[{"data":1,"prerenderedAt":11257},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11299":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":416,"related":419},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-30T08:36:30.871Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-30T08:33:18.305Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,38,37,0,4104,4093,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2460,50,7146,9,55,2426,34,822,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":414,"providers":415},"opencode:11299","opencode-11299",11299,"URBAN.KI SmartEnergie","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie","8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fcommit\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","2026-09-15T13:09:00.895Z","2026-09-14T08:20:45.000Z",{"complete":90,"entryCount":91,"truncated":47},true,928,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","b999006073eed3c4ff84d359c9b073b0b3899f18","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fblob\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129\u002Fuv.lock","5bc9c3742e46d283568bac153a2117227cbb749c54f13f479c74214dc47187f6",968814,"parsed",328,[102],"pypi",12,22,2,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413],"GHSA-23w6-3w8w-8484","GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g59-m95p-pgfq","GHSA-2gx3-rcp4-g85q","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3936-cmfr-pm3m","GHSA-3crg-w4f6-42mx","GHSA-3gq4-3j92-5w49","GHSA-3gqm-fcw5-w839","GHSA-3hhw-38pf-pxj6","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4jhm-jv67-739f","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-568f-pv23-39p4","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5gh2-94qg-qppq","GHSA-5hgr-hg42-57jg","GHSA-5p39-cfhj-2xmp","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5w7q-77mv-v69f","GHSA-5wp5-5229-5g6q","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6hm5-jgcp-p838","GHSA-6hwm-xvph-95vm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6w46-j5rx-g56g","GHSA-6ww7-3frv-cqxh","GHSA-72r2-7mfr-5xr9","GHSA-752w-5fwx-jx9f","GHSA-763m-79hh-57f2","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7p94-766c-hgjp","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-848c-c2cx-j7qx","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8mgp-746c-j5xp","GHSA-8mpw-7fpc-4gqj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-8wjv-2p76-3863","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-97qj-x29f-37w7","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9f4q-q82q-4359","GHSA-9h52-p55h-vw2f","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9v7f-9g4p-ffgj","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c39v-8hrw-h448","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cgwc-pv48-fhj5","GHSA-cj93-chg6-vgv8","GHSA-cjqg-rq2h-2fvj","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cr42-rg2m-mq4q","GHSA-cv22-g7mw-8v73","GHSA-cw6x-m8jw-qmrh","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f794-5jv7-7672","GHSA-f833-7jw8-xwrv","GHSA-f96h-pmfr-66vw","GHSA-fc8x-2rww-xw9m","GHSA-ff5c-cp5c-9wjf","GHSA-ffc3-869f-jxw9","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fj7x-q9j7-g6q6","GHSA-fp3f-mc75-235c","GHSA-fpwr-67px-3qhx","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gjv8-xp57-g29c","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hvfh-5mj3-5f3j","GHSA-hw26-mmpg-fqfg","GHSA-hxm8-2xgr-2p9m","GHSA-hxxf-235m-72v3","GHSA-j543-4vmf-qm7v","GHSA-j5xp-7m2f-49jv","GHSA-j934-xhv5-fg8f","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jmmv-h3mp-59v8","GHSA-jp53-mhqp-8xcg","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-m2v9-299j-rv96","GHSA-m42h-3232-vpv3","GHSA-m449-cwjh-6pw7","GHSA-m4rf-3fr8-xwx3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m88r-rg27-5xfg","GHSA-m9gh-vj53-gvh9","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mpf4-983q-p7j4","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p3m8-78j2-g5p3","GHSA-p4g4-x82p-q773","GHSA-p4gq-832x-fm9v","GHSA-p4rw-rvv2-7xwr","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q29v-xc37-wh5m","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qvv7-cg9c-w4x3","GHSA-qx2g-xrx7-vfh8","GHSA-qxrp-vhvm-j765","GHSA-r3xg-rg9j-67fv","GHSA-r6gq-whwq-mvg9","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rhp5-r9x4-f5g2","GHSA-rrmf-rvhw-rf47","GHSA-rrv8-h7p8-rx55","GHSA-v492-6xx2-p57g","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vp2x-qp44-57v7","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w3fx-mc44-mf6j","GHSA-w3v8-gmh9-3wv7","GHSA-w6j9-cwv2-h6wq","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-ww6m-cw3f-q94g","GHSA-wwv5-g3v4-889x","GHSA-x284-j5p8-9c5p","GHSA-x3gm-94wq-g975","GHSA-x5ph-mj9p-rfr8","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-x8wg-4xgc-vr54","GHSA-x99w-6fgc-pmfw","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","GHSA-xvp8-3mhv-424c","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2120","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3954","PYSEC-2026-3955","PYSEC-2026-598","PYSEC-2026-99",307,[],{"files":417,"occurrenceCount":100},[418],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":420,"vulnerabilities":3317},[421,434,444,454,467,476,485,494,503,513,522,531,540,550,560,571,583,593,603,613,622,632,642,651,660,669,679,688,697,706,715,724,733,742,752,761,770,780,789,798,807,816,825,834,843,852,862,871,880,889,898,908,917,926,936,945,954,963,972,981,990,999,1008,1017,1026,1035,1044,1053,1063,1072,1081,1090,1099,1108,1117,1126,1135,1144,1153,1162,1171,1180,1189,1198,1207,1216,1224,1233,1242,1251,1260,1268,1276,1285,1294,1303,1312,1321,1330,1339,1348,1357,1366,1377,1387,1396,1404,1414,1423,1432,1440,1449,1458,1467,1476,1485,1494,1503,1512,1521,1530,1539,1548,1557,1566,1575,1584,1593,1602,1610,1618,1627,1636,1644,1653,1662,1671,1679,1688,1696,1705,1714,1723,1731,1739,1747,1755,1763,1771,1780,1789,1797,1806,1815,1824,1832,1841,1850,1858,1867,1876,1885,1894,1904,1913,1922,1931,1939,1948,1957,1966,1975,1984,1993,2001,2010,2018,2027,2035,2044,2052,2061,2070,2078,2086,2094,2102,2111,2120,2128,2136,2144,2152,2160,2168,2176,2184,2192,2200,2208,2216,2224,2232,2240,2248,2256,2264,2272,2280,2288,2296,2304,2312,2320,2328,2336,2344,2352,2360,2368,2376,2384,2392,2400,2408,2416,2425,2433,2443,2452,2460,2470,2479,2488,2497,2506,2514,2523,2531,2540,2549,2558,2567,2575,2584,2592,2600,2609,2618,2627,2636,2645,2654,2662,2671,2680,2689,2697,2705,2713,2721,2730,2739,2747,2756,2764,2773,2782,2791,2800,2809,2818,2827,2836,2845,2855,2863,2872,2881,2890,2899,2908,2917,2926,2935,2943,2952,2961,2969,2978,2987,2996,3005,3014,3023,3032,3041,3050,3058,3067,3076,3085,3094,3102,3111,3120,3128,3137,3145,3153,3162,3171,3180,3188,3197,3205,3213,3221,3230,3239,3247,3256,3264,3273,3282,3290,3299,3308],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":90,"provider":426,"advisoryCount":35,"licenseExpressions":429,"versions":431,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":433},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":427,"label":428},"hugging-face","Hugging Face",[430],"Apache-2.0",[432],"4.57.1",[56],{"id":435,"slug":436,"identity":437,"label":438,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":439,"versions":441,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":443},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[440],"BSD-3-Clause",[442],"2.9.0",[56],{"id":445,"slug":446,"identity":447,"label":448,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":449,"versions":451,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":453},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[450],"non-standard",[452],"1.11.0",[56],{"id":455,"slug":456,"identity":457,"label":458,"aiRelevant":90,"provider":459,"advisoryCount":39,"licenseExpressions":462,"versions":464,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":466},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":460,"label":461},"anthropic","Anthropic",[463],"MIT",[465],"0.72.0",[56],{"id":72,"slug":73,"identity":468,"label":74,"aiRelevant":90,"provider":469,"advisoryCount":39,"licenseExpressions":472,"versions":473,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":475},"pypi:openai",{"id":470,"label":471},"openai","OpenAI",[430],[474],"1.109.1",[56],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":481,"versions":482,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":484},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[450],[483],"0.22.1",[56],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":490,"versions":491,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":493},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[463],[492],"0.14.6",[56],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":499,"versions":500,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":502},"package:pypi:llama-index-llms-openai","llama-index-llms-openai-9155387e","pypi:llama-index-llms-openai","LlamaIndex · Llms OpenAI",[463],[501],"0.6.6",[56],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":508,"versions":510,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":512},"package:pypi:llama-index-readers-web","llama-index-readers-web-ef09483c","pypi:llama-index-readers-web","LlamaIndex · Readers Web",[509],"GPL-3.0-or-later",[511],"0.5.5",[56],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":518,"versions":519,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":521},"package:pypi:llama-index-vector-stores-lancedb","llama-index-vector-stores-lancedb-d8d9098c","pypi:llama-index-vector-stores-lancedb","LlamaIndex · Vector Stores Lancedb",[463],[520],"0.4.1",[56],{"id":523,"slug":524,"identity":525,"label":526,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":527,"versions":528,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":530},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[430],[529],"4.11.0.86",[56],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":536,"versions":537,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":539},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[450],[538],"0.12.0",[56],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":47,"provider":83,"advisoryCount":545,"licenseExpressions":546,"versions":547,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":549},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",47,[430],[548],"3.9.2",[56],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":47,"provider":83,"advisoryCount":555,"licenseExpressions":556,"versions":557,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":559},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",41,[440,450],[558],"6.1.3",[56],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":47,"provider":83,"advisoryCount":565,"licenseExpressions":566,"versions":568,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":570},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[430,567],"Apache-2.0 AND MIT",[569],"3.13.2",[56],{"id":572,"slug":573,"identity":574,"label":575,"aiRelevant":47,"provider":83,"advisoryCount":576,"licenseExpressions":577,"versions":580,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":582},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[578,579],"HPND","MIT-CMU",[581],"11.3.0",[56],{"id":584,"slug":585,"identity":586,"label":587,"aiRelevant":47,"provider":83,"advisoryCount":588,"licenseExpressions":589,"versions":590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":592},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",17,[463],[591],"2.10.1",[56],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":47,"provider":83,"advisoryCount":598,"licenseExpressions":599,"versions":600,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":602},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",13,[430],[601],"6.5.2",[56],{"id":604,"slug":605,"identity":606,"label":607,"aiRelevant":47,"provider":83,"advisoryCount":608,"licenseExpressions":609,"versions":610,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":612},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[430],[611],"0.0.20",[56],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":47,"provider":83,"advisoryCount":608,"licenseExpressions":618,"versions":619,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":621},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[440],[620],"0.48.0",[56],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":47,"provider":83,"advisoryCount":627,"licenseExpressions":628,"versions":629,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":631},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[463],[630],"2.5.0",[56],{"id":633,"slug":634,"identity":635,"label":636,"aiRelevant":47,"provider":83,"advisoryCount":637,"licenseExpressions":638,"versions":639,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":641},"package:pypi:chainlit","chainlit-b11abd2e","pypi:chainlit","chainlit",6,[430],[640],"2.8.3",[56],{"id":643,"slug":644,"identity":645,"label":646,"aiRelevant":47,"provider":83,"advisoryCount":637,"licenseExpressions":647,"versions":648,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":650},"package:pypi:docling","docling-61c4e452","pypi:docling","docling",[463],[649],"2.58.0",[56],{"id":652,"slug":653,"identity":654,"label":655,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":656,"versions":657,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":659},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[440,450],[658],"3.1.6",[56],{"id":661,"slug":662,"identity":663,"label":664,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":665,"versions":666,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":668},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[463],[667],"2.8",[56],{"id":670,"slug":671,"identity":672,"label":673,"aiRelevant":47,"provider":83,"advisoryCount":674,"licenseExpressions":675,"versions":676,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":678},"package:pypi:black","black-af583dd9","pypi:black","black",3,[463],[677],"25.9.0",[56],{"id":680,"slug":681,"identity":682,"label":683,"aiRelevant":47,"provider":83,"advisoryCount":674,"licenseExpressions":684,"versions":685,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":687},"package:pypi:lxml-html-clean","lxml-html-clean-a658348a","pypi:lxml-html-clean","lxml-html-clean",[440],[686],"0.4.3",[56],{"id":689,"slug":690,"identity":691,"label":692,"aiRelevant":47,"provider":83,"advisoryCount":674,"licenseExpressions":693,"versions":694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":696},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[463],[695],"1.19.0",[56],{"id":698,"slug":699,"identity":700,"label":701,"aiRelevant":47,"provider":83,"advisoryCount":674,"licenseExpressions":702,"versions":703,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":705},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[430],[704],"2.32.5",[56],{"id":707,"slug":708,"identity":709,"label":710,"aiRelevant":47,"provider":83,"advisoryCount":674,"licenseExpressions":711,"versions":712,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":714},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[463],[713],"80.9.0",[56],{"id":716,"slug":717,"identity":718,"label":719,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":720,"versions":721,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":723},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[463],[722],"4.11.0",[56],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":729,"versions":730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":732},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",[463],[731],"2.2.0",[56],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":738,"versions":739,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":741},"package:pypi:docling-core","docling-core-f56a60f5","pypi:docling-core","docling-core",[463],[740],"2.49.0",[56],{"id":743,"slug":744,"identity":745,"label":746,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":747,"versions":749,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":751},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[463,748],"Unlicense",[750],"3.20.0",[56],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":757,"versions":758,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":760},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[440],[759],"6.33.0",[56],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":766,"versions":767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":769},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[463],[768],"4.12.3",[56],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":775,"versions":777,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":779},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[776],"MPL-2.0",[778],"2025.10.5",[56],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":785,"versions":786,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":788},"package:pypi:click","click-ef97f731","pypi:click","click",[440,450],[787],"8.3.0",[56],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":794,"versions":795,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":797},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[463],[796],"0.16.0",[56],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":803,"versions":804,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":806},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[440,450],[805],"3.11",[56],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":812,"versions":813,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":815},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[440,450],[814],"5.9.1",[56],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":821,"versions":822,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":824},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[440],[823],"5.4.0",[56],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":830,"versions":831,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":833},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[463],[832],"3.26.1",[56],{"id":835,"slug":836,"identity":837,"label":838,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":839,"versions":840,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":842},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[430,450],[841],"22.0.0",[56],{"id":844,"slug":845,"identity":846,"label":847,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":848,"versions":849,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":851},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[463],[850],"2.11.0",[56],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":857,"versions":859,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":861},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[858],"BSD-2-Clause",[860],"2.19.2",[56],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":867,"versions":868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":870},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[450],[869],"3.0.1",[56],{"id":872,"slug":873,"identity":874,"label":875,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":876,"versions":877,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":879},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[463],[878],"8.4.2",[56],{"id":881,"slug":882,"identity":883,"label":884,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":885,"versions":886,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":888},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[440],[887],"1.2.1",[56],{"id":890,"slug":891,"identity":892,"label":893,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":894,"versions":895,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":897},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[463],[896],"5.14.3",[56],{"id":899,"slug":900,"identity":901,"label":902,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":903,"versions":905,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":907},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[904],"MIT AND MPL-2.0",[906],"4.67.1",[56],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":913,"versions":914,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":916},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[463],[915],"20.35.4",[56],{"id":918,"slug":919,"identity":920,"label":921,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":922,"versions":923,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":925},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[430],[924],"24.1.0",[56],{"id":927,"slug":928,"identity":929,"label":930,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":931,"versions":933,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":935},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[932],"PSF-2.0",[934],"2.6.1",[56],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":941,"versions":942,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":944},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[430],[943],"1.4.0",[56],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":950,"versions":951,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":953},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[463],[952],"0.21.0",[56],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":959,"versions":960,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":962},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[463],[961],"0.7.0",[56],{"id":964,"slug":965,"identity":966,"label":967,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":968,"versions":969,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":971},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[450],[970],"4.9.3",[56],{"id":973,"slug":974,"identity":975,"label":976,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":977,"versions":978,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":980},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[450],[979],"0.1.4",[56],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":986,"versions":987,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":989},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[463],[988],"3.11.0",[56],{"id":991,"slug":992,"identity":993,"label":994,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":995,"versions":996,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":998},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[430],[997],"3.0.0",[56],{"id":1000,"slug":1001,"identity":1002,"label":1003,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1004,"versions":1005,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1007},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[463],[1006],"0.0.10",[56],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1013,"versions":1014,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1016},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[463],[1015],"25.4.0",[56],{"id":1018,"slug":1019,"identity":1020,"label":1021,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1022,"versions":1023,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1025},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[932],[1024],"0.2.2",[56],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1031,"versions":1032,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1034},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[463],[1033],"2.2.1",[56],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1040,"versions":1041,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1043},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[463],[1042],"4.14.2",[56],{"id":1045,"slug":1046,"identity":1047,"label":1048,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1049,"versions":1050,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1052},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[450],[1051],"0.23.1",[56],{"id":1054,"slug":1055,"identity":1056,"label":1057,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1058,"versions":1060,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1062},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[463,1059],"MIT-0",[1061],"2.0.0",[56],{"id":1064,"slug":1065,"identity":1066,"label":1067,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1068,"versions":1069,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1071},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[463],[1070],"3.4.0",[56],{"id":1073,"slug":1074,"identity":1075,"label":1076,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1077,"versions":1078,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1080},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[463],[1079],"3.4.4",[56],{"id":1082,"slug":1083,"identity":1084,"label":1085,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1086,"versions":1087,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1089},"package:pypi:chevron","chevron-e2cf8dfd","pypi:chevron","chevron",[463],[1088],"0.14.0",[56],{"id":1091,"slug":1092,"identity":1093,"label":1094,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1095,"versions":1096,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1098},"package:pypi:chromedriver-autoinstaller","chromedriver-autoinstaller-c57f66e8","pypi:chromedriver-autoinstaller","chromedriver-autoinstaller",[463],[1097],"0.6.4",[56],{"id":1100,"slug":1101,"identity":1102,"label":1103,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1104,"versions":1105,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1107},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[450],[1106],"0.4.6",[56],{"id":1109,"slug":1110,"identity":1111,"label":1112,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1113,"versions":1114,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1116},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[463],[1115],"6.10.1",[56],{"id":1118,"slug":1119,"identity":1120,"label":1121,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1122,"versions":1123,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1125},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[450],[1124],"0.2.3",[56],{"id":1127,"slug":1128,"identity":1129,"label":1130,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1131,"versions":1132,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1134},"package:pypi:cssselect","cssselect-2437b3c5","pypi:cssselect","cssselect",[450],[1133],"1.3.0",[56],{"id":1136,"slug":1137,"identity":1138,"label":1139,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1140,"versions":1141,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1143},"package:pypi:cuid","cuid-297d1f96","pypi:cuid","cuid",[450],[1142],"0.4",[56],{"id":1145,"slug":1146,"identity":1147,"label":1148,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1149,"versions":1150,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1152},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[463],[1151],"0.6.7",[56],{"id":1154,"slug":1155,"identity":1156,"label":1157,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1158,"versions":1159,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1161},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[463],[1160],"1.8.17",[56],{"id":1163,"slug":1164,"identity":1165,"label":1166,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1167,"versions":1168,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1170},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[858,450],[1169],"5.2.1",[56],{"id":1172,"slug":1173,"identity":1174,"label":1175,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1176,"versions":1177,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1179},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[450],[1178],"0.7.1",[56],{"id":1181,"slug":1182,"identity":1183,"label":1184,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1185,"versions":1186,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1188},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[463],[1187],"1.2.18",[56],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1194,"versions":1195,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1197},"package:pypi:deprecation","deprecation-c367808e","pypi:deprecation","deprecation",[430],[1196],"2.1.0",[56],{"id":1199,"slug":1200,"identity":1201,"label":1202,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1203,"versions":1204,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1206},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[440],[1205],"0.4.0",[56],{"id":1208,"slug":1209,"identity":1210,"label":1211,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1212,"versions":1213,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1215},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[463],[1214],"1.0.8",[56],{"id":1217,"slug":1218,"identity":1219,"label":1220,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1221,"versions":1222,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1223},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[932],[1205],[56],{"id":1225,"slug":1226,"identity":1227,"label":1228,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1229,"versions":1230,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1232},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[430],[1231],"1.9.0",[56],{"id":1234,"slug":1235,"identity":1236,"label":1237,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1238,"versions":1239,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1241},"package:pypi:docling-ibm-models","docling-ibm-models-4f15d6af","pypi:docling-ibm-models","docling-ibm-models",[463],[1240],"3.10.2",[56],{"id":1243,"slug":1244,"identity":1245,"label":1246,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1247,"versions":1248,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1250},"package:pypi:docling-parse","docling-parse-b9af4bcb","pypi:docling-parse","docling-parse",[463],[1249],"4.7.0",[56],{"id":1252,"slug":1253,"identity":1254,"label":1255,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1256,"versions":1257,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1259},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[463],[1258],"0.17.0",[56],{"id":1261,"slug":1262,"identity":1263,"label":1264,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1265,"versions":1266,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1267},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[463],[1061],[56],{"id":1269,"slug":1270,"identity":1271,"label":1272,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1273,"versions":1274,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1275},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[463],[1033],[56],{"id":1277,"slug":1278,"identity":1279,"label":1280,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1281,"versions":1282,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1284},"package:pypi:faker","faker-af8bb74a","pypi:faker","faker",[463],[1283],"37.12.0",[56],{"id":1286,"slug":1287,"identity":1288,"label":1289,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1290,"versions":1291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1293},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[463],[1292],"0.116.2",[56],{"id":1295,"slug":1296,"identity":1297,"label":1298,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1299,"versions":1300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1302},"package:pypi:feedfinder2","feedfinder2-a2efca90","pypi:feedfinder2","feedfinder2",[463],[1301],"0.0.4",[56],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1308,"versions":1309,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1311},"package:pypi:feedparser","feedparser-7de97965","pypi:feedparser","feedparser",[858],[1310],"6.0.12",[56],{"id":1313,"slug":1314,"identity":1315,"label":1316,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1317,"versions":1318,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1320},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[463],[1319],"1.2.0",[56],{"id":1322,"slug":1323,"identity":1324,"label":1325,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1326,"versions":1327,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1329},"package:pypi:firecrawl-py","firecrawl-py-2dd84658","pypi:firecrawl-py","firecrawl-py",[463],[1328],"4.5.0",[56],{"id":1331,"slug":1332,"identity":1333,"label":1334,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1335,"versions":1336,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1338},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[463],[1337],"7.3.0",[56],{"id":1340,"slug":1341,"identity":1342,"label":1343,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1344,"versions":1345,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1347},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[430],[1346],"1.8.0",[56],{"id":1349,"slug":1350,"identity":1351,"label":1352,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1353,"versions":1354,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1356},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[440,450],[1355],"2025.9.0",[56],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1362,"versions":1363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1365},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[430],[1364],"1.71.0",[56],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1371,"versions":1374,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1376},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[463,1372,1373],"MIT AND PSF-2.0","MIT AND Python-2.0",[1375],"3.2.4",[56],{"id":1378,"slug":1379,"identity":1380,"label":1381,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1382,"versions":1384,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1386},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[1383],"ISC",[1385],"1.14.0",[56],{"id":1388,"slug":1389,"identity":1390,"label":1391,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1392,"versions":1393,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1395},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[430],[1394],"1.76.0",[56],{"id":1397,"slug":1398,"identity":1399,"label":1400,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1401,"versions":1402,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1403},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[430],[1319],[56],{"id":1405,"slug":1406,"identity":1407,"label":1408,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1409,"versions":1411,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1413},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1410],"GPL-3.0",[1412],"2024.2.26",[56],{"id":1415,"slug":1416,"identity":1417,"label":1418,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1419,"versions":1420,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1422},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[440],[1421],"1.0.9",[56],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1428,"versions":1429,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1431},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[440],[1430],"0.28.1",[56],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1437,"versions":1438,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1439},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[463],[686],[56],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1445,"versions":1446,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1448},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[430,450],[1447],"0.36.0",[56],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1454,"versions":1455,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1457},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[463],[1456],"2.6.15",[56],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1463,"versions":1464,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1466},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[430,450],[1465],"8.7.0",[56],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1472,"versions":1473,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1475},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[463],[1474],"0.5.1",[56],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1481,"versions":1482,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1484},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[463],[1483],"2.3.0",[56],{"id":1486,"slug":1487,"identity":1488,"label":1489,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1490,"versions":1491,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1493},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[440,450],[1492],"7.1.0",[56],{"id":1495,"slug":1496,"identity":1497,"label":1498,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1499,"versions":1500,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1502},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[440],[1501],"9.6.0",[56],{"id":1504,"slug":1505,"identity":1506,"label":1507,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1508,"versions":1509,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1511},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[450],[1510],"1.1.1",[56],{"id":1513,"slug":1514,"identity":1515,"label":1516,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1517,"versions":1518,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1520},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[463],[1519],"7.0.0",[56],{"id":1522,"slug":1523,"identity":1524,"label":1525,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1526,"versions":1527,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1529},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[463],[1528],"0.19.2",[56],{"id":1531,"slug":1532,"identity":1533,"label":1534,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1535,"versions":1536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1538},"package:pypi:jieba3k","jieba3k-2ef848d4","pypi:jieba3k","jieba3k",[],[1537],"0.35.1",[56],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1544,"versions":1545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1547},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[463],[1546],"0.11.1",[56],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1553,"versions":1554,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1556},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[440],[1555],"1.5.2",[56],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1562,"versions":1563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1565},"package:pypi:jsonlines","jsonlines-779d1204","pypi:jsonlines","jsonlines",[450],[1564],"4.0.0",[56],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1571,"versions":1572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1574},"package:pypi:jsonref","jsonref-181eaf53","pypi:jsonref","jsonref",[463],[1573],"1.1.0",[56],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1580,"versions":1581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1583},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[463],[1582],"4.25.1",[56],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1589,"versions":1590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1592},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[463],[1591],"2025.9.1",[56],{"id":1594,"slug":1595,"identity":1596,"label":1597,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1598,"versions":1599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1601},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[450],[1600],"8.6.3",[56],{"id":1603,"slug":1604,"identity":1605,"label":1606,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1607,"versions":1608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1609},"package:pypi:lance-namespace","lance-namespace-70425b3b","pypi:lance-namespace","lance-namespace",[430],[611],[56],{"id":1611,"slug":1612,"identity":1613,"label":1614,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1615,"versions":1616,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1617},"package:pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client-1a0b30f8","pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client",[430],[611],[56],{"id":1619,"slug":1620,"identity":1621,"label":1622,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1623,"versions":1624,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1626},"package:pypi:lancedb","lancedb-b5c306b5","pypi:lancedb","lancedb",[450],[1625],"0.25.2",[56],{"id":1628,"slug":1629,"identity":1630,"label":1631,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1632,"versions":1633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1635},"package:pypi:latex2mathml","latex2mathml-4b5e6391","pypi:latex2mathml","latex2mathml",[463],[1634],"3.78.1",[56],{"id":1637,"slug":1638,"identity":1639,"label":1640,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1641,"versions":1642,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1643},"package:pypi:lazify","lazify-bfb0197d","pypi:lazify","lazify",[450],[1205],[56],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1649,"versions":1650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1652},"package:pypi:literalai","literalai-7854f46d","pypi:literalai","literalai",[430],[1651],"0.1.201",[56],{"id":1654,"slug":1655,"identity":1656,"label":1657,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1658,"versions":1659,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1661},"package:pypi:llama-cloud","llama-cloud-b191f0f9","pypi:llama-cloud","llama-cloud",[463],[1660],"0.1.35",[56],{"id":1663,"slug":1664,"identity":1665,"label":1666,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1667,"versions":1668,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1670},"package:pypi:llama-cloud-services","llama-cloud-services-bef88366","pypi:llama-cloud-services","llama-cloud-services",[463],[1669],"0.6.54",[56],{"id":1672,"slug":1673,"identity":1674,"label":1675,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1676,"versions":1677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1678},"package:pypi:llama-index","llama-index-0f867dab","pypi:llama-index","llama-index",[463],[492],[56],{"id":1680,"slug":1681,"identity":1682,"label":1683,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1684,"versions":1685,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1687},"package:pypi:llama-index-cli","llama-index-cli-03ecd5c5","pypi:llama-index-cli","llama-index-cli",[463],[1686],"0.5.3",[56],{"id":1689,"slug":1690,"identity":1691,"label":1692,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1693,"versions":1694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1695},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[463],[1474],[56],{"id":1697,"slug":1698,"identity":1699,"label":1700,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1701,"versions":1702,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1704},"package:pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud-ddf42c36","pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud",[463],[1703],"0.9.4",[56],{"id":1706,"slug":1707,"identity":1708,"label":1709,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1710,"versions":1711,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1713},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[463],[1712],"0.4.2",[56],{"id":1715,"slug":1716,"identity":1717,"label":1718,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1719,"versions":1720,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1722},"package:pypi:llama-index-readers-file","llama-index-readers-file-c8a58a84","pypi:llama-index-readers-file","llama-index-readers-file",[463],[1721],"0.5.4",[56],{"id":1724,"slug":1725,"identity":1726,"label":1727,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1728,"versions":1729,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1730},"package:pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse-58739d42","pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse",[463],[1474],[56],{"id":1732,"slug":1733,"identity":1734,"label":1735,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1736,"versions":1737,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1738},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[463],[442],[56],{"id":1740,"slug":1741,"identity":1742,"label":1743,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1744,"versions":1745,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1746},"package:pypi:llama-parse","llama-parse-f89f5dbf","pypi:llama-parse","llama-parse",[463],[1669],[56],{"id":1748,"slug":1749,"identity":1750,"label":1751,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1752,"versions":1753,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1754},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[463],[1564],[56],{"id":1756,"slug":1757,"identity":1758,"label":1759,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1760,"versions":1761,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1762},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[463],[1319],[56],{"id":1764,"slug":1765,"identity":1766,"label":1767,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1768,"versions":1769,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1770},"package:pypi:marko","marko-cf8df36c","pypi:marko","marko",[463],[1033],[56],{"id":1772,"slug":1773,"identity":1774,"label":1775,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1776,"versions":1777,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1779},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[440,450],[1778],"3.0.3",[56],{"id":1781,"slug":1782,"identity":1783,"label":1784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1785,"versions":1786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1788},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[440,450],[1787],"0.2.1",[56],{"id":1790,"slug":1791,"identity":1792,"label":1793,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1794,"versions":1795,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1796},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[450],[961],[56],{"id":1798,"slug":1799,"identity":1800,"label":1801,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1802,"versions":1803,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1805},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[463],[1804],"0.1.2",[56],{"id":1807,"slug":1808,"identity":1809,"label":1810,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1811,"versions":1812,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1814},"package:pypi:monotonic","monotonic-c3c6b23a","pypi:monotonic","monotonic",[450],[1813],"1.6",[56],{"id":1816,"slug":1817,"identity":1818,"label":1819,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1820,"versions":1821,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1823},"package:pypi:mpire","mpire-1706081d","pypi:mpire","mpire",[463],[1822],"2.10.2",[56],{"id":1825,"slug":1826,"identity":1827,"label":1828,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1829,"versions":1830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1831},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[450],[1133],[56],{"id":1833,"slug":1834,"identity":1835,"label":1836,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1837,"versions":1838,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1840},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[430],[1839],"6.7.0",[56],{"id":1842,"slug":1843,"identity":1844,"label":1845,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1846,"versions":1847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1849},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[440],[1848],"0.70.18",[56],{"id":1851,"slug":1852,"identity":1853,"label":1854,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1855,"versions":1856,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1857},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[463],[1573],[56],{"id":1859,"slug":1860,"identity":1861,"label":1862,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1863,"versions":1864,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1866},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[450],[1865],"1.6.0",[56],{"id":1868,"slug":1869,"identity":1870,"label":1871,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1872,"versions":1873,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1875},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[440,450],[1874],"3.5",[56],{"id":1877,"slug":1878,"identity":1879,"label":1880,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1881,"versions":1882,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1884},"package:pypi:newspaper3k","newspaper3k-139e17f3","pypi:newspaper3k","newspaper3k",[463],[1883],"0.2.8",[56],{"id":1886,"slug":1887,"identity":1888,"label":1889,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1890,"versions":1891,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1893},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[450],[1892],"1.9.1",[56],{"id":1895,"slug":1896,"identity":1897,"label":1898,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1899,"versions":1901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1903},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1900,450],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1902],"2.3.4",[56],{"id":1905,"slug":1906,"identity":1907,"label":1908,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1909,"versions":1910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1912},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[450],[1911],"12.8.4.1",[56],{"id":1914,"slug":1915,"identity":1916,"label":1917,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1918,"versions":1919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1921},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[450],[1920],"12.8.90",[56],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1927,"versions":1928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1930},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[450],[1929],"12.8.93",[56],{"id":1932,"slug":1933,"identity":1934,"label":1935,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1936,"versions":1937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1938},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[450],[1920],[56],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1944,"versions":1945,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1947},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[450],[1946],"9.10.2.21",[56],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1953,"versions":1954,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1956},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[450],[1955],"11.3.3.83",[56],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1962,"versions":1963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1965},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[450],[1964],"1.13.1.3",[56],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1971,"versions":1972,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1974},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[450],[1973],"10.3.9.90",[56],{"id":1976,"slug":1977,"identity":1978,"label":1979,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1980,"versions":1981,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1983},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[450],[1982],"11.7.3.90",[56],{"id":1985,"slug":1986,"identity":1987,"label":1988,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1989,"versions":1990,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1992},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[450],[1991],"12.5.8.93",[56],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1998,"versions":1999,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2000},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[450],[1178],[56],{"id":2002,"slug":2003,"identity":2004,"label":2005,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2006,"versions":2007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2009},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[440,450],[2008],"2.27.5",[56],{"id":2011,"slug":2012,"identity":2013,"label":2014,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2015,"versions":2016,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2017},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[450],[1929],[56],{"id":2019,"slug":2020,"identity":2021,"label":2022,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2023,"versions":2024,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2026},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[440,450],[2025],"3.3.20",[56],{"id":2028,"slug":2029,"identity":2030,"label":2031,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2032,"versions":2033,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2034},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[430,450],[1920],[56],{"id":2036,"slug":2037,"identity":2038,"label":2039,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2040,"versions":2041,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2043},"package:pypi:ocrmac","ocrmac-7acc3c55","pypi:ocrmac","ocrmac",[463],[2042],"1.0.0",[56],{"id":2045,"slug":2046,"identity":2047,"label":2048,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2049,"versions":2050,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2051},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[440],[1483],[56],{"id":2053,"slug":2054,"identity":2055,"label":2056,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2057,"versions":2058,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2060},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[463],[2059],"3.1.5",[56],{"id":2062,"slug":2063,"identity":2064,"label":2065,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2066,"versions":2067,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2069},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[430],[2068],"1.38.0",[56],{"id":2071,"slug":2072,"identity":2073,"label":2074,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2075,"versions":2076,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2077},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[430],[2068],[56],{"id":2079,"slug":2080,"identity":2081,"label":2082,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2083,"versions":2084,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2085},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[430],[2068],[56],{"id":2087,"slug":2088,"identity":2089,"label":2090,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2091,"versions":2092,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2093},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[430],[2068],[56],{"id":2095,"slug":2096,"identity":2097,"label":2098,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2099,"versions":2100,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2101},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[430],[2068],[56],{"id":2103,"slug":2104,"identity":2105,"label":2106,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2107,"versions":2108,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2110},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[430],[2109],"0.59b0",[56],{"id":2112,"slug":2113,"identity":2114,"label":2115,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2116,"versions":2117,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2119},"package:pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha-b1a8b6f5","pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha",[430],[2118],"0.47.5",[56],{"id":2121,"slug":2122,"identity":2123,"label":2124,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2125,"versions":2126,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2127},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[430],[2118],[56],{"id":2129,"slug":2130,"identity":2131,"label":2132,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2133,"versions":2134,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2135},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[430],[2118],[56],{"id":2137,"slug":2138,"identity":2139,"label":2140,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2141,"versions":2142,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2143},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[430],[2118],[56],{"id":2145,"slug":2146,"identity":2147,"label":2148,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2149,"versions":2150,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2151},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[430],[2118],[56],{"id":2153,"slug":2154,"identity":2155,"label":2156,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2157,"versions":2158,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2159},"package:pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai-236cb6a6","pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai",[430],[2118],[56],{"id":2161,"slug":2162,"identity":2163,"label":2164,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2165,"versions":2166,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2167},"package:pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai-dd555f24","pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai",[430],[2118],[56],{"id":2169,"slug":2170,"identity":2171,"label":2172,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2173,"versions":2174,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2175},"package:pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq-a9bf4841","pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq",[430],[2118],[56],{"id":2177,"slug":2178,"identity":2179,"label":2180,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2181,"versions":2182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2183},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[430],[2118],[56],{"id":2185,"slug":2186,"identity":2187,"label":2188,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2189,"versions":2190,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2191},"package:pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb-337c7f86","pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb",[430],[2118],[56],{"id":2193,"slug":2194,"identity":2195,"label":2196,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2197,"versions":2198,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2199},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[430],[2118],[56],{"id":2201,"slug":2202,"identity":2203,"label":2204,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2205,"versions":2206,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2207},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[430],[2118],[56],{"id":2209,"slug":2210,"identity":2211,"label":2212,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2213,"versions":2214,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2215},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[430],[2109],[56],{"id":2217,"slug":2218,"identity":2219,"label":2220,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2221,"versions":2222,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2223},"package:pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo-7fffb308","pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo",[430],[2118],[56],{"id":2225,"slug":2226,"identity":2227,"label":2228,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2229,"versions":2230,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2231},"package:pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp-6fbe8e0d","pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp",[430],[2118],[56],{"id":2233,"slug":2234,"identity":2235,"label":2236,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2237,"versions":2238,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2239},"package:pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus-dc786c2a","pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus",[430],[2118],[56],{"id":2241,"slug":2242,"identity":2243,"label":2244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2245,"versions":2246,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2247},"package:pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai-af29742c","pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai",[430],[2118],[56],{"id":2249,"slug":2250,"identity":2251,"label":2252,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2253,"versions":2254,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2255},"package:pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama-2cbe8996","pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama",[430],[2118],[56],{"id":2257,"slug":2258,"identity":2259,"label":2260,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2261,"versions":2262,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2263},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[430],[2118],[56],{"id":2265,"slug":2266,"identity":2267,"label":2268,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2269,"versions":2270,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2271},"package:pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents-ac759c8f","pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents",[430],[2118],[56],{"id":2273,"slug":2274,"identity":2275,"label":2276,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2277,"versions":2278,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2279},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[430],[2118],[56],{"id":2281,"slug":2282,"identity":2283,"label":2284,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2285,"versions":2286,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2287},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[430],[2118],[56],{"id":2289,"slug":2290,"identity":2291,"label":2292,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2293,"versions":2294,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2295},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[430],[2109],[56],{"id":2297,"slug":2298,"identity":2299,"label":2300,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2301,"versions":2302,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2303},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[430],[2118],[56],{"id":2305,"slug":2306,"identity":2307,"label":2308,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2309,"versions":2310,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2311},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[430],[2109],[56],{"id":2313,"slug":2314,"identity":2315,"label":2316,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2317,"versions":2318,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2319},"package:pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker-55be6260","pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker",[430],[2118],[56],{"id":2321,"slug":2322,"identity":2323,"label":2324,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2325,"versions":2326,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2327},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[430],[2109],[56],{"id":2329,"slug":2330,"identity":2331,"label":2332,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2333,"versions":2334,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2335},"package:pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading-8d47431d","pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading",[430],[2109],[56],{"id":2337,"slug":2338,"identity":2339,"label":2340,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2341,"versions":2342,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2343},"package:pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together-e40c9610","pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together",[430],[2118],[56],{"id":2345,"slug":2346,"identity":2347,"label":2348,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2349,"versions":2350,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2351},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[430],[2118],[56],{"id":2353,"slug":2354,"identity":2355,"label":2356,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2357,"versions":2358,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2359},"package:pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3-32a4545b","pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3",[430],[2109],[56],{"id":2361,"slug":2362,"identity":2363,"label":2364,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2365,"versions":2366,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2367},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[430],[2118],[56],{"id":2369,"slug":2370,"identity":2371,"label":2372,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2373,"versions":2374,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2375},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[430],[2118],[56],{"id":2377,"slug":2378,"identity":2379,"label":2380,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2381,"versions":2382,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2383},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[430],[2118],[56],{"id":2385,"slug":2386,"identity":2387,"label":2388,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2389,"versions":2390,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2391},"package:pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer-62ab002f","pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer",[430],[2118],[56],{"id":2393,"slug":2394,"identity":2395,"label":2396,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2397,"versions":2398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2399},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[430],[2068],[56],{"id":2401,"slug":2402,"identity":2403,"label":2404,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2405,"versions":2406,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2407},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[430],[2068],[56],{"id":2409,"slug":2410,"identity":2411,"label":2412,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2413,"versions":2414,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2415},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[430],[2109],[56],{"id":2417,"slug":2418,"identity":2419,"label":2420,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2421,"versions":2422,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2424},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[430],[2423],"0.4.13",[56],{"id":2426,"slug":2427,"identity":2428,"label":2429,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2430,"versions":2431,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2432},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[430],[2109],[56],{"id":2434,"slug":2435,"identity":2436,"label":2437,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2438,"versions":2440,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2442},"package:pypi:outcome","outcome-807eda1a","pypi:outcome","outcome",[2439],"Apache-2.0 OR MIT",[2441],"1.3.0.post0",[56],{"id":2444,"slug":2445,"identity":2446,"label":2447,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2448,"versions":2449,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2451},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[430],[2450],"7.7.0",[56],{"id":2453,"slug":2454,"identity":2455,"label":2456,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2457,"versions":2458,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2459},"package:pypi:oxylabs","oxylabs-2206b7c8","pypi:oxylabs","oxylabs",[463],[1061],[56],{"id":2461,"slug":2462,"identity":2463,"label":2464,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2465,"versions":2467,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2469},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2466,450],"Apache-2.0 OR BSD-2-Clause",[2468],"25.0",[56],{"id":2471,"slug":2472,"identity":2473,"label":2474,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2475,"versions":2476,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2478},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[450],[2477],"2.2.3",[56],{"id":2480,"slug":2481,"identity":2482,"label":2483,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2484,"versions":2485,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2487},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[463],[2486],"0.8.5",[56],{"id":2489,"slug":2490,"identity":2491,"label":2492,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2493,"versions":2494,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2496},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[776],[2495],"0.12.1",[56],{"id":2498,"slug":2499,"identity":2500,"label":2501,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2502,"versions":2503,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2505},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[450],[2504],"4.9.0",[56],{"id":2507,"slug":2508,"identity":2509,"label":2510,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2511,"versions":2512,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2513},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[463],[1328],[56],{"id":2515,"slug":2516,"identity":2517,"label":2518,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2519,"versions":2520,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2522},"package:pypi:playwright","playwright-33f38203","pypi:playwright","playwright",[430],[2521],"1.55.0",[56],{"id":2524,"slug":2525,"identity":2526,"label":2527,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2528,"versions":2529,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2530},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[463],[1865],[56],{"id":2532,"slug":2533,"identity":2534,"label":2535,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2536,"versions":2537,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2539},"package:pypi:polyfactory","polyfactory-6f8eab4d","pypi:polyfactory","polyfactory",[463],[2538],"2.22.3",[56],{"id":2541,"slug":2542,"identity":2543,"label":2544,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2545,"versions":2546,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2548},"package:pypi:posthog","posthog-fa78df25","pypi:posthog","posthog",[463],[2547],"3.25.0",[56],{"id":2550,"slug":2551,"identity":2552,"label":2553,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2554,"versions":2555,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2557},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[463],[2556],"4.3.0",[56],{"id":2559,"slug":2560,"identity":2561,"label":2562,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2563,"versions":2564,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2566},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[440,450],[2565],"3.0.52",[56],{"id":2568,"slug":2569,"identity":2570,"label":2571,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2572,"versions":2573,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2574},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[430],[520],[56],{"id":2576,"slug":2577,"identity":2578,"label":2579,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2580,"versions":2581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2583},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[440],[2582],"7.1.2",[56],{"id":2585,"slug":2586,"identity":2587,"label":2588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2589,"versions":2590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2591},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1383],[961],[56],{"id":2593,"slug":2594,"identity":2595,"label":2596,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2597,"versions":2598,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2599},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[463],[1124],[56],{"id":2601,"slug":2602,"identity":2603,"label":2604,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2605,"versions":2606,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2608},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[463],[2607],"1.3.0.post6",[56],{"id":2610,"slug":2611,"identity":2612,"label":2613,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2614,"versions":2615,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2617},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[463],[2616],"2.14.0",[56],{"id":2619,"slug":2620,"identity":2621,"label":2622,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2623,"versions":2624,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2626},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[440],[2625],"2.23",[56],{"id":2628,"slug":2629,"identity":2630,"label":2631,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2632,"versions":2633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2635},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[463],[2634],"2.12.3",[56],{"id":2637,"slug":2638,"identity":2639,"label":2640,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2641,"versions":2642,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2644},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[463],[2643],"2.41.4",[56],{"id":2646,"slug":2647,"identity":2648,"label":2649,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2650,"versions":2651,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2653},"package:pypi:pyee","pyee-885d20c2","pypi:pyee","pyee",[463],[2652],"13.0.0",[56],{"id":2655,"slug":2656,"identity":2657,"label":2658,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2659,"versions":2660,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2661},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[463],[1070],[56],{"id":2663,"slug":2664,"identity":2665,"label":2666,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2667,"versions":2668,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2670},"package:pypi:pylance","pylance-da7c006a","pypi:pylance","pylance",[450],[2669],"0.38.3",[56],{"id":2672,"slug":2673,"identity":2674,"label":2675,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2676,"versions":2677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2679},"package:pypi:pylatexenc","pylatexenc-e20f6acb","pypi:pylatexenc","pylatexenc",[463],[2678],"2.10",[56],{"id":2681,"slug":2682,"identity":2683,"label":2684,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2685,"versions":2686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2688},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[463],[2687],"12.0",[56],{"id":2690,"slug":2691,"identity":2692,"label":2693,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2694,"versions":2695,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2696},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[463],[2687],[56],{"id":2698,"slug":2699,"identity":2700,"label":2701,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2702,"versions":2703,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2704},"package:pypi:pyobjc-framework-coreml","pyobjc-framework-coreml-5e7c3b2a","pypi:pyobjc-framework-coreml","pyobjc-framework-coreml",[463],[2687],[56],{"id":2706,"slug":2707,"identity":2708,"label":2709,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2710,"versions":2711,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2712},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[463],[2687],[56],{"id":2714,"slug":2715,"identity":2716,"label":2717,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2718,"versions":2719,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2720},"package:pypi:pyobjc-framework-vision","pyobjc-framework-vision-7145bcee","pypi:pyobjc-framework-vision","pyobjc-framework-vision",[463],[2687],[56],{"id":2722,"slug":2723,"identity":2724,"label":2725,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2726,"versions":2727,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2729},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[450],[2728],"4.30.0",[56],{"id":2731,"slug":2732,"identity":2733,"label":2734,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2735,"versions":2736,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2738},"package:pypi:pysocks","pysocks-7cd576a7","pypi:pysocks","pysocks",[450],[2737],"1.7.1",[56],{"id":2740,"slug":2741,"identity":2742,"label":2743,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2744,"versions":2745,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2746},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[430],[1319],[56],{"id":2748,"slug":2749,"identity":2750,"label":2751,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2752,"versions":2753,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2755},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[450],[2754],"2.9.0.post0",[56],{"id":2757,"slug":2758,"identity":2759,"label":2760,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2761,"versions":2762,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2763},"package:pypi:python-docx","python-docx-734c6d0d","pypi:python-docx","python-docx",[463],[1319],[56],{"id":2765,"slug":2766,"identity":2767,"label":2768,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2769,"versions":2770,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2772},"package:pypi:python-pptx","python-pptx-8826554c","pypi:python-pptx","python-pptx",[463],[2771],"1.0.2",[56],{"id":2774,"slug":2775,"identity":2776,"label":2777,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2778,"versions":2779,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2781},"package:pypi:pytokens","pytokens-4f13eeb2","pypi:pytokens","pytokens",[463],[2780],"0.2.0",[56],{"id":2783,"slug":2784,"identity":2785,"label":2786,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2787,"versions":2788,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2790},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[463],[2789],"2025.2",[56],{"id":2792,"slug":2793,"identity":2794,"label":2795,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2796,"versions":2797,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2799},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2798],"311",[56],{"id":2801,"slug":2802,"identity":2803,"label":2804,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2805,"versions":2806,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2808},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[463],[2807],"6.0.3",[56],{"id":2810,"slug":2811,"identity":2812,"label":2813,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2814,"versions":2815,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2817},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[450],[2816],"27.1.0",[56],{"id":2819,"slug":2820,"identity":2821,"label":2822,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2823,"versions":2824,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2826},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[463],[2825],"3.14.1",[56],{"id":2828,"slug":2829,"identity":2830,"label":2831,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2832,"versions":2833,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2835},"package:pypi:rapidocr","rapidocr-452b83bd","pypi:rapidocr","rapidocr",[430],[2834],"3.4.2",[56],{"id":2837,"slug":2838,"identity":2839,"label":2840,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2841,"versions":2842,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2844},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[463],[2843],"0.37.0",[56],{"id":2846,"slug":2847,"identity":2848,"label":2849,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2850,"versions":2852,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2854},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2851,450],"Apache-2.0 AND CNRI-Python",[2853],"2025.10.23",[56],{"id":2856,"slug":2857,"identity":2858,"label":2859,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2860,"versions":2861,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2862},"package:pypi:requests-file","requests-file-706ecfac","pypi:requests-file","requests-file",[430],[869],[56],{"id":2864,"slug":2865,"identity":2866,"label":2867,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2868,"versions":2869,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2871},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[463],[2870],"14.2.0",[56],{"id":2873,"slug":2874,"identity":2875,"label":2876,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2877,"versions":2878,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2880},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[463],[2879],"0.28.0",[56],{"id":2882,"slug":2883,"identity":2884,"label":2885,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2886,"versions":2887,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2889},"package:pypi:rtree","rtree-0efed1c9","pypi:rtree","rtree",[463],[2888],"1.4.1",[56],{"id":2891,"slug":2892,"identity":2893,"label":2894,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2895,"versions":2896,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2898},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[463],[2897],"0.14.2",[56],{"id":2900,"slug":2901,"identity":2902,"label":2903,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2904,"versions":2905,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2907},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[450],[2906],"0.6.2",[56],{"id":2909,"slug":2910,"identity":2911,"label":2912,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2913,"versions":2914,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2916},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[450],[2915],"1.16.3",[56],{"id":2918,"slug":2919,"identity":2920,"label":2921,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2922,"versions":2923,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2925},"package:pypi:selenium","selenium-e3f15a24","pypi:selenium","selenium",[430],[2924],"4.38.0",[56],{"id":2927,"slug":2928,"identity":2929,"label":2930,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2931,"versions":2932,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2934},"package:pypi:semchunk","semchunk-c2c8e504","pypi:semchunk","semchunk",[463],[2933],"2.2.2",[56],{"id":2936,"slug":2937,"identity":2938,"label":2939,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2940,"versions":2941,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2942},"package:pypi:sgmllib3k","sgmllib3k-c3d7a6ca","pypi:sgmllib3k","sgmllib3k",[450],[2042],[56],{"id":2944,"slug":2945,"identity":2946,"label":2947,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2948,"versions":2949,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2951},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[440],[2950],"2.1.2",[56],{"id":2953,"slug":2954,"identity":2955,"label":2956,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2957,"versions":2958,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2960},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[450],[2959],"1.5.4",[56],{"id":2962,"slug":2963,"identity":2964,"label":2965,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2966,"versions":2967,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2968},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[463],[1573],[56],{"id":2970,"slug":2971,"identity":2972,"label":2973,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2974,"versions":2975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2977},"package:pypi:six","six-3c3888bd","pypi:six","six",[463],[2976],"1.17.0",[56],{"id":2979,"slug":2980,"identity":2981,"label":2982,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2983,"versions":2984,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2986},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2439],[2985],"1.3.1",[56],{"id":2988,"slug":2989,"identity":2990,"label":2991,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2992,"versions":2993,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2995},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[430],[2994],"2.4.0",[56],{"id":2997,"slug":2998,"identity":2999,"label":3000,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3001,"versions":3002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3004},"package:pypi:spider-client","spider-client-04bbfc07","pypi:spider-client","spider-client",[463],[3003],"0.0.27",[56],{"id":3006,"slug":3007,"identity":3008,"label":3009,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3010,"versions":3011,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3013},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[463],[3012],"2.0.44",[56],{"id":3015,"slug":3016,"identity":3017,"label":3018,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3019,"versions":3020,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3022},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[440],[3021],"3.0.2",[56],{"id":3024,"slug":3025,"identity":3026,"label":3027,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3028,"versions":3029,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3031},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[463],[3030],"0.6.3",[56],{"id":3033,"slug":3034,"identity":3035,"label":3036,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3037,"versions":3038,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3040},"package:pypi:striprtf","striprtf-bb61a6b5","pypi:striprtf","striprtf",[440],[3039],"0.0.26",[56],{"id":3042,"slug":3043,"identity":3044,"label":3045,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3046,"versions":3047,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3049},"package:pypi:structlog","structlog-2a5a47ec","pypi:structlog","structlog",[2439],[3048],"25.5.0",[56],{"id":3051,"slug":3052,"identity":3053,"label":3054,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3055,"versions":3056,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3057},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[450],[1385],[56],{"id":3059,"slug":3060,"identity":3061,"label":3062,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3063,"versions":3064,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3066},"package:pypi:syncer","syncer-7ac13616","pypi:syncer","syncer",[463],[3065],"2.0.3",[56],{"id":3068,"slug":3069,"identity":3070,"label":3071,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3072,"versions":3073,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3075},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[463],[3074],"0.9.0",[56],{"id":3077,"slug":3078,"identity":3079,"label":3080,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3081,"versions":3082,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3084},"package:pypi:tantivy","tantivy-b8e058c3","pypi:tantivy","tantivy",[463],[3083],"0.25.0",[56],{"id":3086,"slug":3087,"identity":3088,"label":3089,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3090,"versions":3091,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3093},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[430],[3092],"9.1.2",[56],{"id":3095,"slug":3096,"identity":3097,"label":3098,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3099,"versions":3100,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3101},"package:pypi:thefuzz","thefuzz-77e9a0e0","pypi:thefuzz","thefuzz",[463],[483],[56],{"id":3103,"slug":3104,"identity":3105,"label":3106,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3107,"versions":3108,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3110},"package:pypi:tinysegmenter","tinysegmenter-eaea99bf","pypi:tinysegmenter","tinysegmenter",[450],[3109],"0.3",[56],{"id":3112,"slug":3113,"identity":3114,"label":3115,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3116,"versions":3117,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3119},"package:pypi:tldextract","tldextract-ed3c967e","pypi:tldextract","tldextract",[440],[3118],"5.3.0",[56],{"id":3121,"slug":3122,"identity":3123,"label":3124,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3125,"versions":3126,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3127},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[463],[1483],[56],{"id":3129,"slug":3130,"identity":3131,"label":3132,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3133,"versions":3134,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3136},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[450],[3135],"0.24.0",[56],{"id":3138,"slug":3139,"identity":3140,"label":3141,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3142,"versions":3143,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3144},"package:pypi:traceloop-sdk","traceloop-sdk-64e27d1c","pypi:traceloop-sdk","traceloop-sdk",[430],[2118],[56],{"id":3146,"slug":3147,"identity":3148,"label":3149,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3150,"versions":3151,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3152},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[450],[896],[56],{"id":3154,"slug":3155,"identity":3156,"label":3157,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3158,"versions":3159,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3161},"package:pypi:trio","trio-5952fcdf","pypi:trio","trio",[2439],[3160],"0.31.0",[56],{"id":3163,"slug":3164,"identity":3165,"label":3166,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3167,"versions":3168,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3170},"package:pypi:trio-websocket","trio-websocket-71803d22","pypi:trio-websocket","trio-websocket",[463],[3169],"0.12.2",[56],{"id":3172,"slug":3173,"identity":3174,"label":3175,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3176,"versions":3177,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3179},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[463],[3178],"3.5.0",[56],{"id":3181,"slug":3182,"identity":3183,"label":3184,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3185,"versions":3186,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3187},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[463],[1528],[56],{"id":3189,"slug":3190,"identity":3191,"label":3192,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3193,"versions":3194,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3196},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[932,450],[3195],"4.15.0",[56],{"id":3198,"slug":3199,"identity":3200,"label":3201,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3202,"versions":3203,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3204},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[463],[3074],[56],{"id":3206,"slug":3207,"identity":3208,"label":3209,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3210,"versions":3211,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3212},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[463],[1712],[56],{"id":3214,"slug":3215,"identity":3216,"label":3217,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3218,"versions":3219,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3220},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[430],[2789],[56],{"id":3222,"slug":3223,"identity":3224,"label":3225,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3226,"versions":3227,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3229},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[463],[3228],"5.3.1",[56],{"id":3231,"slug":3232,"identity":3233,"label":3234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3235,"versions":3236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3238},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[440],[3237],"0.38.0",[56],{"id":3240,"slug":3241,"identity":3242,"label":3243,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3244,"versions":3245,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3246},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[463],[3135],[56],{"id":3248,"slug":3249,"identity":3250,"label":3251,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3252,"versions":3253,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3255},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[463],[3254],"0.2.14",[56],{"id":3257,"slug":3258,"identity":3259,"label":3260,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3261,"versions":3262,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3263},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[430],[1231],[56],{"id":3265,"slug":3266,"identity":3267,"label":3268,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3269,"versions":3270,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3272},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[440],[3271],"15.0.1",[56],{"id":3274,"slug":3275,"identity":3276,"label":3277,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3278,"versions":3279,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3281},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[450],[3280],"1.17.3",[56],{"id":3283,"slug":3284,"identity":3285,"label":3286,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3287,"versions":3288,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3289},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[463],[1319],[56],{"id":3291,"slug":3292,"identity":3293,"label":3294,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3295,"versions":3296,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3298},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[858],[3297],"3.2.9",[56],{"id":3300,"slug":3301,"identity":3302,"label":3303,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3304,"versions":3305,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3307},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[430],[3306],"1.22.0",[56],{"id":3309,"slug":3310,"identity":3311,"label":3312,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3313,"versions":3314,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3316},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[463],[3315],"3.23.0",[56],[3318,3355,3386,3421,3455,3488,3519,3552,3578,3605,3631,3657,3683,3719,3746,3789,3815,3841,3888,3917,3950,3981,4014,4037,4065,4092,4127,4159,4185,4212,4232,4268,4293,4311,4341,4374,4400,4429,4453,4471,4510,4536,4562,4587,4614,4650,4683,4711,4734,4763,4788,4819,4845,4882,4906,4930,4967,4990,5017,5039,5069,5096,5115,5142,5166,5189,5216,5237,5266,5289,5311,5334,5360,5383,5420,5448,5479,5501,5525,5554,5579,5611,5651,5678,5707,5736,5757,5776,5797,5821,5855,5906,5932,5971,6010,6038,6070,6093,6113,6138,6162,6185,6212,6235,6262,6286,6317,6351,6377,6398,6425,6451,6471,6501,6521,6546,6571,6603,6627,6680,6704,6728,6758,6790,6819,6840,6870,6898,6922,6953,6980,7013,7045,7074,7099,7126,7152,7173,7194,7232,7256,7279,7307,7333,7359,7382,7408,7427,7460,7485,7512,7537,7565,7588,7610,7633,7661,7687,7721,7754,7781,7803,7825,7845,7872,7899,7919,7940,7970,7994,8021,8041,8068,8100,8122,8145,8173,8200,8225,8254,8273,8296,8323,8344,8376,8397,8420,8453,8481,8507,8531,8550,8579,8600,8622,8652,8680,8701,8724,8749,8774,8797,8819,8847,8867,8896,8922,8944,8971,8996,9020,9041,9065,9089,9104,9130,9154,9176,9202,9222,9259,9285,9317,9342,9369,9391,9423,9450,9473,9504,9524,9552,9579,9604,9634,9664,9698,9727,9759,9780,9803,9831,9859,9886,9913,9940,9966,9992,10012,10034,10057,10085,10106,10126,10156,10182,10234,10259,10282,10308,10342,10367,10392,10416,10441,10473,10501,10520,10547,10575,10600,10619,10646,10666,10687,10712,10739,10759,10775,10795,10812,10831,10848,10869,10885,10900,10917,10932,10949,10966,10983,10996,11009,11022,11035,11048,11061,11074,11087,11110,11123,11139,11172,11201,11215,11229,11244],{"id":107,"slug":3319,"dossier":47,"summary":3320,"aliases":3321,"sourceIds":3324,"published":3325,"modified":3326,"checkedAt":7,"severity":3327,"references":3331,"versionKeys":3351,"packageCount":32,"repositoryCount":674},"ghsa-23w6-3w8w-8484-7e1b73d9","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving outlines",[3322,3323],"CVE-2026-84310","PYSEC-2026-3910",[107,3323],"2026-09-01T21:28:37Z","2026-09-10T12:25:45.197931157Z",[3328],{"type":3329,"score":3330},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3332,3335,3337,3339,3342,3344,3346,3349],{"type":3333,"url":3334},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3333,"url":3336},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3966",{"type":3333,"url":3338},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd91ab705fd81ed1a9cec175c6958600dea1a4942",{"type":3340,"url":3341},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3333,"url":3343},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.1",{"type":3340,"url":3345},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3347,"url":3348},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3347,"url":3350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84310",[3352,3353,3354],"pypi:pypdf@5.1.0","pypi:pypdf@6.1.3","pypi:pypdf@6.14.2",{"id":108,"slug":3356,"dossier":47,"summary":3357,"aliases":3358,"sourceIds":3361,"published":3362,"modified":3363,"checkedAt":7,"severity":3364,"references":3370,"versionKeys":3385,"packageCount":32,"repositoryCount":105},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3359,3360],"CVE-2026-48156","PYSEC-2026-3004",[108,3360],"2026-06-12T18:29:59Z","2026-09-10T03:51:07.304973624Z",[3365,3368],{"type":3366,"score":3367},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3329,"score":3369},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3371,3373,3375,3377,3379,3380,3382,3383],{"type":3333,"url":3372},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3347,"url":3374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3333,"url":3376},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3333,"url":3378},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3340,"url":3341},{"type":3333,"url":3381},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3340,"url":3345},{"type":3347,"url":3384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3352,3353],{"id":109,"slug":3387,"dossier":47,"summary":3388,"aliases":3389,"sourceIds":3392,"published":3393,"modified":3394,"checkedAt":7,"severity":3395,"references":3398,"versionKeys":3419,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3390,3391],"CVE-2024-39689","PYSEC-2024-230",[109,3391],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[3396],{"type":3366,"score":3397},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3399,3401,3403,3406,3408,3410,3413,3415,3417],{"type":3347,"url":3400},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3347,"url":3402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3404,"url":3405},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3340,"url":3407},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3333,"url":3409},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3411,"url":3412},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3333,"url":3414},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3347,"url":3416},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3347,"url":3418},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3420],"pypi:certifi@2024.6.2",{"id":110,"slug":3422,"dossier":47,"summary":3423,"aliases":3424,"sourceIds":3427,"published":3428,"modified":3429,"checkedAt":7,"severity":3430,"references":3433,"versionKeys":3445,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[3425,3426],"CVE-2026-4372","PYSEC-2026-2289",[110,3426],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[3431],{"type":3366,"score":3432},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3434,3436,3438,3440,3443],{"type":3347,"url":3435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":3404,"url":3437},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":3340,"url":3439},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":3441,"url":3442},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":3347,"url":3444},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[3446,3447,3448,3449,3450,3451,3452,3453,3454],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":111,"slug":3456,"dossier":47,"summary":3457,"aliases":3458,"sourceIds":3461,"published":3462,"modified":3463,"checkedAt":7,"severity":3464,"references":3467,"versionKeys":3484,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3459,3460],"CVE-2025-54121","PYSEC-2026-1941",[111,3460],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[3465],{"type":3366,"score":3466},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3468,3470,3472,3474,3476,3478,3480,3482],{"type":3333,"url":3469},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3347,"url":3471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3404,"url":3473},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3340,"url":3475},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3333,"url":3477},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3333,"url":3479},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3340,"url":3481},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3347,"url":3483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3485,3486,3487],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":112,"slug":3489,"dossier":47,"summary":3490,"aliases":3491,"sourceIds":3494,"published":3495,"modified":3496,"checkedAt":7,"severity":3497,"references":3502,"versionKeys":3509,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3492,3493],"CVE-2026-54279","PYSEC-2026-2112",[112,3493],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[3498,3500],{"type":3329,"score":3499},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3501},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3503,3505,3507],{"type":3347,"url":3504},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3340,"url":3506},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3404,"url":3508},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[3510,3511,3512,3513,3514,3515,3516,3517,3518],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":113,"slug":3520,"dossier":47,"summary":3521,"aliases":3522,"sourceIds":3525,"published":3526,"modified":3527,"checkedAt":7,"severity":3528,"references":3533,"versionKeys":3550,"packageCount":32,"repositoryCount":32},"ghsa-2g59-m95p-pgfq-b960a1a2","Chainlit contain a server-side request forgery (SSRF) vulnerability",[3523,3524],"CVE-2026-22219","PYSEC-2026-1237",[113,3524],"2026-01-20T00:30:28Z","2026-07-07T17:57:22.370684872Z",[3529,3531],{"type":3366,"score":3530},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":3329,"score":3532},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[3534,3536,3538,3540,3542,3544,3546,3548],{"type":3347,"url":3535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22219",{"type":3333,"url":3537},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002Fffc3cce648b343b933e10e85ee5805c7e02ab3bf",{"type":3340,"url":3539},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit",{"type":3333,"url":3541},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.9.4",{"type":3333,"url":3543},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-sqlalchemy-data-layer-ssrf-via-project-element",{"type":3333,"url":3545},"https:\u002F\u002Fwww.zafran.io\u002Fresources\u002Fchainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",{"type":3340,"url":3547},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchainlit",{"type":3347,"url":3549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g59-m95p-pgfq",[3551],"pypi:chainlit@2.8.3",{"id":114,"slug":3553,"dossier":47,"summary":3554,"aliases":3555,"sourceIds":3557,"published":3558,"modified":3559,"checkedAt":7,"severity":3560,"references":3562,"versionKeys":3573,"packageCount":32,"repositoryCount":3577},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[3556],"CVE-2026-101917",[114],"2026-09-29T23:11:51Z","2026-09-29T23:15:08.573706550Z",[3561],{"type":3366,"score":3466},[3563,3565,3567,3569,3571],{"type":3333,"url":3564},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":3347,"url":3566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":3333,"url":3568},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":3340,"url":3570},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3333,"url":3572},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",[3574,3575,3576],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",5,{"id":115,"slug":3579,"dossier":47,"summary":3580,"aliases":3581,"sourceIds":3584,"published":3585,"modified":3586,"checkedAt":7,"severity":3587,"references":3589,"versionKeys":3604,"packageCount":32,"repositoryCount":105},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3582,3583],"CVE-2026-24688","PYSEC-2026-1827",[115,3583],"2026-01-26T23:37:57Z","2026-09-10T03:50:32.300137224Z",[3588],{"type":3329,"score":3369},[3590,3592,3594,3596,3598,3599,3601,3602],{"type":3333,"url":3591},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3347,"url":3593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3333,"url":3595},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3333,"url":3597},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3340,"url":3341},{"type":3333,"url":3600},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3340,"url":3345},{"type":3347,"url":3603},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3352,3353],{"id":116,"slug":3606,"dossier":47,"summary":3607,"aliases":3608,"sourceIds":3611,"published":3612,"modified":3613,"checkedAt":7,"severity":3614,"references":3617,"versionKeys":3630,"packageCount":32,"repositoryCount":105},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3609,3610],"CVE-2026-27628","PYSEC-2026-3005",[116,3610],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3615],{"type":3329,"score":3616},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3618,3620,3622,3624,3626,3627,3628],{"type":3333,"url":3619},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3347,"url":3621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3333,"url":3623},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3333,"url":3625},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3340,"url":3341},{"type":3340,"url":3345},{"type":3347,"url":3629},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3352,3353],{"id":117,"slug":3632,"dossier":47,"summary":3633,"aliases":3634,"sourceIds":3637,"published":3638,"modified":3639,"checkedAt":7,"severity":3640,"references":3645,"versionKeys":3655,"packageCount":32,"repositoryCount":3656},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3635,3636],"CVE-2026-34514","PYSEC-2026-2096",[117,3636],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[3641,3643],{"type":3329,"score":3642},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3644},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3646,3648,3650,3652,3653],{"type":3404,"url":3647},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3347,"url":3649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3404,"url":3651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3340,"url":3506},{"type":3347,"url":3654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3510,3511,3512,3513,3514,3515,3516,3517],10,{"id":118,"slug":3658,"dossier":47,"summary":3659,"aliases":3660,"sourceIds":3663,"published":3664,"modified":3665,"checkedAt":7,"severity":3666,"references":3668,"versionKeys":3679,"packageCount":32,"repositoryCount":3577},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3661,3662],"CVE-2026-49476","PYSEC-2026-3071",[118,3662],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[3667],{"type":3366,"score":3501},[3669,3671,3673,3675,3677],{"type":3333,"url":3670},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3340,"url":3672},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3340,"url":3674},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3347,"url":3676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3347,"url":3678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3680,3681,3682],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":119,"slug":3684,"dossier":90,"summary":3685,"aliases":3686,"sourceIds":3689,"published":3690,"modified":3691,"checkedAt":7,"severity":3692,"references":3695,"versionKeys":3712,"packageCount":32,"repositoryCount":3718},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3687,3688],"CVE-2025-66471","PYSEC-2026-1994",[119,3688],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[3693],{"type":3329,"score":3694},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3696,3698,3700,3702,3704,3706,3708,3710],{"type":3333,"url":3697},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3347,"url":3699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3404,"url":3701},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3333,"url":3703},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":3347,"url":3705},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3333,"url":3707},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":3340,"url":3709},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3340,"url":3711},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[3713,3714,3715,3716,3717],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":120,"slug":3720,"dossier":47,"summary":3721,"aliases":3722,"sourceIds":3725,"published":3726,"modified":3727,"checkedAt":7,"severity":3728,"references":3731,"versionKeys":3744,"packageCount":32,"repositoryCount":105},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3723,3724],"CVE-2025-30167","PYSEC-2026-1477",[120,3724],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[3729],{"type":3366,"score":3730},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3732,3734,3736,3738,3740,3742],{"type":3333,"url":3733},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3347,"url":3735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3333,"url":3737},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3340,"url":3739},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3340,"url":3741},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3347,"url":3743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3745],"pypi:jupyter-core@5.7.2",{"id":121,"slug":3747,"dossier":47,"summary":3748,"aliases":3749,"sourceIds":3753,"published":3754,"modified":3755,"checkedAt":7,"severity":3756,"references":3763,"versionKeys":3785,"packageCount":32,"repositoryCount":674},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[3750,3751,3752],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[121,3752],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[3757,3759,3761],{"type":3366,"score":3758},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3329,"score":3760},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3366,"score":3762},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3764,3766,3769,3771,3773,3775,3777,3779,3781,3783],{"type":3347,"url":3765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3767,"url":3768},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3767,"url":3770},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":3333,"url":3772},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":3340,"url":3774},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":3333,"url":3776},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3767,"url":3778},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":3347,"url":3780},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":3347,"url":3782},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":3347,"url":3784},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3786,3787,3788],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":122,"slug":3790,"dossier":47,"summary":3791,"aliases":3792,"sourceIds":3795,"published":3796,"modified":3797,"checkedAt":7,"severity":3798,"references":3800,"versionKeys":3814,"packageCount":32,"repositoryCount":674},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3793,3794],"CVE-2025-3933","PYSEC-2026-1977",[122,3794],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[3799],{"type":3366,"score":3466},[3801,3803,3805,3807,3808,3810,3812],{"type":3347,"url":3802},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":3333,"url":3804},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":3333,"url":3806},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":3340,"url":3439},{"type":3333,"url":3809},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":3340,"url":3811},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":3347,"url":3813},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[3446,3447,3448],{"id":123,"slug":3816,"dossier":90,"summary":3817,"aliases":3818,"sourceIds":3821,"published":3822,"modified":3823,"checkedAt":7,"severity":3824,"references":3827,"versionKeys":3840,"packageCount":32,"repositoryCount":3718},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3819,3820],"CVE-2026-21441","PYSEC-2026-1996",[123,3820],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[3825,3826],{"type":3366,"score":3501},{"type":3329,"score":3694},[3828,3830,3832,3834,3835,3837,3838],{"type":3333,"url":3829},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3347,"url":3831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3404,"url":3833},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3340,"url":3709},{"type":3333,"url":3836},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3340,"url":3711},{"type":3347,"url":3839},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3713,3714,3715,3716,3717],{"id":124,"slug":3842,"dossier":47,"summary":3843,"aliases":3844,"sourceIds":3847,"published":3848,"modified":3849,"checkedAt":7,"severity":3850,"references":3854,"versionKeys":3885,"packageCount":32,"repositoryCount":105},"ghsa-3936-cmfr-pm3m-b8e96095","Black: Arbitrary file writes from unsanitized user input in cache file name",[3845,3846],"CVE-2026-32274","PYSEC-2026-2121",[124,3846],"2026-03-12T18:33:10Z","2026-09-10T03:50:36.703011526Z",[3851,3852],{"type":3366,"score":3397},{"type":3329,"score":3853},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3855,3857,3859,3861,3863,3865,3867,3869,3871,3873,3875,3877,3879,3881,3883],{"type":3347,"url":3856},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":3347,"url":3858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32274",{"type":3333,"url":3860},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F4176",{"type":3404,"url":3862},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",{"type":3404,"url":3864},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":3333,"url":3866},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fed770ba4dd50c419148a0fca2b43937a7447e1f9",{"type":3347,"url":3868},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3347,"url":3870},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3347,"url":3872},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3333,"url":3874},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":3767,"url":3876},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":3340,"url":3878},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":3347,"url":3880},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":3333,"url":3882},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2026-2121.yaml",{"type":3333,"url":3884},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",[3886,3887],"pypi:black@23.12.1","pypi:black@25.9.0",{"id":125,"slug":3889,"dossier":47,"summary":3890,"aliases":3891,"sourceIds":3894,"published":3895,"modified":3896,"checkedAt":7,"severity":3897,"references":3901,"versionKeys":3916,"packageCount":32,"repositoryCount":105},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3892,3893],"CVE-2026-40260","PYSEC-2026-3006",[125,3893],"2026-04-10T20:59:36Z","2026-09-10T03:50:42.398553260Z",[3898,3899],{"type":3366,"score":3466},{"type":3329,"score":3900},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3902,3904,3906,3908,3910,3911,3913,3914],{"type":3333,"url":3903},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3347,"url":3905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3333,"url":3907},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3333,"url":3909},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3340,"url":3341},{"type":3333,"url":3912},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3340,"url":3345},{"type":3347,"url":3915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3352,3353],{"id":126,"slug":3918,"dossier":47,"summary":3919,"aliases":3920,"sourceIds":3923,"published":3924,"modified":3925,"checkedAt":7,"severity":3926,"references":3931,"versionKeys":3946,"packageCount":32,"repositoryCount":3577},"ghsa-3gq4-3j92-5w49-897f59b8","NLTK: Corpus Reader Sandbox Bypass",[3921,3922],"CVE-2026-79674","PYSEC-2026-3736",[126,3922],"2026-08-25T16:17:27.873Z","2026-09-08T17:15:03.431037417Z",[3927,3929],{"type":3329,"score":3928},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":3930},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3932,3934,3936,3938,3940,3942,3944],{"type":3441,"url":3933},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gq4-3j92-5w49",{"type":3347,"url":3935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79674",{"type":3333,"url":3937},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbc007200d123c1a98d74c2eb230f5e06c53886b8",{"type":3340,"url":3939},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3333,"url":3941},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.3",{"type":3333,"url":3943},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3736.yaml",{"type":3347,"url":3945},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-corpus-reader-constructors",[3947,3948,3949],"pypi:nltk@3.10.0","pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":127,"slug":3951,"dossier":47,"summary":3952,"aliases":3953,"sourceIds":3956,"published":3957,"modified":3958,"checkedAt":7,"severity":3959,"references":3964,"versionKeys":3980,"packageCount":32,"repositoryCount":34},"ghsa-3gqm-fcw5-w839-cc39684a","NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure",[3954,3955],"CVE-2026-63311","PYSEC-2026-3723",[127,3955],"2026-08-22T15:16:19.233Z","2026-09-02T16:00:17.562331221Z",[3960,3962],{"type":3329,"score":3961},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3329,"score":3963},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3965,3967,3969,3971,3973,3974,3976,3978],{"type":3441,"url":3966},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gqm-fcw5-w839",{"type":3347,"url":3968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63311",{"type":3333,"url":3970},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3582",{"type":3333,"url":3972},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F4a820afa58810cd05049b6c6eae306694d6cfe65",{"type":3340,"url":3939},{"type":3333,"url":3975},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.0",{"type":3333,"url":3977},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3723.yaml",{"type":3347,"url":3979},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-via-dns-resolution-failure",[3948,3949],{"id":128,"slug":3982,"dossier":47,"summary":3983,"aliases":3984,"sourceIds":3987,"published":3988,"modified":3989,"checkedAt":7,"severity":3990,"references":3997,"versionKeys":4013,"packageCount":32,"repositoryCount":32},"ghsa-3hhw-38pf-pxj6-71b22ab9","NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely",[3985,3986],"CVE-2026-62383","PYSEC-2026-3726",[128,3986],"2026-08-22T15:16:17.883Z","2026-09-08T16:45:03.602432270Z",[3991,3993,3995],{"type":3366,"score":3992},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3329,"score":3994},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":3996},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3998,4000,4002,4004,4006,4007,4009,4011],{"type":3441,"url":3999},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3hhw-38pf-pxj6",{"type":3347,"url":4001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62383",{"type":3333,"url":4003},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3727",{"type":3333,"url":4005},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fee1a42e51982c4dce6ad3ee77ff1ac43894288ab",{"type":3340,"url":3939},{"type":3333,"url":4008},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.2",{"type":3333,"url":4010},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3726.yaml",{"type":3347,"url":4012},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-ipipancorpusreader-symlink-arbitrary-file-read",[3947],{"id":129,"slug":4015,"dossier":47,"summary":4016,"aliases":4017,"sourceIds":4020,"published":4021,"modified":4022,"checkedAt":7,"severity":4023,"references":4027,"versionKeys":4036,"packageCount":32,"repositoryCount":3656},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[4018,4019],"CVE-2026-34517","PYSEC-2026-2099",[129,4019],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[4024,4026],{"type":3329,"score":4025},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3466},[4028,4030,4032,4034,4035],{"type":3404,"url":4029},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3347,"url":4031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3404,"url":4033},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":130,"slug":4038,"dossier":47,"summary":4039,"aliases":4040,"sourceIds":4043,"published":4044,"modified":4045,"checkedAt":7,"severity":4046,"references":4048,"versionKeys":4059,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[4041,4042],"CVE-2026-49853","PYSEC-2026-3387",[130,4042],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[4047],{"type":3366,"score":3530},[4049,4051,4053,4055,4057],{"type":3333,"url":4050},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3340,"url":4052},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3340,"url":4054},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3347,"url":4056},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3347,"url":4058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[4060,4061,4062,4063,4064],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":131,"slug":4066,"dossier":47,"summary":4067,"aliases":4068,"sourceIds":4071,"published":4072,"modified":4073,"checkedAt":7,"severity":4074,"references":4076,"versionKeys":4089,"packageCount":32,"repositoryCount":674},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[4069,4070],"CVE-2025-68480","PYSEC-2026-1605",[131,4070],"2025-12-22T20:20:07Z","2026-09-10T03:50:31.208550852Z",[4075],{"type":3366,"score":3466},[4077,4079,4081,4083,4085,4087],{"type":3333,"url":4078},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3347,"url":4080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3333,"url":4082},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3340,"url":4084},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3340,"url":4086},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3347,"url":4088},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[4090,4091],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":132,"slug":4093,"dossier":90,"summary":4094,"aliases":4095,"sourceIds":4099,"published":4100,"modified":4101,"checkedAt":7,"severity":4102,"references":4104,"versionKeys":4117,"packageCount":32,"repositoryCount":588},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[4096,4097,4098],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[132,4098],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[4103],{"type":3366,"score":3501},[4105,4107,4109,4111,4113,4115],{"type":3441,"url":4106},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3347,"url":4108},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3404,"url":4110},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3333,"url":4112},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3340,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3347,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[4118,4119,4120,4121,4122,4123,4124,4125,4126],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",{"id":133,"slug":4128,"dossier":47,"summary":4129,"aliases":4130,"sourceIds":4133,"published":4134,"modified":4135,"checkedAt":7,"severity":4136,"references":4139,"versionKeys":4158,"packageCount":32,"repositoryCount":34},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[4131,4132],"CVE-2026-33236","PYSEC-2026-2237",[133,4132],"2026-03-19T12:42:42Z","2026-09-10T03:50:36.939520178Z",[4137],{"type":3366,"score":4138},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4140,4142,4144,4146,4147,4149,4151,4152,4154,4156],{"type":3441,"url":4141},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3347,"url":4143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3404,"url":4145},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3340,"url":3939},{"type":3333,"url":4148},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3333,"url":4150},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":3347,"url":3868},{"type":3347,"url":4153},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3347,"url":4155},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3767,"url":4157},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3948,3949],{"id":134,"slug":4160,"dossier":47,"summary":4161,"aliases":4162,"sourceIds":4165,"published":4166,"modified":4167,"checkedAt":7,"severity":4168,"references":4171,"versionKeys":4184,"packageCount":32,"repositoryCount":608},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[4163,4164],"CVE-2025-50182","PYSEC-2026-1997",[134,4164],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[4169],{"type":3366,"score":4170},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4172,4174,4176,4178,4179,4181,4182],{"type":3333,"url":4173},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3347,"url":4175},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3404,"url":4177},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3340,"url":3709},{"type":3333,"url":4180},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3340,"url":3711},{"type":3347,"url":4183},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3713,3714,3715,3716],{"id":135,"slug":4186,"dossier":47,"summary":4187,"aliases":4188,"sourceIds":4191,"published":4192,"modified":4193,"checkedAt":7,"severity":4194,"references":4196,"versionKeys":4211,"packageCount":32,"repositoryCount":105},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[4189,4190],"CVE-2026-22691","PYSEC-2026-1828",[135,4190],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[4195],{"type":3329,"score":4025},[4197,4199,4201,4203,4205,4206,4208,4209],{"type":3333,"url":4198},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3347,"url":4200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3333,"url":4202},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3333,"url":4204},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3340,"url":3341},{"type":3333,"url":4207},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3340,"url":3345},{"type":3347,"url":4210},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3352,3353],{"id":136,"slug":4213,"dossier":47,"summary":4214,"aliases":4215,"sourceIds":4218,"published":4219,"modified":4220,"checkedAt":7,"severity":4221,"references":4225,"versionKeys":4231,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[4216,4217],"CVE-2026-54273","PYSEC-2026-2107",[136,4217],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[4222,4224],{"type":3329,"score":4223},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3501},[4226,4228,4230],{"type":3347,"url":4227},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3404,"url":4229},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":137,"slug":4233,"dossier":47,"summary":4234,"aliases":4235,"sourceIds":4238,"published":4239,"modified":4240,"checkedAt":7,"severity":4241,"references":4246,"versionKeys":4263,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[4236,4237],"CVE-2026-69112","PYSEC-2026-3804",[137,4237],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[4242,4244],{"type":3366,"score":4243},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":3329,"score":4245},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4247,4249,4251,4253,4255,4257,4259,4261],{"type":3347,"url":4248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":3333,"url":4250},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":3333,"url":4252},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":3333,"url":4254},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":3340,"url":4256},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":3333,"url":4258},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":3340,"url":4260},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":3347,"url":4262},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[4264,4265,4266,4267],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":138,"slug":4269,"dossier":47,"summary":4270,"aliases":4271,"sourceIds":4274,"published":4275,"modified":4276,"checkedAt":7,"severity":4277,"references":4280,"versionKeys":4291,"packageCount":32,"repositoryCount":32},"ghsa-4jhm-jv67-739f-fdb585fa","`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes",[4272,4273],"CVE-2026-49825","PYSEC-2026-2614",[138,4273],"2026-07-08T20:23:22Z","2026-07-13T16:42:41.379452174Z",[4278],{"type":3366,"score":4279},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[4281,4283,4285,4287,4289],{"type":3333,"url":4282},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3340,"url":4284},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean",{"type":3340,"url":4286},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flxml-html-clean",{"type":3347,"url":4288},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3347,"url":4290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49825",[4292],"pypi:lxml-html-clean@0.4.3",{"id":139,"slug":4294,"dossier":47,"summary":4295,"aliases":4296,"sourceIds":4299,"published":4300,"modified":4301,"checkedAt":7,"severity":4302,"references":4306,"versionKeys":4310,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[4297,4298],"CVE-2026-54275","PYSEC-2026-237",[139,4298],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[4303,4305],{"type":3329,"score":4304},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3501},[4307,4309],{"type":3347,"url":4308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":140,"slug":4312,"dossier":47,"summary":4313,"aliases":4314,"sourceIds":4317,"published":4318,"modified":4319,"checkedAt":7,"severity":4320,"references":4325,"versionKeys":4340,"packageCount":32,"repositoryCount":105},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[4315,4316],"CVE-2026-41313","PYSEC-2026-3007",[140,4316],"2026-04-16T21:30:12Z","2026-09-10T03:50:42.729754195Z",[4321,4323],{"type":3366,"score":4322},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3329,"score":4324},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4326,4328,4330,4332,4334,4335,4337,4338],{"type":3333,"url":4327},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3347,"url":4329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3333,"url":4331},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3333,"url":4333},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3340,"url":3341},{"type":3333,"url":4336},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3340,"url":3345},{"type":3347,"url":4339},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3352,3353],{"id":141,"slug":4342,"dossier":47,"summary":4343,"aliases":4344,"sourceIds":4348,"published":4349,"modified":4350,"checkedAt":7,"severity":4351,"references":4354,"versionKeys":4372,"packageCount":32,"repositoryCount":105},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[4345,4346,4347],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[141,4346],"2023-06-30T20:33:57Z","2026-09-10T03:50:01.918644849Z",[4352],{"type":3366,"score":4353},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4355,4357,4359,4361,4363,4365,4366,4368,4370],{"type":3333,"url":4356},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":3347,"url":4358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":3333,"url":4360},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":3333,"url":4362},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":3404,"url":4364},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":3340,"url":3341},{"type":3333,"url":4367},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":3340,"url":4369},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":3347,"url":4371},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[4373],"pypi:pypdf2@3.0.1",{"id":142,"slug":4375,"dossier":47,"summary":4376,"aliases":4377,"sourceIds":4380,"published":4381,"modified":4382,"checkedAt":7,"severity":4383,"references":4386,"versionKeys":4399,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[4378,4379],"CVE-2025-6921","PYSEC-2026-1980",[142,4379],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[4384],{"type":3366,"score":4385},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4387,4389,4391,4393,4394,4396,4397],{"type":3347,"url":4388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":3333,"url":4390},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":3333,"url":4392},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":3340,"url":3439},{"type":3333,"url":4395},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":3340,"url":3811},{"type":3347,"url":4398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[3446,3447,3448,3449],{"id":143,"slug":4401,"dossier":90,"summary":4402,"aliases":4403,"sourceIds":4407,"published":4408,"modified":4409,"checkedAt":7,"severity":4410,"references":4413,"versionKeys":4428,"packageCount":32,"repositoryCount":588},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[4404,4405,4406],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[143,4406],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[4411],{"type":3366,"score":4412},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4414,4416,4418,4420,4422,4424,4426,4427],{"type":3441,"url":4415},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3347,"url":4417},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3404,"url":4419},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3404,"url":4421},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3404,"url":4423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3333,"url":4425},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3340,"url":4114},{"type":3347,"url":4116},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":144,"slug":4430,"dossier":47,"summary":4431,"aliases":4432,"sourceIds":4435,"published":4436,"modified":4437,"checkedAt":7,"severity":4438,"references":4440,"versionKeys":4452,"packageCount":32,"repositoryCount":105},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[4433,4434],"CVE-2026-22690","PYSEC-2026-1829",[144,4434],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[4439],{"type":3329,"score":4025},[4441,4443,4445,4446,4447,4448,4449,4450],{"type":3333,"url":4442},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3347,"url":4444},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3333,"url":4202},{"type":3333,"url":4204},{"type":3340,"url":3341},{"type":3333,"url":4207},{"type":3340,"url":3345},{"type":3347,"url":4451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3352,3353],{"id":145,"slug":4454,"dossier":47,"summary":4455,"aliases":4456,"sourceIds":4458,"published":4459,"modified":4460,"checkedAt":7,"severity":4461,"references":4464,"versionKeys":4469,"packageCount":32,"repositoryCount":105},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[4457],"CVE-2026-58203",[145],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[4462],{"type":3366,"score":4463},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4465,4467],{"type":3333,"url":4466},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3340,"url":4468},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[4470],"pypi:pydantic-settings@2.12.0",{"id":146,"slug":4472,"dossier":47,"summary":4473,"aliases":4474,"sourceIds":4477,"published":4478,"modified":4479,"checkedAt":7,"severity":4480,"references":4483,"versionKeys":4506,"packageCount":32,"repositoryCount":4509},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[4475,4476],"CVE-2026-4539","PYSEC-2026-2987",[146,4476],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[4481,4482],{"type":3366,"score":3758},{"type":3329,"score":3760},[4484,4486,4488,4490,4492,4494,4496,4498,4500,4502,4504],{"type":3347,"url":4485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3333,"url":4487},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3333,"url":4489},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3333,"url":4491},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3340,"url":4493},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3333,"url":4495},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3333,"url":4497},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3333,"url":4499},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3333,"url":4501},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3340,"url":4503},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3347,"url":4505},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[4507,4508],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":147,"slug":4511,"dossier":47,"summary":4512,"aliases":4513,"sourceIds":4516,"published":4517,"modified":4518,"checkedAt":7,"severity":4519,"references":4522,"versionKeys":4535,"packageCount":32,"repositoryCount":105},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[4514,4515],"CVE-2026-54530","PYSEC-2026-3009",[147,4515],"2026-06-16T14:05:40Z","2026-09-10T03:50:48.282377637Z",[4520],{"type":3329,"score":4521},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4523,4525,4527,4528,4530,4531,4533],{"type":3333,"url":4524},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3333,"url":4526},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3340,"url":3341},{"type":3333,"url":4529},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3340,"url":3345},{"type":3347,"url":4532},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3347,"url":4534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3352,3353],{"id":148,"slug":4537,"dossier":47,"summary":4538,"aliases":4539,"sourceIds":4543,"published":4544,"modified":4545,"checkedAt":7,"severity":4546,"references":4551,"versionKeys":4561,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[4540,4541,4542],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[148,4542],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[4547,4549],{"type":3329,"score":4548},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3366,"score":4550},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4552,4554,4556,4558,4560],{"type":3347,"url":4553},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":3347,"url":4555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":3333,"url":4557},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":3333,"url":4559},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":3340,"url":3774},[3786],{"id":149,"slug":4563,"dossier":47,"summary":4564,"aliases":4565,"sourceIds":4568,"published":4569,"modified":4570,"checkedAt":7,"severity":4571,"references":4574,"versionKeys":4586,"packageCount":32,"repositoryCount":608},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[4566,4567],"CVE-2025-69226","PYSEC-2026-1097",[149,4567],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[4572],{"type":3329,"score":4573},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4575,4577,4579,4581,4582,4584],{"type":3333,"url":4576},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3347,"url":4578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3404,"url":4580},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3340,"url":3506},{"type":3340,"url":4583},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3347,"url":4585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3510,3511,3512,3513,3514,3515,3516],{"id":150,"slug":4588,"dossier":47,"summary":4589,"aliases":4590,"sourceIds":4593,"published":4594,"modified":4595,"checkedAt":7,"severity":4596,"references":4598,"versionKeys":4613,"packageCount":32,"repositoryCount":105},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[4591,4592],"CVE-2026-59937","PYSEC-2026-3610",[150,4592],"2026-07-23T15:07:33Z","2026-09-10T03:50:12.272620075Z",[4597],{"type":3329,"score":3900},[4599,4601,4603,4605,4607,4608,4610,4611],{"type":3333,"url":4600},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3347,"url":4602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3333,"url":4604},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3333,"url":4606},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3340,"url":3341},{"type":3333,"url":4609},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3340,"url":3345},{"type":3347,"url":4612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3352,3353],{"id":151,"slug":4615,"dossier":47,"summary":4616,"aliases":4617,"sourceIds":4620,"published":4621,"modified":4622,"checkedAt":7,"severity":4623,"references":4630,"versionKeys":4649,"packageCount":32,"repositoryCount":34},"ghsa-568f-pv23-39p4-570af882","NLTK: Stable FrameNet and NKJP readers parse outside-root XML",[4618,4619],"CVE-2026-62385","PYSEC-2026-3728",[151,4619],"2026-08-22T15:16:18.833Z","2026-09-08T16:45:03.600943920Z",[4624,4626,4628],{"type":3366,"score":4625},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3329,"score":4627},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3366,"score":4629},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4631,4633,4635,4637,4639,4641,4643,4644,4645,4647],{"type":3441,"url":4632},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-568f-pv23-39p4",{"type":3347,"url":4634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62385",{"type":3333,"url":4636},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3579",{"type":3333,"url":4638},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3581",{"type":3333,"url":4640},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7d1389d0789c1eca56bd0ed444089e0a3972e3ed",{"type":3333,"url":4642},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbf3bf32786791394a1008258b4917a7f2d4dbcda",{"type":3340,"url":3939},{"type":3333,"url":3975},{"type":3333,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3728.yaml",{"type":3347,"url":4648},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-framenet-and-nkjp-readers",[3948,3949],{"id":152,"slug":4651,"dossier":47,"summary":4652,"aliases":4653,"sourceIds":4657,"published":4658,"modified":4659,"checkedAt":7,"severity":4660,"references":4663,"versionKeys":4678,"packageCount":32,"repositoryCount":627},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[4654,4655,4656],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[152,4656],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[4661],{"type":3366,"score":4662},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4664,4666,4668,4670,4672,4674,4676],{"type":3333,"url":4665},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":3347,"url":4667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":3333,"url":4669},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":3404,"url":4671},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":3340,"url":4673},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":3340,"url":4675},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":3347,"url":4677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[4679,4680,4681,4682],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":153,"slug":4684,"dossier":47,"summary":4685,"aliases":4686,"sourceIds":4689,"published":4690,"modified":4691,"checkedAt":7,"severity":4692,"references":4696,"versionKeys":4709,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[4687,4688],"CVE-2024-53981","PYSEC-2026-1851",[153,4688],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[4693,4694],{"type":3366,"score":3501},{"type":3329,"score":4695},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4697,4699,4701,4703,4705,4707],{"type":3333,"url":4698},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3347,"url":4700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3333,"url":4702},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3340,"url":4704},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3340,"url":4706},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3347,"url":4708},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[4710],"pypi:python-multipart@0.0.9",{"id":154,"slug":4712,"dossier":47,"summary":4713,"aliases":4714,"sourceIds":4717,"published":4718,"modified":4719,"checkedAt":7,"severity":4720,"references":4722,"versionKeys":4733,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[4715,4716],"CVE-2025-6638","PYSEC-2026-1981",[154,4716],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[4721],{"type":3366,"score":4385},[4723,4725,4726,4727,4728,4730,4731],{"type":3347,"url":4724},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":3333,"url":4390},{"type":3333,"url":4392},{"type":3340,"url":3439},{"type":3333,"url":4729},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":3340,"url":3811},{"type":3347,"url":4732},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[3446,3447,3448,3449],{"id":155,"slug":4735,"dossier":47,"summary":4736,"aliases":4737,"sourceIds":4740,"published":4741,"modified":4742,"checkedAt":7,"severity":4743,"references":4748,"versionKeys":4762,"packageCount":32,"repositoryCount":32},"ghsa-5gh2-94qg-qppq-247161cc","NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution",[4738,4739],"CVE-2026-71513","PYSEC-2026-3867",[155,4739],"2026-08-22T15:31:03Z","2026-09-10T12:25:33.900504877Z",[4744,4746],{"type":3366,"score":4745},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3329,"score":4747},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4749,4751,4753,4754,4756,4758,4760],{"type":3347,"url":4750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71513",{"type":3333,"url":4752},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fc3e37113742a1ebeeb4f2ca58941f320f98805ea",{"type":3340,"url":3939},{"type":3333,"url":4755},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fpicklesec.py#L119-L124",{"type":3333,"url":4757},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass",{"type":3340,"url":4759},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3347,"url":4761},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gh2-94qg-qppq",[3947],{"id":156,"slug":4764,"dossier":47,"summary":4765,"aliases":4766,"sourceIds":4769,"published":4770,"modified":4771,"checkedAt":7,"severity":4772,"references":4774,"versionKeys":4787,"packageCount":32,"repositoryCount":105},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4767,4768],"CVE-2026-49460","PYSEC-2026-3010",[156,4768],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4773],{"type":3329,"score":3369},[4775,4777,4779,4780,4782,4783,4785],{"type":3333,"url":4776},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3333,"url":4778},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3340,"url":3341},{"type":3333,"url":4781},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3340,"url":3345},{"type":3347,"url":4784},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3347,"url":4786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3352,3353],{"id":157,"slug":4789,"dossier":90,"summary":4790,"aliases":4791,"sourceIds":4793,"published":4794,"modified":4795,"checkedAt":7,"severity":4796,"references":4799,"versionKeys":4810,"packageCount":32,"repositoryCount":3718},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[4792],"CVE-2026-64847",[157],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[4797],{"type":3329,"score":4798},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4800,4802,4804,4806,4808],{"type":3333,"url":4801},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3333,"url":4803},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":3333,"url":4805},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":3340,"url":4807},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":3333,"url":4809},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[4811,4812,4813,4814,4815,4816,4817,4818],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":158,"slug":4820,"dossier":47,"summary":4821,"aliases":4822,"sourceIds":4825,"published":4826,"modified":4827,"checkedAt":7,"severity":4828,"references":4830,"versionKeys":4844,"packageCount":32,"repositoryCount":105},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4823,4824],"CVE-2026-59938","PYSEC-2026-3611",[158,4824],"2026-07-23T15:06:58Z","2026-09-10T03:51:10.495417380Z",[4829],{"type":3329,"score":3900},[4831,4833,4835,4837,4839,4840,4841,4842],{"type":3333,"url":4832},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3347,"url":4834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3333,"url":4836},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3333,"url":4838},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3340,"url":3341},{"type":3333,"url":4609},{"type":3340,"url":3345},{"type":3347,"url":4843},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3352,3353],{"id":159,"slug":4846,"dossier":47,"summary":4847,"aliases":4848,"sourceIds":4852,"published":4853,"modified":4854,"checkedAt":7,"severity":4855,"references":4860,"versionKeys":4877,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4849,4850,4851],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[159,4851],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[4856,4858],{"type":3329,"score":4857},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3366,"score":4859},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4861,4863,4865,4867,4869,4871,4873,4875],{"type":3441,"url":4862},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3347,"url":4864},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3767,"url":4866},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3404,"url":4868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3333,"url":4870},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3340,"url":4872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3333,"url":4874},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3411,"url":4876},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4878,4879,4880,4881],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":160,"slug":4883,"dossier":47,"summary":4884,"aliases":4885,"sourceIds":4888,"published":4889,"modified":4890,"checkedAt":7,"severity":4891,"references":4893,"versionKeys":4902,"packageCount":32,"repositoryCount":627},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4886,4887],"CVE-2026-53539","PYSEC-2026-3036",[160,4887],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[4892],{"type":3366,"score":3501},[4894,4896,4897,4898,4900],{"type":3333,"url":4895},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3340,"url":4704},{"type":3340,"url":4706},{"type":3347,"url":4899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3347,"url":4901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4903,4904,4905,4710],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":161,"slug":4907,"dossier":47,"summary":4908,"aliases":4909,"sourceIds":4912,"published":4913,"modified":4914,"checkedAt":7,"severity":4915,"references":4917,"versionKeys":4928,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[4910,4911],"CVE-2026-48804","PYSEC-2026-3042",[161,4911],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[4916],{"type":3366,"score":3501},[4918,4920,4922,4924,4926],{"type":3333,"url":4919},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3340,"url":4921},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":3340,"url":4923},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":3347,"url":4925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3347,"url":4927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[4929],"pypi:python-socketio@5.14.3",{"id":162,"slug":4931,"dossier":47,"summary":4932,"aliases":4933,"sourceIds":4938,"published":4939,"modified":4940,"checkedAt":7,"severity":4941,"references":4946,"versionKeys":4966,"packageCount":32,"repositoryCount":34},"ghsa-5wp5-5229-5g6q-fd7d105f","NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection",[4934,4935,4936,4937],"CVE-2026-12259","CVE-2026-63310","GHSA-gf32-cmjh-8m9v","PYSEC-2026-3729",[162,4937],"2026-08-22T15:16:19.100Z","2026-09-10T11:25:57.355843699Z",[4942,4944],{"type":3366,"score":4943},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3366,"score":4945},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[4947,4949,4951,4953,4955,4956,4958,4960,4962,4964],{"type":3441,"url":4948},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",{"type":3347,"url":4950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12259",{"type":3333,"url":4952},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3449",{"type":3333,"url":4954},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0e26734a61094b628d93e26dc18dd7302567ac46",{"type":3340,"url":3939},{"type":3333,"url":4957},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3333,"url":4959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3729.yaml",{"type":3333,"url":4961},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F659ccf6d-12d4-4d4a-84c0-078633c35a5d",{"type":3347,"url":4963},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-missing-post-download-integrity-verification",{"type":3347,"url":4965},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",[3948,3949],{"id":163,"slug":4968,"dossier":90,"summary":4969,"aliases":4970,"sourceIds":4974,"published":4975,"modified":4976,"checkedAt":7,"severity":4977,"references":4979,"versionKeys":4989,"packageCount":32,"repositoryCount":588},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4971,4972,4973],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[163,4973],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[4978],{"type":3366,"score":3501},[4980,4982,4984,4985,4987,4988],{"type":3441,"url":4981},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3347,"url":4983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3404,"url":4110},{"type":3333,"url":4986},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3340,"url":4114},{"type":3347,"url":4116},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":164,"slug":4991,"dossier":47,"summary":4992,"aliases":4993,"sourceIds":4996,"published":4997,"modified":4998,"checkedAt":7,"severity":4999,"references":5001,"versionKeys":5016,"packageCount":32,"repositoryCount":105},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[4994,4995],"CVE-2026-59936","PYSEC-2026-3612",[164,4995],"2026-07-23T16:36:41Z","2026-09-10T03:51:10.501615101Z",[5000],{"type":3329,"score":4695},[5002,5004,5006,5008,5010,5011,5013,5014],{"type":3333,"url":5003},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3347,"url":5005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3333,"url":5007},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3333,"url":5009},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3340,"url":3341},{"type":3333,"url":5012},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3340,"url":3345},{"type":3347,"url":5015},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3352,3353],{"id":165,"slug":5018,"dossier":47,"summary":5019,"aliases":5020,"sourceIds":5024,"published":5025,"modified":5026,"checkedAt":7,"severity":5027,"references":5030,"versionKeys":5038,"packageCount":32,"repositoryCount":103},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[5021,5022,5023],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[165,5023],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[5028,5029],{"type":3366,"score":3762},{"type":3329,"score":3369},[5031,5033,5035,5036],{"type":3347,"url":5032},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3347,"url":5034},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3340,"url":4114},{"type":3347,"url":5037},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[4121,4122,4123,4124,4125],{"id":166,"slug":5040,"dossier":90,"summary":5041,"aliases":5042,"sourceIds":5046,"published":5047,"modified":5048,"checkedAt":7,"severity":5049,"references":5052,"versionKeys":5068,"packageCount":32,"repositoryCount":588},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[5043,5044,5045],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[166,5045],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[5050],{"type":3329,"score":5051},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5053,5055,5057,5059,5061,5062,5064,5066],{"type":3333,"url":5054},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3347,"url":5056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3333,"url":5058},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3333,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3340,"url":4114},{"type":3333,"url":5063},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3340,"url":5065},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3347,"url":5067},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":167,"slug":5070,"dossier":47,"summary":5071,"aliases":5072,"sourceIds":5075,"published":5076,"modified":5077,"checkedAt":7,"severity":5078,"references":5084,"versionKeys":5095,"packageCount":32,"repositoryCount":3656},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[5073,5074],"CVE-2026-34520","PYSEC-2026-2102",[167,5074],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[5079,5081,5082],{"type":3366,"score":5080},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3329,"score":3642},{"type":3329,"score":5083},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5085,5087,5089,5091,5092,5093],{"type":3404,"url":5086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3347,"url":5088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3404,"url":5090},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3340,"url":3506},{"type":3347,"url":3654},{"type":3333,"url":5094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3510,3511,3512,3513,3514,3515,3516,3517],{"id":168,"slug":5097,"dossier":47,"summary":5098,"aliases":5099,"sourceIds":5102,"published":5103,"modified":5104,"checkedAt":7,"severity":5105,"references":5108,"versionKeys":5114,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[5100,5101],"CVE-2026-54277","PYSEC-2026-2110",[168,5101],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[5106,5107],{"type":3329,"score":4223},{"type":3366,"score":3501},[5109,5111,5113],{"type":3347,"url":5110},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3404,"url":5112},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":169,"slug":5116,"dossier":90,"summary":5117,"aliases":5118,"sourceIds":5121,"published":5122,"modified":5123,"checkedAt":7,"severity":5124,"references":5127,"versionKeys":5136,"packageCount":32,"repositoryCount":5141},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[5119,5120],"CVE-2026-45409","PYSEC-2026-215",[169,5120],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[5125,5126],{"type":3366,"score":3466},{"type":3329,"score":3900},[5128,5130,5132,5134],{"type":3347,"url":5129},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3347,"url":5131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3340,"url":5133},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3333,"url":5135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[5137,5138,5139,5140],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":170,"slug":5143,"dossier":47,"summary":5144,"aliases":5145,"sourceIds":5148,"published":5149,"modified":5150,"checkedAt":7,"severity":5151,"references":5155,"versionKeys":5165,"packageCount":32,"repositoryCount":34},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[5146,5147],"CVE-2026-0847","PYSEC-2026-98",[170,5147],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[5152,5154],{"type":3366,"score":5153},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3366,"score":4629},[5156,5158,5159,5161,5163],{"type":3347,"url":5157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3340,"url":3939},{"type":3333,"url":5160},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3441,"url":5162},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3347,"url":5164},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3948,3949],{"id":171,"slug":5167,"dossier":47,"summary":5168,"aliases":5169,"sourceIds":5172,"published":5173,"modified":5174,"checkedAt":7,"severity":5175,"references":5177,"versionKeys":5188,"packageCount":32,"repositoryCount":608},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[5170,5171],"CVE-2025-69224","PYSEC-2026-1099",[171,5171],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[5176],{"type":3329,"score":3642},[5178,5180,5182,5184,5185,5186],{"type":3333,"url":5179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3347,"url":5181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3404,"url":5183},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":5187},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3510,3511,3512,3513,3514,3515,3516],{"id":172,"slug":5190,"dossier":47,"summary":5191,"aliases":5192,"sourceIds":5195,"published":5196,"modified":5197,"checkedAt":7,"severity":5198,"references":5203,"versionKeys":5215,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[5193,5194],"CVE-2026-1839","PYSEC-2026-2288",[172,5194],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[5199,5201],{"type":3366,"score":5200},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":3366,"score":5202},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5204,5206,5208,5209,5211,5213],{"type":3347,"url":5205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":3404,"url":5207},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":3340,"url":3439},{"type":3333,"url":5210},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":3441,"url":5212},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":3347,"url":5214},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[3446,3447,3448,3449,3450,3451,3452,3453,3454],{"id":173,"slug":5217,"dossier":47,"summary":5218,"aliases":5219,"sourceIds":5222,"published":5223,"modified":5224,"checkedAt":7,"severity":5225,"references":5227,"versionKeys":5236,"packageCount":32,"repositoryCount":34},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[5220,5221],"CVE-2026-12072","PYSEC-2026-3581",[173,5221],"2026-07-31T16:50:55Z","2026-09-10T03:51:10.746883878Z",[5226],{"type":3366,"score":4629},[5228,5230,5231,5232,5234],{"type":3333,"url":5229},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3340,"url":3939},{"type":3340,"url":4759},{"type":3347,"url":5233},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3347,"url":5235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3948,3949],{"id":174,"slug":5238,"dossier":47,"summary":5239,"aliases":5240,"sourceIds":5243,"published":5244,"modified":5245,"checkedAt":7,"severity":5246,"references":5251,"versionKeys":5265,"packageCount":32,"repositoryCount":3577},"ghsa-6hwm-xvph-95vm-a4237eb0","NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary",[5241,5242],"CVE-2026-78680","PYSEC-2026-3868",[174,5242],"2026-09-01T20:27:20Z","2026-09-10T12:25:25.368160026Z",[5247,5249],{"type":3366,"score":5248},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3329,"score":5250},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5252,5254,5256,5258,5259,5260,5262,5263],{"type":3333,"url":5253},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",{"type":3347,"url":5255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78680",{"type":3333,"url":5257},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1a3cd1764ab3deb084fb66d0ffb4873717659538",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":5261},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-code-execution-via-graphviz-dot-binary",{"type":3340,"url":4759},{"type":3347,"url":5264},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",[3947,3948,3949],{"id":175,"slug":5267,"dossier":47,"summary":5268,"aliases":5269,"sourceIds":5272,"published":5273,"modified":5274,"checkedAt":7,"severity":5275,"references":5277,"versionKeys":5288,"packageCount":32,"repositoryCount":608},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[5270,5271],"CVE-2025-69228","PYSEC-2026-1100",[175,5271],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[5276],{"type":3329,"score":4223},[5278,5280,5282,5284,5285,5286],{"type":3333,"url":5279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3347,"url":5281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3404,"url":5283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":5287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3510,3511,3512,3513,3514,3515,3516],{"id":176,"slug":5290,"dossier":47,"summary":5291,"aliases":5292,"sourceIds":5295,"published":5296,"modified":5297,"checkedAt":7,"severity":5298,"references":5301,"versionKeys":5310,"packageCount":32,"repositoryCount":627},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[5293,5294],"CVE-2026-53538","PYSEC-2026-3037",[176,5294],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[5299],{"type":3366,"score":5300},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[5302,5304,5305,5306,5308],{"type":3333,"url":5303},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3340,"url":4704},{"type":3340,"url":4706},{"type":3347,"url":5307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3347,"url":5309},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4903,4904,4905,4710],{"id":177,"slug":5312,"dossier":47,"summary":5313,"aliases":5314,"sourceIds":5317,"published":5318,"modified":5319,"checkedAt":7,"severity":5320,"references":5322,"versionKeys":5333,"packageCount":32,"repositoryCount":608},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[5315,5316],"CVE-2025-69223","PYSEC-2026-1101",[177,5316],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[5321],{"type":3366,"score":3501},[5323,5325,5327,5329,5330,5331],{"type":3333,"url":5324},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3347,"url":5326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3404,"url":5328},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":5332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3510,3511,3512,3513,3514,3515,3516],{"id":178,"slug":5335,"dossier":90,"summary":5336,"aliases":5337,"sourceIds":5341,"published":5342,"modified":5343,"checkedAt":7,"severity":5344,"references":5346,"versionKeys":5359,"packageCount":32,"repositoryCount":588},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[5338,5339,5340],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[178,5340],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[5345],{"type":3366,"score":3501},[5347,5349,5351,5353,5355,5357,5358],{"type":3441,"url":5348},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3347,"url":5350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3404,"url":5352},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3404,"url":5354},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3333,"url":5356},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3340,"url":4114},{"type":3347,"url":5063},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":179,"slug":5361,"dossier":47,"summary":5362,"aliases":5363,"sourceIds":5366,"published":5367,"modified":5368,"checkedAt":7,"severity":5369,"references":5371,"versionKeys":5382,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[5364,5365],"CVE-2024-12720","PYSEC-2026-1982",[179,5365],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[5370],{"type":3366,"score":4385},[5372,5374,5376,5377,5379,5380],{"type":3347,"url":5373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":3333,"url":5375},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":3340,"url":3439},{"type":3333,"url":5378},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":3340,"url":3811},{"type":3347,"url":5381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[3446],{"id":180,"slug":5384,"dossier":47,"summary":5385,"aliases":5386,"sourceIds":5389,"published":5390,"modified":5391,"checkedAt":7,"severity":5392,"references":5395,"versionKeys":5414,"packageCount":32,"repositoryCount":627},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[5387,5388],"CVE-2025-71176","PYSEC-2026-1845",[180,5388],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[5393],{"type":3366,"score":5394},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[5396,5398,5400,5402,5404,5406,5408,5410,5412],{"type":3347,"url":5397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3333,"url":5399},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3333,"url":5401},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3333,"url":5403},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3340,"url":5405},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3333,"url":5407},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3333,"url":5409},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3340,"url":5411},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3347,"url":5413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[5415,5416,5417,5418,5419],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":181,"slug":5421,"dossier":47,"summary":5422,"aliases":5423,"sourceIds":5426,"published":5427,"modified":5428,"checkedAt":7,"severity":5429,"references":5434,"versionKeys":5447,"packageCount":32,"repositoryCount":3577},"ghsa-6ww7-3frv-cqxh-c6d40b97","NLTK: pathsec SSRF protection can be bypassed when a proxy is configured",[5424,5425],"CVE-2026-78682","PYSEC-2026-3733",[181,5425],"2026-08-25T02:16:52.890Z","2026-09-08T16:45:04.147588108Z",[5430,5432],{"type":3329,"score":5431},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":5433},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5435,5437,5439,5441,5442,5443,5445],{"type":3441,"url":5436},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6ww7-3frv-cqxh",{"type":3347,"url":5438},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78682",{"type":3333,"url":5440},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F767333a005a1cd3d82d2029215f2dbe66a5844d9",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":5444},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3733.yaml",{"type":3347,"url":5446},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-protection-bypass-via-proxy",[3947,3948,3949],{"id":182,"slug":5449,"dossier":47,"summary":5450,"aliases":5451,"sourceIds":5454,"published":5455,"modified":5456,"checkedAt":7,"severity":5457,"references":5462,"versionKeys":5478,"packageCount":32,"repositoryCount":34},"ghsa-72r2-7mfr-5xr9-919ee5d0","NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:\u002F\u002F protocol",[5452,5453],"CVE-2026-65915","PYSEC-2026-3731",[182,5453],"2026-08-22T15:16:19.500Z","2026-09-08T15:46:56.329043767Z",[5458,5460],{"type":3366,"score":5459},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3329,"score":5461},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5463,5465,5467,5469,5471,5472,5474,5476],{"type":3441,"url":5464},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-72r2-7mfr-5xr9",{"type":3347,"url":5466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-65915",{"type":3333,"url":5468},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3522",{"type":3333,"url":5470},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F69db9911fdba914ceeaca7aec6e892d1b14586a9",{"type":3340,"url":3939},{"type":3333,"url":5473},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3731.yaml",{"type":3333,"url":5475},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa510de7b-ffaf-4a83-9bf8-fa7e63f4bd2d",{"type":3347,"url":5477},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-file-read-via-filesystempathpointer",[3948,3949],{"id":183,"slug":5480,"dossier":47,"summary":5481,"aliases":5482,"sourceIds":5485,"published":5486,"modified":5487,"checkedAt":7,"severity":5488,"references":5490,"versionKeys":5500,"packageCount":32,"repositoryCount":674},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[5483,5484],"CVE-2026-32597","PYSEC-2026-120",[183,5484],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[5489],{"type":3366,"score":3397},[5491,5493,5495,5496,5498],{"type":3441,"url":5492},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3347,"url":5494},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3340,"url":3570},{"type":3333,"url":5497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3333,"url":5499},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[3574,3576],{"id":184,"slug":5502,"dossier":47,"summary":5503,"aliases":5504,"sourceIds":5507,"published":5508,"modified":5509,"checkedAt":7,"severity":5510,"references":5512,"versionKeys":5524,"packageCount":32,"repositoryCount":674},"ghsa-763m-79hh-57f2-630348b0","pypdf: Possible long runtimes\u002Flarge memory usage when extracting XForm objects",[5505,5506],"CVE-2026-84311","PYSEC-2026-3911",[184,5506],"2026-09-01T21:27:22Z","2026-09-10T12:26:04.098858222Z",[5511],{"type":3329,"score":3330},[5513,5515,5516,5517,5518,5519,5520,5522],{"type":3333,"url":5514},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3333,"url":3336},{"type":3333,"url":3338},{"type":3340,"url":3341},{"type":3333,"url":3343},{"type":3340,"url":3345},{"type":3347,"url":5521},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3347,"url":5523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84311",[3352,3353,3354],{"id":185,"slug":5526,"dossier":47,"summary":5527,"aliases":5528,"sourceIds":5532,"published":5533,"modified":5534,"checkedAt":7,"severity":5535,"references":5541,"versionKeys":5553,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[5529,5530,5531],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[185,5530,5531],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[5536,5538,5540],{"type":3366,"score":5537},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3366,"score":5539},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3366,"score":3644},[5542,5544,5546,5547,5549,5551],{"type":3347,"url":5543},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3333,"url":5545},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3340,"url":4052},{"type":3333,"url":5548},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3347,"url":5550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3347,"url":5552},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[4060,4061,4062,4063],{"id":186,"slug":5555,"dossier":47,"summary":5556,"aliases":5557,"sourceIds":5560,"published":5561,"modified":5562,"checkedAt":7,"severity":5563,"references":5565,"versionKeys":5578,"packageCount":32,"repositoryCount":105},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[5558,5559],"CVE-2025-47287","PYSEC-2026-1974",[186,5559],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[5564],{"type":3366,"score":3501},[5566,5568,5570,5572,5573,5575,5576],{"type":3333,"url":5567},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3347,"url":5569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3333,"url":5571},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3340,"url":4052},{"type":3333,"url":5574},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3340,"url":4054},{"type":3347,"url":5577},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[4060],{"id":187,"slug":5580,"dossier":47,"summary":5581,"aliases":5582,"sourceIds":5585,"published":5586,"modified":5587,"checkedAt":7,"severity":5588,"references":5590,"versionKeys":5607,"packageCount":32,"repositoryCount":637},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[5583,5584],"CVE-2025-62727","PYSEC-2026-1942",[187,5584],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[5589],{"type":3366,"score":3501},[5591,5593,5595,5597,5600,5602,5604,5605],{"type":3333,"url":5592},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3347,"url":5594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3404,"url":5596},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":5598,"url":5599},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3340,"url":5601},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3333,"url":5603},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3340,"url":3481},{"type":3347,"url":5606},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3486,3487,5608,5609,5610],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":188,"slug":5612,"dossier":47,"summary":5613,"aliases":5614,"sourceIds":5617,"published":5618,"modified":5619,"checkedAt":7,"severity":5620,"references":5623,"versionKeys":5640,"packageCount":32,"repositoryCount":598},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[5615,5616],"CVE-2026-0994","PYSEC-2026-1805",[188,5616],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[5621],{"type":3329,"score":5622},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[5624,5626,5628,5630,5632,5634,5636,5638],{"type":3347,"url":5625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3333,"url":5627},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3333,"url":5629},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3333,"url":5631},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3333,"url":5633},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3340,"url":5635},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3340,"url":5637},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3347,"url":5639},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[5641,5642,5643,5644,5645,5646,5647,5648,5649,5650],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":189,"slug":5652,"dossier":47,"summary":5653,"aliases":5654,"sourceIds":5657,"published":5658,"modified":5659,"checkedAt":7,"severity":5660,"references":5663,"versionKeys":5677,"packageCount":32,"repositoryCount":105},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[5655,5656],"CVE-2026-41312","PYSEC-2026-3011",[189,5656],"2026-04-16T21:30:00Z","2026-09-10T03:50:43.750842855Z",[5661,5662],{"type":3366,"score":4322},{"type":3329,"score":4324},[5664,5666,5668,5670,5672,5673,5674,5675],{"type":3333,"url":5665},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3347,"url":5667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3333,"url":5669},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3333,"url":5671},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3340,"url":3341},{"type":3333,"url":4336},{"type":3340,"url":3345},{"type":3347,"url":5676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3352,3353],{"id":190,"slug":5679,"dossier":47,"summary":5680,"aliases":5681,"sourceIds":5684,"published":5685,"modified":5686,"checkedAt":7,"severity":5687,"references":5689,"versionKeys":5706,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[5682,5683],"CVE-2025-55197","PYSEC-2026-1830",[190,5683],"2025-08-13T19:51:24Z","2026-09-10T03:50:26.651449913Z",[5688],{"type":3329,"score":4223},[5690,5692,5694,5696,5698,5699,5701,5703,5704],{"type":3333,"url":5691},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3347,"url":5693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3333,"url":5695},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3333,"url":5697},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3340,"url":3341},{"type":3333,"url":5700},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3333,"url":5702},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3340,"url":3345},{"type":3347,"url":5705},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3352],{"id":191,"slug":5708,"dossier":47,"summary":5709,"aliases":5710,"sourceIds":5713,"published":5714,"modified":5715,"checkedAt":7,"severity":5716,"references":5719,"versionKeys":5735,"packageCount":32,"repositoryCount":34},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[5711,5712],"CVE-2025-14009","PYSEC-2026-96",[191,5712],"2026-02-18T18:24:19.410Z","2026-09-10T03:50:34.416389229Z",[5717],{"type":3366,"score":5718},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5720,5722,5724,5726,5727,5729,5731,5733],{"type":3347,"url":5721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3333,"url":5723},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3333,"url":5725},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3340,"url":3939},{"type":3333,"url":5728},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3333,"url":5730},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3441,"url":5732},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3347,"url":5734},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3948,3949],{"id":192,"slug":5737,"dossier":47,"summary":5738,"aliases":5739,"sourceIds":5741,"published":5742,"modified":5743,"checkedAt":7,"severity":5744,"references":5747,"versionKeys":5756,"packageCount":32,"repositoryCount":3718},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[5740],"CVE-2026-63374",[192],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[5745],{"type":3329,"score":5746},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5748,5750,5752,5754,5755],{"type":3333,"url":5749},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3333,"url":5751},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":3333,"url":5753},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":3340,"url":4807},{"type":3333,"url":4809},[4811,4812,4813,4814,4815,4816,4817,4818],{"id":193,"slug":5758,"dossier":47,"summary":5759,"aliases":5760,"sourceIds":5763,"published":5764,"modified":5765,"checkedAt":7,"severity":5766,"references":5768,"versionKeys":5772,"packageCount":32,"repositoryCount":3656},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5761,5762],"CVE-2026-54283","PYSEC-2026-249",[193,5762],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[5767],{"type":3366,"score":3501},[5769,5771],{"type":3347,"url":5770},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3340,"url":5601},[3485,3486,3487,5608,5609,5610,5773,5774,5775],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":194,"slug":5777,"dossier":47,"summary":5778,"aliases":5779,"sourceIds":5782,"published":5783,"modified":5784,"checkedAt":7,"severity":5785,"references":5787,"versionKeys":5796,"packageCount":32,"repositoryCount":3577},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5780,5781],"CVE-2026-49477","PYSEC-2026-3072",[194,5781],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[5786],{"type":3366,"score":3501},[5788,5790,5791,5792,5794],{"type":3333,"url":5789},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3340,"url":3672},{"type":3340,"url":3674},{"type":3347,"url":5793},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3347,"url":5795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3680,3681,3682],{"id":195,"slug":5798,"dossier":47,"summary":5799,"aliases":5800,"sourceIds":5802,"published":5803,"modified":5804,"checkedAt":7,"severity":5805,"references":5807,"versionKeys":5819,"packageCount":32,"repositoryCount":3656},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[5801],"CVE-2026-91990",[195],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[5806],{"type":3329,"score":3900},[5808,5810,5812,5814,5816,5817],{"type":3333,"url":5809},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":3333,"url":5811},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":3333,"url":5813},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":3333,"url":5815},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":3340,"url":4052},{"type":3333,"url":5818},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[4060,4061,4062,4063,4064,5820],"pypi:tornado@6.5.7",{"id":196,"slug":5822,"dossier":47,"summary":5823,"aliases":5824,"sourceIds":5827,"published":5828,"modified":5829,"checkedAt":7,"severity":5830,"references":5835,"versionKeys":5854,"packageCount":32,"repositoryCount":34},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[5825,5826],"CVE-2025-71408","PYSEC-2026-3657",[196,5826],"2026-07-24T22:16:50.063Z","2026-08-19T12:15:03.319052318Z",[5831,5832,5833],{"type":3366,"score":5248},{"type":3329,"score":5250},{"type":3329,"score":5834},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5836,5838,5840,5842,5844,5845,5846,5848,5850,5852],{"type":3347,"url":5837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3404,"url":5839},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3404,"url":5841},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3333,"url":5843},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3340,"url":3939},{"type":3347,"url":4957},{"type":3333,"url":5847},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3404,"url":5849},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3441,"url":5851},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",{"type":3347,"url":5853},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-848c-c2cx-j7qx",[3948,3949],{"id":197,"slug":5856,"dossier":47,"summary":5857,"aliases":5858,"sourceIds":5862,"published":5863,"modified":5864,"checkedAt":7,"severity":5865,"references":5868,"versionKeys":5905,"packageCount":32,"repositoryCount":3656},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5859,5860,5861],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[197,5860],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[5866],{"type":3366,"score":5867},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5869,5871,5873,5875,5877,5879,5881,5883,5885,5887,5888,5890,5893,5895,5897,5899,5901,5903],{"type":3347,"url":5870},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3347,"url":5872},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3404,"url":5874},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3333,"url":5876},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3411,"url":5878},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3333,"url":5880},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3333,"url":5882},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3333,"url":5884},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3333,"url":5886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3340,"url":5601},{"type":3333,"url":5889},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5891,"url":5892},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3333,"url":5894},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3333,"url":5896},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":3333,"url":5898},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3333,"url":5900},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3411,"url":5902},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3347,"url":5904},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3485,3486,3487,5608,5609,5610,5773,5774,5775],{"id":198,"slug":5907,"dossier":47,"summary":5908,"aliases":5909,"sourceIds":5912,"published":5913,"modified":5914,"checkedAt":7,"severity":5915,"references":5918,"versionKeys":5931,"packageCount":32,"repositoryCount":105},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5910,5911],"CVE-2026-33699","PYSEC-2026-3012",[198,5911],"2026-03-25T20:05:22Z","2026-09-10T03:51:00.069856672Z",[5916],{"type":3329,"score":5917},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5919,5921,5923,5925,5926,5928,5929],{"type":3333,"url":5920},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3347,"url":5922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3333,"url":5924},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3340,"url":3341},{"type":3333,"url":5927},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3340,"url":3345},{"type":3347,"url":5930},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3352,3353],{"id":199,"slug":5933,"dossier":47,"summary":5934,"aliases":5935,"sourceIds":5939,"published":5940,"modified":5941,"checkedAt":7,"severity":5942,"references":5946,"versionKeys":5968,"packageCount":32,"repositoryCount":608},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[5936,5937,5938],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[199,5938],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[5943,5944],{"type":3366,"score":3758},{"type":3329,"score":5945},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5947,5949,5951,5953,5955,5957,5958,5960,5962,5964,5966],{"type":3347,"url":5948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":3333,"url":5950},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":3333,"url":5952},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":3333,"url":5954},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":3333,"url":5956},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":3340,"url":3774},{"type":3333,"url":5959},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":3333,"url":5961},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":3333,"url":5963},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":3340,"url":5965},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":3347,"url":5967},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3786,3787,3788,5969,5970],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":200,"slug":5972,"dossier":47,"summary":5973,"aliases":5974,"sourceIds":5977,"published":5978,"modified":5979,"checkedAt":7,"severity":5980,"references":5987,"versionKeys":6009,"packageCount":32,"repositoryCount":3577},"ghsa-8mgp-746c-j5xp-7f3a80b8","NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots",[5975,5976],"CVE-2026-81726","PYSEC-2026-3740",[200,5976],"2026-08-27T17:21:03.387Z","2026-09-02T14:45:06.878867805Z",[5981,5983,5985],{"type":3366,"score":5982},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3329,"score":5984},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":5986},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5988,5990,5992,5994,5996,5998,6000,6002,6004,6005,6007],{"type":3441,"url":5989},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mgp-746c-j5xp",{"type":3347,"url":5991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81726",{"type":3333,"url":5993},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3757",{"type":3333,"url":5995},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3759",{"type":3333,"url":5997},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3813",{"type":3333,"url":5999},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2a92b71827d754ae8920261e7ed0c4bb283ab2d7",{"type":3333,"url":6001},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fa44a7af69bca87e92d9c4a701fcbbe4512e8d450",{"type":3333,"url":6003},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcbc98458b43de5f792f0382583c16df39e5c5117",{"type":3340,"url":3939},{"type":3333,"url":6006},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3740.yaml",{"type":3347,"url":6008},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-3.10.3-path-traversal-via-model-artifact-apis",[3947,3948,3949],{"id":201,"slug":6011,"dossier":47,"summary":6012,"aliases":6013,"sourceIds":6016,"published":6017,"modified":6018,"checkedAt":7,"severity":6019,"references":6024,"versionKeys":6037,"packageCount":32,"repositoryCount":3577},"ghsa-8mpw-7fpc-4gqj-e47ea3c3","NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks",[6014,6015],"CVE-2026-81725","PYSEC-2026-3752",[201,6015],"2026-08-27T17:21:03.247Z","2026-09-08T20:45:04.346016767Z",[6020,6022],{"type":3329,"score":6021},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":6023},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6025,6027,6029,6031,6032,6033,6035],{"type":3441,"url":6026},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpw-7fpc-4gqj",{"type":3347,"url":6028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81725",{"type":3333,"url":6030},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7808692d451b962711005d954859bb83aabcf8fa",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":6034},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3752.yaml",{"type":3347,"url":6036},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-regular-expression-denial-of-service-via-pl196xcorpusreader",[3947,3948,3949],{"id":202,"slug":6039,"dossier":47,"summary":6040,"aliases":6041,"sourceIds":6044,"published":6045,"modified":6046,"checkedAt":7,"severity":6047,"references":6050,"versionKeys":6069,"packageCount":32,"repositoryCount":674},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[6042,6043],"CVE-2025-4565","PYSEC-2026-1806",[202,6043],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[6048],{"type":3329,"score":6049},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6051,6053,6055,6057,6059,6060,6062,6064,6066,6067],{"type":3333,"url":6052},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3333,"url":6054},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3347,"url":6056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3333,"url":6058},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3340,"url":5635},{"type":3333,"url":6061},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3333,"url":6063},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3333,"url":6065},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3340,"url":5637},{"type":3347,"url":6068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[5641,5643,5644],{"id":203,"slug":6071,"dossier":90,"summary":6072,"aliases":6073,"sourceIds":6077,"published":6078,"modified":6079,"checkedAt":7,"severity":6080,"references":6082,"versionKeys":6092,"packageCount":32,"repositoryCount":588},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[6074,6075,6076],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[203,6076],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[6081],{"type":3366,"score":3501},[6083,6085,6087,6088,6090,6091],{"type":3441,"url":6084},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3347,"url":6086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3404,"url":4110},{"type":3333,"url":6089},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3340,"url":4114},{"type":3347,"url":4116},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":204,"slug":6094,"dossier":47,"summary":6095,"aliases":6096,"sourceIds":6098,"published":6099,"modified":6100,"checkedAt":7,"severity":6101,"references":6103,"versionKeys":6112,"packageCount":32,"repositoryCount":105},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[6097],"CVE-2026-102265",[204],"2026-09-29T23:43:06Z","2026-09-29T23:45:37.333342767Z",[6102],{"type":3366,"score":3466},[6104,6106,6108,6110,6111],{"type":3333,"url":6105},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":3347,"url":6107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":3333,"url":6109},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":3340,"url":3570},{"type":3333,"url":3572},[3575],{"id":205,"slug":6114,"dossier":47,"summary":6115,"aliases":6116,"sourceIds":6119,"published":6120,"modified":6121,"checkedAt":7,"severity":6122,"references":6124,"versionKeys":6137,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[6117,6118],"CVE-2025-5197","PYSEC-2026-1983",[205,6118],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[6123],{"type":3366,"score":4385},[6125,6127,6129,6131,6132,6134,6135],{"type":3347,"url":6126},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":3333,"url":6128},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":3333,"url":6130},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":3340,"url":3439},{"type":3333,"url":6133},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":3340,"url":3811},{"type":3347,"url":6136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[3446,3447,3448,3449],{"id":206,"slug":6139,"dossier":47,"summary":6140,"aliases":6141,"sourceIds":6144,"published":6145,"modified":6146,"checkedAt":7,"severity":6147,"references":6150,"versionKeys":6161,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[6142,6143],"CVE-2025-53643","PYSEC-2026-1104",[206,6143],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[6148],{"type":3329,"score":6149},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6151,6153,6155,6157,6158,6159],{"type":3333,"url":6152},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3347,"url":6154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3404,"url":6156},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":6160},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3510,3511,3512,3513],{"id":207,"slug":6163,"dossier":47,"summary":6164,"aliases":6165,"sourceIds":6168,"published":6169,"modified":6170,"checkedAt":7,"severity":6171,"references":6175,"versionKeys":6184,"packageCount":32,"repositoryCount":3656},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[6166,6167],"CVE-2026-34518","PYSEC-2026-2100",[207,6167],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[6172,6174],{"type":3366,"score":6173},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3329,"score":4573},[6176,6178,6180,6182,6183],{"type":3404,"url":6177},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3347,"url":6179},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3404,"url":6181},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":208,"slug":6186,"dossier":47,"summary":6187,"aliases":6188,"sourceIds":6191,"published":6192,"modified":6193,"checkedAt":7,"severity":6194,"references":6198,"versionKeys":6211,"packageCount":32,"repositoryCount":3577},"ghsa-97qj-x29f-37w7-98509369","NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses",[6189,6190],"CVE-2026-78681","PYSEC-2026-3748",[208,6190],"2026-08-25T02:16:52.750Z","2026-09-08T16:45:04.193148017Z",[6195,6196],{"type":3329,"score":4695},{"type":3329,"score":6197},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6199,6201,6203,6205,6206,6207,6209],{"type":3441,"url":6200},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-97qj-x29f-37w7",{"type":3347,"url":6202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78681",{"type":3333,"url":6204},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe91789c9a043296ad04912ce171c22776d45963b",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":6208},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3748.yaml",{"type":3347,"url":6210},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-entity-expansion-dos-via-elementtree",[3947,3948,3949],{"id":209,"slug":6213,"dossier":47,"summary":6214,"aliases":6215,"sourceIds":6218,"published":6219,"modified":6220,"checkedAt":7,"severity":6221,"references":6224,"versionKeys":6234,"packageCount":32,"repositoryCount":674},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[6216,6217],"CVE-2026-48522","PYSEC-2026-175",[209,6217],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[6222],{"type":3366,"score":6223},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6225,6227,6229,6231,6232],{"type":3441,"url":6226},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3347,"url":6228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3333,"url":6230},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3340,"url":3570},{"type":3333,"url":6233},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[3574,3576],{"id":210,"slug":6236,"dossier":47,"summary":6237,"aliases":6238,"sourceIds":6241,"published":6242,"modified":6243,"checkedAt":7,"severity":6244,"references":6246,"versionKeys":6261,"packageCount":32,"repositoryCount":105},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[6239,6240],"CVE-2026-27024","PYSEC-2026-3013",[210,6240],"2026-02-18T22:40:49Z","2026-09-10T03:50:34.616221084Z",[6245],{"type":3329,"score":4521},[6247,6249,6251,6253,6255,6256,6258,6259],{"type":3333,"url":6248},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3347,"url":6250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3333,"url":6252},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3333,"url":6254},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3340,"url":3341},{"type":3333,"url":6257},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3340,"url":3345},{"type":3347,"url":6260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3352,3353],{"id":211,"slug":6263,"dossier":47,"summary":6264,"aliases":6265,"sourceIds":6268,"published":6269,"modified":6270,"checkedAt":7,"severity":6271,"references":6273,"versionKeys":6284,"packageCount":32,"repositoryCount":32},"ghsa-9f4q-q82q-4359-c9ca91c1","Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks",[6266,6267],"CVE-2026-31248","PYSEC-2026-2454",[211,6267],"2026-05-11T18:31:44Z","2026-07-13T16:43:41.210892318Z",[6272],{"type":3366,"score":3501},[6274,6276,6278,6280,6282],{"type":3347,"url":6275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31248",{"type":3340,"url":6277},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling",{"type":3333,"url":6279},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31248-35d1e1393188818585b2ce3b9ce24686",{"type":3340,"url":6281},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling",{"type":3347,"url":6283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9f4q-q82q-4359",[6285],"pypi:docling@2.58.0",{"id":212,"slug":6287,"dossier":47,"summary":6288,"aliases":6289,"sourceIds":6292,"published":6293,"modified":6294,"checkedAt":7,"severity":6295,"references":6298,"versionKeys":6313,"packageCount":32,"repositoryCount":674},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[6290,6291],"CVE-2025-66416","PYSEC-2026-1617",[212,6291],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[6296],{"type":3329,"score":6297},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6299,6301,6303,6305,6307,6309,6311],{"type":3333,"url":6300},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3347,"url":6302},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3333,"url":6304},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3347,"url":6306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3340,"url":6308},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3333,"url":6310},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3340,"url":6312},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[6314,6315,6316],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0",{"id":213,"slug":6318,"dossier":47,"summary":6319,"aliases":6320,"sourceIds":6323,"published":6324,"modified":6325,"checkedAt":7,"severity":6326,"references":6329,"versionKeys":6348,"packageCount":32,"repositoryCount":608},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[6321,6322],"CVE-2024-47081","PYSEC-2026-1872",[213,6322],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[6327],{"type":3366,"score":6328},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6330,6332,6334,6336,6338,6340,6342,6344,6346],{"type":3333,"url":6331},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3347,"url":6333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3333,"url":6335},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3404,"url":6337},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3340,"url":6339},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3333,"url":6341},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3333,"url":6343},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":3340,"url":6345},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3347,"url":6347},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[6349,6350],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":214,"slug":6352,"dossier":90,"summary":6353,"aliases":6354,"sourceIds":6358,"published":6359,"modified":6360,"checkedAt":7,"severity":6361,"references":6363,"versionKeys":6376,"packageCount":32,"repositoryCount":588},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[6355,6356,6357],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[214,6357],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[6362],{"type":3366,"score":3501},[6364,6366,6368,6370,6372,6374,6375],{"type":3441,"url":6365},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3347,"url":6367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3404,"url":6369},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3404,"url":6371},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3333,"url":6373},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3340,"url":4114},{"type":3347,"url":5063},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":215,"slug":6378,"dossier":47,"summary":6379,"aliases":6380,"sourceIds":6382,"published":6383,"modified":6384,"checkedAt":7,"severity":6385,"references":6388,"versionKeys":6397,"packageCount":32,"repositoryCount":105},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[6381],"CVE-2026-102266",[215],"2026-09-29T23:43:19Z","2026-09-30T00:00:04.438003579Z",[6386],{"type":3366,"score":6387},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6389,6391,6393,6395,6396],{"type":3333,"url":6390},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":3347,"url":6392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":3333,"url":6394},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":3340,"url":3570},{"type":3333,"url":3572},[3575],{"id":216,"slug":6399,"dossier":47,"summary":6400,"aliases":6401,"sourceIds":6404,"published":6405,"modified":6406,"checkedAt":7,"severity":6407,"references":6409,"versionKeys":6424,"packageCount":32,"repositoryCount":105},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[6402,6403],"CVE-2026-28804","PYSEC-2026-3014",[216,6403],"2026-03-02T22:03:45Z","2026-09-10T03:50:38.603469156Z",[6408],{"type":3329,"score":3900},[6410,6412,6414,6416,6418,6419,6421,6422],{"type":3333,"url":6411},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3347,"url":6413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3333,"url":6415},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3333,"url":6417},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3340,"url":3341},{"type":3333,"url":6420},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3340,"url":3345},{"type":3347,"url":6423},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3352,3353],{"id":217,"slug":6426,"dossier":47,"summary":6427,"aliases":6428,"sourceIds":6431,"published":6432,"modified":6433,"checkedAt":7,"severity":6434,"references":6436,"versionKeys":6450,"packageCount":32,"repositoryCount":105},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[6429,6430],"CVE-2026-27026","PYSEC-2026-3015",[217,6430],"2026-02-18T22:41:24Z","2026-09-10T03:50:34.680998937Z",[6435],{"type":3329,"score":4521},[6437,6439,6441,6443,6445,6446,6447,6448],{"type":3333,"url":6438},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3347,"url":6440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3333,"url":6442},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3333,"url":6444},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3340,"url":3341},{"type":3333,"url":6257},{"type":3340,"url":3345},{"type":3347,"url":6449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3352,3353],{"id":218,"slug":6452,"dossier":47,"summary":6453,"aliases":6454,"sourceIds":6456,"published":6457,"modified":6458,"checkedAt":7,"severity":6459,"references":6461,"versionKeys":6470,"packageCount":32,"repositoryCount":3577},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[6455],"CVE-2026-102267",[218],"2026-09-29T23:15:00Z","2026-09-29T23:30:03.872305369Z",[6460],{"type":3366,"score":6387},[6462,6464,6466,6468,6469],{"type":3333,"url":6463},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":3347,"url":6465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":3333,"url":6467},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":3340,"url":3570},{"type":3333,"url":3572},[3574,3575,3576],{"id":219,"slug":6472,"dossier":47,"summary":6473,"aliases":6474,"sourceIds":6477,"published":6478,"modified":6479,"checkedAt":7,"severity":6480,"references":6483,"versionKeys":6500,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[6475,6476],"CVE-2024-35195","PYSEC-2026-1873",[219,6476],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[6481],{"type":3366,"score":6482},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6484,6486,6488,6490,6492,6493,6495,6497,6498],{"type":3333,"url":6485},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3347,"url":6487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3333,"url":6489},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3404,"url":6491},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3340,"url":6339},{"type":3333,"url":6494},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3333,"url":6496},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3340,"url":6345},{"type":3347,"url":6499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[6349],{"id":220,"slug":6502,"dossier":47,"summary":6503,"aliases":6504,"sourceIds":6507,"published":6508,"modified":6509,"checkedAt":7,"severity":6510,"references":6514,"versionKeys":6520,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[6505,6506],"CVE-2026-54280","PYSEC-2026-2113",[220,6506],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[6511,6513],{"type":3329,"score":6512},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":3501},[6515,6517,6519],{"type":3347,"url":6516},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3404,"url":6518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":221,"slug":6522,"dossier":47,"summary":6523,"aliases":6524,"sourceIds":6526,"published":6527,"modified":6528,"checkedAt":7,"severity":6529,"references":6533,"versionKeys":6545,"packageCount":32,"repositoryCount":32},"ghsa-c39v-8hrw-h448-85b2a8cc","Chainlit contains a session hijacking vulnerability",[6525],"CVE-2026-56104",[221],"2026-06-22T18:34:16Z","2026-09-21T22:30:12.894277651Z",[6530,6531],{"type":3366,"score":6387},{"type":3329,"score":6532},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6534,6536,6538,6540,6541,6543],{"type":3347,"url":6535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-56104",{"type":3333,"url":6537},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2857",{"type":3333,"url":6539},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F5effb664f1e0af4a4f0a42fe63ea979676039a7f",{"type":3340,"url":3539},{"type":3333,"url":6542},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.10.1",{"type":3333,"url":6544},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-session-hijacking-via-websocket-session-restoration",[3551],{"id":222,"slug":6547,"dossier":47,"summary":6548,"aliases":6549,"sourceIds":6552,"published":6553,"modified":6554,"checkedAt":7,"severity":6555,"references":6559,"versionKeys":6570,"packageCount":32,"repositoryCount":3656},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[6550,6551],"CVE-2026-34525","PYSEC-2026-2103",[222,6551],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[6556,6558],{"type":3329,"score":6557},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3366,"score":3644},[6560,6562,6564,6566,6568,6569],{"type":3404,"url":6561},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3347,"url":6563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3404,"url":6565},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3404,"url":6567},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":223,"slug":6572,"dossier":47,"summary":6573,"aliases":6574,"sourceIds":6578,"published":6579,"modified":6580,"checkedAt":7,"severity":6581,"references":6586,"versionKeys":6602,"packageCount":32,"repositoryCount":105},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[6575,6576,6577],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[223],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[6582,6584],{"type":3366,"score":6583},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3329,"score":6585},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6587,6589,6591,6593,6594,6596,6598,6600],{"type":3347,"url":6588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":3333,"url":6590},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":3333,"url":6592},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":3340,"url":3774},{"type":3333,"url":6595},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":3333,"url":6597},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":3333,"url":6599},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":3333,"url":6601},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3786,3787],{"id":224,"slug":6604,"dossier":47,"summary":6605,"aliases":6606,"sourceIds":6609,"published":6610,"modified":6611,"checkedAt":7,"severity":6612,"references":6614,"versionKeys":6626,"packageCount":32,"repositoryCount":608},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[6607,6608],"CVE-2025-67725","PYSEC-2025-266",[224,6608],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[6613],{"type":3366,"score":3501},[6615,6617,6619,6621,6623,6624],{"type":3347,"url":6616},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3347,"url":6618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3404,"url":6620},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3333,"url":6622},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3340,"url":4052},{"type":3347,"url":6625},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[4060,4061,4062],{"id":225,"slug":6628,"dossier":47,"summary":6629,"aliases":6630,"sourceIds":6634,"published":6635,"modified":6636,"checkedAt":7,"severity":6637,"references":6641,"versionKeys":6679,"packageCount":32,"repositoryCount":4509},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[6631,6632,6633],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[225,6633],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[6638,6640],{"type":3329,"score":6639},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3366,"score":3501},[6642,6644,6646,6648,6650,6652,6653,6655,6657,6659,6660,6662,6664,6666,6667,6669,6671,6673,6675,6677],{"type":3333,"url":6643},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3347,"url":6645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3333,"url":6647},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3333,"url":6649},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3333,"url":6651},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3340,"url":4114},{"type":3333,"url":6654},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3333,"url":6656},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3333,"url":6658},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3347,"url":3868},{"type":3347,"url":6661},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3347,"url":6663},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3347,"url":6665},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3347,"url":4153},{"type":3347,"url":6668},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3347,"url":6670},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3347,"url":6672},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3347,"url":6674},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3347,"url":6676},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3347,"url":6678},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4118,4119,4120,4121,4122,4123,4124],{"id":226,"slug":6681,"dossier":47,"summary":6682,"aliases":6683,"sourceIds":6686,"published":6687,"modified":6688,"checkedAt":7,"severity":6689,"references":6691,"versionKeys":6702,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[6684,6685],"CVE-2026-48802","PYSEC-2026-3032",[226,6685],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[6690],{"type":3366,"score":3501},[6692,6694,6696,6698,6700],{"type":3333,"url":6693},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3340,"url":6695},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":3340,"url":6697},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":3347,"url":6699},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3347,"url":6701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[6703],"pypi:python-engineio@4.12.3",{"id":227,"slug":6705,"dossier":47,"summary":6706,"aliases":6707,"sourceIds":6710,"published":6711,"modified":6712,"checkedAt":7,"severity":6713,"references":6715,"versionKeys":6727,"packageCount":32,"repositoryCount":105},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[6708,6709],"CVE-2026-48155","PYSEC-2026-3016",[227,6709],"2026-06-12T18:29:15Z","2026-09-10T03:51:08.468487559Z",[6714],{"type":3329,"score":3330},[6716,6718,6720,6722,6723,6724,6725],{"type":3333,"url":6717},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3347,"url":6719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3333,"url":6721},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3340,"url":3341},{"type":3333,"url":3381},{"type":3340,"url":3345},{"type":3347,"url":6726},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3352,3353],{"id":228,"slug":6729,"dossier":47,"summary":6730,"aliases":6731,"sourceIds":6734,"published":6735,"modified":6736,"checkedAt":7,"severity":6737,"references":6740,"versionKeys":6757,"packageCount":32,"repositoryCount":32},"ghsa-cjqg-rq2h-2fvj-04722096","Docling: Unsafe Zip Extraction in EasyOCR Model Download",[6732,6733],"CVE-2026-44017","PYSEC-2026-2143",[228,6733],"2026-06-03T20:02:42Z","2026-08-28T18:45:06.860507459Z",[6738],{"type":3366,"score":6739},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6741,6743,6745,6746,6748,6750,6751,6753,6755],{"type":3404,"url":6742},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cjqg-rq2h-2fvj",{"type":3347,"url":6744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44017",{"type":3333,"url":5896},{"type":3333,"url":6747},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44017",{"type":3767,"url":6749},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492448",{"type":3340,"url":6277},{"type":3347,"url":6752},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.91.0",{"type":3333,"url":6754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2143.yaml",{"type":3333,"url":6756},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44017.json",[6285],{"id":229,"slug":6759,"dossier":47,"summary":6760,"aliases":6761,"sourceIds":6764,"published":6765,"modified":6766,"checkedAt":7,"severity":6767,"references":6770,"versionKeys":6787,"packageCount":32,"repositoryCount":105},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[6762,6763],"CVE-2025-27516","PYSEC-2026-1471",[229,6763],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[6768],{"type":3329,"score":6769},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6771,6773,6775,6777,6779,6781,6783,6785],{"type":3333,"url":6772},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3347,"url":6774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3404,"url":6776},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3340,"url":6778},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3333,"url":6780},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3333,"url":6782},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3340,"url":6784},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3347,"url":6786},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[6788,6789],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":230,"slug":6791,"dossier":47,"summary":6792,"aliases":6793,"sourceIds":6796,"published":6797,"modified":6798,"checkedAt":7,"severity":6799,"references":6802,"versionKeys":6817,"packageCount":32,"repositoryCount":103},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[6794,6795],"CVE-2026-69244","PYSEC-2026-3545",[230,6795],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[6800],{"type":3329,"score":6801},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6803,6805,6807,6809,6810,6812,6813,6815],{"type":3333,"url":6804},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3333,"url":6806},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3333,"url":6808},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3340,"url":3506},{"type":3333,"url":6811},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3340,"url":4583},{"type":3347,"url":6814},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3347,"url":6816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3510,3511,3512,3513,3514,3515,3516,3517,3518,6818],"pypi:aiohttp@3.14.1",{"id":231,"slug":6820,"dossier":47,"summary":6821,"aliases":6822,"sourceIds":6825,"published":6826,"modified":6827,"checkedAt":7,"severity":6828,"references":6830,"versionKeys":6839,"packageCount":32,"repositoryCount":32},"ghsa-cr42-rg2m-mq4q-72336d81","Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks",[6823,6824],"CVE-2026-31247","PYSEC-2026-2455",[231,6824],"2026-05-11T18:31:43Z","2026-07-13T16:43:07.440539926Z",[6829],{"type":3366,"score":3501},[6831,6833,6834,6836,6837],{"type":3347,"url":6832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31247",{"type":3340,"url":6277},{"type":3333,"url":6835},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31247-35d1e1393188818fa654c116c6a470bb",{"type":3340,"url":6281},{"type":3347,"url":6838},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cr42-rg2m-mq4q",[6285],{"id":232,"slug":6841,"dossier":47,"summary":6842,"aliases":6843,"sourceIds":6846,"published":6847,"modified":6848,"checkedAt":7,"severity":6849,"references":6856,"versionKeys":6869,"packageCount":32,"repositoryCount":32},"ghsa-cv22-g7mw-8v73-34774163","NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure",[6844,6845],"CVE-2026-71514","PYSEC-2026-3790",[232,6845],"2026-08-22T14:16:33.560Z","2026-09-10T11:15:08.990306396Z",[6850,6852,6854],{"type":3366,"score":6851},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3329,"score":6853},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3366,"score":6855},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6857,6859,6861,6862,6864,6865,6867],{"type":3347,"url":6858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71514",{"type":3404,"url":6860},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F10d34b3f4fe3fec74b76527a409eb0acbac2e8ab",{"type":3340,"url":3939},{"type":3404,"url":6863},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fcorpus\u002Freader\u002Fcrubadan.py#L90-L98",{"type":3333,"url":3941},{"type":3347,"url":6866},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-path-traversal-via-crubadancorpusreader-pathsec-bypass",{"type":3347,"url":6868},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cv22-g7mw-8v73",[3947],{"id":233,"slug":6871,"dossier":47,"summary":6872,"aliases":6873,"sourceIds":6876,"published":6877,"modified":6878,"checkedAt":7,"severity":6879,"references":6884,"versionKeys":6897,"packageCount":32,"repositoryCount":3577},"ghsa-cw6x-m8jw-qmrh-dd458a88","NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input",[6874,6875],"CVE-2026-81724","PYSEC-2026-3739",[233,6875],"2026-08-27T17:21:03.100Z","2026-09-10T03:51:15.361788366Z",[6880,6881,6882],{"type":3366,"score":3466},{"type":3329,"score":3900},{"type":3329,"score":6883},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6885,6887,6889,6891,6892,6893,6895],{"type":3441,"url":6886},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-cw6x-m8jw-qmrh",{"type":3347,"url":6888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81724",{"type":3333,"url":6890},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43c7b78cc8ea37e5cd3a129e27e32c415ea21cf1",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":6894},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3739.yaml",{"type":3347,"url":6896},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-denial-of-service-via-uncontrolled-recursion",[3947,3948,3949],{"id":234,"slug":6899,"dossier":47,"summary":6900,"aliases":6901,"sourceIds":6904,"published":6905,"modified":6906,"checkedAt":7,"severity":6907,"references":6910,"versionKeys":6921,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[6902,6903],"CVE-2026-49854","PYSEC-2026-3388",[234,6903],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[6908],{"type":3366,"score":6909},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6911,6913,6914,6916,6917,6919],{"type":3333,"url":6912},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3340,"url":4052},{"type":3333,"url":6915},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3340,"url":4054},{"type":3347,"url":6918},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3347,"url":6920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[4060,4061,4062,4063,4064],{"id":235,"slug":6923,"dossier":47,"summary":6924,"aliases":6925,"sourceIds":6929,"published":6930,"modified":6931,"checkedAt":7,"severity":6932,"references":6936,"versionKeys":6952,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[6926,6927,6928],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[235,6928],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[6933,6934],{"type":3366,"score":4745},{"type":3329,"score":6935},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6937,6939,6941,6943,6944,6946,6948,6950],{"type":3347,"url":6938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3333,"url":6940},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3333,"url":6942},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3340,"url":4872},{"type":3333,"url":6945},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3333,"url":6947},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3340,"url":6949},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3347,"url":6951},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4878],{"id":236,"slug":6954,"dossier":47,"summary":6955,"aliases":6956,"sourceIds":6959,"published":6960,"modified":6961,"checkedAt":7,"severity":6962,"references":6964,"versionKeys":6979,"packageCount":32,"repositoryCount":105},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[6957,6958],"CVE-2026-28351","PYSEC-2026-3017",[236,6958],"2026-02-28T02:46:10Z","2026-09-10T03:50:34.825129703Z",[6963],{"type":3329,"score":3900},[6965,6967,6969,6971,6973,6974,6976,6977],{"type":3333,"url":6966},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3347,"url":6968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3333,"url":6970},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3333,"url":6972},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3340,"url":3341},{"type":3333,"url":6975},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3340,"url":3345},{"type":3347,"url":6978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3352,3353],{"id":237,"slug":6981,"dossier":47,"summary":6982,"aliases":6983,"sourceIds":6987,"published":6988,"modified":6989,"checkedAt":7,"severity":6990,"references":6994,"versionKeys":7012,"packageCount":32,"repositoryCount":105},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[6984,6985,6986],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[237],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[6991,6992],{"type":3366,"score":4463},{"type":3329,"score":6993},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6995,6997,6999,7001,7003,7005,7006,7008,7010],{"type":3347,"url":6996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":3333,"url":6998},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":3333,"url":7000},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":3333,"url":7002},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":3333,"url":7004},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":3340,"url":3774},{"type":3333,"url":7007},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":3333,"url":7009},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":3333,"url":7011},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3786,3787],{"id":238,"slug":7014,"dossier":47,"summary":7015,"aliases":7016,"sourceIds":7019,"published":7020,"modified":7021,"checkedAt":7,"severity":7022,"references":7029,"versionKeys":7044,"packageCount":32,"repositoryCount":3577},"ghsa-f794-5jv7-7672-f614e21f","NLTK: Downloader.download follows hardlinks and overwrites outside-root files",[7017,7018],"CVE-2026-81727","PYSEC-2026-3741",[238,7018],"2026-08-27T17:21:03.533Z","2026-09-10T03:51:15.298800760Z",[7023,7025,7027],{"type":3366,"score":7024},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3329,"score":7026},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":7028},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7030,7032,7034,7036,7038,7039,7040,7042],{"type":3441,"url":7031},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f794-5jv7-7672",{"type":3347,"url":7033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81727",{"type":3333,"url":7035},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3797",{"type":3333,"url":7037},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9e6d5f05902b9aaa1221a0a565448d17a9c9b3e8",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":7041},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3741.yaml",{"type":3347,"url":7043},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-hardlink-file-overwrite-via-downloader",[3947,3948,3949],{"id":239,"slug":7046,"dossier":47,"summary":7047,"aliases":7048,"sourceIds":7051,"published":7052,"modified":7053,"checkedAt":7,"severity":7054,"references":7058,"versionKeys":7073,"packageCount":32,"repositoryCount":32},"ghsa-f833-7jw8-xwrv-24f4d846","NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)",[7049,7050],"CVE-2026-62384","PYSEC-2026-3789",[239,7050],"2026-08-22T15:16:18.700Z","2026-09-08T16:45:03.613881599Z",[7055,7056,7057],{"type":3366,"score":4629},{"type":3329,"score":5431},{"type":3329,"score":5433},[7059,7061,7063,7065,7067,7068,7069,7071],{"type":3441,"url":7060},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f833-7jw8-xwrv",{"type":3347,"url":7062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62384",{"type":3333,"url":7064},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3726",{"type":3333,"url":7066},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F736d3212a47de2005b85b785dde6720556d3925d",{"type":3340,"url":3939},{"type":3333,"url":4008},{"type":3333,"url":7070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3789.yaml",{"type":3347,"url":7072},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-framenetcorpusreader-symlink-sandbox-bypass-before",[3947],{"id":240,"slug":7075,"dossier":47,"summary":7076,"aliases":7077,"sourceIds":7080,"published":7081,"modified":7082,"checkedAt":7,"severity":7083,"references":7087,"versionKeys":7098,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[7078,7079],"CVE-2024-47874","PYSEC-2026-1943",[240,7079],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[7084,7086],{"type":3366,"score":7085},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3329,"score":4695},[7088,7090,7092,7094,7095,7096],{"type":3333,"url":7089},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3347,"url":7091},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3404,"url":7093},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3340,"url":3475},{"type":3340,"url":3481},{"type":3347,"url":7097},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3485],{"id":241,"slug":7100,"dossier":47,"summary":7101,"aliases":7102,"sourceIds":7105,"published":7106,"modified":7107,"checkedAt":7,"severity":7108,"references":7110,"versionKeys":7125,"packageCount":32,"repositoryCount":674},"ghsa-fc8x-2rww-xw9m-a14a13c8","pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace",[7103,7104],"CVE-2026-82398","PYSEC-2026-3912",[241,7104],"2026-09-02T14:38:12Z","2026-09-10T12:25:53.327187326Z",[7109],{"type":3329,"score":3900},[7111,7113,7115,7117,7119,7120,7122,7123],{"type":3333,"url":7112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",{"type":3347,"url":7114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82398",{"type":3333,"url":7116},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3947",{"type":3333,"url":7118},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F4959848e057e37c218dccad7465259210923faaa",{"type":3340,"url":3341},{"type":3333,"url":7121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3340,"url":3345},{"type":3347,"url":7124},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",[3352,3353,3354],{"id":242,"slug":7127,"dossier":47,"summary":7128,"aliases":7129,"sourceIds":7132,"published":7133,"modified":7134,"checkedAt":7,"severity":7135,"references":7137,"versionKeys":7151,"packageCount":32,"repositoryCount":3577},"ghsa-ff5c-cp5c-9wjf-c6e516dd","NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars",[7130,7131],"CVE-2026-12876","PYSEC-2026-3869",[242,7131],"2026-09-02T14:33:38Z","2026-09-10T12:25:59.672261950Z",[7136],{"type":3329,"score":3900},[7138,7140,7142,7144,7145,7146,7147,7149],{"type":3333,"url":7139},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3333,"url":7141},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3649",{"type":3333,"url":7143},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43aaca1b9024138421c97f970bf13ee19ac8129d",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3340,"url":4759},{"type":3347,"url":7148},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3347,"url":7150},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12876",[3947,3948,3949],{"id":243,"slug":7153,"dossier":47,"summary":7154,"aliases":7155,"sourceIds":7157,"published":7158,"modified":7159,"checkedAt":7,"severity":7160,"references":7163,"versionKeys":7172,"packageCount":32,"repositoryCount":3577},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[7156],"CVE-2026-102268",[243],"2026-09-29T23:17:33Z","2026-09-29T23:30:03.866776038Z",[7161],{"type":3366,"score":7162},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7164,7166,7168,7170,7171],{"type":3333,"url":7165},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":3347,"url":7167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":3333,"url":7169},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":3340,"url":3570},{"type":3333,"url":3572},[3574,3575,3576],{"id":244,"slug":7174,"dossier":47,"summary":7175,"aliases":7176,"sourceIds":7179,"published":7180,"modified":7181,"checkedAt":7,"severity":7182,"references":7184,"versionKeys":7193,"packageCount":32,"repositoryCount":34},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[7177,7178],"CVE-2026-12061","PYSEC-2026-3582",[244,7178],"2026-07-31T16:51:09Z","2026-09-10T03:50:51.940502717Z",[7183],{"type":3366,"score":3501},[7185,7187,7188,7189,7191],{"type":3333,"url":7186},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3340,"url":3939},{"type":3340,"url":4759},{"type":3347,"url":7190},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3347,"url":7192},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3948,3949],{"id":245,"slug":7195,"dossier":47,"summary":7196,"aliases":7197,"sourceIds":7200,"published":7201,"modified":7202,"checkedAt":7,"severity":7203,"references":7208,"versionKeys":7231,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[7198,7199],"CVE-2026-5241","PYSEC-2026-2290",[245,7199],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[7204,7206],{"type":3366,"score":7205},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":3366,"score":7207},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7209,7211,7213,7215,7216,7218,7220,7222,7223,7225,7227,7229],{"type":3347,"url":7210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":3404,"url":7212},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":3347,"url":7214},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3347,"url":4155},{"type":3333,"url":7217},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3333,"url":7219},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3767,"url":7221},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":3340,"url":3439},{"type":3333,"url":7224},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":3441,"url":7226},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":3333,"url":7228},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":3347,"url":7230},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[3446,3447,3448,3449,3450,3451,3452,3453,3454],{"id":246,"slug":7233,"dossier":47,"summary":7234,"aliases":7235,"sourceIds":7238,"published":7239,"modified":7240,"checkedAt":7,"severity":7241,"references":7244,"versionKeys":7255,"packageCount":32,"repositoryCount":608},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[7236,7237],"CVE-2025-69230","PYSEC-2026-1105",[246,7237],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[7242],{"type":3329,"score":7243},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7245,7247,7249,7251,7252,7253],{"type":3333,"url":7246},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3347,"url":7248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3404,"url":7250},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":7254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3510,3511,3512,3513,3514,3515,3516],{"id":247,"slug":7257,"dossier":47,"summary":7258,"aliases":7259,"sourceIds":7262,"published":7263,"modified":7264,"checkedAt":7,"severity":7265,"references":7268,"versionKeys":7278,"packageCount":32,"repositoryCount":674},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[7260,7261],"CVE-2026-48524","PYSEC-2026-177",[247,7261],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[7266],{"type":3366,"score":7267},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7269,7271,7273,7275,7276],{"type":3347,"url":7270},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3347,"url":7272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3333,"url":7274},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3340,"url":3570},{"type":3333,"url":7277},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[3574,3576],{"id":248,"slug":7280,"dossier":90,"summary":7281,"aliases":7282,"sourceIds":7286,"published":7287,"modified":7288,"checkedAt":7,"severity":7289,"references":7292,"versionKeys":7306,"packageCount":32,"repositoryCount":588},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[7283,7284,7285],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[248,7285],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[7290],{"type":3366,"score":7291},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[7293,7295,7297,7299,7301,7302,7303,7304],{"type":3333,"url":7294},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3347,"url":7296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3333,"url":7298},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3333,"url":7300},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3340,"url":4114},{"type":3333,"url":5063},{"type":3340,"url":5065},{"type":3347,"url":7305},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":249,"slug":7308,"dossier":47,"summary":7309,"aliases":7310,"sourceIds":7313,"published":7314,"modified":7315,"checkedAt":7,"severity":7316,"references":7318,"versionKeys":7332,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[7311,7312],"CVE-2024-21503","PYSEC-2024-48",[249,7312],"2024-03-19T05:15:00Z","2026-09-10T03:50:10.486429507Z",[7317],{"type":3366,"score":3466},[7319,7321,7323,7324,7326,7328,7330],{"type":3347,"url":7320},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":3404,"url":7322},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":3340,"url":3878},{"type":3333,"url":7325},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":3333,"url":7327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":3333,"url":7329},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":3347,"url":7331},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[3886],{"id":250,"slug":7334,"dossier":47,"summary":7335,"aliases":7336,"sourceIds":7339,"published":7340,"modified":7341,"checkedAt":7,"severity":7342,"references":7344,"versionKeys":7358,"packageCount":32,"repositoryCount":674},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[7337,7338],"CVE-2026-71870","PYSEC-2026-3655",[250,7338],"2026-08-07T19:29:09Z","2026-09-10T03:51:13.982103349Z",[7343],{"type":3329,"score":3330},[7345,7347,7349,7351,7352,7353,7354,7356],{"type":3333,"url":7346},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3333,"url":7348},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3333,"url":7350},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3340,"url":3341},{"type":3333,"url":7121},{"type":3340,"url":3345},{"type":3347,"url":7355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3347,"url":7357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3352,3353,3354],{"id":251,"slug":7360,"dossier":47,"summary":5362,"aliases":7361,"sourceIds":7364,"published":7365,"modified":7366,"checkedAt":7,"severity":7367,"references":7370,"versionKeys":7381,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[7362,7363],"CVE-2025-1194","PYSEC-2026-1984",[251,7363],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[7368],{"type":3366,"score":7369},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7371,7373,7375,7376,7378,7379],{"type":3347,"url":7372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":3333,"url":7374},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":3340,"url":3439},{"type":3333,"url":7377},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":3340,"url":3811},{"type":3347,"url":7380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[3446],{"id":252,"slug":7383,"dossier":47,"summary":7384,"aliases":7385,"sourceIds":7388,"published":7389,"modified":7390,"checkedAt":7,"severity":7391,"references":7393,"versionKeys":7407,"packageCount":32,"repositoryCount":674},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[7386,7387],"CVE-2026-71852","PYSEC-2026-3656",[252,7387],"2026-08-07T18:54:00Z","2026-09-10T03:51:13.932861945Z",[7392],{"type":3329,"score":3330},[7394,7396,7398,7400,7401,7402,7403,7405],{"type":3333,"url":7395},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3333,"url":7397},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3333,"url":7399},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3340,"url":3341},{"type":3333,"url":7121},{"type":3340,"url":3345},{"type":3347,"url":7404},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3347,"url":7406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3352,3353,3354],{"id":253,"slug":7409,"dossier":47,"summary":7410,"aliases":7411,"sourceIds":7414,"published":7415,"modified":7416,"checkedAt":7,"severity":7417,"references":7420,"versionKeys":7426,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[7412,7413],"CVE-2026-54278","PYSEC-2026-2111",[253,7413],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[7418,7419],{"type":3329,"score":4223},{"type":3366,"score":3501},[7421,7423,7424],{"type":3347,"url":7422},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3340,"url":3506},{"type":3404,"url":7425},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":254,"slug":7428,"dossier":47,"summary":7429,"aliases":7430,"sourceIds":7433,"published":7434,"modified":7435,"checkedAt":7,"severity":7436,"references":7439,"versionKeys":7458,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[7431,7432],"CVE-2024-34062","PYSEC-2026-1976",[254,7432],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[7437],{"type":3366,"score":7438},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7440,7442,7444,7446,7448,7450,7452,7454,7456],{"type":3333,"url":7441},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3347,"url":7443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3333,"url":7445},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3340,"url":7447},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3333,"url":7449},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3333,"url":7451},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3333,"url":7453},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3340,"url":7455},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3347,"url":7457},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[7459],"pypi:tqdm@4.66.2",{"id":255,"slug":7461,"dossier":47,"summary":7462,"aliases":7463,"sourceIds":7466,"published":7467,"modified":7468,"checkedAt":7,"severity":7469,"references":7471,"versionKeys":7484,"packageCount":32,"repositoryCount":608},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[7464,7465],"CVE-2025-69229","PYSEC-2026-1106",[255,7465],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[7470],{"type":3329,"score":4223},[7472,7474,7476,7478,7480,7481,7482],{"type":3333,"url":7473},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3347,"url":7475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3333,"url":7477},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3333,"url":7479},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":7483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3510,3511,3512,3513,3514,3515,3516],{"id":256,"slug":7486,"dossier":47,"summary":7487,"aliases":7488,"sourceIds":7491,"published":7492,"modified":7493,"checkedAt":7,"severity":7494,"references":7496,"versionKeys":7511,"packageCount":32,"repositoryCount":105},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[7489,7490],"CVE-2026-59935","PYSEC-2026-3613",[256,7490],"2026-07-23T16:37:07Z","2026-09-10T03:50:51.957724392Z",[7495],{"type":3329,"score":4695},[7497,7499,7501,7503,7505,7506,7508,7509],{"type":3333,"url":7498},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3347,"url":7500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3333,"url":7502},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3333,"url":7504},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3340,"url":3341},{"type":3333,"url":7507},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3340,"url":3345},{"type":3347,"url":7510},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3352,3353],{"id":257,"slug":7513,"dossier":47,"summary":7514,"aliases":7515,"sourceIds":7518,"published":7519,"modified":7520,"checkedAt":7,"severity":7521,"references":7523,"versionKeys":7536,"packageCount":32,"repositoryCount":105},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[7516,7517],"CVE-2026-54651","PYSEC-2026-3018",[257,7517],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[7522],{"type":3329,"score":4521},[7524,7526,7528,7530,7531,7533,7534],{"type":3333,"url":7525},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3347,"url":7527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3333,"url":7529},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3340,"url":3341},{"type":3333,"url":7532},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3340,"url":3345},{"type":3347,"url":7535},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3352,3353],{"id":258,"slug":7538,"dossier":90,"summary":7539,"aliases":7540,"sourceIds":7543,"published":7544,"modified":7545,"checkedAt":7,"severity":7546,"references":7551,"versionKeys":7561,"packageCount":32,"repositoryCount":7564},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[7541,7542],"CVE-2026-25645","PYSEC-2026-2275",[258,7542],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[7547,7549],{"type":3366,"score":7548},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3366,"score":7550},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[7552,7554,7556,7558,7559],{"type":3347,"url":7553},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3347,"url":7555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3404,"url":7557},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3340,"url":6339},{"type":3347,"url":7560},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[6349,6350,7562,7563],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":259,"slug":7566,"dossier":47,"summary":7567,"aliases":7568,"sourceIds":7571,"published":7572,"modified":7573,"checkedAt":7,"severity":7574,"references":7577,"versionKeys":7587,"packageCount":32,"repositoryCount":34},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[7569,7570],"CVE-2026-33230","PYSEC-2026-2235",[259,7570],"2026-03-18T20:23:33Z","2026-09-10T03:50:39.207692385Z",[7575],{"type":3366,"score":7576},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[7578,7580,7582,7584,7586],{"type":3441,"url":7579},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3347,"url":7581},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3404,"url":7583},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3404,"url":7585},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3340,"url":3939},[3948,3949],{"id":260,"slug":7589,"dossier":47,"summary":7590,"aliases":7591,"sourceIds":7593,"published":7594,"modified":7595,"checkedAt":7,"severity":7596,"references":7598,"versionKeys":7608,"packageCount":32,"repositoryCount":637},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[7592],"CVE-2026-86000",[260],"2026-09-17T20:32:58Z","2026-09-17T20:45:06.589610839Z",[7597],{"type":3366,"score":3466},[7599,7601,7603,7605,7606],{"type":3333,"url":7600},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":3347,"url":7602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":3333,"url":7604},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":3340,"url":3672},{"type":3333,"url":7607},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",[3680,3681,3682,7609],"pypi:soupsieve@2.8.4",{"id":261,"slug":7611,"dossier":47,"summary":7612,"aliases":7613,"sourceIds":7616,"published":7617,"modified":7618,"checkedAt":7,"severity":7619,"references":7621,"versionKeys":7632,"packageCount":32,"repositoryCount":3718},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[7614,7615],"CVE-2025-66418","PYSEC-2026-1998",[261,7615],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[7620],{"type":3329,"score":3694},[7622,7624,7626,7628,7629,7630],{"type":3333,"url":7623},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3347,"url":7625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3404,"url":7627},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3340,"url":3709},{"type":3340,"url":3711},{"type":3347,"url":7631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3713,3714,3715,3716,3717],{"id":262,"slug":7634,"dossier":47,"summary":7635,"aliases":7636,"sourceIds":7639,"published":7640,"modified":7641,"checkedAt":7,"severity":7642,"references":7645,"versionKeys":7660,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[7637,7638],"CVE-2024-56201","PYSEC-2026-1472",[262,7638],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[7643,7644],{"type":3366,"score":4859},{"type":3329,"score":6769},[7646,7648,7650,7652,7654,7655,7657,7658],{"type":3333,"url":7647},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3347,"url":7649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3333,"url":7651},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3404,"url":7653},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3340,"url":6778},{"type":3333,"url":7656},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3340,"url":6784},{"type":3347,"url":7659},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[6788],{"id":263,"slug":7662,"dossier":47,"summary":7663,"aliases":7664,"sourceIds":7667,"published":7668,"modified":7669,"checkedAt":7,"severity":7670,"references":7672,"versionKeys":7685,"packageCount":32,"repositoryCount":105},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[7665,7666],"CVE-2026-44209","PYSEC-2026-2390",[263,7666],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[7671],{"type":3366,"score":6739},[7673,7675,7677,7679,7681,7683],{"type":3333,"url":7674},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":3347,"url":7676},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":3333,"url":7678},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":3340,"url":7680},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":3340,"url":7682},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":3347,"url":7684},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[7686],"pypi:banks@2.2.0",{"id":264,"slug":7688,"dossier":90,"summary":7689,"aliases":7690,"sourceIds":7694,"published":7695,"modified":7696,"checkedAt":7,"severity":7697,"references":7700,"versionKeys":7712,"packageCount":32,"repositoryCount":7564},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[7691,7692,7693],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[264,7693],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[7698],{"type":3366,"score":7699},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7701,7703,7705,7707,7709,7710],{"type":3441,"url":7702},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3347,"url":7704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3404,"url":7706},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3333,"url":7708},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3340,"url":4872},{"type":3347,"url":7711},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4878,4879,4880,4881,7713,7714,7715,7716,7717,7718,7719,7720],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":265,"slug":7722,"dossier":47,"summary":7723,"aliases":7724,"sourceIds":7727,"published":7728,"modified":7729,"checkedAt":7,"severity":7730,"references":7732,"versionKeys":7753,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[7725,7726],"CVE-2024-34064","PYSEC-2026-1474",[265,7726],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[7731],{"type":3366,"score":5537},[7733,7735,7737,7739,7740,7742,7744,7746,7748,7750,7751],{"type":3333,"url":7734},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3347,"url":7736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3404,"url":7738},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3340,"url":6778},{"type":3333,"url":7741},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3333,"url":7743},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3333,"url":7745},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3333,"url":7747},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3333,"url":7749},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3340,"url":6784},{"type":3347,"url":7752},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[6788],{"id":266,"slug":7755,"dossier":47,"summary":7756,"aliases":7757,"sourceIds":7760,"published":7761,"modified":7762,"checkedAt":7,"severity":7763,"references":7766,"versionKeys":7780,"packageCount":32,"repositoryCount":34},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[7758,7759],"CVE-2026-0846","PYSEC-2026-97",[266,7759],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[7764,7765],{"type":3366,"score":5153},{"type":3366,"score":4629},[7767,7769,7771,7773,7774,7776,7778],{"type":3347,"url":7768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3333,"url":7770},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3333,"url":7772},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3340,"url":3939},{"type":3333,"url":7775},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3441,"url":7777},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3347,"url":7779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3948,3949],{"id":267,"slug":7782,"dossier":47,"summary":7783,"aliases":7784,"sourceIds":7787,"published":7788,"modified":7789,"checkedAt":7,"severity":7790,"references":7793,"versionKeys":7802,"packageCount":32,"repositoryCount":3656},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[7785,7786],"CVE-2026-34513","PYSEC-2026-2095",[267,7786],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[7791,7792],{"type":3329,"score":4025},{"type":3366,"score":3501},[7794,7796,7798,7800,7801],{"type":3404,"url":7795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3347,"url":7797},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3404,"url":7799},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":268,"slug":7804,"dossier":47,"summary":7805,"aliases":7806,"sourceIds":7809,"published":7810,"modified":7811,"checkedAt":7,"severity":7812,"references":7816,"versionKeys":7824,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[7807,7808],"CVE-2026-47265","PYSEC-2026-2105",[268,7808],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[7813,7815],{"type":3329,"score":7814},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3366,"score":4629},[7817,7819,7821,7823],{"type":3404,"url":7818},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3347,"url":7820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3404,"url":7822},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":269,"slug":7826,"dossier":47,"summary":7827,"aliases":7828,"sourceIds":7831,"published":7832,"modified":7833,"checkedAt":7,"severity":7834,"references":7838,"versionKeys":7844,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[7829,7830],"CVE-2026-54276","PYSEC-2026-2109",[269,7830],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[7835,7837],{"type":3329,"score":7836},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3366,"score":7576},[7839,7841,7843],{"type":3347,"url":7840},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3404,"url":7842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":270,"slug":7846,"dossier":47,"summary":7847,"aliases":7848,"sourceIds":7851,"published":7852,"modified":7853,"checkedAt":7,"severity":7854,"references":7856,"versionKeys":7871,"packageCount":32,"repositoryCount":105},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[7849,7850],"CVE-2026-31826","PYSEC-2026-3019",[270,7850],"2026-03-11T00:14:02Z","2026-09-10T03:50:39.503255117Z",[7855],{"type":3329,"score":4324},[7857,7859,7861,7863,7865,7866,7868,7869],{"type":3333,"url":7858},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3347,"url":7860},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3333,"url":7862},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3333,"url":7864},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3340,"url":3341},{"type":3333,"url":7867},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3340,"url":3345},{"type":3347,"url":7870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3352,3353],{"id":271,"slug":7873,"dossier":47,"summary":7874,"aliases":7875,"sourceIds":7878,"published":7879,"modified":7880,"checkedAt":7,"severity":7881,"references":7883,"versionKeys":7898,"packageCount":32,"repositoryCount":32},"ghsa-hvfh-5mj3-5f3j-627daf3f","Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access",[7876,7877],"CVE-2026-45019","PYSEC-2026-3811",[271,7877],"2026-08-25T19:21:40Z","2026-09-10T12:25:53.170074650Z",[7882],{"type":3366,"score":5539},[7884,7886,7888,7889,7891,7893,7894,7896],{"type":3333,"url":7885},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3333,"url":7887},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F0565fd0eccb915fce159929598b053ed79f6e0c9",{"type":3340,"url":3539},{"type":3333,"url":7890},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fblob\u002F2.12.0\u002Fdocs\u002Fsecurity-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse",{"type":3333,"url":7892},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.12.0",{"type":3340,"url":3547},{"type":3347,"url":7895},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3347,"url":7897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45019",[3551],{"id":272,"slug":7900,"dossier":47,"summary":7901,"aliases":7902,"sourceIds":7905,"published":7906,"modified":7907,"checkedAt":7,"severity":7908,"references":7910,"versionKeys":7918,"packageCount":32,"repositoryCount":32},"ghsa-hw26-mmpg-fqfg-673c67e1","lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes",[7903,7904],"CVE-2026-28348","PYSEC-2026-2201",[272,7904],"2026-03-02T19:19:15Z","2026-09-10T03:50:39.674211658Z",[7909],{"type":3366,"score":7576},[7911,7913,7915,7917],{"type":3441,"url":7912},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-hw26-mmpg-fqfg",{"type":3347,"url":7914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28348",{"type":3404,"url":7916},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F2ef732667ddbc74ea59847bcf24b75809aaeed3b",{"type":3340,"url":4284},[4292],{"id":273,"slug":7920,"dossier":47,"summary":7921,"aliases":7922,"sourceIds":7924,"published":7925,"modified":7926,"checkedAt":7,"severity":7927,"references":7930,"versionKeys":7939,"packageCount":32,"repositoryCount":3577},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[7923],"CVE-2026-102269",[273],"2026-09-29T23:17:55Z","2026-09-29T23:30:03.865434818Z",[7928],{"type":3366,"score":7929},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7931,7933,7935,7937,7938],{"type":3333,"url":7932},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":3347,"url":7934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":3333,"url":7936},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":3340,"url":3570},{"type":3333,"url":3572},[3574,3575,3576],{"id":274,"slug":7941,"dossier":47,"summary":7942,"aliases":7943,"sourceIds":7946,"published":7947,"modified":7948,"checkedAt":7,"severity":7949,"references":7953,"versionKeys":7969,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[7944,7945],"CVE-2024-11394","PYSEC-2024-229",[274,7945],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[7950,7952],{"type":3366,"score":7951},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3366,"score":4745},[7954,7956,7958,7960,7961,7963,7965,7967],{"type":3347,"url":7955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":3333,"url":7957},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":3333,"url":7959},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":3340,"url":3439},{"type":3333,"url":7962},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":3333,"url":7964},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":3347,"url":7966},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":3347,"url":7968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[3446],{"id":275,"slug":7971,"dossier":47,"summary":7972,"aliases":7973,"sourceIds":7976,"published":7977,"modified":7978,"checkedAt":7,"severity":7979,"references":7981,"versionKeys":7993,"packageCount":32,"repositoryCount":105},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[7974,7975],"CVE-2026-49461","PYSEC-2026-3020",[275,7975],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[7980],{"type":3329,"score":4521},[7982,7984,7986,7987,7988,7989,7991],{"type":3333,"url":7983},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3333,"url":7985},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3340,"url":3341},{"type":3333,"url":4781},{"type":3340,"url":3345},{"type":3347,"url":7990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3347,"url":7992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3352,3353],{"id":276,"slug":7995,"dossier":47,"summary":7996,"aliases":7997,"sourceIds":8000,"published":8001,"modified":8002,"checkedAt":7,"severity":8003,"references":8006,"versionKeys":8019,"packageCount":32,"repositoryCount":32},"ghsa-j5xp-7m2f-49jv-d5b13248","Docling Core: Insufficient validation of image reference URIs",[7998,7999],"CVE-2026-44019","PYSEC-2026-2456",[276,7999],"2026-06-03T21:15:31Z","2026-07-13T16:43:49.284243969Z",[8004],{"type":3366,"score":8005},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8007,8009,8011,8013,8015,8017],{"type":3333,"url":8008},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3340,"url":8010},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core",{"type":3333,"url":8012},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Freleases\u002Ftag\u002Fv2.74.1",{"type":3340,"url":8014},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling-core",{"type":3347,"url":8016},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3347,"url":8018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44019",[8020],"pypi:docling-core@2.49.0",{"id":277,"slug":8022,"dossier":47,"summary":8023,"aliases":8024,"sourceIds":8026,"published":8027,"modified":8028,"checkedAt":7,"severity":8029,"references":8031,"versionKeys":8040,"packageCount":32,"repositoryCount":637},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[8025],"CVE-2026-85999",[277],"2026-09-17T20:32:53Z","2026-09-17T20:45:05.791958465Z",[8030],{"type":3366,"score":3466},[8032,8034,8036,8038,8039],{"type":3333,"url":8033},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":3347,"url":8035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":3333,"url":8037},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":3340,"url":3672},{"type":3333,"url":7607},[3680,3681,3682,7609],{"id":278,"slug":8042,"dossier":47,"summary":8043,"aliases":8044,"sourceIds":8047,"published":8048,"modified":8049,"checkedAt":7,"severity":8050,"references":8052,"versionKeys":8067,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[8045,8046],"CVE-2025-62708","PYSEC-2026-1831",[278,8046],"2025-10-22T19:40:50Z","2026-09-10T03:50:29.885611595Z",[8051],{"type":3329,"score":4223},[8053,8055,8057,8059,8061,8062,8064,8065],{"type":3333,"url":8054},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3347,"url":8056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3333,"url":8058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3333,"url":8060},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3340,"url":3341},{"type":3333,"url":8063},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3340,"url":3345},{"type":3347,"url":8066},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3352],{"id":279,"slug":8069,"dossier":47,"summary":8070,"aliases":8071,"sourceIds":8074,"published":8075,"modified":8076,"checkedAt":7,"severity":8077,"references":8081,"versionKeys":8099,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[8072,8073],"CVE-2026-34993","PYSEC-2026-2104",[279,8073],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[8078,8080],{"type":3366,"score":8079},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3366,"score":3730},[8082,8084,8086,8088,8089,8091,8093,8095,8096,8097],{"type":3404,"url":8083},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3347,"url":8085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3404,"url":8087},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3340,"url":3506},{"type":3333,"url":8090},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3333,"url":8092},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3347,"url":8094},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3347,"url":7214},{"type":3347,"url":4155},{"type":3767,"url":8098},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":280,"slug":8101,"dossier":47,"summary":8102,"aliases":8103,"sourceIds":8106,"published":8107,"modified":8108,"checkedAt":7,"severity":8109,"references":8111,"versionKeys":8121,"packageCount":32,"repositoryCount":608},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[8104,8105],"CVE-2025-67726","PYSEC-2025-267",[280,8105],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[8110],{"type":3366,"score":3501},[8112,8114,8116,8117,8119,8120],{"type":3347,"url":8113},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3347,"url":8115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3404,"url":6620},{"type":3333,"url":8118},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3340,"url":4052},{"type":3347,"url":6625},[4060,4061,4062],{"id":281,"slug":8123,"dossier":47,"summary":8124,"aliases":8125,"sourceIds":8128,"published":8129,"modified":8130,"checkedAt":7,"severity":8131,"references":8133,"versionKeys":8144,"packageCount":32,"repositoryCount":608},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[8126,8127],"CVE-2025-69227","PYSEC-2026-1107",[281,8127],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[8132],{"type":3329,"score":4223},[8134,8136,8138,8140,8141,8142],{"type":3333,"url":8135},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3347,"url":8137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3333,"url":8139},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":8143},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3510,3511,3512,3513,3514,3515,3516],{"id":282,"slug":8146,"dossier":47,"summary":8147,"aliases":8148,"sourceIds":8151,"published":8152,"modified":8153,"checkedAt":7,"severity":8154,"references":8157,"versionKeys":8172,"packageCount":32,"repositoryCount":105},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[8149,8150],"CVE-2026-41168","PYSEC-2026-3021",[282,8150],"2026-04-15T19:43:09Z","2026-09-10T03:50:44.569518277Z",[8155,8156],{"type":3366,"score":3466},{"type":3329,"score":3330},[8158,8160,8162,8164,8166,8167,8169,8170],{"type":3333,"url":8159},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3347,"url":8161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3333,"url":8163},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3333,"url":8165},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3340,"url":3341},{"type":3333,"url":8168},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3340,"url":3345},{"type":3347,"url":8171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3352,3353],{"id":283,"slug":8174,"dossier":90,"summary":8175,"aliases":8176,"sourceIds":8180,"published":8181,"modified":8182,"checkedAt":7,"severity":8183,"references":8185,"versionKeys":8199,"packageCount":32,"repositoryCount":588},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[8177,8178,8179],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[283,8179],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[8184],{"type":3366,"score":3501},[8186,8188,8190,8192,8194,8195,8196,8197],{"type":3333,"url":8187},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3347,"url":8189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3333,"url":8191},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3333,"url":8193},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3340,"url":4114},{"type":3333,"url":5063},{"type":3340,"url":5065},{"type":3347,"url":8198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":284,"slug":8201,"dossier":47,"summary":8202,"aliases":8203,"sourceIds":8206,"published":8207,"modified":8208,"checkedAt":7,"severity":8209,"references":8211,"versionKeys":8224,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[8204,8205],"CVE-2025-3264","PYSEC-2026-1985",[284,8205],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[8210],{"type":3366,"score":4385},[8212,8214,8216,8218,8219,8221,8222],{"type":3347,"url":8213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":3333,"url":8215},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":3333,"url":8217},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":3340,"url":3439},{"type":3333,"url":8220},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":3340,"url":3811},{"type":3347,"url":8223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[3446],{"id":285,"slug":8226,"dossier":47,"summary":8227,"aliases":8228,"sourceIds":8231,"published":8232,"modified":8233,"checkedAt":7,"severity":8234,"references":8236,"versionKeys":8253,"packageCount":32,"repositoryCount":34},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[8229,8230],"CVE-2026-33231","PYSEC-2026-2236",[285,8230],"2026-03-19T12:42:20Z","2026-09-10T03:50:39.952342228Z",[8235],{"type":3366,"score":3501},[8237,8239,8241,8243,8244,8246,8248,8249,8250,8251],{"type":3441,"url":8238},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3347,"url":8240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3404,"url":8242},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3340,"url":3939},{"type":3333,"url":8245},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3333,"url":8247},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3347,"url":4153},{"type":3347,"url":8094},{"type":3347,"url":4155},{"type":3767,"url":8252},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3948,3949],{"id":286,"slug":8255,"dossier":47,"summary":8256,"aliases":8257,"sourceIds":8259,"published":8260,"modified":8261,"checkedAt":7,"severity":8262,"references":8264,"versionKeys":8272,"packageCount":32,"repositoryCount":105},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[8258],"CVE-2026-57204",[286],"2026-06-18T14:28:49Z","2026-09-10T03:51:08.790625588Z",[8263],{"type":3329,"score":4521},[8265,8267,8269,8270],{"type":3333,"url":8266},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3333,"url":8268},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3340,"url":3341},{"type":3333,"url":8271},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3352,3353],{"id":287,"slug":8274,"dossier":47,"summary":8275,"aliases":8276,"sourceIds":8279,"published":8280,"modified":8281,"checkedAt":7,"severity":8282,"references":8285,"versionKeys":8295,"packageCount":32,"repositoryCount":32},"ghsa-jmmv-h3mp-59v8-f42633c7","Docling Core: Unsafe remote filename resolution",[8277,8278],"CVE-2026-44023","PYSEC-2026-2457",[287,8278],"2026-06-03T21:16:25Z","2026-07-13T16:43:42.701865915Z",[8283],{"type":3366,"score":8284},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[8286,8288,8289,8290,8291,8293],{"type":3333,"url":8287},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3340,"url":8010},{"type":3333,"url":8012},{"type":3340,"url":8014},{"type":3347,"url":8292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3347,"url":8294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44023",[8020],{"id":288,"slug":8297,"dossier":47,"summary":8298,"aliases":8299,"sourceIds":8302,"published":8303,"modified":8304,"checkedAt":7,"severity":8305,"references":8307,"versionKeys":8322,"packageCount":32,"repositoryCount":674},"ghsa-jp53-mhqp-8xcg-b1841e34","pypdf: Possible infinite loop for TreeObject.insert_child",[8300,8301],"CVE-2026-84309","PYSEC-2026-3913",[288,8301],"2026-09-01T21:20:20Z","2026-09-10T12:25:36.667036932Z",[8306],{"type":3329,"score":4521},[8308,8310,8312,8314,8315,8317,8318,8320],{"type":3333,"url":8309},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3333,"url":8311},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3964",{"type":3333,"url":8313},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9ba557d565d57c53a0b3a0be06c0a4c29b0559b",{"type":3340,"url":3341},{"type":3333,"url":8316},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.0",{"type":3340,"url":3345},{"type":3347,"url":8319},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3347,"url":8321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84309",[3352,3353,3354],{"id":289,"slug":8324,"dossier":47,"summary":8325,"aliases":8326,"sourceIds":8329,"published":8330,"modified":8331,"checkedAt":7,"severity":8332,"references":8335,"versionKeys":8343,"packageCount":32,"repositoryCount":3656},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[8327,8328],"CVE-2026-54282","PYSEC-2026-248",[289,8328],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[8333,8334],{"type":3366,"score":5300},{"type":3366,"score":3644},[8336,8338,8340,8341],{"type":3347,"url":8337},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3347,"url":8339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3340,"url":5601},{"type":3333,"url":8342},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3485,3486,3487,5608,5609,5610,5773,5774,5775],{"id":290,"slug":8345,"dossier":47,"summary":8346,"aliases":8347,"sourceIds":8350,"published":8351,"modified":8352,"checkedAt":7,"severity":8353,"references":8356,"versionKeys":8375,"packageCount":32,"repositoryCount":674},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[8348,8349],"CVE-2026-52869","PYSEC-2026-3482",[290,8349],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[8354],{"type":3366,"score":8355},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[8357,8359,8361,8363,8365,8367,8369,8370,8372,8373],{"type":3333,"url":8358},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3347,"url":8360},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3333,"url":8362},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3333,"url":8364},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3333,"url":8366},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3333,"url":8368},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3340,"url":6308},{"type":3333,"url":8371},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3340,"url":6312},{"type":3347,"url":8374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[6314,6315,6316],{"id":291,"slug":8377,"dossier":47,"summary":8378,"aliases":8379,"sourceIds":8382,"published":8383,"modified":8384,"checkedAt":7,"severity":8385,"references":8388,"versionKeys":8396,"packageCount":32,"repositoryCount":674},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[8380,8381],"CVE-2026-48523","PYSEC-2026-176",[291,8381],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[8386],{"type":3366,"score":8387},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[8389,8391,8393,8394],{"type":3441,"url":8390},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3347,"url":8392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3340,"url":3570},{"type":3333,"url":8395},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[3574,3576],{"id":292,"slug":8398,"dossier":47,"summary":8399,"aliases":8400,"sourceIds":8403,"published":8404,"modified":8405,"checkedAt":7,"severity":8406,"references":8408,"versionKeys":8419,"packageCount":32,"repositoryCount":105},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[8401,8402],"CVE-2026-54531","PYSEC-2026-3022",[292,8402],"2026-06-16T14:05:57Z","2026-09-10T03:51:08.924739649Z",[8407],{"type":3329,"score":4521},[8409,8411,8412,8413,8414,8415,8417],{"type":3333,"url":8410},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3333,"url":4526},{"type":3340,"url":3341},{"type":3333,"url":4529},{"type":3340,"url":3345},{"type":3347,"url":8416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3347,"url":8418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3352,3353],{"id":293,"slug":8421,"dossier":47,"summary":8422,"aliases":8423,"sourceIds":8426,"published":8427,"modified":8428,"checkedAt":7,"severity":8429,"references":8433,"versionKeys":8452,"packageCount":32,"repositoryCount":34},"ghsa-m42h-3232-vpv3-b30ccceb","nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences",[8424,8425],"CVE-2026-12243","PYSEC-2026-597",[293,8425],"2026-06-30T01:16:29.063Z","2026-08-19T12:15:03.321869900Z",[8430,8431],{"type":3366,"score":4629},{"type":3366,"score":8432},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8434,8436,8438,8440,8441,8443,8444,8446,8448,8450],{"type":3333,"url":8435},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",{"type":3347,"url":8437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12243",{"type":3333,"url":8439},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3504",{"type":3333,"url":5468},{"type":3333,"url":8442},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Faec4fce1b84ad725b8975f7365b23a4f626572a9",{"type":3340,"url":3939},{"type":3333,"url":8445},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-597.yaml",{"type":3441,"url":8447},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",{"type":3333,"url":8449},"https:\u002F\u002Fsecurityinfinity.com\u002Fresearch\u002Fpath-traversal-in-nltks-nltk-data-load-via-percent-encoded-sequences",{"type":3347,"url":8451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",[3948,3949],{"id":294,"slug":8454,"dossier":47,"summary":8455,"aliases":8456,"sourceIds":8459,"published":8460,"modified":8461,"checkedAt":7,"severity":8462,"references":8464,"versionKeys":8480,"packageCount":32,"repositoryCount":105},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[8457,8458],"CVE-2025-66019","PYSEC-2026-1832",[294,8458],"2025-11-24T22:42:07Z","2026-09-10T03:50:31.107367078Z",[8463],{"type":3329,"score":4223},[8465,8466,8468,8470,8472,8474,8475,8477,8478],{"type":3333,"url":8054},{"type":3333,"url":8467},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3347,"url":8469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3333,"url":8471},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3333,"url":8473},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3340,"url":3341},{"type":3333,"url":8476},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3340,"url":3345},{"type":3347,"url":8479},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3352,3353],{"id":295,"slug":8482,"dossier":47,"summary":8483,"aliases":8484,"sourceIds":8487,"published":8488,"modified":8489,"checkedAt":7,"severity":8490,"references":8495,"versionKeys":8506,"packageCount":32,"repositoryCount":3577},"ghsa-m4rf-3fr8-xwx3-ed835593","NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)",[8485,8486],"CVE-2026-79675","PYSEC-2026-3749",[295,8486],"2026-08-25T16:17:28.013Z","2026-09-10T03:51:15.444696867Z",[8491,8492,8493],{"type":3366,"score":4550},{"type":3329,"score":4548},{"type":3329,"score":8494},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8496,8498,8500,8502,8503,8504],{"type":3441,"url":8497},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m4rf-3fr8-xwx3",{"type":3347,"url":8499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79675",{"type":3333,"url":8501},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F8fa9650b6009aacfdebbc33d2a08d32c0858ea6c",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3347,"url":8505},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-jvm-argument-injection-via-per-call-options",[3947,3948,3949],{"id":296,"slug":8508,"dossier":47,"summary":8509,"aliases":8510,"sourceIds":8513,"published":8514,"modified":8515,"checkedAt":7,"severity":8516,"references":8521,"versionKeys":8530,"packageCount":32,"repositoryCount":3656},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[8511,8512],"CVE-2026-34516","PYSEC-2026-2098",[296,8512],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[8517,8518,8519],{"type":3366,"score":3501},{"type":3329,"score":4223},{"type":3329,"score":8520},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8522,8524,8526,8528,8529],{"type":3404,"url":8523},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3347,"url":8525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3404,"url":8527},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":297,"slug":8532,"dossier":47,"summary":8533,"aliases":8534,"sourceIds":8537,"published":8538,"modified":8539,"checkedAt":7,"severity":8540,"references":8543,"versionKeys":8549,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[8535,8536],"CVE-2026-50269","PYSEC-2026-2106",[297,8536],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[8541,8542],{"type":3329,"score":3642},{"type":3366,"score":3501},[8544,8546,8548],{"type":3347,"url":8545},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3404,"url":8547},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3340,"url":3506},[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":298,"slug":8551,"dossier":47,"summary":8552,"aliases":8553,"sourceIds":8556,"published":8557,"modified":8558,"checkedAt":7,"severity":8559,"references":8561,"versionKeys":8578,"packageCount":32,"repositoryCount":32},"ghsa-m88r-rg27-5xfg-642aa3a1","Docling: Unsafe XML Entity Expansion in USPTO Patent Backend",[8554,8555],"CVE-2026-44020","PYSEC-2026-240",[298,8555],"2026-06-03T21:14:15Z","2026-08-28T18:45:06.829347750Z",[8560],{"type":3366,"score":3501},[8562,8564,8566,8567,8569,8571,8572,8574,8576],{"type":3404,"url":8563},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-m88r-rg27-5xfg",{"type":3347,"url":8565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44020",{"type":3333,"url":5896},{"type":3333,"url":8568},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44020",{"type":3333,"url":8570},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492456",{"type":3340,"url":6277},{"type":3333,"url":8573},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.74.0",{"type":3333,"url":8575},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-240.yaml",{"type":3333,"url":8577},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44020.json",[6285],{"id":299,"slug":8580,"dossier":47,"summary":8581,"aliases":8582,"sourceIds":8585,"published":8586,"modified":8587,"checkedAt":7,"severity":8588,"references":8590,"versionKeys":8599,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[8583,8584],"CVE-2026-48809","PYSEC-2026-3033",[299,8584],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[8589],{"type":3366,"score":3501},[8591,8593,8594,8595,8597],{"type":3333,"url":8592},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3340,"url":6695},{"type":3340,"url":6697},{"type":3347,"url":8596},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3347,"url":8598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[6703],{"id":300,"slug":8601,"dossier":47,"summary":8602,"aliases":8603,"sourceIds":8606,"published":8607,"modified":8608,"checkedAt":7,"severity":8609,"references":8612,"versionKeys":8620,"packageCount":32,"repositoryCount":674},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[8604,8605],"CVE-2026-44432","PYSEC-2026-142",[300,8605],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[8610,8611],{"type":3366,"score":3501},{"type":3329,"score":3694},[8613,8615,8617,8619],{"type":3347,"url":8614},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3347,"url":8616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3333,"url":8618},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3340,"url":3709},[8621],"pypi:urllib3@2.6.3",{"id":301,"slug":8623,"dossier":47,"summary":8624,"aliases":8625,"sourceIds":8628,"published":8629,"modified":8630,"checkedAt":7,"severity":8631,"references":8634,"versionKeys":8647,"packageCount":32,"repositoryCount":103},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[8626,8627],"CVE-2026-28684","PYSEC-2026-2270",[301,8627],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[8632],{"type":3366,"score":8633},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8635,8637,8639,8641,8643,8645],{"type":3404,"url":8636},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3347,"url":8638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3404,"url":8640},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3333,"url":8642},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3340,"url":8644},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3347,"url":8646},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[8648,8649,8650,8651],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":302,"slug":8653,"dossier":47,"summary":8654,"aliases":8655,"sourceIds":8658,"published":8659,"modified":8660,"checkedAt":7,"severity":8661,"references":8664,"versionKeys":8679,"packageCount":32,"repositoryCount":103},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[8656,8657],"CVE-2026-69243","PYSEC-2026-3546",[302,8657],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[8662],{"type":3329,"score":8663},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8665,8667,8669,8671,8672,8674,8675,8677],{"type":3333,"url":8666},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3333,"url":8668},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3333,"url":8670},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3340,"url":3506},{"type":3333,"url":8673},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3340,"url":4583},{"type":3347,"url":8676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3347,"url":8678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3510,3511,3512,3513,3514,3515,3516,3517,3518,6818],{"id":303,"slug":8681,"dossier":47,"summary":8682,"aliases":8683,"sourceIds":8686,"published":8687,"modified":8688,"checkedAt":7,"severity":8689,"references":8691,"versionKeys":8700,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[8684,8685],"CVE-2026-49855","PYSEC-2026-3389",[303,8685],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[8690],{"type":3366,"score":3501},[8692,8694,8695,8696,8698],{"type":3333,"url":8693},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3340,"url":4052},{"type":3340,"url":4054},{"type":3347,"url":8697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3347,"url":8699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[4060,4061,4062,4063,4064],{"id":304,"slug":8702,"dossier":47,"summary":8703,"aliases":8704,"sourceIds":8707,"published":8708,"modified":8709,"checkedAt":7,"severity":8710,"references":8712,"versionKeys":8723,"packageCount":32,"repositoryCount":637},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[8705,8706],"CVE-2026-40347","PYSEC-2026-3038",[304,8706],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[8711],{"type":3366,"score":3466},[8713,8715,8717,8718,8720,8721],{"type":3333,"url":8714},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3347,"url":8716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3340,"url":4704},{"type":3333,"url":8719},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3340,"url":4706},{"type":3347,"url":8722},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4903,4904,4710],{"id":305,"slug":8725,"dossier":47,"summary":8726,"aliases":8727,"sourceIds":8730,"published":8731,"modified":8732,"checkedAt":7,"severity":8733,"references":8735,"versionKeys":8748,"packageCount":32,"repositoryCount":3656},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[8728,8729],"CVE-2026-82397","PYSEC-2026-3928",[305,8729],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[8734],{"type":3366,"score":3501},[8736,8738,8740,8741,8743,8744,8745,8746],{"type":3333,"url":8737},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":3347,"url":8739},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":3333,"url":5811},{"type":3333,"url":8742},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":3340,"url":4052},{"type":3333,"url":5818},{"type":3340,"url":4054},{"type":3347,"url":8747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[4060,4061,4062,4063,4064,5820],{"id":306,"slug":8750,"dossier":47,"summary":8751,"aliases":8752,"sourceIds":8755,"published":8756,"modified":8757,"checkedAt":7,"severity":8758,"references":8760,"versionKeys":8773,"packageCount":32,"repositoryCount":103},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[8753,8754],"CVE-2026-59881","PYSEC-2026-3547",[306,8754],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[8759],{"type":3329,"score":3900},[8761,8763,8765,8767,8769,8770,8771],{"type":3333,"url":8762},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3347,"url":8764},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3333,"url":8766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3333,"url":8768},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":8772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3510,3511,3512,3513,3514,3515,3516,3517,3518,6818],{"id":307,"slug":8775,"dossier":47,"summary":8776,"aliases":8777,"sourceIds":8780,"published":8781,"modified":8782,"checkedAt":7,"severity":8783,"references":8785,"versionKeys":8796,"packageCount":32,"repositoryCount":608},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[8778,8779],"CVE-2025-69225","PYSEC-2026-1109",[307,8779],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[8784],{"type":3329,"score":3642},[8786,8788,8790,8792,8793,8794],{"type":3333,"url":8787},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3347,"url":8789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3404,"url":8791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3340,"url":3506},{"type":3340,"url":4583},{"type":3347,"url":8795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3510,3511,3512,3513,3514,3515,3516],{"id":308,"slug":8798,"dossier":47,"summary":8799,"aliases":8800,"sourceIds":8803,"published":8804,"modified":8805,"checkedAt":7,"severity":8806,"references":8809,"versionKeys":8818,"packageCount":32,"repositoryCount":3656},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[8801,8802],"CVE-2026-34519","PYSEC-2026-2101",[308,8802],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[8807,8808],{"type":3329,"score":3642},{"type":3366,"score":3644},[8810,8812,8814,8816,8817],{"type":3404,"url":8811},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3347,"url":8813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3404,"url":8815},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":309,"slug":8820,"dossier":47,"summary":8821,"aliases":8822,"sourceIds":8825,"published":8826,"modified":8827,"checkedAt":7,"severity":8828,"references":8831,"versionKeys":8846,"packageCount":32,"repositoryCount":34},"ghsa-p3m8-78j2-g5p3-4d7419c0","NLTK: Default ENFORCE=False Disables All pathsec Security Controls",[8823,8824],"CVE-2026-62388","PYSEC-2026-3722",[309,8824],"2026-08-22T15:16:18.967Z","2026-09-02T16:00:17.572328596Z",[8829,8830],{"type":3329,"score":5431},{"type":3329,"score":5433},[8832,8834,8836,8838,8840,8841,8842,8844],{"type":3441,"url":8833},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p3m8-78j2-g5p3",{"type":3347,"url":8835},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62388",{"type":3333,"url":8837},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3593",{"type":3333,"url":8839},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F155e40343cff0bf50d233e274a12e04d1428b1d9",{"type":3340,"url":3939},{"type":3333,"url":3975},{"type":3333,"url":8843},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3722.yaml",{"type":3347,"url":8845},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-insecure-default-configuration-pathsec",[3948,3949],{"id":310,"slug":8848,"dossier":47,"summary":8849,"aliases":8850,"sourceIds":8852,"published":8853,"modified":8854,"checkedAt":7,"severity":8855,"references":8857,"versionKeys":8866,"packageCount":32,"repositoryCount":3577},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[8851],"CVE-2026-102271",[310],"2026-09-29T23:14:33Z","2026-09-29T23:30:03.853857825Z",[8856],{"type":3366,"score":6387},[8858,8860,8862,8864,8865],{"type":3333,"url":8859},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":3347,"url":8861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":3333,"url":8863},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":3340,"url":3570},{"type":3333,"url":3572},[3574,3575,3576],{"id":311,"slug":8868,"dossier":47,"summary":8869,"aliases":8870,"sourceIds":8873,"published":8874,"modified":8875,"checkedAt":7,"severity":8876,"references":8878,"versionKeys":8895,"packageCount":32,"repositoryCount":34},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[8871,8872],"CVE-2026-54293","PYSEC-2026-2078",[311,8872],"2026-06-16T14:34:15Z","2026-09-10T03:51:09.128527813Z",[8877],{"type":3366,"score":4629},[8879,8881,8883,8885,8886,8888,8890,8891,8893],{"type":3441,"url":8880},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3347,"url":8882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3404,"url":8884},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3333,"url":7217},{"type":3333,"url":8887},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3767,"url":8889},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3340,"url":3939},{"type":3333,"url":8892},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3333,"url":8894},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3948,3949],{"id":312,"slug":8897,"dossier":47,"summary":8898,"aliases":8899,"sourceIds":8902,"published":8903,"modified":8904,"checkedAt":7,"severity":8905,"references":8909,"versionKeys":8921,"packageCount":32,"repositoryCount":3577},"ghsa-p4rw-rvv2-7xwr-ad10f74d","NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement",[8900,8901],"CVE-2026-79676","PYSEC-2026-3737",[312,8901],"2026-08-25T16:17:28.177Z","2026-09-08T17:00:04.101709807Z",[8906,8907],{"type":3329,"score":4627},{"type":3329,"score":8908},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8910,8912,8914,8915,8916,8917,8919],{"type":3441,"url":8911},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4rw-rvv2-7xwr",{"type":3347,"url":8913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79676",{"type":3333,"url":6860},{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":8918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3737.yaml",{"type":3347,"url":8920},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-path-traversal-via-symlink-bypass",[3947,3948,3949],{"id":313,"slug":8923,"dossier":47,"summary":8924,"aliases":8925,"sourceIds":8928,"published":8929,"modified":8930,"checkedAt":7,"severity":8931,"references":8934,"versionKeys":8943,"packageCount":32,"repositoryCount":3656},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[8926,8927],"CVE-2026-34515","PYSEC-2026-2097",[313,8927],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[8932,8933],{"type":3329,"score":7814},{"type":3366,"score":4629},[8935,8937,8939,8941,8942],{"type":3404,"url":8936},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3347,"url":8938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3404,"url":8940},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":314,"slug":8945,"dossier":47,"summary":8946,"aliases":8947,"sourceIds":8951,"published":8952,"modified":8953,"checkedAt":7,"severity":8954,"references":8957,"versionKeys":8970,"packageCount":32,"repositoryCount":637},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[8948,8949,8950],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[314,8950],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[8955,8956],{"type":3366,"score":3466},{"type":3366,"score":3501},[8958,8960,8962,8964,8966,8968,8969],{"type":3441,"url":8959},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3347,"url":8961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3404,"url":8963},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3404,"url":8965},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3333,"url":8967},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3340,"url":4114},{"type":3347,"url":5063},[4123,4124,4125,4126],{"id":315,"slug":8972,"dossier":47,"summary":8973,"aliases":8974,"sourceIds":8977,"published":8207,"modified":8978,"checkedAt":7,"severity":8979,"references":8982,"versionKeys":8995,"packageCount":32,"repositoryCount":674},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[8975,8976],"CVE-2025-3777","PYSEC-2026-1986",[315,8976],"2026-09-10T03:50:26.198077196Z",[8980],{"type":3366,"score":8981},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8983,8985,8987,8988,8990,8992,8993],{"type":3347,"url":8984},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":3333,"url":8986},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":3340,"url":3439},{"type":3333,"url":8989},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":3333,"url":8991},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":3340,"url":3811},{"type":3347,"url":8994},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[3446,3447,3448],{"id":316,"slug":8997,"dossier":90,"summary":8998,"aliases":8999,"sourceIds":9003,"published":9004,"modified":9005,"checkedAt":7,"severity":9006,"references":9008,"versionKeys":9019,"packageCount":32,"repositoryCount":588},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[9000,9001,9002],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[316,9002],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[9007],{"type":3366,"score":3501},[9009,9011,9013,9015,9017,9018],{"type":3441,"url":9010},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3347,"url":9012},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3404,"url":9014},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3333,"url":9016},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3340,"url":4114},{"type":3347,"url":4116},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":317,"slug":9021,"dossier":47,"summary":9022,"aliases":9023,"sourceIds":9026,"published":9027,"modified":9028,"checkedAt":7,"severity":9029,"references":9031,"versionKeys":9040,"packageCount":32,"repositoryCount":637},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[9024,9025],"CVE-2026-42561","PYSEC-2026-3039",[317,9025],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[9030],{"type":3366,"score":3501},[9032,9034,9036,9037,9038],{"type":3333,"url":9033},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3347,"url":9035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3340,"url":4704},{"type":3340,"url":4706},{"type":3347,"url":9039},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4903,4904,4710],{"id":318,"slug":9042,"dossier":47,"summary":9043,"aliases":9044,"sourceIds":9047,"published":9048,"modified":9049,"checkedAt":7,"severity":9050,"references":9052,"versionKeys":9064,"packageCount":32,"repositoryCount":608},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[9045,9046],"CVE-2025-50181","PYSEC-2026-1999",[318,9046],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[9051],{"type":3366,"score":4170},[9053,9055,9057,9059,9060,9061,9062],{"type":3333,"url":9054},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3347,"url":9056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3404,"url":9058},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3340,"url":3709},{"type":3333,"url":4180},{"type":3340,"url":3711},{"type":3347,"url":9063},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3713,3714,3715,3716],{"id":319,"slug":9066,"dossier":47,"summary":9067,"aliases":9068,"sourceIds":9071,"published":9072,"modified":9073,"checkedAt":7,"severity":9074,"references":9077,"versionKeys":9088,"packageCount":32,"repositoryCount":608},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[9069,9070],"CVE-2025-67724","PYSEC-2025-265",[319,9070],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[9075,9076],{"type":3366,"score":5537},{"type":3366,"score":7576},[9078,9080,9082,9084,9086,9087],{"type":3347,"url":9079},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3347,"url":9081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3404,"url":9083},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3333,"url":9085},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3340,"url":4052},{"type":3347,"url":6625},[4060,4061,4062],{"id":320,"slug":9090,"dossier":47,"summary":9091,"aliases":9092,"sourceIds":9094,"published":9095,"modified":9096,"checkedAt":7,"severity":9097,"references":9099,"versionKeys":9103,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[9093],"CVE-2026-91992",[320],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[9098],{"type":3366,"score":4625},[9100,9102],{"type":3333,"url":9101},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3340,"url":4052},[4060,4061,4062,4063,4064],{"id":321,"slug":9105,"dossier":47,"summary":9106,"aliases":9107,"sourceIds":9111,"published":9112,"modified":9113,"checkedAt":7,"severity":9114,"references":9117,"versionKeys":9129,"packageCount":32,"repositoryCount":3718},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[9108,9109,9110],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[321,9110],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[9115,9116],{"type":3329,"score":6639},{"type":3366,"score":5202},[9118,9119,9121,9123,9125,9127,9128],{"type":3333,"url":6643},{"type":3404,"url":9120},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3347,"url":9122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3404,"url":9124},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3404,"url":9126},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3340,"url":4114},{"type":3347,"url":5037},[4118,4119,4120,4121,4122,4123,4124,4125],{"id":322,"slug":9131,"dossier":47,"summary":9132,"aliases":9133,"sourceIds":9136,"published":9137,"modified":9138,"checkedAt":7,"severity":9139,"references":9142,"versionKeys":9153,"packageCount":32,"repositoryCount":32},"ghsa-q29v-xc37-wh5m-9bf51ff7","Docling: Unsafe URI and Path Handling in HTML Backend",[9134,9135],"CVE-2026-47214","PYSEC-2026-2146",[322,9135],"2026-06-03T21:15:02Z","2026-07-21T15:15:50.289662168Z",[9140],{"type":3366,"score":9141},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[9143,9145,9147,9148,9149,9151],{"type":3404,"url":9144},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-q29v-xc37-wh5m",{"type":3347,"url":9146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47214",{"type":3340,"url":6277},{"type":3333,"url":6752},{"type":3404,"url":9150},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.94.0",{"type":3333,"url":9152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2146.yaml",[6285],{"id":323,"slug":9155,"dossier":47,"summary":9156,"aliases":9157,"sourceIds":9160,"published":8207,"modified":9161,"checkedAt":7,"severity":9162,"references":9164,"versionKeys":9175,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[9158,9159],"CVE-2025-3263","PYSEC-2026-1987",[323,9159],"2026-07-07T17:56:57.889099913Z",[9163],{"type":3366,"score":4385},[9165,9167,9168,9169,9170,9172,9173],{"type":3347,"url":9166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":3333,"url":8215},{"type":3333,"url":8217},{"type":3340,"url":3439},{"type":3333,"url":9171},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":3340,"url":3811},{"type":3347,"url":9174},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[3446],{"id":324,"slug":9177,"dossier":47,"summary":9178,"aliases":9179,"sourceIds":9182,"published":9183,"modified":9184,"checkedAt":7,"severity":9185,"references":9188,"versionKeys":9201,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[9180,9181],"CVE-2024-56326","PYSEC-2026-1475",[324,9181],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[9186,9187],{"type":3366,"score":5248},{"type":3329,"score":6769},[9189,9191,9193,9195,9196,9197,9198,9199],{"type":3333,"url":9190},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3347,"url":9192},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3404,"url":9194},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3340,"url":6778},{"type":3333,"url":7656},{"type":3333,"url":6780},{"type":3340,"url":6784},{"type":3347,"url":9200},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[6788],{"id":325,"slug":9203,"dossier":90,"summary":9204,"aliases":9205,"sourceIds":9208,"published":9209,"modified":9210,"checkedAt":7,"severity":9211,"references":9215,"versionKeys":9221,"packageCount":32,"repositoryCount":7564},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[9206,9207],"CVE-2026-44431","PYSEC-2026-141",[325,9207],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[9212,9213],{"type":3366,"score":6173},{"type":3329,"score":9214},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9216,9218,9220],{"type":3347,"url":9217},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3347,"url":9219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3340,"url":3709},[3713,3714,3715,3716,3717,8621],{"id":326,"slug":9223,"dossier":47,"summary":9224,"aliases":9225,"sourceIds":9229,"published":9230,"modified":9231,"checkedAt":7,"severity":9232,"references":9236,"versionKeys":9254,"packageCount":32,"repositoryCount":598},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[9226,9227,9228],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[326],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[9233,9234],{"type":3366,"score":4463},{"type":3329,"score":9235},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[9237,9239,9241,9243,9245,9247,9248,9250,9252],{"type":3347,"url":9238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":3333,"url":9240},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":3333,"url":9242},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":3333,"url":9244},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":3333,"url":9246},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":3340,"url":3774},{"type":3333,"url":9249},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":3333,"url":9251},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":3333,"url":9253},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3786,3787,3788,5969,5970,9255,9256,9257,9258],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":327,"slug":9260,"dossier":47,"summary":9261,"aliases":9262,"sourceIds":9265,"published":9266,"modified":9267,"checkedAt":7,"severity":9268,"references":9271,"versionKeys":9284,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[9263,9264],"CVE-2026-31958","PYSEC-2026-140",[327,9264],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[9269,9270],{"type":3366,"score":3501},{"type":3329,"score":4695},[9272,9274,9276,9278,9280,9281,9282],{"type":3347,"url":9273},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3347,"url":9275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3333,"url":9277},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3333,"url":9279},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3340,"url":4052},{"type":3333,"url":5548},{"type":3333,"url":9283},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[4060,4061,4062,4063],{"id":328,"slug":9286,"dossier":47,"summary":9287,"aliases":9288,"sourceIds":9291,"published":9292,"modified":9293,"checkedAt":7,"severity":9294,"references":9297,"versionKeys":9312,"packageCount":32,"repositoryCount":598},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[9289,9290],"CVE-2026-22701","PYSEC-2026-1374",[328,9290],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[9295],{"type":3366,"score":9296},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9298,9300,9302,9304,9306,9308,9310],{"type":3333,"url":9299},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3347,"url":9301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3333,"url":9303},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3333,"url":9305},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3340,"url":9307},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3340,"url":9309},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3347,"url":9311},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[9313,9314,9315,9316],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":329,"slug":9318,"dossier":47,"summary":9319,"aliases":9320,"sourceIds":9323,"published":9324,"modified":9325,"checkedAt":7,"severity":9326,"references":9328,"versionKeys":9341,"packageCount":32,"repositoryCount":105},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[9321,9322],"CVE-2026-33123","PYSEC-2026-3023",[329,9322],"2026-03-18T16:17:31Z","2026-09-10T03:51:00.643708515Z",[9327],{"type":3329,"score":3369},[9329,9331,9333,9335,9336,9338,9339],{"type":3333,"url":9330},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3347,"url":9332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3333,"url":9334},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3340,"url":3341},{"type":3333,"url":9337},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3340,"url":3345},{"type":3347,"url":9340},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3352,3353],{"id":330,"slug":9343,"dossier":47,"summary":9344,"aliases":9345,"sourceIds":9348,"published":9349,"modified":9350,"checkedAt":7,"severity":9351,"references":9354,"versionKeys":9368,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[9346,9347],"CVE-2025-2099","PYSEC-2025-40",[330,9347],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[9352,9353],{"type":3366,"score":4385},{"type":3366,"score":3501},[9355,9357,9359,9361,9362,9364,9366],{"type":3347,"url":9356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":3333,"url":9358},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":3404,"url":9360},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":3340,"url":3439},{"type":3333,"url":9363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":3333,"url":9365},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":3347,"url":9367},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[3446],{"id":331,"slug":9370,"dossier":47,"summary":9371,"aliases":9372,"sourceIds":9375,"published":9376,"modified":9377,"checkedAt":7,"severity":9378,"references":9381,"versionKeys":9390,"packageCount":32,"repositoryCount":34},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[9373,9374],"CVE-2026-12075","PYSEC-2026-3583",[331,9374],"2026-07-31T16:51:29Z","2026-09-10T03:50:53.081739885Z",[9379],{"type":3366,"score":9380},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[9382,9384,9385,9386,9388],{"type":3333,"url":9383},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3340,"url":3939},{"type":3340,"url":4759},{"type":3347,"url":9387},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3347,"url":9389},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3948,3949],{"id":332,"slug":9392,"dossier":47,"summary":9393,"aliases":9394,"sourceIds":9397,"published":9398,"modified":9399,"checkedAt":7,"severity":9400,"references":9403,"versionKeys":9422,"packageCount":32,"repositoryCount":3577},"ghsa-qx2g-xrx7-vfh8-91db951d","NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking",[9395,9396],"CVE-2026-72818","PYSEC-2026-3870",[332,9396],"2026-08-21T00:31:23Z","2026-09-10T12:25:44.300334208Z",[9401,9402],{"type":3366,"score":3501},{"type":3329,"score":4695},[9404,9406,9408,9410,9412,9413,9415,9417,9419,9420],{"type":3347,"url":9405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-72818",{"type":3333,"url":9407},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3704",{"type":3333,"url":9409},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3701",{"type":3333,"url":9411},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe092ed52eccae642304448bffc8d23cb301f85c1",{"type":3340,"url":3939},{"type":3333,"url":9414},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F3.9.4\u002Fnltk\u002Ftokenize\u002Fcasual.py",{"type":3333,"url":9416},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.1",{"type":3333,"url":9418},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input",{"type":3340,"url":4759},{"type":3347,"url":9421},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qx2g-xrx7-vfh8",[3947,3948,3949],{"id":333,"slug":9424,"dossier":47,"summary":7942,"aliases":9425,"sourceIds":9428,"published":9429,"modified":9430,"checkedAt":7,"severity":9431,"references":9435,"versionKeys":9449,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[9426,9427],"CVE-2024-11392","PYSEC-2024-227",[333,9427],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[9432,9434],{"type":3366,"score":9433},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3366,"score":4745},[9436,9438,9439,9440,9441,9443,9445,9447],{"type":3347,"url":9437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":3333,"url":7957},{"type":3333,"url":7959},{"type":3340,"url":3439},{"type":3333,"url":9442},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":3333,"url":9444},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":3347,"url":9446},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":3347,"url":9448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[3446],{"id":334,"slug":9451,"dossier":47,"summary":9452,"aliases":9453,"sourceIds":9456,"published":9457,"modified":9458,"checkedAt":7,"severity":9459,"references":9463,"versionKeys":9472,"packageCount":32,"repositoryCount":32},"ghsa-r3xg-rg9j-67fv-878d1feb","Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend",[9454,9455],"CVE-2026-44018","PYSEC-2026-2144",[334,9455],"2026-06-03T21:13:32Z","2026-07-21T15:15:50.260072276Z",[9460,9462],{"type":3366,"score":9461},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3366,"score":4243},[9464,9466,9468,9469,9470],{"type":3404,"url":9465},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-r3xg-rg9j-67fv",{"type":3347,"url":9467},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44018",{"type":3340,"url":6277},{"type":3347,"url":6752},{"type":3333,"url":9471},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2144.yaml",[6285],{"id":335,"slug":9474,"dossier":47,"summary":9475,"aliases":9476,"sourceIds":9479,"published":9480,"modified":9481,"checkedAt":7,"severity":9482,"references":9488,"versionKeys":9503,"packageCount":32,"repositoryCount":34},"ghsa-r6gq-whwq-mvg9-34c83a12","NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root",[9477,9478],"CVE-2026-70626","PYSEC-2026-3732",[335,9478],"2026-08-22T15:16:21.100Z","2026-09-08T15:30:07.726015360Z",[9483,9485,9486],{"type":3366,"score":9484},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3329,"score":6639},{"type":3329,"score":9487},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9489,9491,9493,9494,9496,9497,9499,9501],{"type":3441,"url":9490},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r6gq-whwq-mvg9",{"type":3347,"url":9492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-70626",{"type":3333,"url":5468},{"type":3333,"url":9495},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1b0e519e2324bc1a273d56edee63e44d0ad85b48",{"type":3340,"url":3939},{"type":3333,"url":9498},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.4",{"type":3333,"url":9500},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3732.yaml",{"type":3347,"url":9502},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-symlink-escape-via-corpusreader",[3948,3949],{"id":336,"slug":9505,"dossier":47,"summary":9506,"aliases":9507,"sourceIds":9509,"published":9510,"modified":9511,"checkedAt":7,"severity":9512,"references":9514,"versionKeys":9523,"packageCount":32,"repositoryCount":105},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[9508],"CVE-2026-102272",[336],"2026-09-29T23:14:00Z","2026-09-29T23:30:03.855539261Z",[9513],{"type":3366,"score":6387},[9515,9517,9519,9521,9522],{"type":3333,"url":9516},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":3347,"url":9518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":3333,"url":9520},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":3340,"url":3570},{"type":3333,"url":3572},[3575],{"id":337,"slug":9525,"dossier":47,"summary":9526,"aliases":9527,"sourceIds":9531,"published":9532,"modified":9533,"checkedAt":7,"severity":9534,"references":9537,"versionKeys":9551,"packageCount":32,"repositoryCount":3718},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[9528,9529,9530],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[337,9530],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[9535,9536],{"type":3366,"score":3762},{"type":3329,"score":3369},[9538,9540,9542,9544,9546,9547,9548,9549],{"type":3333,"url":9539},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3347,"url":9541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3333,"url":9543},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3333,"url":9545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3340,"url":4114},{"type":3333,"url":5037},{"type":3340,"url":5065},{"type":3347,"url":9550},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4118,4119,4120,4121,4122,4123,4124,4125],{"id":338,"slug":9553,"dossier":47,"summary":9554,"aliases":9555,"sourceIds":9558,"published":9559,"modified":9560,"checkedAt":7,"severity":9561,"references":9563,"versionKeys":9578,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[9556,9557],"CVE-2025-6051","PYSEC-2026-1988",[338,9557],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[9562],{"type":3366,"score":4385},[9564,9566,9568,9570,9572,9573,9575,9576],{"type":3347,"url":9565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":3333,"url":9567},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":3333,"url":9569},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":3333,"url":9571},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":3340,"url":3439},{"type":3333,"url":9574},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":3340,"url":3811},{"type":3347,"url":9577},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[3446,3447,3448,3449],{"id":339,"slug":9580,"dossier":47,"summary":9581,"aliases":9582,"sourceIds":9585,"published":9586,"modified":9587,"checkedAt":7,"severity":9588,"references":9591,"versionKeys":9603,"packageCount":32,"repositoryCount":34},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[9583,9584],"CVE-2026-66393","PYSEC-2026-3724",[339,9584],"2026-03-18T20:17:43Z","2026-09-10T03:50:40.818763364Z",[9589,9590],{"type":3329,"score":3369},{"type":3329,"score":6197},[9592,9594,9596,9598,9599,9601],{"type":3441,"url":9593},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3347,"url":9595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-66393",{"type":3333,"url":9597},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F00cdcd392142e6c745e7120c8d50a24127df5fad",{"type":3340,"url":3939},{"type":3333,"url":9600},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3724.yaml",{"type":3347,"url":9602},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-denial-of-service-via-jsontaggeddecoder",[3948,3949],{"id":340,"slug":9605,"dossier":47,"summary":9606,"aliases":9607,"sourceIds":9610,"published":9611,"modified":9612,"checkedAt":7,"severity":9613,"references":9616,"versionKeys":9629,"packageCount":32,"repositoryCount":598},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[9608,9609],"CVE-2026-25087","PYSEC-2026-113",[340,9609],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[9614],{"type":3366,"score":9615},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[9617,9619,9621,9623,9625,9627],{"type":3347,"url":9618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":3404,"url":9620},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":3340,"url":9622},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":3333,"url":9624},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":3347,"url":9626},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":3347,"url":9628},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[9630,9631,9632,9633],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":341,"slug":9635,"dossier":47,"summary":9636,"aliases":9637,"sourceIds":9640,"published":9641,"modified":9642,"checkedAt":7,"severity":9643,"references":9648,"versionKeys":9663,"packageCount":32,"repositoryCount":34},"ghsa-rhp5-r9x4-f5g2-737c7e67","NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",[9638,9639],"CVE-2026-78683","PYSEC-2026-3734",[341,9639],"2026-08-25T02:16:53.033Z","2026-09-08T16:45:04.193165862Z",[9644,9646],{"type":3329,"score":9645},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":3329,"score":9647},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9649,9651,9653,9655,9657,9658,9659,9661],{"type":3441,"url":9650},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rhp5-r9x4-f5g2",{"type":3347,"url":9652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78683",{"type":3333,"url":9654},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3631",{"type":3333,"url":9656},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ff26b3753038d937b68145daf15e9636f8451053c",{"type":3340,"url":3939},{"type":3333,"url":3975},{"type":3333,"url":9660},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3734.yaml",{"type":3347,"url":9662},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-remote-code-execution-via-unsafe-pickle-deserialization",[3948,3949],{"id":342,"slug":9665,"dossier":47,"summary":9666,"aliases":9667,"sourceIds":9671,"published":6988,"modified":9672,"checkedAt":7,"severity":9673,"references":9676,"versionKeys":9694,"packageCount":32,"repositoryCount":3718},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[9668,9669,9670],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[342],"2026-09-10T03:49:48.419046410Z",[9674,9675],{"type":3366,"score":4463},{"type":3329,"score":9235},[9677,9679,9681,9683,9685,9687,9688,9690,9692],{"type":3347,"url":9678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":3333,"url":9680},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":3333,"url":9682},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":3333,"url":9684},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":3333,"url":9686},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":3340,"url":3774},{"type":3333,"url":9689},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":3333,"url":9691},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":3333,"url":9693},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[9695,9696,9697,3786,3787,3788,5969,5970,9255,9256,9257,9258],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":343,"slug":9699,"dossier":47,"summary":9700,"aliases":9701,"sourceIds":9704,"published":9705,"modified":9706,"checkedAt":7,"severity":9707,"references":9711,"versionKeys":9726,"packageCount":32,"repositoryCount":34},"ghsa-rrv8-h7p8-rx55-b07785af","NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions",[9702,9703],"CVE-2026-80205","PYSEC-2026-3750",[343,9703],"2026-08-26T11:16:39.950Z","2026-09-08T20:45:04.338061792Z",[9708,9709,9710],{"type":3366,"score":3501},{"type":3329,"score":4695},{"type":3329,"score":6197},[9712,9714,9716,9718,9720,9721,9722,9724],{"type":3441,"url":9713},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rrv8-h7p8-rx55",{"type":3347,"url":9715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80205",{"type":3333,"url":9717},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3674",{"type":3333,"url":9719},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fd8e47539317b571ab1422981f5b9653d5eae1249",{"type":3340,"url":3939},{"type":3333,"url":3975},{"type":3333,"url":9723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3750.yaml",{"type":3347,"url":9725},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.0-redos-via-text-findall-unvalidated-regex",[3948,3949],{"id":344,"slug":9728,"dossier":47,"summary":9729,"aliases":9730,"sourceIds":9733,"published":9734,"modified":9735,"checkedAt":7,"severity":9736,"references":9741,"versionKeys":9758,"packageCount":32,"repositoryCount":32},"ghsa-v492-6xx2-p57g-b1729313","Chainlit contains an authorization bypass vulnerability",[9731,9732],"CVE-2025-68492","PYSEC-2026-1238",[344,9732],"2026-01-14T09:31:21Z","2026-07-07T17:56:13.167928474Z",[9737,9739],{"type":3366,"score":9738},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3329,"score":9740},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9742,9744,9746,9748,9749,9751,9753,9755,9756],{"type":3347,"url":9743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68492",{"type":3333,"url":9745},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2637",{"type":3333,"url":9747},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F8f1153db439eca58ae5c50c8276ba6fdd311448e",{"type":3340,"url":3539},{"type":3333,"url":9750},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases",{"type":3333,"url":9752},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.8.5",{"type":3333,"url":9754},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN34964581",{"type":3340,"url":3547},{"type":3347,"url":9757},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v492-6xx2-p57g",[3551],{"id":345,"slug":9760,"dossier":47,"summary":9761,"aliases":9762,"sourceIds":9765,"published":9766,"modified":9767,"checkedAt":7,"severity":9768,"references":9770,"versionKeys":9779,"packageCount":32,"repositoryCount":627},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[9763,9764],"CVE-2026-53540","PYSEC-2026-3040",[345,9764],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[9769],{"type":3366,"score":7267},[9771,9773,9774,9775,9777],{"type":3333,"url":9772},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3340,"url":4704},{"type":3340,"url":4706},{"type":3347,"url":9776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3347,"url":9778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4903,4904,4905,4710],{"id":346,"slug":9781,"dossier":47,"summary":9782,"aliases":9783,"sourceIds":9786,"published":9787,"modified":9788,"checkedAt":7,"severity":9789,"references":9791,"versionKeys":9802,"packageCount":32,"repositoryCount":627},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[9784,9785],"CVE-2026-53537","PYSEC-2026-3041",[346,9785],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[9790],{"type":3366,"score":5300},[9792,9794,9796,9797,9799,9801],{"type":3333,"url":9793},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3347,"url":9795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3340,"url":4704},{"type":3347,"url":9798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3333,"url":9800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3340,"url":4706},[4903,4904,4905,4710],{"id":347,"slug":9804,"dossier":47,"summary":9805,"aliases":9806,"sourceIds":9809,"published":9810,"modified":9811,"checkedAt":7,"severity":9812,"references":9814,"versionKeys":9827,"packageCount":32,"repositoryCount":637},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[9807,9808],"CVE-2026-41066","PYSEC-2026-87",[347,9808],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[9813],{"type":3366,"score":4629},[9815,9817,9819,9821,9823,9825],{"type":3347,"url":9816},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3347,"url":9818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3767,"url":9820},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3340,"url":9822},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3333,"url":9824},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3333,"url":9826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[9828,9829,9830],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":348,"slug":9832,"dossier":47,"summary":9833,"aliases":9834,"sourceIds":9838,"published":6988,"modified":9839,"checkedAt":7,"severity":9840,"references":9843,"versionKeys":9858,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[9835,9836,9837],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[348],"2026-06-10T17:41:15.774477397Z",[9841,9842],{"type":3366,"score":4463},{"type":3329,"score":6993},[9844,9846,9847,9848,9849,9851,9852,9854,9856],{"type":3347,"url":9845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":3333,"url":6998},{"type":3333,"url":7000},{"type":3333,"url":7002},{"type":3333,"url":9850},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":3340,"url":3774},{"type":3333,"url":9853},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":3333,"url":9855},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":3333,"url":9857},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3786,3787,3788,5969,5970,9255,9256],{"id":349,"slug":9860,"dossier":47,"summary":9861,"aliases":9862,"sourceIds":9865,"published":9866,"modified":9867,"checkedAt":7,"severity":9868,"references":9870,"versionKeys":9885,"packageCount":32,"repositoryCount":674},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[9863,9864],"CVE-2026-59950","PYSEC-2026-3483",[349,9864],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[9869],{"type":3329,"score":6297},[9871,9873,9875,9877,9879,9880,9882,9883],{"type":3333,"url":9872},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3347,"url":9874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3333,"url":9876},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3333,"url":9878},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3340,"url":6308},{"type":3333,"url":9881},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3340,"url":6312},{"type":3347,"url":9884},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[6314,6315,6316],{"id":350,"slug":9887,"dossier":90,"summary":9888,"aliases":9889,"sourceIds":9893,"published":9894,"modified":9895,"checkedAt":7,"severity":9896,"references":9898,"versionKeys":9912,"packageCount":32,"repositoryCount":588},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[9890,9891,9892],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[350,9892],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[9897],{"type":3329,"score":4695},[9899,9901,9903,9905,9907,9908,9909,9910],{"type":3333,"url":9900},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3347,"url":9902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3333,"url":9904},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3333,"url":9906},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3340,"url":4114},{"type":3333,"url":5063},{"type":3340,"url":5065},{"type":3347,"url":9911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":351,"slug":9914,"dossier":47,"summary":9915,"aliases":9916,"sourceIds":9919,"published":9920,"modified":9921,"checkedAt":7,"severity":9922,"references":9926,"versionKeys":9939,"packageCount":32,"repositoryCount":3577},"ghsa-vp2x-qp44-57v7-6098fc6a","NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`",[9917,9918],"CVE-2026-81723","PYSEC-2026-3871",[351,9918],"2026-09-02T14:34:11Z","2026-09-10T12:25:42.010688905Z",[9923,9924],{"type":3366,"score":7267},{"type":3329,"score":9925},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9927,9929,9931,9932,9933,9934,9936,9937],{"type":3333,"url":9928},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",{"type":3347,"url":9930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81723",{"type":3333,"url":6030},{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":9935},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-quadratic-cpu-exhaustion-via-xmlcorpusview",{"type":3340,"url":4759},{"type":3347,"url":9938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",[3947,3948,3949],{"id":352,"slug":9941,"dossier":47,"summary":9942,"aliases":9943,"sourceIds":9946,"published":9947,"modified":9948,"checkedAt":7,"severity":9949,"references":9951,"versionKeys":9964,"packageCount":32,"repositoryCount":674},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[9944,9945],"CVE-2025-43859","PYSEC-2026-348",[352,9945],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[9950],{"type":3366,"score":7162},[9952,9954,9956,9958,9960,9962],{"type":3333,"url":9953},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3347,"url":9955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3333,"url":9957},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3340,"url":9959},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3340,"url":9961},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3347,"url":9963},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[9965],"pypi:h11@0.14.0",{"id":353,"slug":9967,"dossier":47,"summary":9968,"aliases":9969,"sourceIds":9972,"published":9973,"modified":9974,"checkedAt":7,"severity":9975,"references":9977,"versionKeys":9991,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[9970,9971],"CVE-2025-62707","PYSEC-2026-1833",[353,9971],"2025-10-22T19:40:47Z","2026-09-10T03:50:58.424138377Z",[9976],{"type":3329,"score":4223},[9978,9980,9982,9984,9986,9987,9988,9989],{"type":3333,"url":9979},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3347,"url":9981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3333,"url":9983},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3333,"url":9985},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3340,"url":3341},{"type":3333,"url":8063},{"type":3340,"url":3345},{"type":3347,"url":9990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3352],{"id":354,"slug":9993,"dossier":47,"summary":9994,"aliases":9995,"sourceIds":9997,"published":9998,"modified":9999,"checkedAt":7,"severity":10000,"references":10002,"versionKeys":10011,"packageCount":32,"repositoryCount":105},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[9996],"CVE-2026-102273",[354],"2026-09-29T23:16:55Z","2026-09-29T23:30:03.873701729Z",[10001],{"type":3366,"score":6387},[10003,10005,10007,10009,10010],{"type":3333,"url":10004},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":3347,"url":10006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":3333,"url":10008},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":3340,"url":3570},{"type":3333,"url":3572},[3575],{"id":355,"slug":10013,"dossier":47,"summary":10014,"aliases":10015,"sourceIds":10018,"published":10019,"modified":10020,"checkedAt":7,"severity":10021,"references":10024,"versionKeys":10033,"packageCount":32,"repositoryCount":3656},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[10016,10017],"CVE-2026-22815","PYSEC-2026-2094",[355,10017],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[10022,10023],{"type":3329,"score":3900},{"type":3329,"score":6883},[10025,10027,10029,10031,10032],{"type":3404,"url":10026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3347,"url":10028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3404,"url":10030},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3340,"url":3506},{"type":3347,"url":3654},[3510,3511,3512,3513,3514,3515,3516,3517],{"id":356,"slug":10035,"dossier":47,"summary":10036,"aliases":10037,"sourceIds":10040,"published":10041,"modified":10042,"checkedAt":7,"severity":10043,"references":10045,"versionKeys":10056,"packageCount":32,"repositoryCount":32},"ghsa-w3fx-mc44-mf6j-8eb1f0ed","Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution",[10038,10039],"CVE-2026-45018","PYSEC-2026-3812",[356,10039],"2026-08-25T19:19:28Z","2026-09-10T12:26:01.565580392Z",[10044],{"type":3366,"score":4550},[10046,10048,10049,10050,10051,10052,10054],{"type":3333,"url":10047},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3333,"url":7887},{"type":3340,"url":3539},{"type":3333,"url":7892},{"type":3340,"url":3547},{"type":3347,"url":10053},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3347,"url":10055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45018",[3551],{"id":357,"slug":10058,"dossier":47,"summary":10059,"aliases":10060,"sourceIds":10063,"published":10064,"modified":10065,"checkedAt":7,"severity":10066,"references":10071,"versionKeys":10084,"packageCount":32,"repositoryCount":3577},"ghsa-w3v8-gmh9-3wv7-b77729c9","NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions",[10061,10062],"CVE-2026-80206","PYSEC-2026-3751",[357,10062],"2026-08-26T11:16:40.103Z","2026-09-08T20:45:04.333988177Z",[10067,10069],{"type":3329,"score":10068},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3329,"score":10070},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[10072,10074,10076,10078,10079,10080,10082],{"type":3441,"url":10073},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-w3v8-gmh9-3wv7",{"type":3347,"url":10075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80206",{"type":3333,"url":10077},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0072ea2fb8be22e038a36e887b7061bb6b9339d9",{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":10081},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3751.yaml",{"type":3347,"url":10083},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.2-regular-expression-denial-of-service-via-tgrep",[3947,3948,3949],{"id":358,"slug":10086,"dossier":47,"summary":10087,"aliases":10088,"sourceIds":10090,"published":10091,"modified":10092,"checkedAt":7,"severity":10093,"references":10096,"versionKeys":10105,"packageCount":32,"repositoryCount":3577},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[10089],"CVE-2026-102274",[358],"2026-09-29T18:23:01Z","2026-09-29T18:30:41.171809330Z",[10094],{"type":3366,"score":10095},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[10097,10099,10101,10103,10104],{"type":3333,"url":10098},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":3347,"url":10100},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":3333,"url":10102},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":3340,"url":3570},{"type":3333,"url":3572},[3574,3575,3576],{"id":359,"slug":10107,"dossier":47,"summary":10108,"aliases":10109,"sourceIds":10112,"published":10113,"modified":10114,"checkedAt":7,"severity":10115,"references":10117,"versionKeys":10125,"packageCount":32,"repositoryCount":674},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[10110,10111],"CVE-2026-48525","PYSEC-2026-178",[359,10111],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[10116],{"type":3366,"score":3466},[10118,10120,10122,10123],{"type":3441,"url":10119},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3347,"url":10121},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3340,"url":3570},{"type":3333,"url":10124},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[3574,3576],{"id":360,"slug":10127,"dossier":47,"summary":10128,"aliases":10129,"sourceIds":10132,"published":10133,"modified":10134,"checkedAt":7,"severity":10135,"references":10138,"versionKeys":10155,"packageCount":32,"repositoryCount":598},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[10130,10131],"CVE-2025-68146","PYSEC-2026-1375",[360,10131],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[10136],{"type":3366,"score":10137},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[10139,10141,10143,10144,10146,10148,10150,10151,10153],{"type":3333,"url":10140},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3333,"url":10142},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3340,"url":9307},{"type":3333,"url":10145},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3333,"url":10147},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3333,"url":10149},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3340,"url":9309},{"type":3347,"url":10152},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3347,"url":10154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[9313,9314,9315,9316],{"id":361,"slug":10157,"dossier":47,"summary":10158,"aliases":10159,"sourceIds":10162,"published":10163,"modified":10164,"checkedAt":7,"severity":10165,"references":10167,"versionKeys":10181,"packageCount":32,"repositoryCount":105},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[10160,10161],"CVE-2026-27025","PYSEC-2026-3024",[361,10161],"2026-02-18T22:41:13Z","2026-09-10T03:50:36.045929384Z",[10166],{"type":3329,"score":4521},[10168,10170,10172,10174,10176,10177,10178,10179],{"type":3333,"url":10169},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3347,"url":10171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3333,"url":10173},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3333,"url":10175},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3340,"url":3341},{"type":3333,"url":6257},{"type":3340,"url":3345},{"type":3347,"url":10180},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3352,3353],{"id":362,"slug":10183,"dossier":47,"summary":10184,"aliases":10185,"sourceIds":10189,"published":10190,"modified":10191,"checkedAt":7,"severity":10192,"references":10195,"versionKeys":10233,"packageCount":32,"repositoryCount":3718},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[10186,10187,10188],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[362,10188],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[10193,10194],{"type":3366,"score":3501},{"type":3329,"score":4695},[10196,10198,10200,10202,10204,10205,10207,10209,10211,10213,10215,10217,10218,10220,10222,10224,10225,10227,10229,10231],{"type":3333,"url":10197},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3347,"url":10199},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3333,"url":10201},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3333,"url":10203},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3340,"url":4114},{"type":3333,"url":10206},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3333,"url":10208},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3333,"url":10210},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3347,"url":10212},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3347,"url":10214},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3347,"url":10216},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3347,"url":6665},{"type":3347,"url":10219},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3347,"url":10221},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3347,"url":10223},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3347,"url":4153},{"type":3347,"url":10226},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3347,"url":10228},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3347,"url":10230},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3347,"url":10232},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4118,4119,4120,4121,4122,4123,4124,4125],{"id":363,"slug":10235,"dossier":47,"summary":10236,"aliases":10237,"sourceIds":10240,"published":10241,"modified":10242,"checkedAt":7,"severity":10243,"references":10245,"versionKeys":10258,"packageCount":32,"repositoryCount":105},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[10238,10239],"CVE-2026-48735","PYSEC-2026-3025",[363,10239],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[10244],{"type":3329,"score":4521},[10246,10248,10250,10252,10253,10255,10256],{"type":3333,"url":10247},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3347,"url":10249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3333,"url":10251},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3340,"url":3341},{"type":3333,"url":10254},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3340,"url":3345},{"type":3347,"url":10257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3352,3353],{"id":364,"slug":10260,"dossier":47,"summary":10261,"aliases":10262,"sourceIds":10266,"published":10267,"modified":10268,"checkedAt":7,"severity":10269,"references":10272,"versionKeys":10281,"packageCount":32,"repositoryCount":3718},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[10263,10264,10265],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[364,10265],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[10270,10271],{"type":3366,"score":3762},{"type":3329,"score":3369},[10273,10275,10277,10279,10280],{"type":3347,"url":10274},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3347,"url":10276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3333,"url":10278},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3340,"url":4114},{"type":3347,"url":5037},[4118,4119,4120,4121,4122,4123,4124,4125],{"id":365,"slug":10283,"dossier":47,"summary":10284,"aliases":10285,"sourceIds":10288,"published":10289,"modified":10290,"checkedAt":7,"severity":10291,"references":10294,"versionKeys":10307,"packageCount":32,"repositoryCount":637},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[10286,10287],"CVE-2026-24486","PYSEC-2026-1852",[365,10287],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[10292],{"type":3366,"score":10293},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[10295,10297,10299,10301,10302,10304,10305],{"type":3333,"url":10296},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3347,"url":10298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3333,"url":10300},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3340,"url":4704},{"type":3333,"url":10303},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3340,"url":4706},{"type":3347,"url":10306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4903,4904,4710],{"id":366,"slug":10309,"dossier":47,"summary":10310,"aliases":10311,"sourceIds":10314,"published":10315,"modified":10316,"checkedAt":7,"severity":10317,"references":10319,"versionKeys":10341,"packageCount":32,"repositoryCount":3656},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[10312,10313],"CVE-2026-48818","PYSEC-2026-2281",[366,10313],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[10318],{"type":3366,"score":4629},[10320,10322,10323,10325,10327,10329,10331,10333,10335,10337,10339],{"type":3347,"url":10321},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3340,"url":5601},{"type":3333,"url":10324},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3333,"url":10326},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3347,"url":10328},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3347,"url":10330},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3347,"url":10332},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3347,"url":10334},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3767,"url":10336},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3404,"url":10338},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3404,"url":10340},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3485,3486,3487,5608,5609,5610,5773,5774,5775],{"id":367,"slug":10343,"dossier":47,"summary":7942,"aliases":10344,"sourceIds":10347,"published":7947,"modified":10348,"checkedAt":7,"severity":10349,"references":10352,"versionKeys":10366,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[10345,10346],"CVE-2024-11393","PYSEC-2024-228",[367,10346],"2026-09-10T03:50:55.987633957Z",[10350,10351],{"type":3366,"score":7951},{"type":3366,"score":4745},[10353,10355,10356,10357,10358,10360,10362,10364],{"type":3347,"url":10354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":3333,"url":7957},{"type":3333,"url":7959},{"type":3340,"url":3439},{"type":3333,"url":10359},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":3333,"url":10361},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":3347,"url":10363},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":3347,"url":10365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[3446],{"id":368,"slug":10368,"dossier":47,"summary":10369,"aliases":10370,"sourceIds":10373,"published":10374,"modified":10375,"checkedAt":7,"severity":10376,"references":10379,"versionKeys":10391,"packageCount":32,"repositoryCount":3577},"ghsa-ww6m-cw3f-q94g-c2ac9639","NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'",[10371,10372],"CVE-2026-81722","PYSEC-2026-3738",[368,10372],"2026-08-27T17:21:02.800Z","2026-09-10T03:50:54.572733114Z",[10377,10378],{"type":3329,"score":3900},{"type":3329,"score":6197},[10380,10382,10384,10385,10386,10387,10389],{"type":3441,"url":10381},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ww6m-cw3f-q94g",{"type":3347,"url":10383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81722",{"type":3333,"url":6030},{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":10388},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3738.yaml",{"type":3347,"url":10390},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-porterstemmer-before-3.10.3-quadratic-time-dos",[3947,3948,3949],{"id":369,"slug":10393,"dossier":47,"summary":10394,"aliases":10395,"sourceIds":10397,"published":10398,"modified":10399,"checkedAt":7,"severity":10400,"references":10403,"versionKeys":10415,"packageCount":32,"repositoryCount":105},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[10396],"CVE-2026-91991",[369],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[10401],{"type":3329,"score":10402},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10404,10406,10407,10409,10411,10413,10414],{"type":3333,"url":10405},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":3333,"url":5811},{"type":3333,"url":10408},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":3333,"url":10410},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":3333,"url":10412},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":3340,"url":4052},{"type":3333,"url":5818},[4064,5820],{"id":370,"slug":10417,"dossier":47,"summary":10418,"aliases":10419,"sourceIds":10422,"published":10423,"modified":10424,"checkedAt":7,"severity":10425,"references":10428,"versionKeys":10440,"packageCount":32,"repositoryCount":105},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[10420,10421],"CVE-2026-41314","PYSEC-2026-3026",[370,10421],"2026-04-16T21:30:25Z","2026-09-10T03:51:03.926113177Z",[10426,10427],{"type":3366,"score":4322},{"type":3329,"score":4324},[10429,10431,10433,10434,10435,10436,10437,10438],{"type":3333,"url":10430},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3347,"url":10432},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3333,"url":5669},{"type":3333,"url":5671},{"type":3340,"url":3341},{"type":3333,"url":4336},{"type":3340,"url":3345},{"type":3347,"url":10439},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3352,3353],{"id":371,"slug":10442,"dossier":47,"summary":10443,"aliases":10444,"sourceIds":10448,"published":10449,"modified":10450,"checkedAt":7,"severity":10451,"references":10456,"versionKeys":10472,"packageCount":32,"repositoryCount":105},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[10445,10446,10447],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[371],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[10452,10454],{"type":3366,"score":10453},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":3329,"score":10455},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10457,10459,10461,10463,10465,10466,10468,10470],{"type":3347,"url":10458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":3333,"url":10460},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":3333,"url":10462},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":3333,"url":10464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":3340,"url":3774},{"type":3333,"url":10467},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":3333,"url":10469},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":3333,"url":10471},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3786,3787],{"id":372,"slug":10474,"dossier":47,"summary":10475,"aliases":10476,"sourceIds":10479,"published":10480,"modified":10481,"checkedAt":7,"severity":10482,"references":10485,"versionKeys":10500,"packageCount":32,"repositoryCount":34},"ghsa-x5ph-mj9p-rfr8-05f43684","NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read",[10477,10478],"CVE-2026-63312","PYSEC-2026-3730",[372,10478],"2026-08-22T15:16:19.367Z","2026-09-08T15:46:56.600781081Z",[10483,10484],{"type":3329,"score":5431},{"type":3329,"score":5433},[10486,10488,10490,10492,10494,10495,10496,10498],{"type":3441,"url":10487},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x5ph-mj9p-rfr8",{"type":3347,"url":10489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63312",{"type":3333,"url":10491},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3588",{"type":3333,"url":10493},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F674ea75accdf08eca3782dee0a9c4ed7e0d0025b",{"type":3340,"url":3939},{"type":3333,"url":3975},{"type":3333,"url":10497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3730.yaml",{"type":3347,"url":10499},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-streambackedcorpusview-bypasses-pathsec-enforce-arbitrary-file-read",[3948,3949],{"id":373,"slug":10502,"dossier":47,"summary":10503,"aliases":10504,"sourceIds":10507,"published":10508,"modified":10509,"checkedAt":7,"severity":10510,"references":10512,"versionKeys":10519,"packageCount":32,"repositoryCount":3656},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[10505,10506],"CVE-2026-48817","PYSEC-2026-2280",[373,10506],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[10511],{"type":3366,"score":3644},[10513,10515,10517,10518],{"type":3347,"url":10514},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3347,"url":10516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3340,"url":5601},{"type":3347,"url":10334},[3485,3486,3487,5608,5609,5610,5773,5774,5775],{"id":374,"slug":10521,"dossier":47,"summary":10522,"aliases":10523,"sourceIds":10526,"published":10527,"modified":10528,"checkedAt":7,"severity":10529,"references":10531,"versionKeys":10546,"packageCount":32,"repositoryCount":105},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[10524,10525],"CVE-2026-27888","PYSEC-2026-3027",[374,10525],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[10530],{"type":3329,"score":4223},[10532,10534,10536,10538,10540,10541,10543,10544],{"type":3333,"url":10533},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3347,"url":10535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3333,"url":10537},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3333,"url":10539},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3340,"url":3341},{"type":3333,"url":10542},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3340,"url":3345},{"type":3347,"url":10545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3352,3353],{"id":375,"slug":10548,"dossier":47,"summary":10549,"aliases":10550,"sourceIds":10553,"published":10554,"modified":10555,"checkedAt":7,"severity":10556,"references":10559,"versionKeys":10574,"packageCount":32,"repositoryCount":105},"ghsa-x8wg-4xgc-vr54-f9dfa3b4","Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root",[10551,10552],"CVE-2026-71492","PYSEC-2026-3810",[375,10552],"2026-09-02T14:38:24Z","2026-09-10T12:25:29.001076918Z",[10557],{"type":3329,"score":10558},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10560,10562,10564,10566,10568,10569,10571,10572],{"type":3333,"url":10561},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",{"type":3347,"url":10563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71492",{"type":3333,"url":10565},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F77",{"type":3333,"url":10567},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fa215f6d779966945c56e0af5abed1ae5916fd9d3",{"type":3340,"url":7680},{"type":3333,"url":10570},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.5",{"type":3340,"url":7682},{"type":3347,"url":10573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",[7686],{"id":376,"slug":10576,"dossier":47,"summary":10577,"aliases":10578,"sourceIds":10581,"published":10582,"modified":10583,"checkedAt":7,"severity":10584,"references":10587,"versionKeys":10599,"packageCount":32,"repositoryCount":3577},"ghsa-x99w-6fgc-pmfw-512b3e4e","NLTK: Allowlisted pickle loaders still permit code execution in current source",[10579,10580],"CVE-2026-79657","PYSEC-2026-3735",[376,10580],"2026-08-25T12:16:28.870Z","2026-09-08T17:00:04.111203038Z",[10585,10586],{"type":3329,"score":4548},{"type":3329,"score":8494},[10588,10590,10592,10593,10594,10595,10597],{"type":3441,"url":10589},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x99w-6fgc-pmfw",{"type":3347,"url":10591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79657",{"type":3333,"url":4752},{"type":3340,"url":3939},{"type":3333,"url":3941},{"type":3333,"url":10596},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3735.yaml",{"type":3347,"url":10598},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization",[3947,3948,3949],{"id":377,"slug":10601,"dossier":47,"summary":10602,"aliases":10603,"sourceIds":10606,"published":10607,"modified":10608,"checkedAt":7,"severity":10609,"references":10612,"versionKeys":10618,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[10604,10605],"CVE-2026-54274","PYSEC-2026-2108",[377,10605],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[10610,10611],{"type":3329,"score":4223},{"type":3366,"score":3501},[10613,10615,10616],{"type":3347,"url":10614},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3340,"url":3506},{"type":3404,"url":10617},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3510,3511,3512,3513,3514,3515,3516,3517,3518],{"id":378,"slug":10620,"dossier":47,"summary":10621,"aliases":10622,"sourceIds":10626,"published":10627,"modified":10628,"checkedAt":7,"severity":10629,"references":10631,"versionKeys":10645,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[10623,10624,10625],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[378,10625],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[10630],{"type":3366,"score":7024},[10632,10634,10636,10638,10640,10642,10643],{"type":3347,"url":10633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3347,"url":10635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3333,"url":10637},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3404,"url":10639},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3333,"url":10641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3340,"url":4114},{"type":3333,"url":10644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[4121],{"id":379,"slug":10647,"dossier":47,"summary":10648,"aliases":10649,"sourceIds":10652,"published":10653,"modified":10654,"checkedAt":7,"severity":10655,"references":10657,"versionKeys":10665,"packageCount":32,"repositoryCount":674},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[10650,10651],"CVE-2026-48526","PYSEC-2026-179",[379,10651],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[10656],{"type":3366,"score":6387},[10658,10660,10662,10663],{"type":3441,"url":10659},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3347,"url":10661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3340,"url":3570},{"type":3333,"url":10664},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[3574,3576],{"id":380,"slug":10667,"dossier":47,"summary":10668,"aliases":10669,"sourceIds":10672,"published":10673,"modified":10674,"checkedAt":7,"severity":10675,"references":10677,"versionKeys":10686,"packageCount":32,"repositoryCount":34},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[10670,10671],"CVE-2026-12074","PYSEC-2026-3584",[380,10671],"2026-07-31T16:50:41Z","2026-09-10T03:50:53.172593126Z",[10676],{"type":3366,"score":4629},[10678,10680,10681,10682,10684],{"type":3333,"url":10679},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3340,"url":3939},{"type":3340,"url":4759},{"type":3347,"url":10683},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3347,"url":10685},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3948,3949],{"id":381,"slug":10688,"dossier":90,"summary":10689,"aliases":10690,"sourceIds":10694,"published":10695,"modified":10696,"checkedAt":7,"severity":10697,"references":10700,"versionKeys":10711,"packageCount":32,"repositoryCount":588},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[10691,10692,10693],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[381,10693],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[10698],{"type":3366,"score":10699},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[10701,10703,10705,10707,10709,10710],{"type":3441,"url":10702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3347,"url":10704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3404,"url":10706},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3404,"url":10708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3340,"url":4114},{"type":3347,"url":5063},[4118,4119,4120,4121,4122,4123,4124,4125,4126],{"id":382,"slug":10713,"dossier":47,"summary":10714,"aliases":10715,"sourceIds":10718,"published":10719,"modified":10720,"checkedAt":7,"severity":10721,"references":10724,"versionKeys":10737,"packageCount":32,"repositoryCount":103},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[10716,10717],"CVE-2026-9856","PYSEC-2026-3929",[382,10717],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[10722],{"type":3366,"score":10723},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[10725,10727,10729,10731,10732,10734,10735],{"type":3347,"url":10726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":3333,"url":10728},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":3333,"url":10730},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":3340,"url":3439},{"type":3333,"url":10733},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":3340,"url":3811},{"type":3347,"url":10736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[3446,3447,3448,3449,3450,3451,3452,3453,3454,10738],"pypi:transformers@5.8.0",{"id":383,"slug":10740,"dossier":47,"summary":10741,"aliases":10742,"sourceIds":10745,"published":10746,"modified":10747,"checkedAt":7,"severity":10748,"references":10750,"versionKeys":10758,"packageCount":32,"repositoryCount":32},"ghsa-xvp8-3mhv-424c-5f064018","lxml-html-clean has \u003Cbase> tag injection through default Cleaner configuration",[10743,10744],"CVE-2026-28350","PYSEC-2026-2202",[383,10744],"2026-03-02T19:35:52Z","2026-09-10T03:50:41.927155700Z",[10749],{"type":3366,"score":7576},[10751,10753,10755,10757],{"type":3441,"url":10752},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-xvp8-3mhv-424c",{"type":3347,"url":10754},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28350",{"type":3404,"url":10756},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F9c5612ca33b941eec4178abf8a5294b103403f34",{"type":3340,"url":4284},[4292],{"id":384,"slug":10760,"dossier":47,"summary":83,"aliases":10761,"sourceIds":10763,"published":10764,"modified":10765,"checkedAt":7,"severity":10766,"references":10768,"versionKeys":10774,"packageCount":32,"repositoryCount":674},"pysec-2025-183-08217171",[10762],"CVE-2025-45768",[384],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[10767],{"type":3366,"score":9615},[10769,10771,10773],{"type":3333,"url":10770},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3767,"url":10772},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3340,"url":3570},[3574,3576],{"id":385,"slug":10776,"dossier":47,"summary":83,"aliases":10777,"sourceIds":10780,"published":10781,"modified":10782,"checkedAt":7,"severity":10783,"references":10785,"versionKeys":10794,"packageCount":32,"repositoryCount":105},"pysec-2025-198-62b25ed4",[10778,10779],"BIT-pytorch-2025-46148","CVE-2025-46148",[385],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[10784],{"type":3366,"score":6173},[10786,10788,10790,10792],{"type":3347,"url":10787},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":3347,"url":10789},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3767,"url":10791},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":3404,"url":10793},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3786,3787],{"id":386,"slug":10796,"dossier":47,"summary":83,"aliases":10797,"sourceIds":10800,"published":10801,"modified":10802,"checkedAt":7,"severity":10803,"references":10805,"versionKeys":10811,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[10798,10799],"BIT-pytorch-2025-46149","CVE-2025-46149",[386],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[10804],{"type":3366,"score":6173},[10806,10807,10809],{"type":3347,"url":10787},{"type":3767,"url":10808},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":3404,"url":10810},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3787],{"id":387,"slug":10813,"dossier":47,"summary":83,"aliases":10814,"sourceIds":10817,"published":10818,"modified":10819,"checkedAt":7,"severity":10820,"references":10822,"versionKeys":10830,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[10815,10816],"BIT-pytorch-2025-46150","CVE-2025-46150",[387],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[10821],{"type":3366,"score":6173},[10823,10824,10826,10828],{"type":3347,"url":10787},{"type":3767,"url":10825},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3767,"url":10827},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":3404,"url":10829},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3787],{"id":388,"slug":10832,"dossier":47,"summary":83,"aliases":10833,"sourceIds":10836,"published":10837,"modified":10838,"checkedAt":7,"severity":10839,"references":10841,"versionKeys":10847,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[10834,10835],"BIT-pytorch-2025-46152","CVE-2025-46152",[388],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[10840],{"type":3366,"score":3466},[10842,10843,10845],{"type":3347,"url":10787},{"type":3767,"url":10844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":3404,"url":10846},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3787],{"id":389,"slug":10849,"dossier":47,"summary":83,"aliases":10850,"sourceIds":10853,"published":10854,"modified":10855,"checkedAt":7,"severity":10856,"references":10858,"versionKeys":10868,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[10851,10852],"BIT-pytorch-2025-46153","CVE-2025-46153",[389],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[10857],{"type":3366,"score":6173},[10859,10861,10862,10864,10866],{"type":3333,"url":10860},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":3347,"url":10787},{"type":3347,"url":10863},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3767,"url":10865},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":3404,"url":10867},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3787],{"id":390,"slug":10870,"dossier":47,"summary":83,"aliases":10871,"sourceIds":10874,"published":10875,"modified":10876,"checkedAt":7,"severity":10877,"references":10879,"versionKeys":10884,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[10872,10873],"BIT-pytorch-2025-55551","CVE-2025-55551",[390],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[10878],{"type":3366,"score":3501},[10880,10882],{"type":3347,"url":10881},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3767,"url":10883},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3786,3787,3788,5969,5970,9255],{"id":391,"slug":10886,"dossier":47,"summary":83,"aliases":10887,"sourceIds":10890,"published":10891,"modified":10892,"checkedAt":7,"severity":10893,"references":10895,"versionKeys":10899,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[10888,10889],"BIT-pytorch-2025-55552","CVE-2025-55552",[391],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[10894],{"type":3366,"score":3501},[10896,10897],{"type":3347,"url":10881},{"type":3767,"url":10898},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3786,3787,3788,5969,5970,9255],{"id":392,"slug":10901,"dossier":47,"summary":83,"aliases":10902,"sourceIds":10905,"published":10906,"modified":10907,"checkedAt":7,"severity":10908,"references":10910,"versionKeys":10916,"packageCount":32,"repositoryCount":674},"pysec-2025-205-fd5e58fd",[10903,10904],"BIT-pytorch-2025-55553","CVE-2025-55553",[392],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[10909],{"type":3366,"score":3501},[10911,10912,10914],{"type":3347,"url":10881},{"type":3767,"url":10913},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":3404,"url":10915},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3786,3787,3788],{"id":393,"slug":10918,"dossier":47,"summary":83,"aliases":10919,"sourceIds":10922,"published":10923,"modified":10924,"checkedAt":7,"severity":10925,"references":10927,"versionKeys":10931,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[10920,10921],"BIT-pytorch-2025-55554","CVE-2025-55554",[393],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[10926],{"type":3366,"score":3466},[10928,10929],{"type":3347,"url":10881},{"type":3767,"url":10930},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3786,3787,3788,5969,5970,9255],{"id":394,"slug":10933,"dossier":47,"summary":83,"aliases":10934,"sourceIds":10937,"published":10938,"modified":10939,"checkedAt":7,"severity":10940,"references":10942,"versionKeys":10948,"packageCount":32,"repositoryCount":674},"pysec-2025-207-2abef3fc",[10935,10936],"BIT-pytorch-2025-55557","CVE-2025-55557",[394],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[10941],{"type":3366,"score":3501},[10943,10944,10946],{"type":3347,"url":10881},{"type":3767,"url":10945},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":3404,"url":10947},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3786,3787,3788],{"id":395,"slug":10950,"dossier":47,"summary":83,"aliases":10951,"sourceIds":10954,"published":10955,"modified":10956,"checkedAt":7,"severity":10957,"references":10959,"versionKeys":10965,"packageCount":32,"repositoryCount":674},"pysec-2025-208-6e93fe9d",[10952,10953],"BIT-pytorch-2025-55558","CVE-2025-55558",[395],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[10958],{"type":3366,"score":3501},[10960,10961,10963],{"type":3347,"url":10881},{"type":3767,"url":10962},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":3404,"url":10964},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3786,3787,3788],{"id":396,"slug":10967,"dossier":47,"summary":83,"aliases":10968,"sourceIds":10971,"published":10972,"modified":10973,"checkedAt":7,"severity":10974,"references":10976,"versionKeys":10982,"packageCount":32,"repositoryCount":674},"pysec-2025-209-e6f352b0",[10969,10970],"BIT-pytorch-2025-55560","CVE-2025-55560",[396],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[10975],{"type":3366,"score":3501},[10977,10978,10980],{"type":3347,"url":10881},{"type":3767,"url":10979},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":3404,"url":10981},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3786,3787,3788],{"id":397,"slug":10984,"dossier":47,"summary":83,"aliases":10985,"sourceIds":10987,"published":10988,"modified":10989,"checkedAt":7,"severity":10990,"references":10992,"versionKeys":10995,"packageCount":32,"repositoryCount":3577},"pysec-2025-211-d8bd15de",[10986],"CVE-2025-14920",[397],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[10991],{"type":3366,"score":3432},[10993],{"type":3347,"url":10994},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[3446,3447,3448,3449,3450],{"id":398,"slug":10997,"dossier":47,"summary":83,"aliases":10998,"sourceIds":11000,"published":11001,"modified":11002,"checkedAt":7,"severity":11003,"references":11005,"versionKeys":11008,"packageCount":32,"repositoryCount":3577},"pysec-2025-212-a011b97d",[10999],"CVE-2025-14921",[398],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[11004],{"type":3366,"score":3432},[11006],{"type":3347,"url":11007},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[3446,3447,3448,3449,3450],{"id":399,"slug":11010,"dossier":47,"summary":83,"aliases":11011,"sourceIds":11013,"published":11014,"modified":11015,"checkedAt":7,"severity":11016,"references":11018,"versionKeys":11021,"packageCount":32,"repositoryCount":3577},"pysec-2025-213-9043dc9b",[11012],"CVE-2025-14924",[399],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[11017],{"type":3366,"score":3432},[11019],{"type":3347,"url":11020},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[3446,3447,3448,3449,3450],{"id":400,"slug":11023,"dossier":47,"summary":83,"aliases":11024,"sourceIds":11026,"published":11027,"modified":11028,"checkedAt":7,"severity":11029,"references":11031,"versionKeys":11034,"packageCount":32,"repositoryCount":3577},"pysec-2025-214-eb241255",[11025],"CVE-2025-14926",[400],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[11030],{"type":3366,"score":3432},[11032],{"type":3347,"url":11033},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[3446,3447,3448,3449,3450],{"id":401,"slug":11036,"dossier":47,"summary":83,"aliases":11037,"sourceIds":11039,"published":11040,"modified":11041,"checkedAt":7,"severity":11042,"references":11044,"versionKeys":11047,"packageCount":32,"repositoryCount":3577},"pysec-2025-215-6064f491",[11038],"CVE-2025-14927",[401],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[11043],{"type":3366,"score":3432},[11045],{"type":3347,"url":11046},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[3446,3447,3448,3449,3450],{"id":402,"slug":11049,"dossier":47,"summary":83,"aliases":11050,"sourceIds":11052,"published":11053,"modified":11054,"checkedAt":7,"severity":11055,"references":11057,"versionKeys":11060,"packageCount":32,"repositoryCount":3577},"pysec-2025-216-5708ed01",[11051],"CVE-2025-14928",[402],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[11056],{"type":3366,"score":3432},[11058],{"type":3347,"url":11059},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[3446,3447,3448,3449,3450],{"id":403,"slug":11062,"dossier":47,"summary":83,"aliases":11063,"sourceIds":11065,"published":11066,"modified":11067,"checkedAt":7,"severity":11068,"references":11070,"versionKeys":11073,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[11064],"CVE-2025-14929",[403],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[11069],{"type":3366,"score":3432},[11071],{"type":3347,"url":11072},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[3446,3447,3448,3449,3450,3451,3452,3453,3454],{"id":404,"slug":11075,"dossier":47,"summary":83,"aliases":11076,"sourceIds":11078,"published":11079,"modified":11080,"checkedAt":7,"severity":11081,"references":11083,"versionKeys":11086,"packageCount":32,"repositoryCount":608},"pysec-2025-218-39811fc3",[11077],"CVE-2025-14930",[404],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[11082],{"type":3366,"score":3432},[11084],{"type":3347,"url":11085},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[3446,3447,3448,3449,3450,3451],{"id":405,"slug":11088,"dossier":47,"summary":83,"aliases":11089,"sourceIds":11092,"published":11093,"modified":11094,"checkedAt":7,"severity":11095,"references":11097,"versionKeys":11108,"packageCount":32,"repositoryCount":11109},"pysec-2026-139-96951ff6",[11090,11091],"BIT-pytorch-2026-4538","CVE-2026-4538",[405],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[11096],{"type":3366,"score":5248},[11098,11100,11102,11104,11106],{"type":3333,"url":11099},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":3347,"url":11101},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":3347,"url":11103},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3767,"url":11105},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":3404,"url":11107},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[9695,3786,3787,3788,5969,5970,9255,9256,9257,9258],14,{"id":406,"slug":11111,"dossier":47,"summary":83,"aliases":11112,"sourceIds":11114,"published":11115,"modified":11116,"checkedAt":7,"severity":11117,"references":11119,"versionKeys":11122,"packageCount":32,"repositoryCount":34},"pysec-2026-2085-e081ac1d",[11113],"CVE-2026-12252",[406],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[11118],{"type":3366,"score":3432},[11120],{"type":3441,"url":11121},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3948,3949],{"id":407,"slug":11124,"dossier":47,"summary":83,"aliases":11125,"sourceIds":11128,"published":11129,"modified":11130,"checkedAt":7,"severity":11131,"references":11133,"versionKeys":11138,"packageCount":32,"repositoryCount":105},"pysec-2026-2120-174938a3",[11126,11127],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[407],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[11132],{"type":3366,"score":4550},[11134,11136],{"type":3347,"url":11135},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":3404,"url":11137},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[3886,3887],{"id":408,"slug":11140,"dossier":90,"summary":83,"aliases":11141,"sourceIds":11144,"published":11145,"modified":11146,"checkedAt":7,"severity":11147,"references":11150,"versionKeys":11165,"packageCount":32,"repositoryCount":588},"pysec-2026-2132-627bf7c7",[11142,11143],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[408],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[11148],{"type":3366,"score":11149},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[11151,11153,11155,11157,11159,11161,11163],{"type":3333,"url":11152},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":3333,"url":11154},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":3347,"url":11156},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":3347,"url":11158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3767,"url":11160},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":3404,"url":11162},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3441,"url":11164},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[11166,11167,11168,11169,11170,11171],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":409,"slug":11173,"dossier":47,"summary":83,"aliases":11174,"sourceIds":11179,"published":11180,"modified":11181,"checkedAt":7,"severity":11182,"references":11184,"versionKeys":11200,"packageCount":32,"repositoryCount":598},"pysec-2026-2286-8795b007",[11175,11176,11177,11178],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[409],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[11183],{"type":3366,"score":4745},[11185,11187,11189,11190,11192,11194,11196,11198],{"type":3333,"url":11186},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":3333,"url":11188},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":3347,"url":8094},{"type":3347,"url":11191},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":3347,"url":11193},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3767,"url":11195},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3767,"url":11197},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":3404,"url":11199},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3786,3787,3788,5969,5970,9255,9256,9257,9258],{"id":410,"slug":11202,"dossier":47,"summary":83,"aliases":11203,"sourceIds":11205,"published":11206,"modified":11207,"checkedAt":7,"severity":11208,"references":11211,"versionKeys":11214,"packageCount":32,"repositoryCount":34},"pysec-2026-3954-37000510",[11204],"CVE-2026-12261",[410],"2026-08-07T07:16:26.377Z","2026-09-10T13:00:04.157935205Z",[11209],{"type":3366,"score":11210},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[11212],{"type":3767,"url":11213},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8b8c381e-08a8-4e4f-bb46-a320c96a364f",[3948,3949],{"id":411,"slug":11216,"dossier":47,"summary":83,"aliases":11217,"sourceIds":11219,"published":11220,"modified":11221,"checkedAt":7,"severity":11222,"references":11225,"versionKeys":11228,"packageCount":32,"repositoryCount":34},"pysec-2026-3955-281f9a73",[11218],"CVE-2026-12372",[411],"2026-08-09T23:16:35.793Z","2026-09-10T13:00:03.318185640Z",[11223],{"type":3366,"score":11224},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11226],{"type":3767,"url":11227},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2911b643-571c-42e4-b0c2-9a1fa6f491db",[3948,3949],{"id":412,"slug":11230,"dossier":47,"summary":83,"aliases":11231,"sourceIds":11233,"published":11234,"modified":11235,"checkedAt":7,"severity":11236,"references":11238,"versionKeys":11243,"packageCount":32,"repositoryCount":32},"pysec-2026-598-ff2a157b",[11232],"CVE-2026-22218",[412],"2026-01-20T00:15:48.910Z","2026-07-02T08:45:06.090293533Z",[11237],{"type":3366,"score":5459},[11239,11240,11242],{"type":3347,"url":3541},{"type":3347,"url":11241},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-arbitrary-file-read-via-project-element",{"type":3441,"url":3545},[3551],{"id":413,"slug":11245,"dossier":47,"summary":83,"aliases":11246,"sourceIds":11248,"published":11249,"modified":11250,"checkedAt":7,"severity":11251,"references":11253,"versionKeys":11256,"packageCount":32,"repositoryCount":34},"pysec-2026-99-2c63e84f",[11247],"CVE-2026-0848",[413],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[11252],{"type":3366,"score":5718},[11254],{"type":3441,"url":11255},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3948,3949],1790757841610]