url":3323},{"type":2599,"url":3325},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":157,"slug":4039,"dossier":45,"summary":4040,"aliases":4041,"sourceIds":4045,"published":4046,"modified":4047,"checkedAt":7,"severity":4048,"references":4052,"versionKeys":4060,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[4042,4043,4044],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[157,4044],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[4049,4050],{"type":2595,"score":2982},{"type":2632,"score":4051},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4053,4055,4057,4058],{"type":2599,"url":4054},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2599,"url":4056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2607,"url":3323},{"type":2599,"url":4059},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3330,3331,3332,3333,3334],{"id":158,"slug":4062,"dossier":89,"summary":4063,"aliases":4064,"sourceIds":4068,"published":4069,"modified":4070,"checkedAt":7,"severity":4071,"references":4074,"versionKeys":4090,"packageCount":32,"repositoryCount":2965},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[4065,4066,4067],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[158,4067],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[4072],{"type":2632,"score":4073},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4075,4077,4079,4081,4083,4084,4086,4088],{"type":2610,"url":4076},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2599,"url":4078},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2610,"url":4080},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2610,"url":4082},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2607,"url":3323},{"type":2610,"url":4085},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2607,"url":4087},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2599,"url":4089},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":159,"slug":4092,"dossier":45,"summary":4093,"aliases":4094,"sourceIds":4097,"published":4098,"modified":4099,"checkedAt":7,"severity":4100,"references":4106,"versionKeys":4117,"packageCount":32,"repositoryCount":526},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[4095,4096],"CVE-2026-34520","PYSEC-2026-2102",[159,4096],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[4101,4103,4104],{"type":2595,"score":4102},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2632,"score":2920},{"type":2632,"score":4105},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4107,4109,4111,4113,4114,4115],{"type":2604,"url":4108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2599,"url":4110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2604,"url":4112},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2607,"url":2784},{"type":2599,"url":2932},{"type":2610,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2788,2789,2790,2791,2792,2793,2794,2795],{"id":160,"slug":4119,"dossier":45,"summary":4120,"aliases":4121,"sourceIds":4124,"published":4125,"modified":4126,"checkedAt":7,"severity":4127,"references":4130,"versionKeys":4136,"packageCount":32,"repositoryCount":526},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[4122,4123],"CVE-2026-54277","PYSEC-2026-2110",[160,4123],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[4128,4129],{"type":2632,"score":3406},{"type":2595,"score":2779},[4131,4133,4135],{"type":2599,"url":4132},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2604,"url":4134},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":161,"slug":4138,"dossier":45,"summary":4139,"aliases":4140,"sourceIds":4143,"published":4144,"modified":4145,"checkedAt":7,"severity":4146,"references":4148,"versionKeys":4189,"packageCount":32,"repositoryCount":102},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[4141,4142],"CVE-2026-23490","PYSEC-2026-1810",[161,4142],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[4147],{"type":2595,"score":2779},[4149,4151,4153,4155,4157,4159,4161,4163,4165,4167,4169,4171,4173,4175,4177,4179,4181,4183,4185,4187],{"type":2610,"url":4150},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2599,"url":4152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2610,"url":4154},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2610,"url":4156},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2610,"url":4158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":2610,"url":4160},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":2610,"url":4162},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":2610,"url":4164},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":2610,"url":4166},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":2610,"url":4168},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":2610,"url":4170},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":2610,"url":4172},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":2610,"url":4174},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":2610,"url":4176},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":2610,"url":4178},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":2610,"url":4180},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":2607,"url":4182},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2610,"url":4184},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2610,"url":4186},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2610,"url":4188},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[4190],"pypi:pyasn1@0.6.1",{"id":162,"slug":4192,"dossier":45,"summary":4193,"aliases":4194,"sourceIds":4198,"published":4199,"modified":4200,"checkedAt":7,"severity":4201,"references":4204,"versionKeys":4214,"packageCount":32,"repositoryCount":104},"ghsa-65h7-c7c4-mghx-fc09466d","MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability",[4195,4196,4197],"BIT-mlflow-2026-2393","CVE-2026-2393","PYSEC-2026-2219",[162,4197],"2026-05-11T18:16:31.500Z","2026-07-13T16:45:08.114491424Z",[4202],{"type":2595,"score":4203},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4205,4207,4209,4210,4212],{"type":2599,"url":4206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2393",{"type":2604,"url":4208},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F64aa0ab7207f9c649b59ba1a5f40d82196817389",{"type":2607,"url":3290},{"type":2665,"url":4211},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F04ef100d-06b5-4a70-95b1-b7be23aa8150",{"type":2599,"url":4213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-65h7-c7c4-mghx",[3298,3299,3300],{"id":163,"slug":4216,"dossier":89,"summary":4217,"aliases":4218,"sourceIds":4221,"published":4222,"modified":4223,"checkedAt":7,"severity":4224,"references":4228,"versionKeys":4237,"packageCount":32,"repositoryCount":4241},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[4219,4220],"CVE-2026-45409","PYSEC-2026-215",[163,4220],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[4225,4226],{"type":2595,"score":2690},{"type":2632,"score":4227},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4229,4231,4233,4235],{"type":2599,"url":4230},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2599,"url":4232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2607,"url":4234},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2610,"url":4236},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[4238,4239,4240],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":164,"slug":4243,"dossier":45,"summary":4244,"aliases":4245,"sourceIds":4248,"published":4249,"modified":4250,"checkedAt":7,"severity":4251,"references":4256,"versionKeys":4267,"packageCount":32,"repositoryCount":64},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[4246,4247],"CVE-2026-27205","PYSEC-2026-2151",[164,4247],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[4252,4254],{"type":2632,"score":4253},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":4255},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4257,4259,4261,4263,4265],{"type":2599,"url":4258},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2599,"url":4260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2604,"url":4262},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2607,"url":4264},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2599,"url":4266},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[4268,4269,4270,4271],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":165,"slug":4273,"dossier":45,"summary":4274,"aliases":4275,"sourceIds":4278,"published":4279,"modified":4280,"checkedAt":7,"severity":4281,"references":4283,"versionKeys":4294,"packageCount":32,"repositoryCount":102},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4276,4277],"CVE-2025-69224","PYSEC-2026-1099",[165,4277],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4282],{"type":2632,"score":2920},[4284,4286,4288,4290,4291,4292],{"type":2610,"url":4285},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2599,"url":4287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2604,"url":4289},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":4293},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2788,2789,2790,2791,2792,2793,2794],{"id":166,"slug":4296,"dossier":45,"summary":4297,"aliases":4298,"sourceIds":4301,"published":4302,"modified":4303,"checkedAt":7,"severity":4304,"references":4306,"versionKeys":4325,"packageCount":32,"repositoryCount":104},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[4299,4300],"CVE-2025-62426","PYSEC-2026-2012",[166,4300],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[4305],{"type":2595,"score":3177},[4307,4309,4311,4313,4315,4317,4319,4320,4322,4324],{"type":2610,"url":4308},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2599,"url":4310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":2610,"url":4312},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":2610,"url":4314},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":2599,"url":4316},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2610,"url":4318},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":2607,"url":2889},{"type":2610,"url":4321},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":2610,"url":4323},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":2607,"url":2885},[2907,2908,3144],{"id":167,"slug":4327,"dossier":45,"summary":4328,"aliases":4329,"sourceIds":4332,"published":4333,"modified":4334,"checkedAt":7,"severity":4335,"references":4340,"versionKeys":4352,"packageCount":32,"repositoryCount":546},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[4330,4331],"CVE-2026-1839","PYSEC-2026-2288",[167,4331],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[4336,4338],{"type":2595,"score":4337},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2595,"score":4339},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4341,4343,4345,4346,4348,4350],{"type":2599,"url":4342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2604,"url":4344},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2607,"url":2663},{"type":2610,"url":4347},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2665,"url":4349},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2599,"url":4351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2670,2671,2672,2673,2674,2675,2676],{"id":168,"slug":4354,"dossier":45,"summary":4355,"aliases":4356,"sourceIds":4359,"published":4360,"modified":4361,"checkedAt":7,"severity":4362,"references":4367,"versionKeys":4381,"packageCount":32,"repositoryCount":104},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[4357,4358],"CVE-2026-34760","PYSEC-2026-2299",[168,4358],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[4363,4365],{"type":2595,"score":4364},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":2595,"score":4366},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4368,4370,4372,4374,4376,4378,4379],{"type":2599,"url":4369},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":2599,"url":4371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2987,"url":4373},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":2604,"url":4375},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":2610,"url":4377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":2607,"url":2889},{"type":2599,"url":4380},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2907,2908,3144],{"id":169,"slug":4383,"dossier":45,"summary":4384,"aliases":4385,"sourceIds":4388,"published":4389,"modified":4390,"checkedAt":7,"severity":4391,"references":4393,"versionKeys":4406,"packageCount":32,"repositoryCount":658},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[4386,4387],"CVE-2025-61620","PYSEC-2026-2013",[169,4387],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[4392],{"type":2595,"score":3177},[4394,4396,4398,4400,4401,4402,4404],{"type":2610,"url":4395},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2610,"url":4397},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":2610,"url":4399},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":2607,"url":2889},{"type":2607,"url":2885},{"type":2599,"url":4403},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2599,"url":4405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2907,3144],{"id":170,"slug":4408,"dossier":45,"summary":4409,"aliases":4410,"sourceIds":4413,"published":4414,"modified":4415,"checkedAt":7,"severity":4416,"references":4418,"versionKeys":4429,"packageCount":32,"repositoryCount":102},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4411,4412],"CVE-2025-69228","PYSEC-2026-1100",[170,4412],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4417],{"type":2632,"score":3406},[4419,4421,4423,4425,4426,4427],{"type":2610,"url":4420},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2599,"url":4422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2604,"url":4424},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":4428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2788,2789,2790,2791,2792,2793,2794],{"id":171,"slug":4431,"dossier":45,"summary":4432,"aliases":4433,"sourceIds":4436,"published":4437,"modified":4438,"checkedAt":7,"severity":4439,"references":4442,"versionKeys":4451,"packageCount":32,"repositoryCount":602},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4434,4435],"CVE-2026-53538","PYSEC-2026-3037",[171,4435],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4440],{"type":2595,"score":4441},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4443,4445,4446,4447,4449],{"type":2610,"url":4444},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2607,"url":3802},{"type":2607,"url":3804},{"type":2599,"url":4448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2599,"url":4450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4013,4014,3808],{"id":172,"slug":4453,"dossier":45,"summary":4454,"aliases":4455,"sourceIds":4458,"published":4459,"modified":4460,"checkedAt":7,"severity":4461,"references":4463,"versionKeys":4474,"packageCount":32,"repositoryCount":102},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4456,4457],"CVE-2025-69223","PYSEC-2026-1101",[172,4457],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4462],{"type":2595,"score":2779},[4464,4466,4468,4470,4471,4472],{"type":2610,"url":4465},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2599,"url":4467},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2604,"url":4469},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":4473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2788,2789,2790,2791,2792,2793,2794],{"id":173,"slug":4476,"dossier":45,"summary":4477,"aliases":4478,"sourceIds":4479,"published":4480,"modified":4481,"checkedAt":7,"severity":4482,"references":4485,"versionKeys":4495,"packageCount":32,"repositoryCount":34},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[],[173],"2026-07-24T16:42:09Z","2026-07-25T21:44:40.055637633Z",[4483],{"type":2595,"score":4484},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4486,4488,4490,4492,4493],{"type":2610,"url":4487},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":2610,"url":4489},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":2610,"url":4491},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":2607,"url":2759},{"type":2610,"url":4494},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",[2763,2764,2765],{"id":174,"slug":4497,"dossier":45,"summary":4498,"aliases":4499,"sourceIds":4502,"published":4503,"modified":4504,"checkedAt":7,"severity":4505,"references":4507,"versionKeys":4524,"packageCount":32,"repositoryCount":104},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[4500,4501],"CVE-2026-54233","PYSEC-2026-3404",[174,4501],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[4506],{"type":2595,"score":3177},[4508,4510,4512,4514,4516,4518,4520,4521,4523],{"type":2610,"url":4509},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2599,"url":4511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":2610,"url":4513},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":2610,"url":4515},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":2599,"url":4517},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2610,"url":4519},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":2607,"url":2889},{"type":2610,"url":4522},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":2607,"url":2885},[2907,2908,3144],{"id":175,"slug":4526,"dossier":45,"summary":4527,"aliases":4528,"sourceIds":4531,"published":4532,"modified":4533,"checkedAt":7,"severity":4534,"references":4536,"versionKeys":4550,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[4529,4530],"CVE-2025-48942","PYSEC-2025-54",[175,4530],"2025-05-28T19:41:53Z","2026-08-07T08:12:01.995568358Z",[4535],{"type":2595,"score":3177},[4537,4539,4541,4543,4545,4547,4549],{"type":2665,"url":4538},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":2599,"url":4540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2987,"url":4542},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2987,"url":4544},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":2604,"url":4546},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":2610,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":2607,"url":2889},[3144],{"id":176,"slug":4552,"dossier":89,"summary":4553,"aliases":4554,"sourceIds":4558,"published":4559,"modified":4560,"checkedAt":7,"severity":4561,"references":4563,"versionKeys":4576,"packageCount":32,"repositoryCount":2965},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4555,4556,4557],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[176,4557],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[4562],{"type":2595,"score":2779},[4564,4566,4568,4570,4572,4574,4575],{"type":2665,"url":4565},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2599,"url":4567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2604,"url":4569},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2604,"url":4571},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2610,"url":4573},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2607,"url":3323},{"type":2599,"url":4085},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":177,"slug":4578,"dossier":45,"summary":4579,"aliases":4580,"sourceIds":4583,"published":4584,"modified":4585,"checkedAt":7,"severity":4586,"references":4588,"versionKeys":4599,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4581,4582],"CVE-2024-12720","PYSEC-2026-1982",[177,4582],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[4587],{"type":2595,"score":3531},[4589,4591,4593,4594,4596,4597],{"type":2599,"url":4590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2610,"url":4592},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2607,"url":2663},{"type":2610,"url":4595},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2607,"url":3031},{"type":2599,"url":4598},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2670],{"id":178,"slug":4601,"dossier":45,"summary":4602,"aliases":4603,"sourceIds":4606,"published":4607,"modified":4608,"checkedAt":7,"severity":4609,"references":4611,"versionKeys":4620,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[4604,4605],"CVE-2026-57585","PYSEC-2026-3625",[178,4605],"2026-06-19T21:42:55Z","2026-08-07T09:55:56.955079633Z",[4610],{"type":2595,"score":2779},[4612,4614,4616,4618],{"type":2599,"url":4613},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2604,"url":4615},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2607,"url":4617},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2610,"url":4619},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[4621,4622,4623],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":179,"slug":4625,"dossier":45,"summary":4626,"aliases":4627,"sourceIds":4630,"published":4631,"modified":4632,"checkedAt":7,"severity":4633,"references":4635,"versionKeys":4668,"packageCount":32,"repositoryCount":658},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[4628,4629],"CVE-2023-48022","PYSEC-2026-517",[179,4629],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[4634],{"type":2595,"score":3489},[4636,4638,4640,4642,4644,4646,4648,4650,4652,4654,4656,4658,4660,4662,4664,4666],{"type":2599,"url":4637},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":2610,"url":4639},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":2610,"url":4641},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":2610,"url":4643},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":2610,"url":4645},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":2610,"url":4647},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":2610,"url":4649},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":2599,"url":4651},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":2610,"url":4653},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":2607,"url":4655},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":2610,"url":4657},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":2610,"url":4659},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":2610,"url":4661},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":2610,"url":4663},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":2610,"url":4665},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":2607,"url":4667},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[4669,4670],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":180,"slug":4672,"dossier":45,"summary":4673,"aliases":4674,"sourceIds":4677,"published":4678,"modified":4679,"checkedAt":7,"severity":4680,"references":4685,"versionKeys":4696,"packageCount":32,"repositoryCount":32},"ghsa-7432-952r-cw78-bf3fc71f","Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle",[4675,4676],"CVE-2026-28490","PYSEC-2026-2116",[180,4676],"2026-03-16T15:17:28Z","2026-07-13T07:26:14.887077371Z",[4681,4683],{"type":2632,"score":4682},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":4684},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4686,4688,4690,4692,4694],{"type":2665,"url":4687},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-7432-952r-cw78",{"type":2599,"url":4689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28490",{"type":2604,"url":4691},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F48b345f29f6c459f11c6a40162b6c0b742ef2e22",{"type":2607,"url":4693},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib",{"type":2599,"url":4695},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.9",[4697],"pypi:authlib@1.6.4",{"id":181,"slug":4699,"dossier":45,"summary":4700,"aliases":4701,"sourceIds":4704,"published":4705,"modified":4706,"checkedAt":7,"severity":4707,"references":4712,"versionKeys":4720,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[4702,4703],"CVE-2026-44243","PYSEC-2026-2162",[181,4703],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[4708,4710],{"type":2595,"score":4709},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2632,"score":4711},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4713,4715,4717,4718],{"type":2665,"url":4714},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2599,"url":4716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2607,"url":2759},{"type":2604,"url":4719},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[2763,2764,2765],{"id":182,"slug":4722,"dossier":45,"summary":4723,"aliases":4724,"sourceIds":4728,"published":4729,"modified":4730,"checkedAt":7,"severity":4731,"references":4734,"versionKeys":4744,"packageCount":32,"repositoryCount":104},"ghsa-75cm-x2w3-8mgf-213b4d71","MLflow: unauthenticated access to certain FastAPI routes",[4725,4726,4727],"BIT-mlflow-2026-2652","CVE-2026-2652","PYSEC-2026-2221",[182,4727],"2026-05-15T03:16:23.127Z","2026-07-13T16:45:09.381556404Z",[4732],{"type":2595,"score":4733},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4735,4737,4739,4740,4742],{"type":2599,"url":4736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2652",{"type":2604,"url":4738},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa",{"type":2607,"url":3290},{"type":2665,"url":4741},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756",{"type":2599,"url":4743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-75cm-x2w3-8mgf",[3298,3299,3300],{"id":183,"slug":4746,"dossier":45,"summary":4747,"aliases":4748,"sourceIds":4751,"published":4752,"modified":4753,"checkedAt":7,"severity":4754,"references":4757,"versionKeys":4770,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4749,4750],"CVE-2025-66034","PYSEC-2026-1389",[183,4750],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[4755],{"type":2595,"score":4756},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4758,4760,4762,4764,4766,4768],{"type":2610,"url":4759},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2599,"url":4761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2610,"url":4763},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2607,"url":4765},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2607,"url":4767},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2599,"url":4769},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4771,4772,4773,4774,4775],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":184,"slug":4777,"dossier":45,"summary":4778,"aliases":4779,"sourceIds":4782,"published":4783,"modified":4784,"checkedAt":7,"severity":4785,"references":4787,"versionKeys":4825,"packageCount":32,"repositoryCount":658},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[4780,4781],"CVE-2026-27893","PYSEC-2026-2297",[184,4781],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[4786],{"type":2595,"score":2872},[4788,4790,4792,4794,4796,4798,4799,4801,4803,4805,4807,4809,4811,4813,4815,4817,4819,4821,4823],{"type":2599,"url":4789},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":2599,"url":4791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2987,"url":4793},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":2604,"url":4795},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":2610,"url":4797},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":2607,"url":2889},{"type":2610,"url":4800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2987,"url":4802},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":2610,"url":4804},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":2599,"url":4806},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":2599,"url":4808},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":2599,"url":4810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":2599,"url":4812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2599,"url":4814},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2599,"url":4816},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":2599,"url":4818},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":2599,"url":4820},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":2599,"url":4822},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":2599,"url":4824},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2907,2908],{"id":185,"slug":4827,"dossier":45,"summary":3658,"aliases":4828,"sourceIds":4831,"published":4832,"modified":4833,"checkedAt":7,"severity":4834,"references":4835,"versionKeys":4853,"packageCount":32,"repositoryCount":104},"ghsa-79v4-65xg-pq4g-b911b371",[4829,4830],"CVE-2024-12797","PYSEC-2026-1284",[185,4830],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4836,4838,4840,4842,4844,4846,4847,4849,4851],{"type":2610,"url":4837},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2599,"url":4839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2610,"url":4841},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2610,"url":4843},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2610,"url":4845},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2607,"url":3669},{"type":2610,"url":4848},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2607,"url":4850},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2599,"url":4852},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3673,3674,3675],{"id":186,"slug":4855,"dossier":45,"summary":4856,"aliases":4857,"sourceIds":4860,"published":4861,"modified":4862,"checkedAt":7,"severity":4863,"references":4865,"versionKeys":4882,"packageCount":32,"repositoryCount":602},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4858,4859],"CVE-2025-62727","PYSEC-2026-1942",[186,4859],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4864],{"type":2595,"score":2779},[4866,4868,4870,4872,4875,4877,4879,4880],{"type":2610,"url":4867},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2599,"url":4869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2604,"url":4871},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4873,"url":4874},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2607,"url":4876},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2610,"url":4878},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2607,"url":2733},{"type":2599,"url":4881},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2738,2739,4883,4884],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":187,"slug":4886,"dossier":45,"summary":4887,"aliases":4888,"sourceIds":4891,"published":4892,"modified":4893,"checkedAt":7,"severity":4894,"references":4897,"versionKeys":4914,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4889,4890],"CVE-2026-0994","PYSEC-2026-1805",[187,4890],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4895],{"type":2632,"score":4896},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4898,4900,4902,4904,4906,4908,4910,4912],{"type":2599,"url":4899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2610,"url":4901},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2610,"url":4903},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2610,"url":4905},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2610,"url":4907},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2607,"url":4909},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2607,"url":4911},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2599,"url":4913},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4915,4916,4917,4918,4919,4920,4921,4922,4923],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":188,"slug":4925,"dossier":45,"summary":4926,"aliases":4927,"sourceIds":4930,"published":4931,"modified":4932,"checkedAt":7,"severity":4933,"references":4937,"versionKeys":4952,"packageCount":32,"repositoryCount":104},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[4928,4929],"CVE-2026-54235","PYSEC-2026-3405",[188,4929],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[4934,4936],{"type":2595,"score":4935},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2632,"score":4227},[4938,4940,4942,4944,4946,4948,4950,4951],{"type":2610,"url":4939},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2599,"url":4941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":2610,"url":4943},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":2610,"url":4945},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":2599,"url":4947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2610,"url":4949},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":189,"slug":4954,"dossier":45,"summary":4955,"aliases":4956,"sourceIds":4959,"published":4960,"modified":4961,"checkedAt":7,"severity":4962,"references":4965,"versionKeys":4974,"packageCount":32,"repositoryCount":104},"ghsa-7qhf-v65m-g5f3-235f2d72","mlflow: FastAPI job endpoints under `\u002Fajax-api\u002F3.0\u002Fjobs\u002F*` are not protected by authentication or authorization",[4957,4958],"CVE-2026-0545","PYSEC-2026-419",[189,4958],"2026-04-03T18:31:23Z","2026-07-01T20:22:58.301401Z",[4963],{"type":2595,"score":4964},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4966,4968,4969,4971,4972],{"type":2599,"url":4967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0545",{"type":2607,"url":3290},{"type":2610,"url":4970},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fb2e5b028-9541-4d29-8703-a76f1a3734d8",{"type":2607,"url":3294},{"type":2599,"url":4973},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7qhf-v65m-g5f3",[3298,3299,3300],{"id":190,"slug":4976,"dossier":45,"summary":4977,"aliases":4978,"sourceIds":4981,"published":4982,"modified":4983,"checkedAt":7,"severity":4984,"references":4987,"versionKeys":5008,"packageCount":32,"repositoryCount":104},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[4979,4980],"CVE-2026-25048","PYSEC-2026-2322",[190,4980],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[4985,4986],{"type":2632,"score":3793},{"type":2595,"score":2779},[4988,4990,4992,4993,4995,4997,4999,5000,5002,5004,5006],{"type":2665,"url":4989},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":2599,"url":4991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":2607,"url":3855},{"type":2599,"url":4994},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":2610,"url":4996},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":2610,"url":4998},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":2599,"url":4814},{"type":2599,"url":5001},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":2599,"url":5003},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":2599,"url":5005},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2987,"url":5007},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[3861,5009,5010],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":191,"slug":5012,"dossier":45,"summary":5013,"aliases":5014,"sourceIds":5017,"published":5018,"modified":5019,"checkedAt":7,"severity":5020,"references":5022,"versionKeys":5026,"packageCount":32,"repositoryCount":546},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5015,5016],"CVE-2026-54283","PYSEC-2026-249",[191,5016],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[5021],{"type":2595,"score":2779},[5023,5025],{"type":2599,"url":5024},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2607,"url":4876},[2737,2738,2739,4883,4884,5027,5028],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":192,"slug":5030,"dossier":45,"summary":5031,"aliases":5032,"sourceIds":5036,"published":5037,"modified":5038,"checkedAt":7,"severity":5039,"references":5042,"versionKeys":5079,"packageCount":32,"repositoryCount":546},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5033,5034,5035],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[192,5034],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[5040],{"type":2595,"score":5041},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5043,5045,5047,5049,5051,5053,5055,5057,5059,5061,5062,5064,5067,5069,5071,5073,5075,5077],{"type":2599,"url":5044},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2599,"url":5046},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2604,"url":5048},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2610,"url":5050},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2613,"url":5052},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2610,"url":5054},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2610,"url":5056},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2610,"url":5058},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2610,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2607,"url":4876},{"type":2610,"url":5063},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5065,"url":5066},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2610,"url":5068},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2610,"url":5070},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2610,"url":5072},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2610,"url":5074},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2613,"url":5076},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2599,"url":5078},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2737,2738,2739,4883,4884,5027,5028],{"id":193,"slug":5081,"dossier":45,"summary":5082,"aliases":5083,"sourceIds":5086,"published":5087,"modified":5088,"checkedAt":7,"severity":5089,"references":5092,"versionKeys":5103,"packageCount":32,"repositoryCount":602},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[5084,5085],"CVE-2026-21860","PYSEC-2026-2044",[193,5085],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[5090,5091],{"type":2595,"score":2690},{"type":2632,"score":2688},[5093,5095,5097,5099,5100,5101],{"type":2610,"url":5094},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2599,"url":5096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2610,"url":5098},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2607,"url":2699},{"type":2607,"url":2825},{"type":2599,"url":5102},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2703,2704,2705,2706],{"id":194,"slug":5105,"dossier":45,"summary":5106,"aliases":5107,"sourceIds":5111,"published":5112,"modified":5113,"checkedAt":7,"severity":5114,"references":5118,"versionKeys":5140,"packageCount":32,"repositoryCount":102},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[5108,5109,5110],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[194,5110],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[5115,5116],{"type":2595,"score":2978},{"type":2632,"score":5117},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5119,5121,5123,5125,5127,5129,5130,5132,5134,5136,5138],{"type":2599,"url":5120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2610,"url":5122},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2610,"url":5124},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2610,"url":5126},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2610,"url":5128},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2607,"url":2994},{"type":2610,"url":5131},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2610,"url":5133},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2610,"url":5135},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2607,"url":5137},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2599,"url":5139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3006,3007,3008,5141,5142],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":195,"slug":5144,"dossier":45,"summary":5145,"aliases":5146,"sourceIds":5150,"published":5151,"modified":5152,"checkedAt":7,"severity":5153,"references":5158,"versionKeys":5174,"packageCount":32,"repositoryCount":104},"ghsa-8c7q-86fq-vvmh-be4df9cc","MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled",[5147,5148,5149],"BIT-mlflow-2026-2651","CVE-2026-2651","PYSEC-2026-2220",[195,5149],"2026-05-25T07:16:15.100Z","2026-07-14T05:30:20.380332392Z",[5154,5156],{"type":2595,"score":5155},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2595,"score":5157},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5159,5161,5163,5165,5167,5168,5170,5172],{"type":2599,"url":5160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2651",{"type":2604,"url":5162},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fd7290811d8f3c95366d80109424edc1fb1ad966f",{"type":2610,"url":5164},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-2651",{"type":2987,"url":5166},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481117",{"type":2607,"url":3290},{"type":2665,"url":5169},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F65beb119-d3e0-4e03-af2f-fa98f78f83dc",{"type":2610,"url":5171},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-2651.json",{"type":2599,"url":5173},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8c7q-86fq-vvmh",[3298,3299,3300],{"id":196,"slug":5176,"dossier":45,"summary":5177,"aliases":5178,"sourceIds":5181,"published":5182,"modified":5183,"checkedAt":7,"severity":5184,"references":5187,"versionKeys":5202,"packageCount":32,"repositoryCount":104},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[5179,5180],"CVE-2025-66448","PYSEC-2026-2015",[196,5180],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[5185],{"type":2595,"score":5186},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5188,5190,5192,5194,5196,5198,5200,5201],{"type":2610,"url":5189},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2599,"url":5191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":2610,"url":5193},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":2610,"url":5195},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":2599,"url":5197},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2610,"url":5199},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":197,"slug":5204,"dossier":45,"summary":5205,"aliases":5206,"sourceIds":5209,"published":5210,"modified":5211,"checkedAt":7,"severity":5212,"references":5215,"versionKeys":5234,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[5207,5208],"CVE-2026-12491","PYSEC-2026-3406",[197,5208],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[5213],{"type":2595,"score":5214},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[5216,5218,5220,5222,5224,5226,5228,5230,5232,5233],{"type":2610,"url":5217},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2599,"url":5219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":2610,"url":5221},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":2610,"url":5223},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":2610,"url":5225},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":2610,"url":5227},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":2599,"url":5229},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2610,"url":5231},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2908],{"id":198,"slug":5236,"dossier":45,"summary":5237,"aliases":5238,"sourceIds":5241,"published":5242,"modified":5243,"checkedAt":7,"severity":5244,"references":5246,"versionKeys":5256,"packageCount":32,"repositoryCount":546},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[5239,5240],"CVE-2026-59885","PYSEC-2026-3456",[198,5240],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[5245],{"type":2595,"score":2779},[5247,5249,5251,5253,5254],{"type":2599,"url":5248},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":2599,"url":5250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":2604,"url":5252},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":2607,"url":4182},{"type":2599,"url":5255},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[4190,5257],"pypi:pyasn1@0.6.3",{"id":199,"slug":5259,"dossier":45,"summary":5260,"aliases":5261,"sourceIds":5264,"published":5265,"modified":5266,"checkedAt":7,"severity":5267,"references":5270,"versionKeys":5289,"packageCount":32,"repositoryCount":104},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[5262,5263],"CVE-2025-4565","PYSEC-2026-1806",[199,5263],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[5268],{"type":2632,"score":5269},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5271,5273,5275,5277,5279,5280,5282,5284,5286,5287],{"type":2610,"url":5272},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2610,"url":5274},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2599,"url":5276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2610,"url":5278},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2607,"url":4909},{"type":2610,"url":5281},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2610,"url":5283},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2610,"url":5285},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2607,"url":4911},{"type":2599,"url":5288},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4915,4917,4918],{"id":200,"slug":5291,"dossier":89,"summary":5292,"aliases":5293,"sourceIds":5297,"published":5298,"modified":5299,"checkedAt":7,"severity":5300,"references":5302,"versionKeys":5312,"packageCount":32,"repositoryCount":2965},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[5294,5295,5296],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[200,5296],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[5301],{"type":2595,"score":2779},[5303,5305,5307,5308,5310,5311],{"type":2665,"url":5304},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2599,"url":5306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2604,"url":3319},{"type":2610,"url":5309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2607,"url":3323},{"type":2599,"url":3325},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":201,"slug":5314,"dossier":45,"summary":5315,"aliases":5316,"sourceIds":5319,"published":5320,"modified":5321,"checkedAt":7,"severity":5322,"references":5324,"versionKeys":5337,"packageCount":32,"repositoryCount":658},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[5317,5318],"CVE-2025-5197","PYSEC-2026-1983",[201,5318],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[5323],{"type":2595,"score":3531},[5325,5327,5329,5331,5332,5334,5335],{"type":2599,"url":5326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2610,"url":5328},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2610,"url":5330},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2607,"url":2663},{"type":2610,"url":5333},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2607,"url":3031},{"type":2599,"url":5336},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2670,2671],{"id":202,"slug":5339,"dossier":45,"summary":5340,"aliases":5341,"sourceIds":5344,"published":5345,"modified":5346,"checkedAt":7,"severity":5347,"references":5350,"versionKeys":5378,"packageCount":32,"repositoryCount":104},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[5342,5343],"CVE-2026-48746","PYSEC-2026-226",[202,5343],"2026-06-16T17:36:41Z","2026-07-22T12:46:58.979336878Z",[5348],{"type":2595,"score":5349},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[5351,5353,5355,5357,5359,5361,5362,5364,5366,5368,5369,5370,5372,5374,5375,5376],{"type":2599,"url":5352},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":2599,"url":5354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2987,"url":5356},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":2599,"url":5358},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2610,"url":5360},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":2607,"url":2889},{"type":2610,"url":5363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":2610,"url":5365},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":2610,"url":5367},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":2610,"url":5074},{"type":2610,"url":2901},{"type":2610,"url":5371},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42142",{"type":2610,"url":5373},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42132",{"type":2610,"url":3190},{"type":2610,"url":3188},{"type":2610,"url":5377},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",[2907,2908,3144],{"id":203,"slug":5380,"dossier":45,"summary":5381,"aliases":5382,"sourceIds":5383,"published":5384,"modified":5385,"checkedAt":7,"severity":5386,"references":5388,"versionKeys":5396,"packageCount":32,"repositoryCount":34},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[],[203],"2026-07-24T21:45:16Z","2026-07-25T21:44:41.451010015Z",[5387],{"type":2595,"score":3898},[5389,5391,5393,5394],{"type":2610,"url":5390},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":2610,"url":5392},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":2607,"url":2759},{"type":2610,"url":5395},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",[2763,2764,2765],{"id":204,"slug":5398,"dossier":45,"summary":5399,"aliases":5400,"sourceIds":5403,"published":5404,"modified":5405,"checkedAt":7,"severity":5406,"references":5409,"versionKeys":5420,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[5401,5402],"CVE-2025-53643","PYSEC-2026-1104",[204,5402],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[5407],{"type":2632,"score":5408},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5410,5412,5414,5416,5417,5418],{"type":2610,"url":5411},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2599,"url":5413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2604,"url":5415},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":5419},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2788,2789,2790,2791],{"id":205,"slug":5422,"dossier":45,"summary":5423,"aliases":5424,"sourceIds":5426,"published":5427,"modified":5428,"checkedAt":7,"severity":5429,"references":5432,"versionKeys":5441,"packageCount":32,"repositoryCount":34},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[5425],"CVE-2026-67323",[205],"2026-07-21T20:10:06Z","2026-08-02T03:56:47.832026599Z",[5430],{"type":2595,"score":5431},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5433,5435,5437,5439,5440],{"type":2610,"url":5434},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":2610,"url":5436},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":2610,"url":5438},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":2607,"url":2759},{"type":2610,"url":2761},[2763,2764,2765],{"id":206,"slug":5443,"dossier":45,"summary":5444,"aliases":5445,"sourceIds":5448,"published":5449,"modified":5450,"checkedAt":7,"severity":5451,"references":5455,"versionKeys":5464,"packageCount":32,"repositoryCount":526},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[5446,5447],"CVE-2026-34518","PYSEC-2026-2100",[206,5447],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[5452,5454],{"type":2595,"score":5453},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2632,"score":3734},[5456,5458,5460,5462,5463],{"type":2604,"url":5457},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2599,"url":5459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2604,"url":5461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":207,"slug":5466,"dossier":45,"summary":5467,"aliases":5468,"sourceIds":5471,"published":5472,"modified":5473,"checkedAt":7,"severity":5474,"references":5478,"versionKeys":5497,"packageCount":32,"repositoryCount":104},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[5469,5470],"CVE-2026-9540","PYSEC-2026-3407",[207,5470],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[5475,5476],{"type":2595,"score":2690},{"type":2632,"score":5477},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5479,5481,5483,5485,5486,5488,5490,5492,5494,5495],{"type":2599,"url":5480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":2610,"url":5482},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":2610,"url":5484},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":2607,"url":2889},{"type":2610,"url":5487},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":2610,"url":5489},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":2610,"url":5491},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":2610,"url":5493},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":2607,"url":2885},{"type":2599,"url":5496},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2907,2908,3144],{"id":208,"slug":5499,"dossier":45,"summary":5500,"aliases":5501,"sourceIds":5504,"published":5505,"modified":5506,"checkedAt":7,"severity":5507,"references":5510,"versionKeys":5525,"packageCount":32,"repositoryCount":658},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[5502,5503],"CVE-2025-66416","PYSEC-2026-1617",[208,5503],"2025-12-02T16:52:08Z","2026-07-16T18:45:48.199773308Z",[5508],{"type":2632,"score":5509},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5511,5513,5515,5517,5519,5521,5523],{"type":2610,"url":5512},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2599,"url":5514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":2610,"url":5516},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":2599,"url":5518},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2607,"url":5520},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":2610,"url":5522},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":2607,"url":5524},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5526,5527],"pypi:mcp@1.10.0","pypi:mcp@1.14.1",{"id":209,"slug":5529,"dossier":45,"summary":5530,"aliases":5531,"sourceIds":5534,"published":5535,"modified":5536,"checkedAt":7,"severity":5537,"references":5539,"versionKeys":5551,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[5532,5533],"CVE-2025-48943","PYSEC-2025-55",[209,5533],"2025-05-28T19:42:12Z","2026-08-07T08:12:07.476205432Z",[5538],{"type":2595,"score":3177},[5540,5542,5544,5546,5547,5548,5550],{"type":2599,"url":5541},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":2599,"url":5543},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2987,"url":5545},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2987,"url":4544},{"type":2604,"url":4546},{"type":2610,"url":5549},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":2607,"url":2889},[3144],{"id":210,"slug":5553,"dossier":45,"summary":5554,"aliases":5555,"sourceIds":5558,"published":5559,"modified":5560,"checkedAt":7,"severity":5561,"references":5564,"versionKeys":5583,"packageCount":32,"repositoryCount":102},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[5556,5557],"CVE-2024-47081","PYSEC-2026-1872",[210,5557],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[5562],{"type":2595,"score":5563},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5565,5567,5569,5571,5573,5575,5577,5579,5581],{"type":2610,"url":5566},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2599,"url":5568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2610,"url":5570},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2604,"url":5572},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2607,"url":5574},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2610,"url":5576},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2610,"url":5578},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2607,"url":5580},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2599,"url":5582},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[5584,5585],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":211,"slug":5587,"dossier":89,"summary":5588,"aliases":5589,"sourceIds":5593,"published":5594,"modified":5595,"checkedAt":7,"severity":5596,"references":5598,"versionKeys":5611,"packageCount":32,"repositoryCount":2965},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[5590,5591,5592],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[211,5592],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[5597],{"type":2595,"score":2779},[5599,5601,5603,5605,5607,5609,5610],{"type":2665,"url":5600},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2599,"url":5602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2604,"url":5604},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2604,"url":5606},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2610,"url":5608},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2607,"url":3323},{"type":2599,"url":4085},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":212,"slug":5613,"dossier":45,"summary":5614,"aliases":5615,"sourceIds":5618,"published":5619,"modified":5620,"checkedAt":7,"severity":5621,"references":5624,"versionKeys":5639,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[5616,5617],"CVE-2025-30165","PYSEC-2026-2017",[212,5617],"2025-05-06T16:38:35Z","2026-08-07T08:12:19.063707308Z",[5622],{"type":2595,"score":5623},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5625,5627,5629,5631,5633,5634,5636,5638],{"type":2610,"url":5626},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2599,"url":5628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":2599,"url":5630},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2610,"url":5632},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":2607,"url":2889},{"type":2610,"url":5635},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":2610,"url":5637},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":2607,"url":2885},[3144],{"id":213,"slug":5641,"dossier":45,"summary":5642,"aliases":5643,"sourceIds":5644,"published":5645,"modified":5646,"checkedAt":7,"severity":5647,"references":5649,"versionKeys":5657,"packageCount":32,"repositoryCount":34},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[],[213],"2026-08-07T15:36:43Z","2026-08-09T02:56:51.068532802Z",[5648],{"type":2595,"score":4484},[5650,5652,5653,5655,5656],{"type":2610,"url":5651},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":2610,"url":3428},{"type":2610,"url":5654},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":2607,"url":2759},{"type":2610,"url":3433},[2763,2764,2765],{"id":214,"slug":5659,"dossier":45,"summary":5660,"aliases":5661,"sourceIds":5664,"published":5665,"modified":5666,"checkedAt":7,"severity":5667,"references":5670,"versionKeys":5687,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[5662,5663],"CVE-2024-35195","PYSEC-2026-1873",[214,5663],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[5668],{"type":2595,"score":5669},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5671,5673,5675,5677,5679,5680,5682,5684,5685],{"type":2610,"url":5672},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2599,"url":5674},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2610,"url":5676},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2604,"url":5678},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2607,"url":5574},{"type":2610,"url":5681},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2610,"url":5683},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2607,"url":5580},{"type":2599,"url":5686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[5584],{"id":215,"slug":5689,"dossier":45,"summary":5690,"aliases":5691,"sourceIds":5694,"published":5695,"modified":5696,"checkedAt":7,"severity":5697,"references":5701,"versionKeys":5707,"packageCount":32,"repositoryCount":526},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5692,5693],"CVE-2026-54280","PYSEC-2026-2113",[215,5693],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5698,5700],{"type":2632,"score":5699},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":2779},[5702,5704,5706],{"type":2599,"url":5703},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2604,"url":5705},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":216,"slug":5709,"dossier":45,"summary":5710,"aliases":5711,"sourceIds":5712,"published":5713,"modified":5714,"checkedAt":7,"severity":5715,"references":5718,"versionKeys":5723,"packageCount":32,"repositoryCount":32},"ghsa-c2jp-c369-7pvx-e9d6578c","FastMCP Auth Integration Allows for Confused Deputy Account Takeover",[],[216],"2025-10-29T15:38:07Z","2026-02-03T03:11:14.390341Z",[5716],{"type":2632,"score":5717},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5719,5721],{"type":2610,"url":5720},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-c2jp-c369-7pvx",{"type":2607,"url":5722},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp",[3886],{"id":217,"slug":5725,"dossier":45,"summary":5726,"aliases":5727,"sourceIds":5730,"published":5731,"modified":5732,"checkedAt":7,"severity":5733,"references":5737,"versionKeys":5748,"packageCount":32,"repositoryCount":526},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5728,5729],"CVE-2026-34525","PYSEC-2026-2103",[217,5729],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5734,5736],{"type":2632,"score":5735},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2595,"score":2922},[5738,5740,5742,5744,5746,5747],{"type":2604,"url":5739},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2599,"url":5741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2604,"url":5743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2604,"url":5745},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":218,"slug":5750,"dossier":45,"summary":5751,"aliases":5752,"sourceIds":5755,"published":5756,"modified":5757,"checkedAt":7,"severity":5758,"references":5761,"versionKeys":5773,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[5753,5754],"CVE-2025-46722","PYSEC-2025-43",[218,5754],"2025-05-28T18:03:41Z","2026-08-07T08:12:03.917531780Z",[5759],{"type":2595,"score":5760},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[5762,5764,5766,5768,5770,5772],{"type":2599,"url":5763},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":2599,"url":5765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":2610,"url":5767},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":2604,"url":5769},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":2610,"url":5771},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":2607,"url":2889},[3144],{"id":219,"slug":5775,"dossier":45,"summary":5776,"aliases":5777,"sourceIds":5781,"published":5782,"modified":5783,"checkedAt":7,"severity":5784,"references":5789,"versionKeys":5805,"packageCount":32,"repositoryCount":658},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[5778,5779,5780],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[219],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[5785,5787],{"type":2595,"score":5786},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2632,"score":5788},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5790,5792,5794,5796,5797,5799,5801,5803],{"type":2599,"url":5791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2610,"url":5793},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2610,"url":5795},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2607,"url":2994},{"type":2610,"url":5798},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2610,"url":5800},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2610,"url":5802},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2610,"url":5804},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3006,3007],{"id":220,"slug":5807,"dossier":45,"summary":5808,"aliases":5809,"sourceIds":5813,"published":5814,"modified":5815,"checkedAt":7,"severity":5816,"references":5820,"versionKeys":5857,"packageCount":32,"repositoryCount":5858},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5810,5811,5812],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[220,5812],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5817,5819],{"type":2632,"score":5818},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":2779},[5821,5823,5825,5827,5829,5831,5832,5834,5836,5838,5840,5842,5844,5846,5847,5849,5850,5851,5853,5855],{"type":2610,"url":5822},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2599,"url":5824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2610,"url":5826},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2610,"url":5828},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2610,"url":5830},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2607,"url":3323},{"type":2610,"url":5833},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2610,"url":5835},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2610,"url":5837},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2599,"url":5839},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2599,"url":5841},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2599,"url":5843},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2599,"url":5845},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2599,"url":4824},{"type":2599,"url":5848},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2599,"url":3518},{"type":2599,"url":3516},{"type":2599,"url":5852},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2599,"url":5854},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2599,"url":5856},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3327,3328,3329,3330,3331,3332,3333],12,{"id":221,"slug":5860,"dossier":45,"summary":5861,"aliases":5862,"sourceIds":5865,"published":5866,"modified":5867,"checkedAt":7,"severity":5868,"references":5871,"versionKeys":5888,"packageCount":32,"repositoryCount":658},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5863,5864],"CVE-2025-27516","PYSEC-2026-1471",[221,5864],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5869],{"type":2632,"score":5870},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5872,5874,5876,5878,5880,5882,5884,5886],{"type":2610,"url":5873},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2599,"url":5875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2604,"url":5877},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2607,"url":5879},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2610,"url":5881},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2610,"url":5883},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2607,"url":5885},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2599,"url":5887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5889,5890],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":222,"slug":5892,"dossier":45,"summary":5893,"aliases":5894,"sourceIds":5897,"published":5898,"modified":5899,"checkedAt":7,"severity":5900,"references":5903,"versionKeys":5918,"packageCount":32,"repositoryCount":5920},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[5895,5896],"CVE-2026-69244","PYSEC-2026-3545",[222,5896],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[5901],{"type":2632,"score":5902},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5904,5906,5908,5910,5911,5913,5914,5916],{"type":2610,"url":5905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2610,"url":5907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2610,"url":5909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2607,"url":2784},{"type":2610,"url":5912},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2607,"url":3744},{"type":2599,"url":5915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2599,"url":5917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2788,2789,2790,2791,2792,2793,2794,2795,5919],"pypi:aiohttp@3.14.1",11,{"id":223,"slug":5922,"dossier":45,"summary":5923,"aliases":5924,"sourceIds":5928,"published":5929,"modified":5930,"checkedAt":7,"severity":5931,"references":5935,"versionKeys":5951,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5925,5926,5927],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[223,5927],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[5932,5933],{"type":2595,"score":2872},{"type":2632,"score":5934},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5936,5938,5940,5942,5943,5945,5947,5949],{"type":2599,"url":5937},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2610,"url":5939},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2610,"url":5941},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2607,"url":3983},{"type":2610,"url":5944},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2610,"url":5946},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2607,"url":5948},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2599,"url":5950},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3989],{"id":224,"slug":5953,"dossier":45,"summary":5954,"aliases":5955,"sourceIds":5959,"published":5960,"modified":5961,"checkedAt":7,"severity":5962,"references":5964,"versionKeys":5976,"packageCount":32,"repositoryCount":104},"ghsa-f2m9-wcf4-cwwx-e7c3cfb2","MLFlow Creates a Temporary File With Insecure Permissions",[5956,5957,5958],"BIT-mlflow-2026-4137","CVE-2026-4137","PYSEC-2026-2655",[224,5958],"2026-05-18T21:31:53Z","2026-07-13T16:43:33.416174314Z",[5963],{"type":2595,"score":3587},[5965,5967,5969,5970,5971,5973,5974],{"type":2599,"url":5966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4137",{"type":2610,"url":5968},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1dcbb0c2fbd1f446c328830e601ca13a28219b8a",{"type":2599,"url":3598},{"type":2607,"url":3290},{"type":2610,"url":5972},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F648dc30b-76c7-4433-86b8-f43d926fd8d6",{"type":2607,"url":3294},{"type":2599,"url":5975},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2m9-wcf4-cwwx",[3298,3299,3300],{"id":225,"slug":5978,"dossier":45,"summary":5979,"aliases":5980,"sourceIds":5984,"published":5985,"modified":5986,"checkedAt":7,"severity":5987,"references":5991,"versionKeys":6009,"packageCount":32,"repositoryCount":658},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5981,5982,5983],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[225],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5988,5989],{"type":2595,"score":3610},{"type":2632,"score":5990},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5992,5994,5996,5998,6000,6002,6003,6005,6007],{"type":2599,"url":5993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2610,"url":5995},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2610,"url":5997},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2610,"url":5999},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2610,"url":6001},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2607,"url":2994},{"type":2610,"url":6004},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2610,"url":6006},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2610,"url":6008},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3006,3007],{"id":226,"slug":6011,"dossier":45,"summary":6012,"aliases":6013,"sourceIds":6016,"published":6017,"modified":6018,"checkedAt":7,"severity":6019,"references":6023,"versionKeys":6034,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[6014,6015],"CVE-2024-47874","PYSEC-2026-1943",[226,6015],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[6020,6022],{"type":2595,"score":6021},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2632,"score":3793},[6024,6026,6028,6030,6031,6032],{"type":2610,"url":6025},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2599,"url":6027},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2604,"url":6029},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2607,"url":2727},{"type":2607,"url":2733},{"type":2599,"url":6033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2737],{"id":227,"slug":6036,"dossier":45,"summary":6037,"aliases":6038,"sourceIds":6041,"published":6042,"modified":6043,"checkedAt":7,"severity":6044,"references":6047,"versionKeys":6062,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[6039,6040],"CVE-2024-49766","PYSEC-2026-2045",[227,6040],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[6045],{"type":2632,"score":6046},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6048,6050,6052,6054,6055,6057,6059,6060],{"type":2610,"url":6049},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2599,"url":6051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2604,"url":6053},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2607,"url":2699},{"type":2610,"url":6056},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2610,"url":6058},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2607,"url":2825},{"type":2599,"url":6061},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2703],{"id":228,"slug":6064,"dossier":45,"summary":6065,"aliases":6066,"sourceIds":6069,"published":6070,"modified":6071,"checkedAt":7,"severity":6072,"references":6075,"versionKeys":6089,"packageCount":32,"repositoryCount":32},"ghsa-fg6f-75jq-6523-c927e5c8","Authlib has 1-click Account Takeover vulnerability",[6067,6068],"CVE-2025-68158","PYSEC-2026-1201",[228,6068],"2026-01-08T22:40:56Z","2026-07-07T17:56:30.898731290Z",[6073],{"type":2595,"score":6074},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6076,6078,6080,6082,6084,6085,6087],{"type":2610,"url":6077},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",{"type":2599,"url":6079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68158",{"type":2610,"url":6081},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F2808378611dd6fb2532b189a9087877d8f0c0489",{"type":2610,"url":6083},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F7974f45e4d7492ab5f527577677f2770ce423228",{"type":2607,"url":4693},{"type":2607,"url":6086},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fauthlib",{"type":2599,"url":6088},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",[4697],{"id":229,"slug":6091,"dossier":45,"summary":6092,"aliases":6093,"sourceIds":6096,"published":6097,"modified":6098,"checkedAt":7,"severity":6099,"references":6104,"versionKeys":6126,"packageCount":32,"repositoryCount":546},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[6094,6095],"CVE-2026-5241","PYSEC-2026-2290",[229,6095],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[6100,6102],{"type":2595,"score":6101},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2595,"score":6103},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6105,6107,6109,6111,6112,6113,6115,6117,6118,6120,6122,6124],{"type":2599,"url":6106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2604,"url":6108},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2599,"url":6110},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2599,"url":4812},{"type":2610,"url":2901},{"type":2610,"url":6114},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2987,"url":6116},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2607,"url":2663},{"type":2610,"url":6119},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2665,"url":6121},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2610,"url":6123},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2599,"url":6125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2670,2671,2672,2673,2674,2675,2676],{"id":230,"slug":6128,"dossier":45,"summary":6129,"aliases":6130,"sourceIds":6133,"published":6134,"modified":6135,"checkedAt":7,"severity":6136,"references":6139,"versionKeys":6150,"packageCount":32,"repositoryCount":102},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[6131,6132],"CVE-2025-69230","PYSEC-2026-1105",[230,6132],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[6137],{"type":2632,"score":6138},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6140,6142,6144,6146,6147,6148],{"type":2610,"url":6141},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2599,"url":6143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2604,"url":6145},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":6149},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2788,2789,2790,2791,2792,2793,2794],{"id":231,"slug":6152,"dossier":45,"summary":6153,"aliases":6154,"sourceIds":6158,"published":6159,"modified":6160,"checkedAt":7,"severity":6161,"references":6166,"versionKeys":6181,"packageCount":32,"repositoryCount":104},"ghsa-fh64-r2vc-xvhr-8b7ea4aa","MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface",[6155,6156,6157],"BIT-mlflow-2026-33865","CVE-2026-33865","PYSEC-2026-93",[231,6157],"2026-04-07T13:16:46.840Z","2026-06-10T17:02:20.155874108Z",[6162,6164],{"type":2595,"score":6163},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2632,"score":6165},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[6167,6169,6171,6173,6174,6175,6176,6178,6179],{"type":2599,"url":6168},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33865",{"type":2604,"url":6170},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21435",{"type":2610,"url":6172},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Faca4dd0ec88a12f7655155c224371280e9b45dda",{"type":2665,"url":3358},{"type":2610,"url":3360},{"type":2607,"url":3290},{"type":2610,"url":6177},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-93.yaml",{"type":2599,"url":3365},{"type":2599,"url":6180},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh64-r2vc-xvhr",[3298,3299,3300],{"id":232,"slug":6183,"dossier":45,"summary":6184,"aliases":6185,"sourceIds":6189,"published":6190,"modified":6191,"checkedAt":7,"severity":6192,"references":6195,"versionKeys":6208,"packageCount":32,"repositoryCount":104},"ghsa-fhff-qmm8-h2fp-244bab2b","Arbitrary file write via tar traversal in mlflow",[6186,6187,6188],"BIT-mlflow-2025-15031","CVE-2025-15031","PYSEC-2026-2656",[232,6188],"2026-03-19T00:30:20Z","2026-07-13T16:43:21.433539748Z",[6193],{"type":2595,"score":6194},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6196,6198,6200,6201,6203,6205,6206],{"type":2599,"url":6197},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15031",{"type":2610,"url":6199},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346",{"type":2607,"url":3290},{"type":2610,"url":6202},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Ffe4d9be330426904283401f1d2ed914238b6fc37\u002Fmlflow\u002Fpyfunc\u002Fdbconnect_artifact_cache.py#L140",{"type":2610,"url":6204},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F09856f77-f968-446f-a930-657d126efe4e",{"type":2607,"url":3294},{"type":2599,"url":6207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fhff-qmm8-h2fp",[3298,3299,3300],{"id":233,"slug":6210,"dossier":89,"summary":6211,"aliases":6212,"sourceIds":6216,"published":6217,"modified":6218,"checkedAt":7,"severity":6219,"references":6222,"versionKeys":6236,"packageCount":32,"repositoryCount":2965},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[6213,6214,6215],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[233,6215],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[6220],{"type":2595,"score":6221},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6223,6225,6227,6229,6231,6232,6233,6234],{"type":2610,"url":6224},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2599,"url":6226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2610,"url":6228},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2610,"url":6230},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2607,"url":3323},{"type":2610,"url":4085},{"type":2607,"url":4087},{"type":2599,"url":6235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":234,"slug":6238,"dossier":45,"summary":6239,"aliases":6240,"sourceIds":6241,"published":6242,"modified":6243,"checkedAt":7,"severity":6244,"references":6246,"versionKeys":6254,"packageCount":32,"repositoryCount":34},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[],[234],"2026-07-24T16:41:20Z","2026-07-25T21:44:39.974035175Z",[6245],{"type":2595,"score":3154},[6247,6249,6250,6252,6253],{"type":2610,"url":6248},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":2610,"url":4489},{"type":2610,"url":6251},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":2607,"url":2759},{"type":2610,"url":4494},[2763,2764,2765],{"id":235,"slug":6256,"dossier":45,"summary":4579,"aliases":6257,"sourceIds":6260,"published":6261,"modified":6262,"checkedAt":7,"severity":6263,"references":6266,"versionKeys":6277,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[6258,6259],"CVE-2025-1194","PYSEC-2026-1984",[235,6259],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[6264],{"type":2595,"score":6265},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6267,6269,6271,6272,6274,6275],{"type":2599,"url":6268},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2610,"url":6270},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2607,"url":2663},{"type":2610,"url":6273},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2607,"url":3031},{"type":2599,"url":6276},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2670],{"id":236,"slug":6279,"dossier":45,"summary":6280,"aliases":6281,"sourceIds":6285,"published":6286,"modified":6287,"checkedAt":7,"severity":6288,"references":6293,"versionKeys":6309,"packageCount":32,"repositoryCount":104},"ghsa-g35p-px32-whv6-8b66e41b","MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration",[6282,6283,6284],"BIT-mlflow-2026-4035","CVE-2026-4035","PYSEC-2026-2222",[236,6284],"2026-06-03T09:16:13.083Z","2026-07-13T16:45:04.877817766Z",[6289,6291],{"type":2595,"score":6290},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:L",{"type":2595,"score":6292},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[6294,6296,6298,6300,6302,6303,6305,6307],{"type":2599,"url":6295},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4035",{"type":2604,"url":6297},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3",{"type":2610,"url":6299},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-4035",{"type":2987,"url":6301},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484318",{"type":2607,"url":3290},{"type":2665,"url":6304},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff8e591a0-0f19-4910-b82e-16c9956f2233",{"type":2610,"url":6306},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-4035.json",{"type":2599,"url":6308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g35p-px32-whv6",[3298,3299,3300],{"id":237,"slug":6311,"dossier":45,"summary":6312,"aliases":6313,"sourceIds":6316,"published":6317,"modified":6318,"checkedAt":7,"severity":6319,"references":6322,"versionKeys":6328,"packageCount":32,"repositoryCount":526},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[6314,6315],"CVE-2026-54278","PYSEC-2026-2111",[237,6315],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[6320,6321],{"type":2632,"score":3406},{"type":2595,"score":2779},[6323,6325,6326],{"type":2599,"url":6324},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2607,"url":2784},{"type":2604,"url":6327},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2788,2789,2790,2791,2792,2793,2794,2795],{"id":238,"slug":6330,"dossier":45,"summary":6331,"aliases":6332,"sourceIds":6335,"published":6336,"modified":6337,"checkedAt":7,"severity":6338,"references":6341,"versionKeys":6354,"packageCount":32,"repositoryCount":102},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[6333,6334],"CVE-2026-69247","PYSEC-2026-3552",[238,6334],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[6339],{"type":2632,"score":6340},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6342,6344,6346,6348,6349,6350,6352],{"type":2610,"url":6343},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2610,"url":6345},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2610,"url":6347},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2607,"url":3669},{"type":2607,"url":4850},{"type":2599,"url":6351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2599,"url":6353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[3675,3676,3677,3678,6355,6356],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":239,"slug":6358,"dossier":45,"summary":6359,"aliases":6360,"sourceIds":6363,"published":6364,"modified":6365,"checkedAt":7,"severity":6366,"references":6369,"versionKeys":6380,"packageCount":32,"repositoryCount":104},"ghsa-g6pg-52vf-843h-da352526","MLFlow allows Tracing + Assessments Access",[6361,6362],"CVE-2025-15381","PYSEC-2026-2657",[239,6362],"2026-03-27T18:31:27Z","2026-07-13T16:43:42.935139106Z",[6367],{"type":2595,"score":6368},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6370,6372,6373,6375,6377,6378],{"type":2599,"url":6371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15381",{"type":2607,"url":3290},{"type":2610,"url":6374},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Fb569ebc74c14af593c326143bee2df44a5d59edf\u002Fmlflow\u002Fserver\u002Fauth\u002F__init__.py#L752",{"type":2610,"url":6376},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F149fb2f9-ef4b-4136-a25c-20563451904c",{"type":2607,"url":3294},{"type":2599,"url":6379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6pg-52vf-843h",[3298,3299,3300],{"id":240,"slug":6382,"dossier":45,"summary":6383,"aliases":6384,"sourceIds":6387,"published":6388,"modified":6389,"checkedAt":7,"severity":6390,"references":6392,"versionKeys":6405,"packageCount":32,"repositoryCount":32},"ghsa-g7f3-828f-7h7m-12134915","Authlib : JWE zip=DEF decompression bomb enables DoS",[6385,6386],"CVE-2025-62706","PYSEC-2026-1202",[240,6386],"2025-10-10T22:54:03Z","2026-07-07T17:57:19.270494442Z",[6391],{"type":2595,"score":3177},[6393,6395,6397,6399,6400,6402,6403],{"type":2610,"url":6394},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",{"type":2599,"url":6396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62706",{"type":2610,"url":6398},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fe0863d5129316b1790eee5f14cece32a03b8184d",{"type":2607,"url":4693},{"type":2610,"url":6401},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00032.html",{"type":2607,"url":6086},{"type":2599,"url":6404},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",[4697],{"id":241,"slug":6407,"dossier":45,"summary":6408,"aliases":6409,"sourceIds":6412,"published":6413,"modified":6414,"checkedAt":7,"severity":6415,"references":6418,"versionKeys":6437,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[6410,6411],"CVE-2024-34062","PYSEC-2026-1976",[241,6411],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[6416],{"type":2595,"score":6417},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6419,6421,6423,6425,6427,6429,6431,6433,6435],{"type":2610,"url":6420},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2599,"url":6422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2610,"url":6424},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2607,"url":6426},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2610,"url":6428},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2610,"url":6430},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2610,"url":6432},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2607,"url":6434},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2599,"url":6436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[6438],"pypi:tqdm@4.66.2",{"id":242,"slug":6440,"dossier":45,"summary":6441,"aliases":6442,"sourceIds":6445,"published":6446,"modified":6447,"checkedAt":7,"severity":6448,"references":6450,"versionKeys":6463,"packageCount":32,"repositoryCount":102},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[6443,6444],"CVE-2025-69229","PYSEC-2026-1106",[242,6444],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[6449],{"type":2632,"score":3406},[6451,6453,6455,6457,6459,6460,6461],{"type":2610,"url":6452},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2599,"url":6454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2610,"url":6456},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2610,"url":6458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":6462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2788,2789,2790,2791,2792,2793,2794],{"id":243,"slug":6465,"dossier":89,"summary":6466,"aliases":6467,"sourceIds":6470,"published":6471,"modified":6472,"checkedAt":7,"severity":6473,"references":6478,"versionKeys":6488,"packageCount":32,"repositoryCount":6491},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[6468,6469],"CVE-2026-25645","PYSEC-2026-2275",[243,6469],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[6474,6476],{"type":2595,"score":6475},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2595,"score":6477},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6479,6481,6483,6485,6486],{"type":2599,"url":6480},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2599,"url":6482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2604,"url":6484},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2607,"url":5574},{"type":2599,"url":6487},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[5584,5585,6489,6490],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":244,"slug":6493,"dossier":89,"summary":6494,"aliases":6495,"sourceIds":6498,"published":6499,"modified":6500,"checkedAt":7,"severity":6501,"references":6503,"versionKeys":6514,"packageCount":32,"repositoryCount":2965},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[6496,6497],"CVE-2025-66418","PYSEC-2026-1998",[244,6497],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[6502],{"type":2632,"score":2945},[6504,6506,6508,6510,6511,6512],{"type":2610,"url":6505},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2599,"url":6507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2604,"url":6509},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2607,"url":2954},{"type":2607,"url":2956},{"type":2599,"url":6513},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2960,2961,2962,2963,2964],{"id":245,"slug":6516,"dossier":45,"summary":6517,"aliases":6518,"sourceIds":6521,"published":6522,"modified":6523,"checkedAt":7,"severity":6524,"references":6527,"versionKeys":6542,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[6519,6520],"CVE-2024-56201","PYSEC-2026-1472",[245,6520],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[6525,6526],{"type":2595,"score":2750},{"type":2632,"score":5870},[6528,6530,6532,6534,6536,6537,6539,6540],{"type":2610,"url":6529},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2599,"url":6531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2610,"url":6533},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2604,"url":6535},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2607,"url":5879},{"type":2610,"url":6538},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2607,"url":5885},{"type":2599,"url":6541},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5889],{"id":246,"slug":6544,"dossier":45,"summary":6545,"aliases":6546,"sourceIds":6549,"published":6550,"modified":6551,"checkedAt":7,"severity":6552,"references":6555,"versionKeys":6570,"packageCount":32,"repositoryCount":658},"ghsa-gq3w-7jj3-x7gr-f80b7f86","MLflow Use of Default Password Authentication Bypass Vulnerability",[6547,6548],"CVE-2026-2635","PYSEC-2026-421",[246,6548],"2026-02-21T00:31:43Z","2026-07-01T20:22:58.325967Z",[6553],{"type":2595,"score":6554},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6556,6558,6560,6562,6563,6565,6567,6568],{"type":2599,"url":6557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2635",{"type":2610,"url":6559},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19260",{"type":2610,"url":6561},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F5bf2ec2bd4222a18d78631183ac7f6b752afe8a4",{"type":2607,"url":3290},{"type":2610,"url":6564},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Freleases\u002Ftag\u002Fv3.8.0rc0",{"type":2610,"url":6566},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-111",{"type":2607,"url":3294},{"type":2599,"url":6569},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gq3w-7jj3-x7gr",[3298,3299],{"id":247,"slug":6572,"dossier":45,"summary":6573,"aliases":6574,"sourceIds":6577,"published":6578,"modified":6579,"checkedAt":7,"severity":6580,"references":6583,"versionKeys":6595,"packageCount":32,"repositoryCount":104},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[6575,6576],"CVE-2026-22773","PYSEC-2026-143",[247,6576],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[6581,6582],{"type":2595,"score":3177},{"type":2595,"score":2779},[6584,6586,6588,6590,6592,6594],{"type":2665,"url":6585},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":2599,"url":6587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":2610,"url":6589},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":2610,"url":6591},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":2610,"url":6593},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":2607,"url":2889},[2907,2908,3144],{"id":248,"slug":6597,"dossier":45,"summary":6598,"aliases":6599,"sourceIds":6602,"published":6603,"modified":6604,"checkedAt":7,"severity":6605,"references":6607,"versionKeys":6628,"packageCount":32,"repositoryCount":104},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[6600,6601],"CVE-2025-34351","PYSEC-2026-518",[248,6601],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[6606],{"type":2632,"score":3710},[6608,6610,6612,6613,6614,6616,6618,6620,6622,6623,6625,6626],{"type":2610,"url":6609},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":2599,"url":6611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":2610,"url":4649},{"type":2607,"url":4655},{"type":2610,"url":6615},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":2610,"url":6617},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":2610,"url":6619},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":2610,"url":6621},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":2610,"url":4659},{"type":2610,"url":6624},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":2607,"url":4667},{"type":2599,"url":6627},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[4669,4670,6629],"pypi:ray@2.50.1",{"id":249,"slug":6631,"dossier":89,"summary":6632,"aliases":6633,"sourceIds":6637,"published":6638,"modified":6639,"checkedAt":7,"severity":6640,"references":6643,"versionKeys":6655,"packageCount":32,"repositoryCount":6663},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[6634,6635,6636],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[249,6636],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[6641],{"type":2595,"score":6642},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6644,6646,6648,6650,6652,6653],{"type":2665,"url":6645},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2599,"url":6647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2604,"url":6649},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2610,"url":6651},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2607,"url":3983},{"type":2599,"url":6654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3989,3990,3991,6656,6657,6658,6659,6660,6661,6662],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":250,"slug":6665,"dossier":45,"summary":6666,"aliases":6667,"sourceIds":6668,"published":6669,"modified":6670,"checkedAt":7,"severity":6671,"references":6672,"versionKeys":6678,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[250],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[6673,6675,6676],{"type":2610,"url":6674},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2607,"url":3669},{"type":2610,"url":6677},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3673],{"id":251,"slug":6680,"dossier":45,"summary":6681,"aliases":6682,"sourceIds":6685,"published":6686,"modified":6687,"checkedAt":7,"severity":6688,"references":6691,"versionKeys":6712,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[6683,6684],"CVE-2024-34064","PYSEC-2026-1474",[251,6684],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[6689],{"type":2595,"score":6690},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6692,6694,6696,6698,6699,6701,6703,6705,6707,6709,6710],{"type":2610,"url":6693},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2599,"url":6695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2604,"url":6697},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2607,"url":5879},{"type":2610,"url":6700},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2610,"url":6702},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2610,"url":6704},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2610,"url":6706},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2610,"url":6708},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2607,"url":5885},{"type":2599,"url":6711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5889],{"id":252,"slug":6714,"dossier":45,"summary":6715,"aliases":6716,"sourceIds":6719,"published":6720,"modified":6721,"checkedAt":7,"severity":6722,"references":6725,"versionKeys":6734,"packageCount":32,"repositoryCount":526},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[6717,6718],"CVE-2026-34513","PYSEC-2026-2095",[252,6718],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[6723,6724],{"type":2632,"score":3232},{"type":2595,"score":2779},[6726,6728,6730,6732,6733],{"type":2604,"url":6727},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2599,"url":6729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2604,"url":6731},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":253,"slug":6736,"dossier":45,"summary":6737,"aliases":6738,"sourceIds":6741,"published":6742,"modified":6743,"checkedAt":7,"severity":6744,"references":6748,"versionKeys":6756,"packageCount":32,"repositoryCount":526},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[6739,6740],"CVE-2026-47265","PYSEC-2026-2105",[253,6740],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[6745,6747],{"type":2632,"score":6746},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2595,"score":3898},[6749,6751,6753,6755],{"type":2604,"url":6750},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2599,"url":6752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2604,"url":6754},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":254,"slug":6758,"dossier":45,"summary":2679,"aliases":6759,"sourceIds":6762,"published":6763,"modified":6764,"checkedAt":7,"severity":6765,"references":6767,"versionKeys":6780,"packageCount":32,"repositoryCount":602},"ghsa-hgf8-39gv-g3f2-0469b394",[6760,6761],"CVE-2025-66221","PYSEC-2026-2046",[254,6761],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[6766],{"type":2632,"score":2688},[6768,6770,6772,6774,6775,6777,6778],{"type":2610,"url":6769},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2599,"url":6771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2610,"url":6773},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2607,"url":2699},{"type":2610,"url":6776},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2607,"url":2825},{"type":2599,"url":6779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2703,2704,2705,2706],{"id":255,"slug":6782,"dossier":45,"summary":6783,"aliases":6784,"sourceIds":6787,"published":6788,"modified":6789,"checkedAt":7,"severity":6790,"references":6792,"versionKeys":6807,"packageCount":32,"repositoryCount":104},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[6785,6786],"CVE-2026-54236","PYSEC-2026-3408",[255,6786],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[6791],{"type":2595,"score":5453},[6793,6795,6797,6799,6801,6803,6805,6806],{"type":2610,"url":6794},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2599,"url":6796},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":2610,"url":6798},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":2610,"url":6800},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":2599,"url":6802},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2610,"url":6804},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":256,"slug":6809,"dossier":45,"summary":6810,"aliases":6811,"sourceIds":6812,"published":6813,"modified":6814,"checkedAt":7,"severity":6815,"references":6817,"versionKeys":6825,"packageCount":32,"repositoryCount":34},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[],[256],"2026-08-07T15:43:56Z","2026-08-09T02:56:50.509044228Z",[6816],{"type":2595,"score":3688},[6818,6820,6821,6823,6824],{"type":2610,"url":6819},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":2610,"url":3428},{"type":2610,"url":6822},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":2607,"url":2759},{"type":2610,"url":3433},[2763,2764,2765],{"id":257,"slug":6827,"dossier":45,"summary":6828,"aliases":6829,"sourceIds":6832,"published":6833,"modified":6834,"checkedAt":7,"severity":6835,"references":6841,"versionKeys":6859,"packageCount":32,"repositoryCount":104},"ghsa-hhrp-gw25-jr43-92599f57","Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)",[6830,6831],"CVE-2026-57516","PYSEC-2026-2273",[257,6831],"2026-07-01T17:16:37.390Z","2026-07-24T16:00:26.759843240Z",[6836,6837,6839],{"type":2595,"score":2872},{"type":2632,"score":6838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2632,"score":6840},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6842,6844,6846,6848,6850,6852,6854,6855,6857],{"type":2604,"url":6843},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",{"type":2599,"url":6845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-57516",{"type":2604,"url":6847},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":2604,"url":6849},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":2610,"url":6851},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F41443a18f9e6403a072de69098a279c23e2d943c",{"type":2610,"url":6853},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fray\u002FPYSEC-2026-2273.yaml",{"type":2607,"url":4655},{"type":2599,"url":6856},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":2599,"url":6858},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",[4669,4670,6629],{"id":258,"slug":6861,"dossier":45,"summary":6862,"aliases":6863,"sourceIds":6866,"published":6867,"modified":6868,"checkedAt":7,"severity":6869,"references":6871,"versionKeys":6880,"packageCount":32,"repositoryCount":546},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[6864,6865],"CVE-2026-59886","PYSEC-2026-3457",[258,6865],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[6870],{"type":2595,"score":2779},[6872,6874,6876,6878,6879],{"type":2599,"url":6873},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":2599,"url":6875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":2604,"url":6877},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":2607,"url":4182},{"type":2599,"url":5255},[4190,5257],{"id":259,"slug":6882,"dossier":45,"summary":6883,"aliases":6884,"sourceIds":6885,"published":6886,"modified":6887,"checkedAt":7,"severity":6888,"references":6891,"versionKeys":6902,"packageCount":32,"repositoryCount":34},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[],[259],"2026-08-07T15:45:39Z","2026-08-09T02:56:50.891058419Z",[6889],{"type":2595,"score":6890},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[6892,6894,6896,6898,6900,6901],{"type":2610,"url":6893},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":2610,"url":6895},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":2610,"url":6897},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":2610,"url":6899},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":2607,"url":2759},{"type":2610,"url":3433},[2763,2764,2765],{"id":260,"slug":6904,"dossier":45,"summary":6905,"aliases":6906,"sourceIds":6909,"published":6910,"modified":6911,"checkedAt":7,"severity":6912,"references":6917,"versionKeys":6923,"packageCount":32,"repositoryCount":526},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[6907,6908],"CVE-2026-54276","PYSEC-2026-2109",[260,6908],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[6913,6915],{"type":2632,"score":6914},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":6916},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[6918,6920,6922],{"type":2599,"url":6919},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2604,"url":6921},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":261,"slug":6925,"dossier":45,"summary":6926,"aliases":6927,"sourceIds":6930,"published":6931,"modified":6932,"checkedAt":7,"severity":6933,"references":6935,"versionKeys":6948,"packageCount":32,"repositoryCount":104},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[6928,6929],"CVE-2026-44222","PYSEC-2026-3409",[261,6929],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[6934],{"type":2595,"score":3177},[6936,6938,6940,6942,6944,6946,6947],{"type":2610,"url":6937},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2599,"url":6939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":2610,"url":6941},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":2599,"url":6943},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2610,"url":6945},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":262,"slug":6950,"dossier":45,"summary":6951,"aliases":6952,"sourceIds":6955,"published":6956,"modified":6957,"checkedAt":7,"severity":6958,"references":6962,"versionKeys":6978,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[6953,6954],"CVE-2024-11394","PYSEC-2024-229",[262,6954],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[6959,6961],{"type":2595,"score":6960},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2595,"score":2872},[6963,6965,6967,6969,6970,6972,6974,6976],{"type":2599,"url":6964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2610,"url":6966},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2610,"url":6968},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2607,"url":2663},{"type":2610,"url":6971},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2610,"url":6973},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2599,"url":6975},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2599,"url":6977},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2670],{"id":263,"slug":6980,"dossier":45,"summary":6981,"aliases":6982,"sourceIds":6984,"published":6985,"modified":6986,"checkedAt":7,"severity":6987,"references":6990,"versionKeys":6998,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[6983],"CVE-2025-71379",[263],"2025-05-28T17:50:06Z","2026-08-07T08:12:15.960396520Z",[6988],{"type":2595,"score":6989},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6991,6993,6995,6997],{"type":2610,"url":6992},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":2610,"url":6994},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":2610,"url":6996},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":2607,"url":2889},[3144],{"id":264,"slug":7000,"dossier":45,"summary":7001,"aliases":7002,"sourceIds":7005,"published":7006,"modified":7007,"checkedAt":7,"severity":7008,"references":7011,"versionKeys":7020,"packageCount":32,"repositoryCount":658},"ghsa-j842-xgm4-wf88-5ee5f9f5","MLX has Wild Pointer Dereference in load_gguf()",[7003,7004],"CVE-2025-62609","PYSEC-2025-139",[264,7004],"2025-11-21T18:03:20Z","2026-06-06T00:45:47.874274188Z",[7009,7010],{"type":2632,"score":5477},{"type":2595,"score":2779},[7012,7014,7016,7018],{"type":2665,"url":7013},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-j842-xgm4-wf88",{"type":2599,"url":7015},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62609",{"type":2607,"url":7017},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx",{"type":2610,"url":7019},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-139.yaml",[7021,7022],"pypi:mlx@0.29.0","pypi:mlx@0.29.3",{"id":265,"slug":7024,"dossier":45,"summary":7025,"aliases":7026,"sourceIds":7029,"published":7030,"modified":7031,"checkedAt":7,"severity":7032,"references":7037,"versionKeys":7054,"packageCount":32,"repositoryCount":526},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[7027,7028],"CVE-2026-34993","PYSEC-2026-2104",[265,7028],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[7033,7035],{"type":2595,"score":7034},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2595,"score":7036},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[7038,7040,7042,7044,7045,7047,7049,7050,7051,7052],{"type":2604,"url":7039},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2599,"url":7041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2604,"url":7043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2607,"url":2784},{"type":2610,"url":7046},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2610,"url":7048},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2599,"url":4814},{"type":2599,"url":6110},{"type":2599,"url":4812},{"type":2987,"url":7053},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2788,2789,2790,2791,2792,2793,2794,2795],{"id":266,"slug":7056,"dossier":45,"summary":7057,"aliases":7058,"sourceIds":7061,"published":7062,"modified":7063,"checkedAt":7,"severity":7064,"references":7066,"versionKeys":7077,"packageCount":32,"repositoryCount":102},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[7059,7060],"CVE-2025-69227","PYSEC-2026-1107",[266,7060],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[7065],{"type":2632,"score":3406},[7067,7069,7071,7073,7074,7075],{"type":2610,"url":7068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2599,"url":7070},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2610,"url":7072},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":7076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2788,2789,2790,2791,2792,2793,2794],{"id":267,"slug":7079,"dossier":45,"summary":7080,"aliases":7081,"sourceIds":7084,"published":7085,"modified":7086,"checkedAt":7,"severity":7087,"references":7089,"versionKeys":7097,"packageCount":32,"repositoryCount":32},"ghsa-jj8c-mmj3-mmgv-216e3367","Authlib: Cross-site request forging when using cache",[7082,7083],"CVE-2026-41425","PYSEC-2026-25",[267,7083],"2026-04-16T22:38:03Z","2026-06-05T14:45:30.092809707Z",[7088],{"type":2595,"score":6690},[7090,7092,7094,7095],{"type":2665,"url":7091},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-jj8c-mmj3-mmgv",{"type":2599,"url":7093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41425",{"type":2607,"url":4693},{"type":2610,"url":7096},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-25.yaml",[4697],{"id":268,"slug":7099,"dossier":89,"summary":7100,"aliases":7101,"sourceIds":7105,"published":7106,"modified":7107,"checkedAt":7,"severity":7108,"references":7110,"versionKeys":7124,"packageCount":32,"repositoryCount":2965},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[7102,7103,7104],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[268,7104],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[7109],{"type":2595,"score":2779},[7111,7113,7115,7117,7119,7120,7121,7122],{"type":2610,"url":7112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2599,"url":7114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2610,"url":7116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2610,"url":7118},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2607,"url":3323},{"type":2610,"url":4085},{"type":2607,"url":4087},{"type":2599,"url":7123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":269,"slug":7126,"dossier":45,"summary":7127,"aliases":7128,"sourceIds":7131,"published":7132,"modified":7133,"checkedAt":7,"severity":7134,"references":7136,"versionKeys":7149,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[7129,7130],"CVE-2025-3264","PYSEC-2026-1985",[269,7130],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[7135],{"type":2595,"score":3531},[7137,7139,7141,7143,7144,7146,7147],{"type":2599,"url":7138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2610,"url":7140},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2610,"url":7142},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2607,"url":2663},{"type":2610,"url":7145},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2607,"url":3031},{"type":2599,"url":7148},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2670],{"id":270,"slug":7151,"dossier":45,"summary":7152,"aliases":7153,"sourceIds":7154,"published":7155,"modified":7156,"checkedAt":7,"severity":7157,"references":7159,"versionKeys":7167,"packageCount":32,"repositoryCount":34},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[],[270],"2026-08-07T15:46:35Z","2026-08-09T02:56:51.296995647Z",[7158],{"type":2595,"score":2750},[7160,7162,7163,7165,7166],{"type":2610,"url":7161},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":2610,"url":3428},{"type":2610,"url":7164},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":2607,"url":2759},{"type":2610,"url":3433},[2763,2764,2765],{"id":271,"slug":7169,"dossier":45,"summary":7170,"aliases":7171,"sourceIds":7174,"published":7175,"modified":7176,"checkedAt":7,"severity":7177,"references":7180,"versionKeys":7188,"packageCount":32,"repositoryCount":546},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[7172,7173],"CVE-2026-54282","PYSEC-2026-248",[271,7173],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[7178,7179],{"type":2595,"score":4441},{"type":2595,"score":2922},[7181,7183,7185,7186],{"type":2599,"url":7182},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2599,"url":7184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2607,"url":4876},{"type":2610,"url":7187},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2737,2738,2739,4883,4884,5027,5028],{"id":272,"slug":7190,"dossier":45,"summary":7191,"aliases":7192,"sourceIds":7195,"published":7196,"modified":7197,"checkedAt":7,"severity":7198,"references":7201,"versionKeys":7220,"packageCount":32,"repositoryCount":658},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[7193,7194],"CVE-2026-52869","PYSEC-2026-3482",[272,7194],"2026-07-16T19:58:53Z","2026-07-23T15:11:29.023312800Z",[7199],{"type":2595,"score":7200},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[7202,7204,7206,7208,7210,7212,7214,7215,7217,7218],{"type":2610,"url":7203},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":2599,"url":7205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":2610,"url":7207},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":2610,"url":7209},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":2610,"url":7211},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":2610,"url":7213},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":2607,"url":5520},{"type":2610,"url":7216},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":2607,"url":5524},{"type":2599,"url":7219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[5526,5527],{"id":273,"slug":7222,"dossier":45,"summary":7223,"aliases":7224,"sourceIds":7227,"published":7228,"modified":7229,"checkedAt":7,"severity":7230,"references":7233,"versionKeys":7266,"packageCount":32,"repositoryCount":102},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[7225,7226],"CVE-2026-30922","PYSEC-2026-2263",[273,7226],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[7231,7232],{"type":2595,"score":3099},{"type":2595,"score":2779},[7234,7236,7238,7240,7242,7243,7245,7247,7249,7251,7252,7254,7256,7258,7260,7262,7264],{"type":2665,"url":7235},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2599,"url":7237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2610,"url":7239},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2604,"url":7241},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2610,"url":5839},{"type":2610,"url":7244},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":2610,"url":7246},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":2610,"url":7248},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2610,"url":7250},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2610,"url":4812},{"type":2610,"url":7253},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":2610,"url":7255},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2610,"url":7257},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2610,"url":7259},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2610,"url":7261},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2610,"url":7263},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":2610,"url":7265},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[4190],{"id":274,"slug":7268,"dossier":45,"summary":7269,"aliases":7270,"sourceIds":7273,"published":7274,"modified":7275,"checkedAt":7,"severity":7276,"references":7278,"versionKeys":7291,"packageCount":32,"repositoryCount":546},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[7271,7272],"CVE-2026-69249","PYSEC-2026-3553",[274,7272],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[7277],{"type":2632,"score":3793},[7279,7281,7283,7285,7286,7287,7289],{"type":2610,"url":7280},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2610,"url":7282},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2610,"url":7284},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2607,"url":3669},{"type":2607,"url":4850},{"type":2599,"url":7288},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2599,"url":7290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[3673,3674,3675,3676,3677,3678,6355],{"id":275,"slug":7293,"dossier":45,"summary":7294,"aliases":7295,"sourceIds":7298,"published":7299,"modified":7300,"checkedAt":7,"severity":7301,"references":7304,"versionKeys":7317,"packageCount":32,"repositoryCount":546},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[7296,7297],"CVE-2026-69248","PYSEC-2026-3554",[275,7297],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[7302],{"type":2632,"score":7303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7305,7307,7309,7311,7312,7313,7315],{"type":2610,"url":7306},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2610,"url":7308},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2610,"url":7310},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2607,"url":3669},{"type":2607,"url":4850},{"type":2599,"url":7314},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2599,"url":7316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[3673,3674,3675,3676,3677,3678,6355],{"id":276,"slug":7319,"dossier":45,"summary":7320,"aliases":7321,"sourceIds":7324,"published":7325,"modified":7326,"checkedAt":7,"severity":7327,"references":7331,"versionKeys":7354,"packageCount":32,"repositoryCount":32},"ghsa-m344-f55w-2m6j-43fc4846","Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding",[7322,7323],"CVE-2026-28498","PYSEC-2026-2117",[276,7323],"2026-03-16T16:15:06Z","2026-07-13T07:26:18.508336668Z",[7328,7330],{"type":2632,"score":7329},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2595,"score":2596},[7332,7334,7336,7338,7339,7340,7342,7344,7345,7347,7349,7350,7351,7352],{"type":2665,"url":7333},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-m344-f55w-2m6j",{"type":2599,"url":7335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28498",{"type":2604,"url":7337},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fb9bb2b25bf8b7e01512d847a95c1749646eaa72b",{"type":2607,"url":4693},{"type":2599,"url":4695},{"type":2610,"url":7341},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-28498",{"type":2610,"url":7343},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-28498.json",{"type":2599,"url":7255},{"type":2599,"url":7346},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6497",{"type":2599,"url":7348},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6567",{"type":2599,"url":7257},{"type":2599,"url":7259},{"type":2599,"url":7261},{"type":2987,"url":7353},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2448182",[4697],{"id":277,"slug":7356,"dossier":45,"summary":7357,"aliases":7358,"sourceIds":7361,"published":7362,"modified":7363,"checkedAt":7,"severity":7364,"references":7366,"versionKeys":7377,"packageCount":32,"repositoryCount":546},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[7359,7360],"CVE-2026-59884","PYSEC-2026-3455",[277,7360],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[7365],{"type":2595,"score":2779},[7367,7369,7371,7373,7374,7375],{"type":2599,"url":7368},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":2599,"url":7370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":2604,"url":7372},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":2607,"url":4182},{"type":2599,"url":5255},{"type":2610,"url":7376},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[4190,5257],{"id":278,"slug":7379,"dossier":45,"summary":7380,"aliases":7381,"sourceIds":7384,"published":7385,"modified":7386,"checkedAt":7,"severity":7387,"references":7392,"versionKeys":7401,"packageCount":32,"repositoryCount":526},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[7382,7383],"CVE-2026-34516","PYSEC-2026-2098",[278,7383],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[7388,7389,7390],{"type":2595,"score":2779},{"type":2632,"score":3406},{"type":2632,"score":7391},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7393,7395,7397,7399,7400],{"type":2604,"url":7394},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2599,"url":7396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2604,"url":7398},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":279,"slug":7403,"dossier":45,"summary":7404,"aliases":7405,"sourceIds":7408,"published":7409,"modified":7410,"checkedAt":7,"severity":7411,"references":7414,"versionKeys":7420,"packageCount":32,"repositoryCount":526},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[7406,7407],"CVE-2026-50269","PYSEC-2026-2106",[279,7407],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[7412,7413],{"type":2632,"score":2920},{"type":2595,"score":2779},[7415,7417,7419],{"type":2599,"url":7416},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2604,"url":7418},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2607,"url":2784},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":280,"slug":7422,"dossier":45,"summary":7423,"aliases":7424,"sourceIds":7427,"published":7428,"modified":7429,"checkedAt":7,"severity":7430,"references":7433,"versionKeys":7446,"packageCount":32,"repositoryCount":32},"ghsa-m8x7-r2rg-vh5g-d7eda4e5","FastMCP has a Command Injection vulnerability - Gemini CLI",[7425,7426],"CVE-2025-64340","PYSEC-2026-2475",[280,7426],"2026-03-31T22:24:15Z","2026-07-18T14:44:31.250470362Z",[7431],{"type":2595,"score":7432},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[7434,7436,7438,7440,7442,7443,7444],{"type":2610,"url":7435},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",{"type":2610,"url":7437},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",{"type":2599,"url":7439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64340",{"type":2610,"url":7441},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fpull\u002F3522",{"type":2607,"url":3880},{"type":2607,"url":3882},{"type":2599,"url":7445},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",[3886],{"id":281,"slug":7448,"dossier":45,"summary":7449,"aliases":7450,"sourceIds":7453,"published":7454,"modified":7455,"checkedAt":7,"severity":7456,"references":7460,"versionKeys":7468,"packageCount":32,"repositoryCount":102},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[7451,7452],"CVE-2026-34073","PYSEC-2026-35",[281,7452],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[7457,7458],{"type":2595,"score":2922},{"type":2632,"score":7459},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7461,7463,7465,7466],{"type":2599,"url":7462},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2599,"url":7464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2607,"url":3669},{"type":2610,"url":7467},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3673,3674,3675,3676,3677,3678],{"id":282,"slug":7470,"dossier":45,"summary":7471,"aliases":7472,"sourceIds":7475,"published":7476,"modified":7477,"checkedAt":7,"severity":7478,"references":7481,"versionKeys":7489,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[7473,7474],"CVE-2026-56340","PYSEC-2026-250",[282,7474],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[7479,7480],{"type":2595,"score":2750},{"type":2595,"score":2779},[7482,7484,7486,7487],{"type":2599,"url":7483},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":2610,"url":7485},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":2607,"url":2889},{"type":2599,"url":7488},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2908],{"id":283,"slug":7491,"dossier":45,"summary":7492,"aliases":7493,"sourceIds":7496,"published":7497,"modified":7498,"checkedAt":7,"severity":7499,"references":7502,"versionKeys":7510,"packageCount":32,"repositoryCount":104},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[7494,7495],"CVE-2026-44432","PYSEC-2026-142",[283,7495],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[7500,7501],{"type":2595,"score":2779},{"type":2632,"score":2945},[7503,7505,7507,7509],{"type":2599,"url":7504},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2599,"url":7506},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2610,"url":7508},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2607,"url":2954},[7511],"pypi:urllib3@2.6.3",{"id":284,"slug":7513,"dossier":45,"summary":7514,"aliases":7515,"sourceIds":7518,"published":7519,"modified":7520,"checkedAt":7,"severity":7521,"references":7524,"versionKeys":7537,"packageCount":32,"repositoryCount":5920},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[7516,7517],"CVE-2026-28684","PYSEC-2026-2270",[284,7517],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[7522],{"type":2595,"score":7523},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7525,7527,7529,7531,7533,7535],{"type":2604,"url":7526},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2599,"url":7528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2604,"url":7530},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2610,"url":7532},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2607,"url":7534},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2599,"url":7536},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[7538,7539,7540,7541],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":285,"slug":7543,"dossier":45,"summary":7544,"aliases":7545,"sourceIds":7548,"published":7549,"modified":7550,"checkedAt":7,"severity":7551,"references":7554,"versionKeys":7569,"packageCount":32,"repositoryCount":5920},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[7546,7547],"CVE-2026-69243","PYSEC-2026-3546",[285,7547],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[7552],{"type":2632,"score":7553},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7555,7557,7559,7561,7562,7564,7565,7567],{"type":2610,"url":7556},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2610,"url":7558},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2610,"url":7560},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2607,"url":2784},{"type":2610,"url":7563},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2607,"url":3744},{"type":2599,"url":7566},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2599,"url":7568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2788,2789,2790,2791,2792,2793,2794,2795,5919],{"id":286,"slug":7571,"dossier":45,"summary":7572,"aliases":7573,"sourceIds":7576,"published":7577,"modified":7578,"checkedAt":7,"severity":7579,"references":7581,"versionKeys":7592,"packageCount":32,"repositoryCount":602},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[7574,7575],"CVE-2026-40347","PYSEC-2026-3038",[286,7575],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[7580],{"type":2595,"score":2690},[7582,7584,7586,7587,7589,7590],{"type":2610,"url":7583},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2599,"url":7585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2607,"url":3802},{"type":2610,"url":7588},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2607,"url":3804},{"type":2599,"url":7591},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4013,4014,3808],{"id":287,"slug":7594,"dossier":45,"summary":7595,"aliases":7596,"sourceIds":7599,"published":7600,"modified":7601,"checkedAt":7,"severity":7602,"references":7604,"versionKeys":7617,"packageCount":32,"repositoryCount":5920},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[7597,7598],"CVE-2026-59881","PYSEC-2026-3547",[287,7598],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[7603],{"type":2632,"score":4227},[7605,7607,7609,7611,7613,7614,7615],{"type":2610,"url":7606},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2599,"url":7608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2610,"url":7610},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2610,"url":7612},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":7616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2788,2789,2790,2791,2792,2793,2794,2795,5919],{"id":288,"slug":7619,"dossier":45,"summary":7620,"aliases":7621,"sourceIds":7624,"published":7625,"modified":7626,"checkedAt":7,"severity":7627,"references":7629,"versionKeys":7640,"packageCount":32,"repositoryCount":102},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[7622,7623],"CVE-2025-69225","PYSEC-2026-1109",[288,7623],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[7628],{"type":2632,"score":2920},[7630,7632,7634,7636,7637,7638],{"type":2610,"url":7631},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2599,"url":7633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2604,"url":7635},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2607,"url":2784},{"type":2607,"url":3744},{"type":2599,"url":7639},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2788,2789,2790,2791,2792,2793,2794],{"id":289,"slug":7642,"dossier":45,"summary":7643,"aliases":7644,"sourceIds":7647,"published":7648,"modified":7649,"checkedAt":7,"severity":7650,"references":7652,"versionKeys":7667,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[7645,7646],"CVE-2025-62164","PYSEC-2026-2018",[289,7646],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[7651],{"type":2595,"score":2750},[7653,7655,7657,7659,7661,7663,7665,7666],{"type":2610,"url":7654},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2599,"url":7656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":2610,"url":7658},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":2610,"url":7660},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":2599,"url":7662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2610,"url":7664},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2908],{"id":290,"slug":7669,"dossier":45,"summary":7670,"aliases":7671,"sourceIds":7673,"published":7674,"modified":7675,"checkedAt":7,"severity":7676,"references":7678,"versionKeys":7684,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[7672],"CVE-2026-67326",[290],"2026-05-08T23:19:02Z","2026-08-02T03:56:45.346497199Z",[7677],{"type":2595,"score":3211},[7679,7681,7683],{"type":2610,"url":7680},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2599,"url":7682},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2607,"url":2759},[2763,2764,2765],{"id":291,"slug":7686,"dossier":45,"summary":7687,"aliases":7688,"sourceIds":7692,"published":7693,"modified":7694,"checkedAt":7,"severity":7695,"references":7699,"versionKeys":7713,"packageCount":32,"repositoryCount":104},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[7689,7690,7691],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[291,7690],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[7696,7698],{"type":2632,"score":7697},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":2595,"score":2872},[7700,7702,7704,7706,7708,7710,7711],{"type":2599,"url":7701},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":2599,"url":7703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":2610,"url":7705},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":2604,"url":7707},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":2604,"url":7709},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":2607,"url":4655},{"type":2599,"url":7712},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[4669,4670,6629],{"id":292,"slug":7715,"dossier":45,"summary":7716,"aliases":7717,"sourceIds":7720,"published":7721,"modified":7722,"checkedAt":7,"severity":7723,"references":7726,"versionKeys":7735,"packageCount":32,"repositoryCount":526},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[7718,7719],"CVE-2026-34519","PYSEC-2026-2101",[292,7719],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[7724,7725],{"type":2632,"score":2920},{"type":2595,"score":2922},[7727,7729,7731,7733,7734],{"type":2604,"url":7728},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2599,"url":7730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2604,"url":7732},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":293,"slug":7737,"dossier":45,"summary":7738,"aliases":7739,"sourceIds":7742,"published":7743,"modified":7744,"checkedAt":7,"severity":7745,"references":7748,"versionKeys":7761,"packageCount":32,"repositoryCount":32},"ghsa-mxxr-jv3v-6pgc-cbbc697b","FastMCP vulnerable to reflected XSS in client's callback page",[7740,7741],"CVE-2025-62800","PYSEC-2026-1364",[293,7741],"2025-10-29T15:38:29Z","2026-07-07T17:56:05.411756133Z",[7746],{"type":2632,"score":7747},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[7749,7751,7753,7755,7757,7758,7759],{"type":2610,"url":7750},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-mxxr-jv3v-6pgc",{"type":2599,"url":7752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62800",{"type":2610,"url":7754},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fpull\u002F2090",{"type":2610,"url":7756},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fcommit\u002F2a20f54617a37213ed83894a8c2f0ac38a2e83a3",{"type":2607,"url":5722},{"type":2607,"url":3882},{"type":2599,"url":7760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mxxr-jv3v-6pgc",[3886],{"id":294,"slug":7763,"dossier":45,"summary":7764,"aliases":7765,"sourceIds":7768,"published":7769,"modified":7770,"checkedAt":7,"severity":7771,"references":7774,"versionKeys":7782,"packageCount":32,"repositoryCount":104},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[7766,7767],"CVE-2026-39892","PYSEC-2026-36",[294,7767],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[7772,7773],{"type":2632,"score":4227},{"type":2595,"score":3489},[7775,7777,7779,7780],{"type":2599,"url":7776},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2599,"url":7778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2607,"url":3669},{"type":2610,"url":7781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3677,3678],{"id":295,"slug":7784,"dossier":45,"summary":7785,"aliases":7786,"sourceIds":7787,"published":7788,"modified":7789,"checkedAt":7,"severity":7790,"references":7793,"versionKeys":7803,"packageCount":32,"repositoryCount":34},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[],[295],"2026-08-03T20:23:17Z","2026-08-08T03:26:54.523343843Z",[7791],{"type":2595,"score":7792},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[7794,7796,7798,7800,7801],{"type":2610,"url":7795},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":2610,"url":7797},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":2610,"url":7799},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":2607,"url":2759},{"type":2610,"url":7802},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",[2763,2764,2765],{"id":296,"slug":7805,"dossier":45,"summary":7806,"aliases":7807,"sourceIds":7810,"published":7811,"modified":7812,"checkedAt":7,"severity":7813,"references":7816,"versionKeys":7825,"packageCount":32,"repositoryCount":526},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[7808,7809],"CVE-2026-34515","PYSEC-2026-2097",[296,7809],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[7814,7815],{"type":2632,"score":6746},{"type":2595,"score":3898},[7817,7819,7821,7823,7824],{"type":2604,"url":7818},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2599,"url":7820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2604,"url":7822},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":297,"slug":7827,"dossier":45,"summary":7828,"aliases":7829,"sourceIds":7833,"published":7834,"modified":7835,"checkedAt":7,"severity":7836,"references":7839,"versionKeys":7852,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[7830,7831,7832],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[297,7832],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[7837,7838],{"type":2595,"score":2690},{"type":2595,"score":2779},[7840,7842,7844,7846,7848,7850,7851],{"type":2665,"url":7841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2599,"url":7843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2604,"url":7845},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2604,"url":7847},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2610,"url":7849},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2607,"url":3323},{"type":2599,"url":4085},[3332,3333,3334],{"id":298,"slug":7854,"dossier":45,"summary":7855,"aliases":7856,"sourceIds":7860,"published":7861,"modified":7862,"checkedAt":7,"severity":7863,"references":7866,"versionKeys":7879,"packageCount":32,"repositoryCount":658},"ghsa-pgqp-8h46-6x4j-303ca0ec","MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation",[7857,7858,7859],"BIT-mlflow-2025-14279","CVE-2025-14279","PYSEC-2026-1656",[298,7859],"2026-01-12T09:30:31Z","2026-07-07T17:56:18.060826978Z",[7864],{"type":2595,"score":7865},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7867,7869,7871,7873,7874,7876,7877],{"type":2599,"url":7868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14279",{"type":2610,"url":7870},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F17910",{"type":2610,"url":7872},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fb0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3",{"type":2607,"url":3290},{"type":2610,"url":7875},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fef478f72-2e4f-44dc-8055-fc06bef03108",{"type":2607,"url":3294},{"type":2599,"url":7878},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pgqp-8h46-6x4j",[3298,3299],{"id":299,"slug":7881,"dossier":45,"summary":7882,"aliases":7883,"sourceIds":7886,"published":7132,"modified":7887,"checkedAt":7,"severity":7888,"references":7891,"versionKeys":7904,"packageCount":32,"repositoryCount":658},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[7884,7885],"CVE-2025-3777","PYSEC-2026-1986",[299,7885],"2026-07-07T17:56:47.225461188Z",[7889],{"type":2595,"score":7890},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[7892,7894,7896,7897,7899,7901,7902],{"type":2599,"url":7893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2610,"url":7895},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2607,"url":2663},{"type":2610,"url":7898},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2610,"url":7900},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2607,"url":3031},{"type":2599,"url":7903},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2670,2671],{"id":300,"slug":7906,"dossier":89,"summary":7907,"aliases":7908,"sourceIds":7912,"published":7913,"modified":7914,"checkedAt":7,"severity":7915,"references":7917,"versionKeys":7928,"packageCount":32,"repositoryCount":2965},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[7909,7910,7911],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[300,7911],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[7916],{"type":2595,"score":2779},[7918,7920,7922,7924,7926,7927],{"type":2665,"url":7919},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2599,"url":7921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2604,"url":7923},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2610,"url":7925},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2607,"url":3323},{"type":2599,"url":3325},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":301,"slug":7930,"dossier":45,"summary":7931,"aliases":7932,"sourceIds":7935,"published":7936,"modified":7937,"checkedAt":7,"severity":7938,"references":7942,"versionKeys":7957,"packageCount":32,"repositoryCount":104},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[7933,7934],"CVE-2025-62372","PYSEC-2026-2019",[301,7934],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[7939,7940],{"type":2595,"score":3177},{"type":2632,"score":7941},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[7943,7945,7947,7948,7950,7951,7953,7955,7956],{"type":2610,"url":7944},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2599,"url":7946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":2610,"url":7658},{"type":2610,"url":7949},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":2610,"url":7660},{"type":2599,"url":7952},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2610,"url":7954},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[2907,2908,3144],{"id":302,"slug":7959,"dossier":45,"summary":7960,"aliases":7961,"sourceIds":7964,"published":7965,"modified":7966,"checkedAt":7,"severity":7967,"references":7969,"versionKeys":7978,"packageCount":32,"repositoryCount":602},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[7962,7963],"CVE-2026-42561","PYSEC-2026-3039",[302,7963],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[7968],{"type":2595,"score":2779},[7970,7972,7974,7975,7976],{"type":2610,"url":7971},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2599,"url":7973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2607,"url":3802},{"type":2607,"url":3804},{"type":2599,"url":7977},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4013,4014,3808],{"id":303,"slug":7980,"dossier":45,"summary":7981,"aliases":7982,"sourceIds":7985,"published":7986,"modified":7987,"checkedAt":7,"severity":7988,"references":7990,"versionKeys":8010,"packageCount":32,"repositoryCount":104},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[7983,7984],"CVE-2026-34755","PYSEC-2026-144",[303,7984],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[7989],{"type":2595,"score":3177},[7991,7993,7995,7997,7999,8000,8001,8003,8005,8007,8008],{"type":2604,"url":7992},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":2599,"url":7994},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":2610,"url":7996},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":2610,"url":7998},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":2610,"url":3188},{"type":2610,"url":3190},{"type":2610,"url":8002},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":2610,"url":8004},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":2610,"url":8006},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":2607,"url":2889},{"type":2610,"url":8009},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2907,2908,3144],{"id":304,"slug":8012,"dossier":45,"summary":8013,"aliases":8014,"sourceIds":8017,"published":8018,"modified":8019,"checkedAt":7,"severity":8020,"references":8022,"versionKeys":8034,"packageCount":32,"repositoryCount":32},"ghsa-pq5p-34cr-23v9-127ea2b8","Authlib is vulnerable to Denial of Service via Oversized JOSE Segments",[8015,8016],"CVE-2025-61920","PYSEC-2026-1203",[304,8016],"2025-10-10T20:26:43Z","2026-07-07T17:56:17.886883361Z",[8021],{"type":2595,"score":2779},[8023,8025,8027,8029,8030,8031,8032],{"type":2610,"url":8024},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",{"type":2599,"url":8026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61920",{"type":2610,"url":8028},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F867e3f87b072347a1ae9cf6983cc8bbf88447e5e",{"type":2607,"url":4693},{"type":2610,"url":6401},{"type":2607,"url":6086},{"type":2599,"url":8033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",[4697],{"id":305,"slug":8036,"dossier":45,"summary":8037,"aliases":8038,"sourceIds":8041,"published":8042,"modified":8043,"checkedAt":7,"severity":8044,"references":8046,"versionKeys":8058,"packageCount":32,"repositoryCount":102},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[8039,8040],"CVE-2025-50181","PYSEC-2026-1999",[305,8040],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[8045],{"type":2595,"score":3380},[8047,8049,8051,8053,8054,8055,8056],{"type":2610,"url":8048},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2599,"url":8050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2604,"url":8052},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2607,"url":2954},{"type":2610,"url":3390},{"type":2607,"url":2956},{"type":2599,"url":8057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2960,2961,2962,2963],{"id":306,"slug":8060,"dossier":89,"summary":8061,"aliases":8062,"sourceIds":8066,"published":8067,"modified":8068,"checkedAt":7,"severity":8069,"references":8072,"versionKeys":8084,"packageCount":32,"repositoryCount":2965},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[8063,8064,8065],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[306,8065],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[8070,8071],{"type":2632,"score":5818},{"type":2595,"score":4339},[8073,8074,8076,8078,8080,8082,8083],{"type":2610,"url":5822},{"type":2604,"url":8075},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2599,"url":8077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2604,"url":8079},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2604,"url":8081},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2607,"url":3323},{"type":2599,"url":4059},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":307,"slug":8086,"dossier":45,"summary":8087,"aliases":8088,"sourceIds":8091,"published":8092,"modified":8093,"checkedAt":7,"severity":8094,"references":8097,"versionKeys":8118,"packageCount":32,"repositoryCount":104},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[8089,8090],"CVE-2025-62593","PYSEC-2026-520",[307,8090],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[8095],{"type":2632,"score":8096},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[8098,8100,8102,8104,8106,8108,8110,8111,8113,8115,8116],{"type":2610,"url":8099},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":2599,"url":8101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":2610,"url":8103},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":2610,"url":8105},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":2610,"url":8107},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":2610,"url":8109},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":2607,"url":4655},{"type":2610,"url":8112},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":2610,"url":8114},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":2607,"url":4667},{"type":2599,"url":8117},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[4669,4670,6629],{"id":308,"slug":8120,"dossier":45,"summary":8121,"aliases":8122,"sourceIds":8125,"published":6550,"modified":8126,"checkedAt":7,"severity":8127,"references":8130,"versionKeys":8142,"packageCount":32,"repositoryCount":658},"ghsa-q2r8-vmq7-fpx2-63c75ef0","MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability",[8123,8124],"CVE-2026-2033","PYSEC-2026-2658",[308,8124],"2026-07-13T16:43:16.528255849Z",[8128],{"type":2595,"score":8129},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8131,8133,8134,8135,8136,8137,8139,8140],{"type":2599,"url":8132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2033",{"type":2610,"url":6559},{"type":2610,"url":6561},{"type":2607,"url":3290},{"type":2610,"url":6564},{"type":2610,"url":8138},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-105",{"type":2607,"url":3294},{"type":2599,"url":8141},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2r8-vmq7-fpx2",[3298,3299],{"id":309,"slug":8144,"dossier":45,"summary":8145,"aliases":8146,"sourceIds":8149,"published":7132,"modified":8150,"checkedAt":7,"severity":8151,"references":8153,"versionKeys":8164,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[8147,8148],"CVE-2025-3263","PYSEC-2026-1987",[309,8148],"2026-07-07T17:56:57.889099913Z",[8152],{"type":2595,"score":3531},[8154,8156,8157,8158,8159,8161,8162],{"type":2599,"url":8155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2610,"url":7140},{"type":2610,"url":7142},{"type":2607,"url":2663},{"type":2610,"url":8160},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2607,"url":3031},{"type":2599,"url":8163},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2670],{"id":310,"slug":8166,"dossier":45,"summary":8167,"aliases":8168,"sourceIds":8171,"published":8172,"modified":8173,"checkedAt":7,"severity":8174,"references":8178,"versionKeys":8191,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[8169,8170],"CVE-2024-56326","PYSEC-2026-1475",[310,8170],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[8175,8177],{"type":2595,"score":8176},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2632,"score":5870},[8179,8181,8183,8185,8186,8187,8188,8189],{"type":2610,"url":8180},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2599,"url":8182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2604,"url":8184},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2607,"url":5879},{"type":2610,"url":6538},{"type":2610,"url":5881},{"type":2607,"url":5885},{"type":2599,"url":8190},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5889],{"id":311,"slug":8193,"dossier":45,"summary":8194,"aliases":8195,"sourceIds":8199,"published":8200,"modified":8201,"checkedAt":7,"severity":8202,"references":8205,"versionKeys":8225,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[8196,8197,8198],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[311,8198],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[8203,8204],{"type":2595,"score":2779},{"type":2632,"score":4227},[8206,8208,8210,8212,8214,8216,8218,8219,8220,8222,8223],{"type":2610,"url":8207},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2599,"url":8209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2610,"url":8211},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2610,"url":8213},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2610,"url":8215},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2610,"url":8217},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2607,"url":2699},{"type":2610,"url":6056},{"type":2610,"url":8221},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2607,"url":2825},{"type":2599,"url":8224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2703],{"id":312,"slug":8227,"dossier":45,"summary":8228,"aliases":8229,"sourceIds":8232,"published":8233,"modified":8234,"checkedAt":7,"severity":8235,"references":8240,"versionKeys":8252,"packageCount":32,"repositoryCount":104},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[8230,8231],"CVE-2026-27482","PYSEC-2026-2271",[312,8231],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[8236,8238],{"type":2595,"score":8237},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":2595,"score":8239},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8241,8243,8245,8247,8249,8250],{"type":2665,"url":8242},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":2599,"url":8244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":2604,"url":8246},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":2604,"url":8248},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":2607,"url":4655},{"type":2599,"url":8251},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[4669,4670,6629],{"id":313,"slug":8254,"dossier":45,"summary":8255,"aliases":8256,"sourceIds":8259,"published":8260,"modified":8261,"checkedAt":7,"severity":8262,"references":8264,"versionKeys":8284,"packageCount":32,"repositoryCount":104},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[8257,8258],"CVE-2026-41523","PYSEC-2026-2300",[313,8258],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[8263],{"type":2595,"score":2807},[8265,8267,8269,8271,8272,8273,8275,8277,8279,8280,8282],{"type":2665,"url":8266},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":2599,"url":8268},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":2604,"url":8270},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":2599,"url":3188},{"type":2599,"url":3190},{"type":2610,"url":8274},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2987,"url":8276},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":2610,"url":8278},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":2607,"url":2889},{"type":2599,"url":8281},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":2610,"url":8283},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2907,2908,3144],{"id":314,"slug":8286,"dossier":89,"summary":8287,"aliases":8288,"sourceIds":8291,"published":8292,"modified":8293,"checkedAt":7,"severity":8294,"references":8297,"versionKeys":8303,"packageCount":32,"repositoryCount":6491},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[8289,8290],"CVE-2026-44431","PYSEC-2026-141",[314,8290],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[8295,8296],{"type":2595,"score":5453},{"type":2632,"score":6340},[8298,8300,8302],{"type":2599,"url":8299},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2599,"url":8301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2607,"url":2954},[2960,2961,2962,2963,2964,7511],{"id":315,"slug":8305,"dossier":45,"summary":8306,"aliases":8307,"sourceIds":8311,"published":8312,"modified":8313,"checkedAt":7,"severity":8314,"references":8318,"versionKeys":8336,"packageCount":32,"repositoryCount":526},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[8308,8309,8310],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[315],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[8315,8316],{"type":2595,"score":3610},{"type":2632,"score":8317},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8319,8321,8323,8325,8327,8329,8330,8332,8334],{"type":2599,"url":8320},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2610,"url":8322},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2610,"url":8324},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2610,"url":8326},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2610,"url":8328},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2607,"url":2994},{"type":2610,"url":8331},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2610,"url":8333},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2610,"url":8335},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3006,3007,3008,5141,5142,8337,8338,8339],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":316,"slug":8341,"dossier":45,"summary":8342,"aliases":8343,"sourceIds":8346,"published":8347,"modified":8348,"checkedAt":7,"severity":8349,"references":8352,"versionKeys":8378,"packageCount":32,"repositoryCount":104},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[8344,8345],"CVE-2026-24779","PYSEC-2026-2020",[316,8345],"2026-01-28T16:14:28Z","2026-07-21T12:46:28.194413173Z",[8350],{"type":2595,"score":8351},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[8353,8355,8357,8359,8361,8363,8364,8365,8367,8369,8371,8373,8374,8375,8376,8377],{"type":2610,"url":8354},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2599,"url":8356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":2610,"url":8358},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":2610,"url":8360},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":2610,"url":8362},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":2607,"url":2885},{"type":2607,"url":2889},{"type":2610,"url":8366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":2599,"url":8368},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2610,"url":8370},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":2610,"url":8372},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":2610,"url":2901},{"type":2610,"url":2903},{"type":2610,"url":3516},{"type":2610,"url":3518},{"type":2610,"url":5377},[2907,2908,3144],{"id":317,"slug":8380,"dossier":45,"summary":8381,"aliases":8382,"sourceIds":8385,"published":8386,"modified":8387,"checkedAt":7,"severity":8388,"references":8391,"versionKeys":8406,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[8383,8384],"CVE-2026-22701","PYSEC-2026-1374",[317,8384],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[8389],{"type":2595,"score":8390},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8392,8394,8396,8398,8400,8402,8404],{"type":2610,"url":8393},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2599,"url":8395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2610,"url":8397},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2610,"url":8399},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2607,"url":8401},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2607,"url":8403},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2599,"url":8405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[8407,8408,8409,8410],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":318,"slug":8412,"dossier":45,"summary":8413,"aliases":8414,"sourceIds":8417,"published":8418,"modified":8419,"checkedAt":7,"severity":8420,"references":8423,"versionKeys":8437,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[8415,8416],"CVE-2025-2099","PYSEC-2025-40",[318,8416],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[8421,8422],{"type":2595,"score":3531},{"type":2595,"score":2779},[8424,8426,8428,8430,8431,8433,8435],{"type":2599,"url":8425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2610,"url":8427},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2604,"url":8429},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2607,"url":2663},{"type":2610,"url":8432},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2610,"url":8434},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2599,"url":8436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2670],{"id":319,"slug":8439,"dossier":45,"summary":6951,"aliases":8440,"sourceIds":8443,"published":8444,"modified":8445,"checkedAt":7,"severity":8446,"references":8450,"versionKeys":8464,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[8441,8442],"CVE-2024-11392","PYSEC-2024-227",[319,8442],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[8447,8449],{"type":2595,"score":8448},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2595,"score":2872},[8451,8453,8454,8455,8456,8458,8460,8462],{"type":2599,"url":8452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2610,"url":6966},{"type":2610,"url":6968},{"type":2607,"url":2663},{"type":2610,"url":8457},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2610,"url":8459},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2599,"url":8461},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2599,"url":8463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2670],{"id":320,"slug":8466,"dossier":45,"summary":8467,"aliases":8468,"sourceIds":8472,"published":8473,"modified":8474,"checkedAt":7,"severity":8475,"references":8478,"versionKeys":8491,"packageCount":32,"repositoryCount":658},"ghsa-r23q-823p-vmf7-9a5ef709","MLflow Command Injection vulnerability",[8469,8470,8471],"BIT-mlflow-2025-15379","CVE-2025-15379","PYSEC-2026-423",[320,8471],"2026-03-30T09:31:28Z","2026-07-01T20:22:58.350388Z",[8476],{"type":2595,"score":8477},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8479,8481,8483,8485,8486,8488,8489],{"type":2599,"url":8480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15379",{"type":2610,"url":8482},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F361b6f620adf98385c6721e384fb5ef9a30bb05e",{"type":2610,"url":8484},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fa22ce7157f646bdce4c95106fc38ccc9ca289205",{"type":2607,"url":3290},{"type":2610,"url":8487},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdc9c1c20-7879-4050-87df-4d095fe5ca75",{"type":2607,"url":3294},{"type":2599,"url":8490},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r23q-823p-vmf7",[3298,3299],{"id":321,"slug":8493,"dossier":45,"summary":8494,"aliases":8495,"sourceIds":8499,"published":8500,"modified":8501,"checkedAt":7,"severity":8502,"references":8505,"versionKeys":8516,"packageCount":32,"repositoryCount":104},"ghsa-r5m9-wm49-959f-62964e46","MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",[8496,8497,8498],"BIT-mlflow-2026-3198","CVE-2026-3198","PYSEC-2026-2659",[321,8498],"2026-06-02T06:30:26Z","2026-07-13T16:42:37.733340178Z",[8503],{"type":2595,"score":8504},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8506,8508,8510,8511,8513,8514],{"type":2599,"url":8507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3198",{"type":2610,"url":8509},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6989066af33fdcb03588fd71a1a67f8fc5ef12c9",{"type":2607,"url":3290},{"type":2610,"url":8512},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe57db731-97d3-40c3-a429-831ee959807f",{"type":2607,"url":3294},{"type":2599,"url":8515},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r5m9-wm49-959f",[3298,3299,3300],{"id":322,"slug":8518,"dossier":45,"summary":8519,"aliases":8520,"sourceIds":8523,"published":8524,"modified":8525,"checkedAt":7,"severity":8526,"references":8531,"versionKeys":8569,"packageCount":32,"repositoryCount":102},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[8521,8522],"CVE-2026-26007","PYSEC-2026-2141",[322,8522],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[8527,8529],{"type":2632,"score":8528},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2595,"score":8530},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8532,8534,8536,8538,8539,8541,8543,8545,8546,8548,8550,8552,8554,8556,8558,8560,8562,8564,8566,8568],{"type":2610,"url":8533},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2599,"url":8535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2610,"url":8537},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2607,"url":3669},{"type":2610,"url":8540},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2610,"url":8542},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2610,"url":8544},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2599,"url":5839},{"type":2599,"url":8547},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2599,"url":8549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2599,"url":8551},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2599,"url":8553},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2599,"url":8555},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2599,"url":8557},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2599,"url":8559},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2599,"url":8561},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2599,"url":8563},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2599,"url":8565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2599,"url":8567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2599,"url":5856},[3673,3674,3675,3676,3677,3678],{"id":323,"slug":8571,"dossier":45,"summary":8572,"aliases":8573,"sourceIds":8577,"published":8578,"modified":8579,"checkedAt":7,"severity":8580,"references":8583,"versionKeys":8597,"packageCount":32,"repositoryCount":2965},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[8574,8575,8576],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[323,8576],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[8581,8582],{"type":2595,"score":2982},{"type":2632,"score":4051},[8584,8586,8588,8590,8592,8593,8594,8595],{"type":2610,"url":8585},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2599,"url":8587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2610,"url":8589},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2610,"url":8591},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2607,"url":3323},{"type":2610,"url":4059},{"type":2607,"url":4087},{"type":2599,"url":8596},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":324,"slug":8599,"dossier":45,"summary":8600,"aliases":8601,"sourceIds":8604,"published":8605,"modified":8606,"checkedAt":7,"severity":8607,"references":8609,"versionKeys":8621,"packageCount":32,"repositoryCount":32},"ghsa-r95x-qfjj-fjj2-df4fdb80","Authlib OIDC Implicit\u002FHybrid Authorization Vulnerable to Open Redirect",[8602,8603],"CVE-2026-44681","PYSEC-2026-188",[324,8603],"2026-05-13T01:36:03Z","2026-06-09T00:00:25.468861825Z",[8608],{"type":2595,"score":6916},[8610,8612,8614,8615,8617,8619],{"type":2665,"url":8611},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-r95x-qfjj-fjj2",{"type":2599,"url":8613},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44681",{"type":2607,"url":4693},{"type":2610,"url":8616},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.12",{"type":2610,"url":8618},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.7.1",{"type":2610,"url":8620},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-188.yaml",[4697],{"id":325,"slug":8623,"dossier":45,"summary":8624,"aliases":8625,"sourceIds":8626,"published":8627,"modified":8628,"checkedAt":7,"severity":8629,"references":8631,"versionKeys":8639,"packageCount":32,"repositoryCount":34},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[],[325],"2026-07-24T16:42:57Z","2026-07-25T21:44:41.709665254Z",[8630],{"type":2595,"score":2750},[8632,8634,8635,8637,8638],{"type":2610,"url":8633},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":2610,"url":4489},{"type":2610,"url":8636},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":2607,"url":2759},{"type":2610,"url":4494},[2763,2764,2765],{"id":326,"slug":8641,"dossier":45,"summary":8642,"aliases":8643,"sourceIds":8644,"published":8645,"modified":8646,"checkedAt":7,"severity":8647,"references":8648,"versionKeys":8654,"packageCount":32,"repositoryCount":32},"ghsa-rcfx-77hg-w2wv-60228d8d","FastMCP updated to MCP 1.23+ due to CVE-2025-66416",[],[326],"2025-12-26T23:20:50Z","2025-12-26T23:27:27.257304Z",[],[8649,8651,8652,8653],{"type":2610,"url":8650},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rcfx-77hg-w2wv",{"type":2610,"url":5512},{"type":2599,"url":5514},{"type":2607,"url":5722},[3886],{"id":327,"slug":8656,"dossier":45,"summary":8657,"aliases":8658,"sourceIds":8661,"published":8662,"modified":8663,"checkedAt":7,"severity":8664,"references":8666,"versionKeys":8681,"packageCount":32,"repositoryCount":658},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[8659,8660],"CVE-2025-6051","PYSEC-2026-1988",[327,8660],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[8665],{"type":2595,"score":3531},[8667,8669,8671,8673,8675,8676,8678,8679],{"type":2599,"url":8668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2610,"url":8670},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2610,"url":8672},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2610,"url":8674},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2607,"url":2663},{"type":2610,"url":8677},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2607,"url":3031},{"type":2599,"url":8680},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2670,2671],{"id":328,"slug":8683,"dossier":45,"summary":8684,"aliases":8685,"sourceIds":8688,"published":8689,"modified":8690,"checkedAt":7,"severity":8691,"references":8694,"versionKeys":8707,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[8686,8687],"CVE-2026-25087","PYSEC-2026-113",[328,8687],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[8692],{"type":2595,"score":8693},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[8695,8697,8699,8701,8703,8705],{"type":2599,"url":8696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2604,"url":8698},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2607,"url":8700},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2610,"url":8702},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2599,"url":8704},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2599,"url":8706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[8708,8709,8710,8711],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":329,"slug":8713,"dossier":45,"summary":8714,"aliases":8715,"sourceIds":8718,"published":8719,"modified":8720,"checkedAt":7,"severity":8721,"references":8724,"versionKeys":8733,"packageCount":32,"repositoryCount":32},"ghsa-rj5c-58rq-j5g5-60d8d6a7","FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name",[8716,8717],"CVE-2025-62801","PYSEC-2026-1365",[329,8717],"2025-10-29T15:39:03Z","2026-07-07T17:56:56.677841650Z",[8722],{"type":2632,"score":8723},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8725,8727,8729,8730,8731],{"type":2610,"url":8726},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rj5c-58rq-j5g5",{"type":2599,"url":8728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62801",{"type":2607,"url":5722},{"type":2607,"url":3882},{"type":2599,"url":8732},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rj5c-58rq-j5g5",[3886],{"id":330,"slug":8735,"dossier":45,"summary":8736,"aliases":8737,"sourceIds":8740,"published":8741,"modified":8742,"checkedAt":7,"severity":8743,"references":8745,"versionKeys":8753,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[8738,8739],"CVE-2026-42215","PYSEC-2026-2160",[330,8739],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[8744],{"type":2595,"score":2750},[8746,8748,8750,8751],{"type":2665,"url":8747},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2599,"url":8749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2607,"url":2759},{"type":2604,"url":8752},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[2763,2764,2765],{"id":331,"slug":8755,"dossier":45,"summary":8756,"aliases":8757,"sourceIds":8761,"published":5985,"modified":8762,"checkedAt":7,"severity":8763,"references":8766,"versionKeys":8784,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[8758,8759,8760],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[331],"2026-07-17T17:15:51.452848951Z",[8764,8765],{"type":2595,"score":3610},{"type":2632,"score":8317},[8767,8769,8771,8773,8775,8777,8778,8780,8782],{"type":2599,"url":8768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2610,"url":8770},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2610,"url":8772},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2610,"url":8774},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2610,"url":8776},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2607,"url":2994},{"type":2610,"url":8779},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2610,"url":8781},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2610,"url":8783},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[8785,3006,3007,3008,5141,5142,8337,8338,8339],"pypi:torch@2.10.0",{"id":332,"slug":8787,"dossier":45,"summary":8788,"aliases":8789,"sourceIds":8793,"published":8794,"modified":8795,"checkedAt":7,"severity":8796,"references":8799,"versionKeys":8812,"packageCount":32,"repositoryCount":104},"ghsa-rvhj-8chj-8v3c-edfd1899","Mlflow: Command Injection when serving models with enable_mlserver=True",[8790,8791,8792],"BIT-mlflow-2026-0596","CVE-2026-0596","PYSEC-2026-424",[332,8792],"2026-03-31T15:31:56Z","2026-07-01T20:22:58.365246Z",[8797],{"type":2595,"score":8798},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8800,8802,8804,8806,8807,8809,8810],{"type":2599,"url":8801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0596",{"type":2610,"url":8803},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19738",{"type":2610,"url":8805},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F202fac4c83ccc8544c087c142b80196d0e60695c",{"type":2607,"url":3290},{"type":2610,"url":8808},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2e905add-f9f5-4309-a3db-b17de5981285",{"type":2607,"url":3294},{"type":2599,"url":8811},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rvhj-8chj-8v3c",[3298,3299,3300],{"id":333,"slug":8814,"dossier":45,"summary":8815,"aliases":8816,"sourceIds":8818,"published":8819,"modified":8820,"checkedAt":7,"severity":8821,"references":8823,"versionKeys":8833,"packageCount":32,"repositoryCount":34},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[8817],"CVE-2026-67322",[333],"2026-07-21T22:06:09Z","2026-08-02T03:56:46.931996040Z",[8822],{"type":2595,"score":3898},[8824,8826,8828,8830,8831],{"type":2610,"url":8825},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":2610,"url":8827},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":2610,"url":8829},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":2607,"url":2759},{"type":2610,"url":8832},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",[2763,2764,2765],{"id":334,"slug":8835,"dossier":45,"summary":8836,"aliases":8837,"sourceIds":8840,"published":8841,"modified":8842,"checkedAt":7,"severity":8843,"references":8846,"versionKeys":8857,"packageCount":32,"repositoryCount":32},"ghsa-rww4-4w9c-7733-0e0ef0e5","FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities",[8838,8839],"CVE-2026-27124","PYSEC-2026-2476",[334,8839],"2026-03-31T22:32:28Z","2026-07-18T14:44:30.738106660Z",[8844],{"type":2632,"score":8845},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8847,8849,8851,8853,8854,8855],{"type":2610,"url":8848},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",{"type":2610,"url":8850},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",{"type":2599,"url":8852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27124",{"type":2607,"url":3880},{"type":2607,"url":3882},{"type":2599,"url":8856},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",[3886],{"id":335,"slug":8859,"dossier":45,"summary":8860,"aliases":8861,"sourceIds":8864,"published":8865,"modified":8866,"checkedAt":7,"severity":8867,"references":8870,"versionKeys":8882,"packageCount":32,"repositoryCount":104},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[8862,8863],"CVE-2026-55574","PYSEC-2026-2304",[335,8863],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[8868,8869],{"type":2595,"score":2779},{"type":2632,"score":3793},[8871,8873,8875,8877,8879,8881],{"type":2599,"url":8872},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":2599,"url":8874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":2604,"url":8876},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":2604,"url":8878},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":2610,"url":8880},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":2607,"url":2889},[2907,2908,3144],{"id":336,"slug":8884,"dossier":45,"summary":8885,"aliases":8886,"sourceIds":8889,"published":8890,"modified":8891,"checkedAt":7,"severity":8892,"references":8894,"versionKeys":8909,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[8887,8888],"CVE-2025-48956","PYSEC-2026-2021",[336,8888],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[8893],{"type":2595,"score":2779},[8895,8897,8899,8901,8903,8905,8907,8908],{"type":2610,"url":8896},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2599,"url":8898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":2610,"url":8900},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":2610,"url":8902},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":2599,"url":8904},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2610,"url":8906},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[3144],{"id":337,"slug":8911,"dossier":45,"summary":8912,"aliases":8913,"sourceIds":8916,"published":8917,"modified":8918,"checkedAt":7,"severity":8919,"references":8921,"versionKeys":8929,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[8914,8915],"CVE-2026-44244","PYSEC-2026-2163",[337,8915],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[8920],{"type":2595,"score":8176},[8922,8924,8926,8927],{"type":2665,"url":8923},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2599,"url":8925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2607,"url":2759},{"type":2604,"url":8928},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[2763,2764,2765],{"id":338,"slug":8931,"dossier":45,"summary":8932,"aliases":8933,"sourceIds":8936,"published":8937,"modified":8938,"checkedAt":7,"severity":8939,"references":8943,"versionKeys":8955,"packageCount":32,"repositoryCount":602},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[8934,8935],"CVE-2026-41205","PYSEC-2026-88",[338,8935],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[8940,8941],{"type":2595,"score":3898},{"type":2632,"score":8942},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8944,8946,8948,8950,8952,8953],{"type":2599,"url":8945},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2599,"url":8947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2610,"url":8949},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2610,"url":8951},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2607,"url":2851},{"type":2610,"url":8954},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2859,2860],{"id":339,"slug":8957,"dossier":45,"summary":8958,"aliases":8959,"sourceIds":8962,"published":8963,"modified":8964,"checkedAt":7,"severity":8965,"references":8968,"versionKeys":8977,"packageCount":32,"repositoryCount":602},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[8960,8961],"CVE-2026-53540","PYSEC-2026-3040",[339,8961],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[8966],{"type":2595,"score":8967},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[8969,8971,8972,8973,8975],{"type":2610,"url":8970},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2607,"url":3802},{"type":2607,"url":3804},{"type":2599,"url":8974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2599,"url":8976},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4013,4014,3808],{"id":340,"slug":8979,"dossier":45,"summary":8980,"aliases":8981,"sourceIds":8984,"published":8985,"modified":8986,"checkedAt":7,"severity":8987,"references":8989,"versionKeys":9000,"packageCount":32,"repositoryCount":602},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[8982,8983],"CVE-2026-53537","PYSEC-2026-3041",[340,8983],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[8988],{"type":2595,"score":4441},[8990,8992,8994,8995,8997,8999],{"type":2610,"url":8991},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2599,"url":8993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2607,"url":3802},{"type":2599,"url":8996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2610,"url":8998},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2607,"url":3804},[4013,4014,3808],{"id":341,"slug":9002,"dossier":45,"summary":9003,"aliases":9004,"sourceIds":9008,"published":5985,"modified":9009,"checkedAt":7,"severity":9010,"references":9013,"versionKeys":9028,"packageCount":32,"repositoryCount":546},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[9005,9006,9007],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[341],"2026-06-10T17:41:15.774477397Z",[9011,9012],{"type":2595,"score":3610},{"type":2632,"score":5990},[9014,9016,9017,9018,9019,9021,9022,9024,9026],{"type":2599,"url":9015},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2610,"url":5995},{"type":2610,"url":5997},{"type":2610,"url":5999},{"type":2610,"url":9020},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2607,"url":2994},{"type":2610,"url":9023},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2610,"url":9025},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2610,"url":9027},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3006,3007,3008,5141,5142,8337],{"id":342,"slug":9030,"dossier":45,"summary":9031,"aliases":9032,"sourceIds":9036,"published":9037,"modified":9038,"checkedAt":7,"severity":9039,"references":9042,"versionKeys":9052,"packageCount":32,"repositoryCount":104},"ghsa-vhcx-3pq2-4fvc-4147c43c","MLFlow path traversal vulnerability",[9033,9034,9035],"BIT-mlflow-2025-15036","CVE-2025-15036","PYSEC-2026-425",[342,9035],"2026-03-30T03:30:19Z","2026-07-01T20:22:58.380148Z",[9040],{"type":2595,"score":9041},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9043,9045,9046,9047,9049,9050],{"type":2599,"url":9044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15036",{"type":2610,"url":6199},{"type":2607,"url":3290},{"type":2610,"url":9048},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0",{"type":2607,"url":3294},{"type":2599,"url":9051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vhcx-3pq2-4fvc",[3298,3299,3300],{"id":343,"slug":9054,"dossier":45,"summary":9055,"aliases":9056,"sourceIds":9059,"published":9060,"modified":9061,"checkedAt":7,"severity":9062,"references":9064,"versionKeys":9079,"packageCount":32,"repositoryCount":658},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[9057,9058],"CVE-2026-59950","PYSEC-2026-3483",[343,9058],"2026-07-16T20:14:34Z","2026-07-23T15:11:47.407353087Z",[9063],{"type":2632,"score":5509},[9065,9067,9069,9071,9073,9074,9076,9077],{"type":2610,"url":9066},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":2599,"url":9068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":2610,"url":9070},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":2610,"url":9072},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":2607,"url":5520},{"type":2610,"url":9075},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":2607,"url":5524},{"type":2599,"url":9078},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[5526,5527],{"id":344,"slug":9081,"dossier":45,"summary":9082,"aliases":9083,"sourceIds":9087,"published":9088,"modified":9089,"checkedAt":7,"severity":9090,"references":9092,"versionKeys":9106,"packageCount":32,"repositoryCount":2965},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[9084,9085,9086],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[344,9086],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[9091],{"type":2632,"score":3793},[9093,9095,9097,9099,9101,9102,9103,9104],{"type":2610,"url":9094},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2599,"url":9096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2610,"url":9098},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2610,"url":9100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2607,"url":3323},{"type":2610,"url":4085},{"type":2607,"url":4087},{"type":2599,"url":9105},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":345,"slug":9108,"dossier":45,"summary":9109,"aliases":9110,"sourceIds":9113,"published":9114,"modified":9115,"checkedAt":7,"severity":9116,"references":9119,"versionKeys":9132,"packageCount":32,"repositoryCount":104},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[9111,9112],"CVE-2025-43859","PYSEC-2026-348",[345,9112],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[9117],{"type":2595,"score":9118},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9120,9122,9124,9126,9128,9130],{"type":2610,"url":9121},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2599,"url":9123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2610,"url":9125},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2607,"url":9127},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2607,"url":9129},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2599,"url":9131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[9133],"pypi:h11@0.14.0",{"id":346,"slug":9135,"dossier":45,"summary":9136,"aliases":9137,"sourceIds":9140,"published":9141,"modified":9142,"checkedAt":7,"severity":9143,"references":9145,"versionKeys":9157,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[9138,9139],"CVE-2025-48944","PYSEC-2026-2023",[346,9139],"2025-05-28T19:42:32Z","2026-08-07T08:12:14.152190792Z",[9144],{"type":2595,"score":3177},[9146,9148,9150,9151,9153,9155,9156],{"type":2610,"url":9147},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2599,"url":9149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":2610,"url":4544},{"type":2599,"url":9152},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2610,"url":9154},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":2607,"url":2889},{"type":2607,"url":2885},[3144],{"id":347,"slug":9159,"dossier":45,"summary":9160,"aliases":9161,"sourceIds":9164,"published":9165,"modified":9166,"checkedAt":7,"severity":9167,"references":9172,"versionKeys":9187,"packageCount":32,"repositoryCount":32},"ghsa-vv7q-7jx5-f767-0be97d94","FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability",[9162,9163],"CVE-2026-32871","PYSEC-2026-338",[347,9163],"2026-03-31T22:53:21Z","2026-07-18T14:44:31.819120844Z",[9168,9170],{"type":2595,"score":9169},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2632,"score":9171},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[9173,9175,9177,9179,9181,9182,9184,9185],{"type":2610,"url":9174},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-vv7q-7jx5-f767",{"type":2599,"url":9176},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32871",{"type":2610,"url":9178},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fpull\u002F3507",{"type":2610,"url":9180},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fcommit\u002F40bdfb6b1de0ce30609ee9ba5bb95ecd04a9fb71",{"type":2607,"url":3880},{"type":2610,"url":9183},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Freleases\u002Ftag\u002Fv3.2.0",{"type":2607,"url":3882},{"type":2599,"url":9186},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vv7q-7jx5-f767",[3886],{"id":348,"slug":9189,"dossier":45,"summary":9190,"aliases":9191,"sourceIds":9194,"published":9195,"modified":9196,"checkedAt":7,"severity":9197,"references":9201,"versionKeys":9210,"packageCount":32,"repositoryCount":526},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[9192,9193],"CVE-2026-22815","PYSEC-2026-2094",[348,9193],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[9198,9199],{"type":2632,"score":4227},{"type":2632,"score":9200},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9202,9204,9206,9208,9209],{"type":2604,"url":9203},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2599,"url":9205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2604,"url":9207},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2607,"url":2784},{"type":2599,"url":2932},[2788,2789,2790,2791,2792,2793,2794,2795],{"id":349,"slug":9212,"dossier":45,"summary":9213,"aliases":9214,"sourceIds":9218,"published":9219,"modified":9220,"checkedAt":7,"severity":9221,"references":9223,"versionKeys":9233,"packageCount":32,"repositoryCount":104},"ghsa-w5xq-c4pf-ghq7-a926672a","MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks",[9215,9216,9217],"BIT-mlflow-2026-2734","CVE-2026-2734","PYSEC-2026-2660",[349,9217],"2026-05-21T06:31:31Z","2026-07-13T16:43:34.965176091Z",[9222],{"type":2595,"score":8504},[9224,9226,9227,9228,9230,9231],{"type":2599,"url":9225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2734",{"type":2610,"url":8509},{"type":2607,"url":3290},{"type":2610,"url":9229},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd632f783-b2c7-4a3b-af5e-1d693e841c08",{"type":2607,"url":3294},{"type":2599,"url":9232},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w5xq-c4pf-ghq7",[3298,3299,3300],{"id":350,"slug":9235,"dossier":45,"summary":9236,"aliases":9237,"sourceIds":9240,"published":9241,"modified":9242,"checkedAt":7,"severity":9243,"references":9245,"versionKeys":9257,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[9238,9239],"CVE-2025-48887","PYSEC-2025-50",[350,9239],"2025-05-28T17:49:33Z","2026-08-07T08:12:04.723988051Z",[9244],{"type":2595,"score":3177},[9246,9248,9250,9251,9252,9254,9255],{"type":2665,"url":9247},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":2599,"url":9249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2987,"url":6994},{"type":2604,"url":6996},{"type":2610,"url":9253},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":2607,"url":2889},{"type":2599,"url":9256},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[3144],{"id":351,"slug":9259,"dossier":45,"summary":9260,"aliases":9261,"sourceIds":9264,"published":9265,"modified":9266,"checkedAt":7,"severity":9267,"references":9271,"versionKeys":9283,"packageCount":32,"repositoryCount":658},"ghsa-w6vg-jg77-2qg6-e819e20a","MLX has heap-buffer-overflow in load()",[9262,9263],"CVE-2025-62608","PYSEC-2025-138",[351,9263],"2025-11-21T18:02:38Z","2026-06-06T00:45:48.146084644Z",[9268,9270],{"type":2632,"score":9269},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2595,"score":5349},[9272,9274,9276,9278,9280,9281],{"type":2665,"url":9273},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-w6vg-jg77-2qg6",{"type":2599,"url":9275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62608",{"type":2604,"url":9277},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F1",{"type":2604,"url":9279},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F2",{"type":2607,"url":7017},{"type":2610,"url":9282},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-138.yaml",[7021,7022],{"id":352,"slug":9285,"dossier":45,"summary":9286,"aliases":9287,"sourceIds":9290,"published":9291,"modified":9292,"checkedAt":7,"severity":9293,"references":9296,"versionKeys":9313,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[9288,9289],"CVE-2025-68146","PYSEC-2026-1375",[352,9289],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[9294],{"type":2595,"score":9295},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9297,9299,9301,9302,9304,9306,9308,9309,9311],{"type":2610,"url":9298},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2610,"url":9300},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2607,"url":8401},{"type":2610,"url":9303},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2610,"url":9305},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2610,"url":9307},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2607,"url":8403},{"type":2599,"url":9310},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2599,"url":9312},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[8407,8408,8409,8410],{"id":353,"slug":9315,"dossier":45,"summary":9316,"aliases":9317,"sourceIds":9320,"published":9321,"modified":9322,"checkedAt":7,"severity":9323,"references":9325,"versionKeys":9335,"packageCount":32,"repositoryCount":32},"ghsa-w8p2-r796-3vmq-0e5f6b4f","Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type",[9318,9319],"CVE-2026-41479","PYSEC-2026-2119",[353,9319],"2026-06-08T17:52:04Z","2026-07-18T17:30:29.215396840Z",[9324],{"type":2595,"score":6690},[9326,9328,9330,9332,9333],{"type":2665,"url":9327},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-w8p2-r796-3vmq",{"type":2599,"url":9329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41479",{"type":2604,"url":9331},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F3be08468201a7766a93012ce149ea12822cab096",{"type":2607,"url":4693},{"type":2610,"url":9334},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-2119.yaml",[4697],{"id":354,"slug":9337,"dossier":45,"summary":9338,"aliases":9339,"sourceIds":9342,"published":9343,"modified":9344,"checkedAt":7,"severity":9345,"references":9348,"versionKeys":9359,"packageCount":32,"repositoryCount":64},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[9340,9341],"CVE-2025-69872","PYSEC-2026-2447",[354,9341],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[9346],{"type":2632,"score":9347},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[9349,9351,9353,9355,9357],{"type":2599,"url":9350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2610,"url":9352},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2607,"url":9354},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2607,"url":9356},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2599,"url":9358},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[9360],"pypi:diskcache@5.6.3",{"id":355,"slug":9362,"dossier":45,"summary":9363,"aliases":9364,"sourceIds":9367,"published":9368,"modified":9369,"checkedAt":7,"severity":9370,"references":9373,"versionKeys":9385,"packageCount":32,"repositoryCount":658},"ghsa-wcj4-jw5j-44wh-9e6393c7","CBORDecoder reuse can leak shareable values across decode calls",[9365,9366],"CVE-2025-68131","PYSEC-2025-90",[355,9366],"2025-12-31T02:15:42.527Z","2026-06-05T14:30:11.179250820Z",[9371,9372],{"type":2632,"score":9269},{"type":2595,"score":3898},[9374,9376,9378,9380,9382,9383],{"type":2665,"url":9375},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-wcj4-jw5j-44wh",{"type":2599,"url":9377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68131",{"type":2604,"url":9379},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F268",{"type":2610,"url":9381},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Ff1d701cd2c411ee40bb1fe383afe7f365f35abf0",{"type":2607,"url":3110},{"type":2610,"url":9384},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcbor2\u002FPYSEC-2025-90.yaml",[3114,3115],{"id":356,"slug":9387,"dossier":45,"summary":9388,"aliases":9389,"sourceIds":9393,"published":9394,"modified":9395,"checkedAt":7,"severity":9396,"references":9398,"versionKeys":9407,"packageCount":32,"repositoryCount":658},"ghsa-wf7f-8fxf-xfxc-07509bf2","MLFlow unsafe deserialization",[9390,9391,9392],"BIT-mlflow-2024-37059","CVE-2024-37059","PYSEC-2026-1660",[356,9392],"2024-06-04T12:31:05Z","2026-07-07T17:56:49.672624556Z",[9397],{"type":2595,"score":2872},[9399,9401,9402,9404,9405],{"type":2599,"url":9400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-37059",{"type":2607,"url":3290},{"type":2610,"url":9403},"https:\u002F\u002Fhiddenlayer.com\u002Fsai-security-advisory\u002Fmlflow-june2024",{"type":2607,"url":3294},{"type":2599,"url":9406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf7f-8fxf-xfxc",[3298,3299],{"id":357,"slug":9409,"dossier":45,"summary":9410,"aliases":9411,"sourceIds":9415,"published":9416,"modified":9417,"checkedAt":7,"severity":9418,"references":9421,"versionKeys":9459,"packageCount":32,"repositoryCount":2965},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[9412,9413,9414],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[357,9414],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[9419,9420],{"type":2595,"score":2779},{"type":2632,"score":3793},[9422,9424,9426,9428,9430,9431,9433,9435,9437,9439,9441,9443,9444,9446,9448,9450,9451,9453,9455,9457],{"type":2610,"url":9423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2599,"url":9425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2610,"url":9427},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2610,"url":9429},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2607,"url":3323},{"type":2610,"url":9432},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2610,"url":9434},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2610,"url":9436},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2599,"url":9438},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2599,"url":9440},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2599,"url":9442},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2599,"url":5845},{"type":2599,"url":9445},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2599,"url":9447},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2599,"url":9449},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2599,"url":4824},{"type":2599,"url":9452},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2599,"url":9454},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2599,"url":9456},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2599,"url":9458},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3327,3328,3329,3330,3331,3332,3333,3334],{"id":358,"slug":9461,"dossier":45,"summary":9462,"aliases":9463,"sourceIds":9467,"published":9468,"modified":9469,"checkedAt":7,"severity":9470,"references":9473,"versionKeys":9482,"packageCount":32,"repositoryCount":2965},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[9464,9465,9466],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[358,9466],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[9471,9472],{"type":2595,"score":2982},{"type":2632,"score":4051},[9474,9476,9478,9480,9481],{"type":2599,"url":9475},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2599,"url":9477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2610,"url":9479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2607,"url":3323},{"type":2599,"url":4059},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":359,"slug":9484,"dossier":45,"summary":9485,"aliases":9486,"sourceIds":9489,"published":9490,"modified":9491,"checkedAt":7,"severity":9492,"references":9495,"versionKeys":9508,"packageCount":32,"repositoryCount":602},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[9487,9488],"CVE-2026-24486","PYSEC-2026-1852",[359,9488],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[9493],{"type":2595,"score":9494},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[9496,9498,9500,9502,9503,9505,9506],{"type":2610,"url":9497},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2599,"url":9499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2610,"url":9501},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2607,"url":3802},{"type":2610,"url":9504},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2607,"url":3804},{"type":2599,"url":9507},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4013,4014,3808],{"id":360,"slug":9510,"dossier":45,"summary":9511,"aliases":9512,"sourceIds":9515,"published":9516,"modified":9517,"checkedAt":7,"severity":9518,"references":9520,"versionKeys":9541,"packageCount":32,"repositoryCount":546},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[9513,9514],"CVE-2026-48818","PYSEC-2026-2281",[360,9514],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[9519],{"type":2595,"score":3898},[9521,9523,9524,9526,9528,9530,9532,9533,9535,9537,9539],{"type":2599,"url":9522},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2607,"url":4876},{"type":2610,"url":9525},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2610,"url":9527},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2599,"url":9529},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2599,"url":9531},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2599,"url":5377},{"type":2599,"url":9534},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2987,"url":9536},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2604,"url":9538},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2604,"url":9540},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2737,2738,2739,4883,4884,5027,5028],{"id":361,"slug":9543,"dossier":45,"summary":9544,"aliases":9545,"sourceIds":9548,"published":9549,"modified":9550,"checkedAt":7,"severity":9551,"references":9553,"versionKeys":9570,"packageCount":32,"repositoryCount":658},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[9546,9547],"CVE-2025-59425","PYSEC-2026-2026",[361,9547],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[9552],{"type":2595,"score":3898},[9554,9556,9558,9560,9562,9564,9565,9567,9569],{"type":2610,"url":9555},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2599,"url":9557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":2610,"url":9559},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":2599,"url":9561},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2610,"url":9563},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":2607,"url":2889},{"type":2610,"url":9566},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":2610,"url":9568},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":2607,"url":2885},[2907,3144],{"id":362,"slug":9572,"dossier":45,"summary":6951,"aliases":9573,"sourceIds":9576,"published":6956,"modified":9577,"checkedAt":7,"severity":9578,"references":9581,"versionKeys":9595,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[9574,9575],"CVE-2024-11393","PYSEC-2024-228",[362,9575],"2026-06-10T17:00:13.252500033Z",[9579,9580],{"type":2595,"score":6960},{"type":2595,"score":2872},[9582,9584,9585,9586,9587,9589,9591,9593],{"type":2599,"url":9583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2610,"url":6966},{"type":2610,"url":6968},{"type":2607,"url":2663},{"type":2610,"url":9588},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2610,"url":9590},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2599,"url":9592},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2599,"url":9594},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2670],{"id":363,"slug":9597,"dossier":45,"summary":9598,"aliases":9599,"sourceIds":9600,"published":9601,"modified":9602,"checkedAt":7,"severity":9603,"references":9605,"versionKeys":9613,"packageCount":32,"repositoryCount":34},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[],[363],"2026-08-07T15:49:07Z","2026-08-09T02:56:51.363626854Z",[9604],{"type":2595,"score":2750},[9606,9608,9609,9611,9612],{"type":2610,"url":9607},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":2610,"url":3428},{"type":2610,"url":9610},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":2607,"url":2759},{"type":2610,"url":3433},[2763,2764,2765],{"id":364,"slug":9615,"dossier":45,"summary":9616,"aliases":9617,"sourceIds":9620,"published":9621,"modified":9622,"checkedAt":7,"severity":9623,"references":9625,"versionKeys":9637,"packageCount":32,"repositoryCount":32},"ghsa-wvwj-cvrp-7pv5-e187e76a","Authlib JWS JWK Header Injection: Signature Verification Bypass",[9618,9619],"CVE-2026-27962","PYSEC-2026-287",[364,9619],"2026-03-16T15:17:15Z","2026-07-13T16:15:15.641042659Z",[9624],{"type":2595,"score":9118},[9626,9628,9630,9632,9633,9634,9635],{"type":2610,"url":9627},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",{"type":2599,"url":9629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27962",{"type":2610,"url":9631},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fa5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",{"type":2607,"url":4693},{"type":2610,"url":4695},{"type":2607,"url":6086},{"type":2599,"url":9636},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",[4697],{"id":365,"slug":9639,"dossier":45,"summary":9640,"aliases":9641,"sourceIds":9644,"published":9645,"modified":9646,"checkedAt":7,"severity":9647,"references":9651,"versionKeys":9660,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[9642,9643],"CVE-2026-42284","PYSEC-2026-2161",[365,9643],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[9648,9650],{"type":2595,"score":9649},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2595,"score":3489},[9652,9654,9656,9657,9658],{"type":2665,"url":9653},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2599,"url":9655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2607,"url":2759},{"type":2604,"url":8752},{"type":2610,"url":9659},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[2763,2764,2765],{"id":366,"slug":9662,"dossier":45,"summary":9663,"aliases":9664,"sourceIds":9667,"published":9668,"modified":9669,"checkedAt":7,"severity":9670,"references":9677,"versionKeys":9696,"packageCount":32,"repositoryCount":104},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[9665,9666],"CVE-2026-7141","PYSEC-2026-2306",[366,9666],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[9671,9673,9675],{"type":2595,"score":9672},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2632,"score":9674},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2632,"score":9676},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9678,9680,9682,9684,9686,9688,9690,9692,9694],{"type":2599,"url":9679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2987,"url":9681},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2987,"url":9683},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":2604,"url":9685},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":2604,"url":9687},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":2599,"url":9689},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":2599,"url":9691},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2987,"url":9693},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":2599,"url":9695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2907,2908,3144],{"id":367,"slug":9698,"dossier":45,"summary":9699,"aliases":9700,"sourceIds":9704,"published":9705,"modified":9706,"checkedAt":7,"severity":9707,"references":9712,"versionKeys":9728,"packageCount":32,"repositoryCount":658},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[9701,9702,9703],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[367],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[9708,9710],{"type":2595,"score":9709},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2632,"score":9711},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9713,9715,9717,9719,9721,9722,9724,9726],{"type":2599,"url":9714},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2610,"url":9716},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2610,"url":9718},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2610,"url":9720},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2607,"url":2994},{"type":2610,"url":9723},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2610,"url":9725},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2610,"url":9727},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3006,3007],{"id":368,"slug":9730,"dossier":45,"summary":9731,"aliases":9732,"sourceIds":9735,"published":9736,"modified":9737,"checkedAt":7,"severity":9738,"references":9740,"versionKeys":9747,"packageCount":32,"repositoryCount":546},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[9733,9734],"CVE-2026-48817","PYSEC-2026-2280",[368,9734],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[9739],{"type":2595,"score":2922},[9741,9743,9745,9746],{"type":2599,"url":9742},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2599,"url":9744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2607,"url":4876},{"type":2599,"url":9534},[2737,2738,2739,4883,4884,5027,5028],{"id":369,"slug":9749,"dossier":45,"summary":9750,"aliases":9751,"sourceIds":9754,"published":9755,"modified":9756,"checkedAt":7,"severity":9757,"references":9760,"versionKeys":9766,"packageCount":32,"repositoryCount":526},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[9752,9753],"CVE-2026-54274","PYSEC-2026-2108",[369,9753],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[9758,9759],{"type":2632,"score":3406},{"type":2595,"score":2779},[9761,9763,9764],{"type":2599,"url":9762},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2607,"url":2784},{"type":2604,"url":9765},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2788,2789,2790,2791,2792,2793,2794,2795],{"id":370,"slug":9768,"dossier":45,"summary":9769,"aliases":9770,"sourceIds":9774,"published":9775,"modified":9776,"checkedAt":7,"severity":9777,"references":9779,"versionKeys":9793,"packageCount":32,"repositoryCount":658},"ghsa-xch3-2f9x-wh9f-70e88660","MLflow has a command injection in mlflow\u002Fsagemaker\u002F__init__.py",[9771,9772,9773],"BIT-mlflow-2025-14287","CVE-2025-14287","PYSEC-2026-2661",[370,9773],"2026-03-16T15:30:41Z","2026-07-13T16:42:49.591762139Z",[9778],{"type":2595,"score":8448},[9780,9782,9784,9786,9787,9788,9790,9791],{"type":2599,"url":9781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14287",{"type":2610,"url":9783},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19277",{"type":2610,"url":9785},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F8b8792a7034fb33a14b0b31cabcaa9b912d3485f",{"type":2607,"url":3290},{"type":2610,"url":6564},{"type":2610,"url":9789},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F229cd526-41aa-4819-b6f0-e2d0371c89e3",{"type":2607,"url":3294},{"type":2599,"url":9792},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xch3-2f9x-wh9f",[3298,3299],{"id":371,"slug":9795,"dossier":45,"summary":9796,"aliases":9797,"sourceIds":9801,"published":9802,"modified":9803,"checkedAt":7,"severity":9804,"references":9806,"versionKeys":9820,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[9798,9799,9800],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[371,9800],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[9805],{"type":2595,"score":4709},[9807,9809,9811,9813,9815,9817,9818],{"type":2599,"url":9808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2599,"url":9810},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2610,"url":9812},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2604,"url":9814},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2610,"url":9816},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2607,"url":3323},{"type":2610,"url":9819},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3330],{"id":372,"slug":9822,"dossier":45,"summary":9823,"aliases":9824,"sourceIds":9828,"published":9829,"modified":9830,"checkedAt":7,"severity":9831,"references":9834,"versionKeys":9845,"packageCount":32,"repositoryCount":2965},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[9825,9826,9827],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[372,9827],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[9832],{"type":2595,"score":9833},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9835,9837,9839,9841,9843,9844],{"type":2665,"url":9836},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2599,"url":9838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2604,"url":9840},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2604,"url":9842},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2607,"url":3323},{"type":2599,"url":4085},[3327,3328,3329,3330,3331,3332,3333,3334],{"id":373,"slug":9847,"dossier":45,"summary":411,"aliases":9848,"sourceIds":9851,"published":9852,"modified":9853,"checkedAt":7,"severity":9854,"references":9856,"versionKeys":9865,"packageCount":32,"repositoryCount":658},"pysec-2025-198-62b25ed4",[9849,9850],"BIT-pytorch-2025-46148","CVE-2025-46148",[373],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[9855],{"type":2595,"score":5453},[9857,9859,9861,9863],{"type":2599,"url":9858},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2599,"url":9860},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2987,"url":9862},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2604,"url":9864},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3006,3007],{"id":374,"slug":9867,"dossier":45,"summary":411,"aliases":9868,"sourceIds":9871,"published":9872,"modified":9873,"checkedAt":7,"severity":9874,"references":9876,"versionKeys":9882,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[9869,9870],"BIT-pytorch-2025-46149","CVE-2025-46149",[374],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[9875],{"type":2595,"score":5453},[9877,9878,9880],{"type":2599,"url":9858},{"type":2987,"url":9879},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2604,"url":9881},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3007],{"id":375,"slug":9884,"dossier":45,"summary":411,"aliases":9885,"sourceIds":9888,"published":9889,"modified":9890,"checkedAt":7,"severity":9891,"references":9893,"versionKeys":9901,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[9886,9887],"BIT-pytorch-2025-46150","CVE-2025-46150",[375],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[9892],{"type":2595,"score":5453},[9894,9895,9897,9899],{"type":2599,"url":9858},{"type":2987,"url":9896},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2987,"url":9898},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2604,"url":9900},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3007],{"id":376,"slug":9903,"dossier":45,"summary":411,"aliases":9904,"sourceIds":9907,"published":9908,"modified":9909,"checkedAt":7,"severity":9910,"references":9912,"versionKeys":9918,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[9905,9906],"BIT-pytorch-2025-46152","CVE-2025-46152",[376],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[9911],{"type":2595,"score":2690},[9913,9914,9916],{"type":2599,"url":9858},{"type":2987,"url":9915},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2604,"url":9917},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3007],{"id":377,"slug":9920,"dossier":45,"summary":411,"aliases":9921,"sourceIds":9924,"published":9925,"modified":9926,"checkedAt":7,"severity":9927,"references":9929,"versionKeys":9939,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[9922,9923],"BIT-pytorch-2025-46153","CVE-2025-46153",[377],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[9928],{"type":2595,"score":5453},[9930,9932,9933,9935,9937],{"type":2610,"url":9931},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2599,"url":9858},{"type":2599,"url":9934},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2987,"url":9936},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2604,"url":9938},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3007],{"id":378,"slug":9941,"dossier":45,"summary":411,"aliases":9942,"sourceIds":9945,"published":9946,"modified":9947,"checkedAt":7,"severity":9948,"references":9950,"versionKeys":9955,"packageCount":32,"repositoryCount":546},"pysec-2025-203-2febb201",[9943,9944],"BIT-pytorch-2025-55551","CVE-2025-55551",[378],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[9949],{"type":2595,"score":2779},[9951,9953],{"type":2599,"url":9952},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2987,"url":9954},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3006,3007,3008,5141,5142,8337],{"id":379,"slug":9957,"dossier":45,"summary":411,"aliases":9958,"sourceIds":9961,"published":9962,"modified":9963,"checkedAt":7,"severity":9964,"references":9966,"versionKeys":9970,"packageCount":32,"repositoryCount":546},"pysec-2025-204-cdae47da",[9959,9960],"BIT-pytorch-2025-55552","CVE-2025-55552",[379],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[9965],{"type":2595,"score":2779},[9967,9968],{"type":2599,"url":9952},{"type":2987,"url":9969},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3006,3007,3008,5141,5142,8337],{"id":380,"slug":9972,"dossier":45,"summary":411,"aliases":9973,"sourceIds":9976,"published":9977,"modified":9978,"checkedAt":7,"severity":9979,"references":9981,"versionKeys":9987,"packageCount":32,"repositoryCount":104},"pysec-2025-205-fd5e58fd",[9974,9975],"BIT-pytorch-2025-55553","CVE-2025-55553",[380],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[9980],{"type":2595,"score":2779},[9982,9983,9985],{"type":2599,"url":9952},{"type":2987,"url":9984},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2604,"url":9986},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3006,3007,3008],{"id":381,"slug":9989,"dossier":45,"summary":411,"aliases":9990,"sourceIds":9993,"published":9994,"modified":9995,"checkedAt":7,"severity":9996,"references":9998,"versionKeys":10002,"packageCount":32,"repositoryCount":546},"pysec-2025-206-58322476",[9991,9992],"BIT-pytorch-2025-55554","CVE-2025-55554",[381],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[9997],{"type":2595,"score":2690},[9999,10000],{"type":2599,"url":9952},{"type":2987,"url":10001},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3006,3007,3008,5141,5142,8337],{"id":382,"slug":10004,"dossier":45,"summary":411,"aliases":10005,"sourceIds":10008,"published":10009,"modified":10010,"checkedAt":7,"severity":10011,"references":10013,"versionKeys":10019,"packageCount":32,"repositoryCount":104},"pysec-2025-207-2abef3fc",[10006,10007],"BIT-pytorch-2025-55557","CVE-2025-55557",[382],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[10012],{"type":2595,"score":2779},[10014,10015,10017],{"type":2599,"url":9952},{"type":2987,"url":10016},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2604,"url":10018},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3006,3007,3008],{"id":383,"slug":10021,"dossier":45,"summary":411,"aliases":10022,"sourceIds":10025,"published":10026,"modified":10027,"checkedAt":7,"severity":10028,"references":10030,"versionKeys":10036,"packageCount":32,"repositoryCount":104},"pysec-2025-208-6e93fe9d",[10023,10024],"BIT-pytorch-2025-55558","CVE-2025-55558",[383],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[10029],{"type":2595,"score":2779},[10031,10032,10034],{"type":2599,"url":9952},{"type":2987,"url":10033},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2604,"url":10035},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3006,3007,3008],{"id":384,"slug":10038,"dossier":45,"summary":411,"aliases":10039,"sourceIds":10042,"published":10043,"modified":10044,"checkedAt":7,"severity":10045,"references":10047,"versionKeys":10053,"packageCount":32,"repositoryCount":104},"pysec-2025-209-e6f352b0",[10040,10041],"BIT-pytorch-2025-55560","CVE-2025-55560",[384],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[10046],{"type":2595,"score":2779},[10048,10049,10051],{"type":2599,"url":9952},{"type":2987,"url":10050},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2604,"url":10052},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3006,3007,3008],{"id":385,"slug":10055,"dossier":45,"summary":411,"aliases":10056,"sourceIds":10058,"published":10059,"modified":10060,"checkedAt":7,"severity":10061,"references":10063,"versionKeys":10066,"packageCount":32,"repositoryCount":104},"pysec-2025-211-d8bd15de",[10057],"CVE-2025-14920",[385],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[10062],{"type":2595,"score":2656},[10064],{"type":2599,"url":10065},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2670,2671,2672],{"id":386,"slug":10068,"dossier":45,"summary":411,"aliases":10069,"sourceIds":10071,"published":10072,"modified":10073,"checkedAt":7,"severity":10074,"references":10076,"versionKeys":10079,"packageCount":32,"repositoryCount":104},"pysec-2025-212-a011b97d",[10070],"CVE-2025-14921",[386],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[10075],{"type":2595,"score":2656},[10077],{"type":2599,"url":10078},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2670,2671,2672],{"id":387,"slug":10081,"dossier":45,"summary":411,"aliases":10082,"sourceIds":10084,"published":10085,"modified":10086,"checkedAt":7,"severity":10087,"references":10089,"versionKeys":10092,"packageCount":32,"repositoryCount":104},"pysec-2025-213-9043dc9b",[10083],"CVE-2025-14924",[387],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[10088],{"type":2595,"score":2656},[10090],{"type":2599,"url":10091},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2670,2671,2672],{"id":388,"slug":10094,"dossier":45,"summary":411,"aliases":10095,"sourceIds":10097,"published":10098,"modified":10099,"checkedAt":7,"severity":10100,"references":10102,"versionKeys":10105,"packageCount":32,"repositoryCount":104},"pysec-2025-214-eb241255",[10096],"CVE-2025-14926",[388],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[10101],{"type":2595,"score":2656},[10103],{"type":2599,"url":10104},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2670,2671,2672],{"id":389,"slug":10107,"dossier":45,"summary":411,"aliases":10108,"sourceIds":10110,"published":10111,"modified":10112,"checkedAt":7,"severity":10113,"references":10115,"versionKeys":10118,"packageCount":32,"repositoryCount":104},"pysec-2025-215-6064f491",[10109],"CVE-2025-14927",[389],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[10114],{"type":2595,"score":2656},[10116],{"type":2599,"url":10117},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2670,2671,2672],{"id":390,"slug":10120,"dossier":45,"summary":411,"aliases":10121,"sourceIds":10123,"published":10124,"modified":10125,"checkedAt":7,"severity":10126,"references":10128,"versionKeys":10131,"packageCount":32,"repositoryCount":104},"pysec-2025-216-5708ed01",[10122],"CVE-2025-14928",[390],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[10127],{"type":2595,"score":2656},[10129],{"type":2599,"url":10130},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2670,2671,2672],{"id":391,"slug":10133,"dossier":45,"summary":411,"aliases":10134,"sourceIds":10136,"published":10137,"modified":10138,"checkedAt":7,"severity":10139,"references":10141,"versionKeys":10144,"packageCount":32,"repositoryCount":546},"pysec-2025-217-2c1ad388",[10135],"CVE-2025-14929",[391],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[10140],{"type":2595,"score":2656},[10142],{"type":2599,"url":10143},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2670,2671,2672,2673,2674,2675,2676],{"id":392,"slug":10146,"dossier":45,"summary":411,"aliases":10147,"sourceIds":10149,"published":10150,"modified":10151,"checkedAt":7,"severity":10152,"references":10154,"versionKeys":10157,"packageCount":32,"repositoryCount":602},"pysec-2025-218-39811fc3",[10148],"CVE-2025-14930",[392],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[10153],{"type":2595,"score":2656},[10155],{"type":2599,"url":10156},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2670,2671,2672,2673],{"id":393,"slug":10159,"dossier":45,"summary":411,"aliases":10160,"sourceIds":10162,"published":10163,"modified":10164,"checkedAt":7,"severity":10165,"references":10167,"versionKeys":10174,"packageCount":32,"repositoryCount":32},"pysec-2025-238-fe0347f8",[10161],"CVE-2025-64076",[393],"2025-11-18T18:16:14.263Z","2026-07-13T07:15:16.765464311Z",[10166],{"type":2595,"score":2779},[10168,10170,10172],{"type":2987,"url":10169},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fissues\u002F264",{"type":2604,"url":10171},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002F851473490281f82d82560b2368284ef33cf6e8f9",{"type":2604,"url":10173},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F265",[3114],{"id":394,"slug":10176,"dossier":45,"summary":411,"aliases":10177,"sourceIds":10180,"published":10181,"modified":10182,"checkedAt":7,"severity":10183,"references":10185,"versionKeys":10196,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[10178,10179],"BIT-pytorch-2026-4538","CVE-2026-4538",[394],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[10184],{"type":2595,"score":8176},[10186,10188,10190,10192,10194],{"type":2610,"url":10187},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2599,"url":10189},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2599,"url":10191},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2987,"url":10193},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2604,"url":10195},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[8785,3006,3007,3008,5141,5142,8337,8338,8339],{"id":395,"slug":10198,"dossier":89,"summary":411,"aliases":10199,"sourceIds":10202,"published":10203,"modified":10204,"checkedAt":7,"severity":10205,"references":10208,"versionKeys":10221,"packageCount":32,"repositoryCount":6663},"pysec-2026-2132-627bf7c7",[10200,10201],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[395],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[10206],{"type":2595,"score":10207},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[10209,10211,10213,10214,10215,10217,10219],{"type":2610,"url":10210},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2610,"url":10212},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2599,"url":7248},{"type":2599,"url":7250},{"type":2987,"url":10216},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2604,"url":10218},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2665,"url":10220},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[10222,10223,10224,10225,10226,10227],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":396,"slug":10229,"dossier":45,"summary":411,"aliases":10230,"sourceIds":10233,"published":10234,"modified":10235,"checkedAt":7,"severity":10236,"references":10238,"versionKeys":10241,"packageCount":32,"repositoryCount":104},"pysec-2026-227-5f5a1d28",[10231,10232],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[396],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[10237],{"type":2595,"score":2872},[10239],{"type":2665,"url":10240},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2907,2908,3144],{"id":397,"slug":10243,"dossier":45,"summary":411,"aliases":10244,"sourceIds":10249,"published":10250,"modified":10251,"checkedAt":7,"severity":10252,"references":10254,"versionKeys":10270,"packageCount":32,"repositoryCount":526},"pysec-2026-2286-8795b007",[10245,10246,10247,10248],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[397],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[10253],{"type":2595,"score":2872},[10255,10257,10259,10260,10262,10264,10266,10268],{"type":2610,"url":10256},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2610,"url":10258},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2599,"url":4814},{"type":2599,"url":10261},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2599,"url":10263},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2987,"url":10265},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2987,"url":10267},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2604,"url":10269},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3006,3007,3008,5141,5142,8337,8338,8339],{"id":398,"slug":10272,"dossier":45,"summary":411,"aliases":10273,"sourceIds":10275,"published":10276,"modified":10277,"checkedAt":7,"severity":10278,"references":10280,"versionKeys":10290,"packageCount":32,"repositoryCount":104},"pysec-2026-2302-60c0b148",[10274],"CVE-2026-5497",[398],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[10279],{"type":2595,"score":2779},[10281,10283,10285,10287,10288],{"type":2610,"url":10282},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":2610,"url":10284},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2987,"url":10286},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":2604,"url":7998},{"type":2665,"url":10289},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2907,2908,3144],1786588638709]