[{"data":1,"prerenderedAt":5160},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11301":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":260,"related":263},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-30T08:36:30.871Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-30T08:33:18.305Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,38,37,0,4104,4093,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2460,50,7146,9,55,2426,34,822,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":258,"providers":259},"opencode:11301","opencode-11301",11301,"URBAN.KI AirGuardAI","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai","363d2a9d9e13db101242ed39bc94a5524509eb1f","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fcommit\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f","2026-09-15T12:42:44.969Z","2026-09-14T08:20:54.000Z",{"complete":90,"entryCount":91,"truncated":47},true,95,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","d8e9658e0c9c7ed8859da5223f957aa8010f39de","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fblob\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f\u002Fuv.lock","59cb0231b92ede8e7f9c5ef5b78867b9fa36e7a4e0fc2600956a5c532b08c9e0",313514,"parsed",102,[102],"pypi",7,17,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-768j-98cg-p3fv","GHSA-7f5h-v6xp-fcq8","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jw8x-6495-233v","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3716",152,[],{"files":261,"occurrenceCount":100},[262],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":264,"vulnerabilities":1198},[265,278,288,298,308,317,326,335,346,358,368,377,387,396,406,415,425,434,444,453,462,471,480,491,500,510,519,529,539,548,557,566,575,584,593,602,611,620,629,638,646,655,664,673,682,691,700,709,718,726,735,744,753,762,771,780,789,798,808,817,826,835,844,853,862,871,880,889,898,907,916,924,933,941,951,959,968,976,985,994,1003,1012,1021,1030,1040,1049,1058,1067,1075,1084,1092,1101,1110,1118,1126,1135,1144,1153,1162,1171,1180,1189],{"id":266,"slug":267,"identity":268,"label":269,"aiRelevant":90,"provider":270,"advisoryCount":35,"licenseExpressions":273,"versions":275,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":277},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":271,"label":272},"hugging-face","Hugging Face",[274],"Apache-2.0",[276],"5.8.0",[56],{"id":279,"slug":280,"identity":281,"label":282,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":283,"versions":285,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":287},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[284],"BSD-3-Clause",[286],"2.11.0",[56],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":90,"provider":293,"advisoryCount":32,"licenseExpressions":294,"versions":295,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":297},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":271,"label":272},[274],[296],"4.8.5",[56],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":303,"versions":305,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":307},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[304],"non-standard",[306],"1.13.0",[56],{"id":309,"slug":310,"identity":311,"label":312,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":313,"versions":314,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":316},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[284,304],[315],"1.8.0",[56],{"id":318,"slug":319,"identity":320,"label":321,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":322,"versions":323,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":325},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[304],[324],"0.22.2",[56],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":331,"versions":332,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":334},"package:pypi:lightgbm","lightgbm-da1283c4","pypi:lightgbm","LightGBM",[304],[333],"4.6.0",[56],{"id":336,"slug":337,"identity":338,"label":339,"aiRelevant":47,"provider":83,"advisoryCount":340,"licenseExpressions":341,"versions":343,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":345},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[274,342],"Apache-2.0 AND MIT",[344],"3.13.5",[56],{"id":347,"slug":348,"identity":349,"label":350,"aiRelevant":47,"provider":83,"advisoryCount":351,"licenseExpressions":352,"versions":355,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":357},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[353,354],"HPND","MIT-CMU",[356],"12.2.0",[56],{"id":359,"slug":360,"identity":361,"label":362,"aiRelevant":47,"provider":83,"advisoryCount":363,"licenseExpressions":364,"versions":365,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":367},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[274],[366],"0.0.28",[56],{"id":369,"slug":370,"identity":371,"label":372,"aiRelevant":47,"provider":83,"advisoryCount":363,"licenseExpressions":373,"versions":374,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":376},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[284],[375],"1.0.0",[56],{"id":378,"slug":379,"identity":380,"label":381,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":382,"versions":384,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":386},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[383],"MIT",[385],"2.7.0",[56],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":392,"versions":393,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":395},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[284,304],[394],"3.1.6",[56],{"id":397,"slug":398,"identity":399,"label":400,"aiRelevant":47,"provider":83,"advisoryCount":401,"licenseExpressions":402,"versions":403,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":405},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[274],[404],"2.34.0",[56],{"id":407,"slug":408,"identity":409,"label":410,"aiRelevant":47,"provider":83,"advisoryCount":401,"licenseExpressions":411,"versions":412,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":414},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[383],[413],"81.0.0",[56],{"id":416,"slug":417,"identity":418,"label":419,"aiRelevant":47,"provider":83,"advisoryCount":420,"licenseExpressions":421,"versions":422,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":424},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",2,[383],[423],"4.13.0",[56],{"id":426,"slug":427,"identity":428,"label":429,"aiRelevant":47,"provider":83,"advisoryCount":420,"licenseExpressions":430,"versions":432,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":433},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[383,431],"Unlicense",[27],[56],{"id":435,"slug":436,"identity":437,"label":438,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":439,"versions":441,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":443},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[440],"MPL-2.0",[442],"2026.4.22",[56],{"id":445,"slug":446,"identity":447,"label":448,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":449,"versions":450,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":452},"package:pypi:click","click-ef97f731","pypi:click","click",[284,304],[451],"8.3.3",[56],{"id":454,"slug":455,"identity":456,"label":457,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":458,"versions":459,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":461},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[383],[460],"4.62.1",[56],{"id":463,"slug":464,"identity":465,"label":466,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":467,"versions":468,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":470},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[383],[469],"0.16.0",[56],{"id":472,"slug":473,"identity":474,"label":475,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":476,"versions":477,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":479},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[284,304],[478],"3.14",[56],{"id":481,"slug":482,"identity":483,"label":484,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":485,"versions":488,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":490},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[486,487],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[489],"3.11.9",[56],{"id":492,"slug":493,"identity":494,"label":495,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":496,"versions":497,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":499},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[274,304],[498],"24.0.0",[56],{"id":501,"slug":502,"identity":503,"label":504,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":505,"versions":507,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":509},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[506],"BSD-2-Clause",[508],"2.20.0",[56],{"id":511,"slug":512,"identity":513,"label":514,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":515,"versions":516,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":518},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[284],[517],"1.2.2",[56],{"id":520,"slug":521,"identity":522,"label":523,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":524,"versions":526,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":528},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[525],"MIT AND MPL-2.0",[527],"4.67.3",[56],{"id":530,"slug":531,"identity":532,"label":533,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":534,"versions":536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":538},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[535],"PSF-2.0",[537],"2.6.1",[56],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":544,"versions":545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":547},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[274],[546],"1.4.0",[56],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":553,"versions":554,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":556},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[383],[555],"0.0.4",[56],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":562,"versions":563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":565},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[383],[564],"26.1.0",[56],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":571,"versions":572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":574},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[383],[573],"3.4.7",[56],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":580,"versions":581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":583},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[304],[582],"0.4.6",[56],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":589,"versions":590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":592},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[304],[591],"1.3.3",[56],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":598,"versions":599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":601},"package:pypi:cuda-bindings","cuda-bindings-63e94baa","pypi:cuda-bindings","cuda-bindings",[304],[600],"13.2.0",[56],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":607,"versions":608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":610},"package:pypi:cuda-pathfinder","cuda-pathfinder-6d2ddb13","pypi:cuda-pathfinder","cuda-pathfinder",[274],[609],"1.5.4",[56],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":616,"versions":617,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":619},"package:pypi:cuda-toolkit","cuda-toolkit-96ffd01e","pypi:cuda-toolkit","cuda-toolkit",[],[618],"13.0.2",[56],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":625,"versions":626,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":628},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[304],[627],"0.12.1",[56],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":634,"versions":635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":637},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[284],[636],"0.4.1",[56],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":643,"versions":644,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":645},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[274],[315],[56],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":651,"versions":652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":654},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[284,304],[653],"2026.2.0",[56],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":660,"versions":661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":663},"package:pypi:gradio-client","gradio-client-f28a3144","pypi:gradio-client","gradio-client",[274],[662],"2.5.0",[56],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":669,"versions":670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":672},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[274],[671],"1.5.0",[56],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":678,"versions":679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":681},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[284],[680],"1.0.9",[56],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":687,"versions":688,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":690},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[383],[689],"0.7.1",[56],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":696,"versions":697,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":699},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[284],[698],"0.28.1",[56],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":705,"versions":706,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":708},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[274,304],[707],"1.14.0",[56],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":714,"versions":715,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":717},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[284],[716],"1.5.3",[56],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":723,"versions":724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":725},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[304],[671],[56],{"id":727,"slug":728,"identity":729,"label":730,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":731,"versions":732,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":734},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[383],[733],"4.2.0",[56],{"id":736,"slug":737,"identity":738,"label":739,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":740,"versions":741,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":743},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[284,304],[742],"3.0.3",[56],{"id":745,"slug":746,"identity":747,"label":748,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":749,"versions":750,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":752},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[304],[751],"3.10.9",[56],{"id":754,"slug":755,"identity":756,"label":757,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":758,"versions":759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":761},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[383],[760],"0.1.2",[56],{"id":763,"slug":764,"identity":765,"label":766,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":767,"versions":768,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":770},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[304],[769],"1.3.0",[56],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":776,"versions":777,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":779},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[274],[778],"6.7.1",[56],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":785,"versions":786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":788},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[284],[787],"0.70.19",[56],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":794,"versions":795,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":797},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[284,304],[796],"3.6.1",[56],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":803,"versions":805,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":807},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[804,304],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[806],"2.4.4",[56],{"id":809,"slug":810,"identity":811,"label":812,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":813,"versions":814,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":816},"package:pypi:nvidia-cublas","nvidia-cublas-6a0535be","pypi:nvidia-cublas","nvidia-cublas",[304],[815],"13.1.0.3",[56],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":822,"versions":823,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":825},"package:pypi:nvidia-cuda-cupti","nvidia-cuda-cupti-28886b51","pypi:nvidia-cuda-cupti","nvidia-cuda-cupti",[304],[824],"13.0.85",[56],{"id":827,"slug":828,"identity":829,"label":830,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":831,"versions":832,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":834},"package:pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc-79a057fb","pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc",[304],[833],"13.0.88",[56],{"id":836,"slug":837,"identity":838,"label":839,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":840,"versions":841,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":843},"package:pypi:nvidia-cuda-runtime","nvidia-cuda-runtime-55699b1c","pypi:nvidia-cuda-runtime","nvidia-cuda-runtime",[304],[842],"13.0.96",[56],{"id":845,"slug":846,"identity":847,"label":848,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":849,"versions":850,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":852},"package:pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13-2486f81c","pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13",[304],[851],"9.19.0.56",[56],{"id":854,"slug":855,"identity":856,"label":857,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":858,"versions":859,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":861},"package:pypi:nvidia-cufft","nvidia-cufft-b2cd0527","pypi:nvidia-cufft","nvidia-cufft",[304],[860],"12.0.0.61",[56],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":867,"versions":868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":870},"package:pypi:nvidia-cufile","nvidia-cufile-52c06111","pypi:nvidia-cufile","nvidia-cufile",[304],[869],"1.15.1.6",[56],{"id":872,"slug":873,"identity":874,"label":875,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":876,"versions":877,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":879},"package:pypi:nvidia-curand","nvidia-curand-05859d58","pypi:nvidia-curand","nvidia-curand",[304],[878],"10.4.0.35",[56],{"id":881,"slug":882,"identity":883,"label":884,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":885,"versions":886,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":888},"package:pypi:nvidia-cusolver","nvidia-cusolver-6f33f83d","pypi:nvidia-cusolver","nvidia-cusolver",[304],[887],"12.0.4.66",[56],{"id":890,"slug":891,"identity":892,"label":893,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":894,"versions":895,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":897},"package:pypi:nvidia-cusparse","nvidia-cusparse-6ffaf037","pypi:nvidia-cusparse","nvidia-cusparse",[304],[896],"12.6.3.3",[56],{"id":899,"slug":900,"identity":901,"label":902,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":903,"versions":904,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":906},"package:pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13-bf1c94c0","pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13",[304],[905],"0.8.0",[56],{"id":908,"slug":909,"identity":910,"label":911,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":912,"versions":913,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":915},"package:pypi:nvidia-nccl-cu13","nvidia-nccl-cu13-e883df84","pypi:nvidia-nccl-cu13","nvidia-nccl-cu13",[304],[914],"2.28.9",[56],{"id":917,"slug":918,"identity":919,"label":920,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":921,"versions":922,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":923},"package:pypi:nvidia-nvjitlink","nvidia-nvjitlink-c5d1771c","pypi:nvidia-nvjitlink","nvidia-nvjitlink",[304],[833],[56],{"id":925,"slug":926,"identity":927,"label":928,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":929,"versions":930,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":932},"package:pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13-8f04166d","pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13",[304],[931],"3.4.5",[56],{"id":934,"slug":935,"identity":936,"label":937,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":938,"versions":939,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":940},"package:pypi:nvidia-nvtx","nvidia-nvtx-2bf32610","pypi:nvidia-nvtx","nvidia-nvtx",[274],[824],[56],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":946,"versions":948,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":950},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[947,304],"Apache-2.0 OR BSD-2-Clause",[949],"26.2",[56],{"id":952,"slug":953,"identity":954,"label":955,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":956,"versions":957,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":958},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[304],[742],[56],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":964,"versions":965,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":967},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[383,304],[966],"1.40.1",[56],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":973,"versions":974,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":975},"package:pypi:polars-runtime-32","polars-runtime-32-7674b461","pypi:polars-runtime-32","polars-runtime-32",[383],[966],[56],{"id":977,"slug":978,"identity":979,"label":980,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":981,"versions":982,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":984},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[274],[983],"0.5.2",[56],{"id":986,"slug":987,"identity":988,"label":989,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":990,"versions":991,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":993},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[284],[992],"7.2.2",[56],{"id":995,"slug":996,"identity":997,"label":998,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":999,"versions":1000,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1002},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[383],[1001],"3.3.2",[56],{"id":1004,"slug":1005,"identity":1006,"label":1007,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1008,"versions":1009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1011},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[383],[1010],"3.7.2",[56],{"id":1013,"slug":1014,"identity":1015,"label":1016,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1017,"versions":1018,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1020},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[304],[1019],"2.9.0.post0",[56],{"id":1022,"slug":1023,"identity":1024,"label":1025,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1026,"versions":1027,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1029},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[383],[1028],"6.0.3",[56],{"id":1031,"slug":1032,"identity":1033,"label":1034,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1035,"versions":1037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1039},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1036,304],"Apache-2.0 AND CNRI-Python",[1038],"2026.5.9",[56],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1045,"versions":1046,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1048},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[383],[1047],"15.0.0",[56],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1054,"versions":1055,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1057},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[304],[1056],"0.7.0",[56],{"id":1059,"slug":1060,"identity":1061,"label":1062,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1063,"versions":1064,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1066},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[304],[1065],"1.17.1",[56],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1072,"versions":1073,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1074},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[304],[609],[56],{"id":1076,"slug":1077,"identity":1078,"label":1079,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1080,"versions":1081,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1083},"package:pypi:six","six-3c3888bd","pypi:six","six",[383],[1082],"1.17.0",[56],{"id":1085,"slug":1086,"identity":1087,"label":1088,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1089,"versions":1090,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1091},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[304],[707],[56],{"id":1093,"slug":1094,"identity":1095,"label":1096,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1097,"versions":1098,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1100},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[284],[1099],"3.6.0",[56],{"id":1102,"slug":1103,"identity":1104,"label":1105,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1106,"versions":1107,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1109},"package:pypi:trackio","trackio-de70160f","pypi:trackio","trackio",[383],[1108],"0.25.1",[56],{"id":1111,"slug":1112,"identity":1113,"label":1114,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1115,"versions":1116,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1117},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[383],[1099],[56],{"id":1119,"slug":1120,"identity":1121,"label":1122,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1123,"versions":1124,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1125},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[383],[1108],[56],{"id":1127,"slug":1128,"identity":1129,"label":1130,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1131,"versions":1132,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1134},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[535,304],[1133],"4.15.0",[56],{"id":1136,"slug":1137,"identity":1138,"label":1139,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1140,"versions":1141,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1143},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[274],[1142],"2026.2",[56],{"id":1145,"slug":1146,"identity":1147,"label":1148,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1149,"versions":1150,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1152},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[284],[1151],"0.46.0",[56],{"id":1154,"slug":1155,"identity":1156,"label":1157,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1158,"versions":1159,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1161},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[383],[1160],"0.22.1",[56],{"id":1163,"slug":1164,"identity":1165,"label":1166,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1167,"versions":1168,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1170},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[383],[1169],"1.1.1",[56],{"id":1172,"slug":1173,"identity":1174,"label":1175,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1176,"versions":1177,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1179},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[284],[1178],"16.0",[56],{"id":1181,"slug":1182,"identity":1183,"label":1184,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1185,"versions":1186,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1188},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[506,304],[1187],"3.7.0",[56],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1194,"versions":1195,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1197},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[274],[1196],"1.23.0",[56],[1199,1238,1272,1305,1337,1363,1399,1442,1468,1494,1517,1552,1578,1598,1634,1652,1678,1707,1746,1772,1797,1825,1848,1879,1916,1940,1963,1987,2017,2044,2063,2091,2114,2141,2164,2186,2209,2235,2258,2290,2323,2344,2363,2414,2453,2476,2501,2525,2548,2582,2608,2638,2658,2683,2715,2770,2802,2831,2863,2897,2922,2961,2985,3013,3036,3055,3088,3113,3141,3164,3192,3226,3260,3282,3305,3326,3361,3391,3424,3447,3474,3499,3520,3549,3573,3592,3614,3644,3672,3695,3720,3743,3765,3787,3814,3839,3863,3884,3908,3934,3956,3983,4003,4041,4073,4100,4127,4155,4182,4212,4246,4268,4291,4319,4346,4373,4396,4426,4478,4501,4527,4561,4586,4618,4637,4656,4684,4709,4736,4756,4773,4792,4809,4830,4846,4861,4878,4893,4910,4927,4944,4958,4971,4984,4997,5010,5023,5036,5049,5072,5105,5134],{"id":106,"slug":1200,"dossier":47,"summary":1201,"aliases":1202,"sourceIds":1205,"published":1206,"modified":1207,"checkedAt":7,"severity":1208,"references":1212,"versionKeys":1236,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1203,1204],"CVE-2024-39689","PYSEC-2024-230",[106,1204],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1209],{"type":1210,"score":1211},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1213,1216,1218,1221,1224,1227,1230,1232,1234],{"type":1214,"url":1215},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1214,"url":1217},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1219,"url":1220},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1222,"url":1223},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1225,"url":1226},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1228,"url":1229},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1225,"url":1231},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1214,"url":1233},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1214,"url":1235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1237],"pypi:certifi@2024.6.2",{"id":107,"slug":1239,"dossier":47,"summary":1240,"aliases":1241,"sourceIds":1244,"published":1245,"modified":1246,"checkedAt":7,"severity":1247,"references":1250,"versionKeys":1262,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1242,1243],"CVE-2026-4372","PYSEC-2026-2289",[107,1243],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[1248],{"type":1210,"score":1249},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1251,1253,1255,1257,1260],{"type":1214,"url":1252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1219,"url":1254},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1222,"url":1256},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1258,"url":1259},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1214,"url":1261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1263,1264,1265,1266,1267,1268,1269,1270,1271],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":108,"slug":1273,"dossier":47,"summary":1274,"aliases":1275,"sourceIds":1278,"published":1279,"modified":1280,"checkedAt":7,"severity":1281,"references":1284,"versionKeys":1301,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1276,1277],"CVE-2025-54121","PYSEC-2026-1941",[108,1277],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[1282],{"type":1210,"score":1283},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1285,1287,1289,1291,1293,1295,1297,1299],{"type":1225,"url":1286},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1214,"url":1288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1219,"url":1290},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1222,"url":1292},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1225,"url":1294},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1225,"url":1296},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1222,"url":1298},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1214,"url":1300},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1302,1303,1304],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":1306,"dossier":47,"summary":1307,"aliases":1308,"sourceIds":1311,"published":1312,"modified":1313,"checkedAt":7,"severity":1314,"references":1320,"versionKeys":1327,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1309,1310],"CVE-2026-54279","PYSEC-2026-2112",[109,1310],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[1315,1318],{"type":1316,"score":1317},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1319},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1321,1323,1325],{"type":1214,"url":1322},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1222,"url":1324},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1219,"url":1326},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1328,1329,1330,1331,1332,1333,1334,1335,1336],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":110,"slug":1338,"dossier":47,"summary":1339,"aliases":1340,"sourceIds":1343,"published":1344,"modified":1345,"checkedAt":7,"severity":1346,"references":1351,"versionKeys":1361,"packageCount":32,"repositoryCount":1362},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1341,1342],"CVE-2026-34514","PYSEC-2026-2096",[110,1342],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[1347,1349],{"type":1316,"score":1348},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1350},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1352,1354,1356,1358,1359],{"type":1219,"url":1353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1214,"url":1355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1219,"url":1357},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1222,"url":1324},{"type":1214,"url":1360},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1328,1329,1330,1331,1332,1333,1334,1335],10,{"id":111,"slug":1364,"dossier":90,"summary":1365,"aliases":1366,"sourceIds":1369,"published":1370,"modified":1371,"checkedAt":7,"severity":1372,"references":1375,"versionKeys":1392,"packageCount":32,"repositoryCount":1398},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1367,1368],"CVE-2025-66471","PYSEC-2026-1994",[111,1368],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1373],{"type":1316,"score":1374},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1376,1378,1380,1382,1384,1386,1388,1390],{"type":1225,"url":1377},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1214,"url":1379},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1219,"url":1381},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1225,"url":1383},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":1214,"url":1385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1225,"url":1387},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":1222,"url":1389},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1222,"url":1391},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1393,1394,1395,1396,1397],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":112,"slug":1400,"dossier":47,"summary":1401,"aliases":1402,"sourceIds":1406,"published":1407,"modified":1408,"checkedAt":7,"severity":1409,"references":1416,"versionKeys":1438,"packageCount":32,"repositoryCount":401},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1403,1404,1405],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[112,1405],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1410,1412,1414],{"type":1210,"score":1411},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1316,"score":1413},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1210,"score":1415},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1417,1419,1422,1424,1426,1428,1430,1432,1434,1436],{"type":1214,"url":1418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1420,"url":1421},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1420,"url":1423},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1225,"url":1425},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1222,"url":1427},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1225,"url":1429},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1420,"url":1431},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1214,"url":1433},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1214,"url":1435},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1214,"url":1437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1439,1440,1441],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":113,"slug":1443,"dossier":47,"summary":1444,"aliases":1445,"sourceIds":1448,"published":1449,"modified":1450,"checkedAt":7,"severity":1451,"references":1453,"versionKeys":1467,"packageCount":32,"repositoryCount":401},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1446,1447],"CVE-2025-3933","PYSEC-2026-1977",[113,1447],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[1452],{"type":1210,"score":1283},[1454,1456,1458,1460,1461,1463,1465],{"type":1214,"url":1455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1225,"url":1457},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1225,"url":1459},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1222,"url":1256},{"type":1225,"url":1462},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1222,"url":1464},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1214,"url":1466},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1263,1264,1265],{"id":114,"slug":1469,"dossier":90,"summary":1470,"aliases":1471,"sourceIds":1474,"published":1475,"modified":1476,"checkedAt":7,"severity":1477,"references":1480,"versionKeys":1493,"packageCount":32,"repositoryCount":1398},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1472,1473],"CVE-2026-21441","PYSEC-2026-1996",[114,1473],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1478,1479],{"type":1210,"score":1319},{"type":1316,"score":1374},[1481,1483,1485,1487,1488,1490,1491],{"type":1225,"url":1482},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1214,"url":1484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1219,"url":1486},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1222,"url":1389},{"type":1225,"url":1489},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1222,"url":1391},{"type":1214,"url":1492},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1393,1394,1395,1396,1397],{"id":115,"slug":1495,"dossier":47,"summary":1496,"aliases":1497,"sourceIds":1500,"published":1501,"modified":1502,"checkedAt":7,"severity":1503,"references":1507,"versionKeys":1516,"packageCount":32,"repositoryCount":1362},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1498,1499],"CVE-2026-34517","PYSEC-2026-2099",[115,1499],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[1504,1506],{"type":1316,"score":1505},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1283},[1508,1510,1512,1514,1515],{"type":1219,"url":1509},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1214,"url":1511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1219,"url":1513},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":116,"slug":1518,"dossier":90,"summary":1519,"aliases":1520,"sourceIds":1524,"published":1525,"modified":1526,"checkedAt":7,"severity":1527,"references":1529,"versionKeys":1542,"packageCount":32,"repositoryCount":104},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1521,1522,1523],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[116,1523],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1528],{"type":1210,"score":1319},[1530,1532,1534,1536,1538,1540],{"type":1258,"url":1531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1214,"url":1533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1219,"url":1535},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1225,"url":1537},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1222,"url":1539},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1214,"url":1541},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1543,1544,1545,1546,1547,1548,1549,1550,1551],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",{"id":117,"slug":1553,"dossier":47,"summary":1554,"aliases":1555,"sourceIds":1558,"published":1559,"modified":1560,"checkedAt":7,"severity":1561,"references":1564,"versionKeys":1577,"packageCount":32,"repositoryCount":363},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1556,1557],"CVE-2025-50182","PYSEC-2026-1997",[117,1557],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1562],{"type":1210,"score":1563},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1565,1567,1569,1571,1572,1574,1575],{"type":1225,"url":1566},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1214,"url":1568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1219,"url":1570},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1222,"url":1389},{"type":1225,"url":1573},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1222,"url":1391},{"type":1214,"url":1576},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1393,1394,1395,1396],{"id":118,"slug":1579,"dossier":47,"summary":1580,"aliases":1581,"sourceIds":1584,"published":1585,"modified":1586,"checkedAt":7,"severity":1587,"references":1591,"versionKeys":1597,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1582,1583],"CVE-2026-54273","PYSEC-2026-2107",[118,1583],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[1588,1590],{"type":1316,"score":1589},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1319},[1592,1594,1596],{"type":1214,"url":1593},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1219,"url":1595},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":119,"slug":1599,"dossier":47,"summary":1600,"aliases":1601,"sourceIds":1604,"published":1605,"modified":1606,"checkedAt":7,"severity":1607,"references":1612,"versionKeys":1629,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[1602,1603],"CVE-2026-69112","PYSEC-2026-3804",[119,1603],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[1608,1610],{"type":1210,"score":1609},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":1316,"score":1611},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1613,1615,1617,1619,1621,1623,1625,1627],{"type":1214,"url":1614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":1225,"url":1616},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":1225,"url":1618},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":1225,"url":1620},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":1222,"url":1622},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":1225,"url":1624},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":1222,"url":1626},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":1214,"url":1628},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[1630,1631,1632,1633],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":120,"slug":1635,"dossier":47,"summary":1636,"aliases":1637,"sourceIds":1640,"published":1641,"modified":1642,"checkedAt":7,"severity":1643,"references":1647,"versionKeys":1651,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1638,1639],"CVE-2026-54275","PYSEC-2026-237",[120,1639],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[1644,1646],{"type":1316,"score":1645},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1319},[1648,1650],{"type":1214,"url":1649},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":121,"slug":1653,"dossier":47,"summary":1654,"aliases":1655,"sourceIds":1658,"published":1659,"modified":1660,"checkedAt":7,"severity":1661,"references":1664,"versionKeys":1677,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[1656,1657],"CVE-2025-6921","PYSEC-2026-1980",[121,1657],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[1662],{"type":1210,"score":1663},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1665,1667,1669,1671,1672,1674,1675],{"type":1214,"url":1666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1225,"url":1668},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1225,"url":1670},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1222,"url":1256},{"type":1225,"url":1673},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1222,"url":1464},{"type":1214,"url":1676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1263,1264,1265,1266],{"id":122,"slug":1679,"dossier":90,"summary":1680,"aliases":1681,"sourceIds":1685,"published":1686,"modified":1687,"checkedAt":7,"severity":1688,"references":1691,"versionKeys":1706,"packageCount":32,"repositoryCount":104},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1682,1683,1684],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[122,1684],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1689],{"type":1210,"score":1690},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1692,1694,1696,1698,1700,1702,1704,1705],{"type":1258,"url":1693},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1214,"url":1695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1219,"url":1697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1219,"url":1699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1219,"url":1701},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1225,"url":1703},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1222,"url":1539},{"type":1214,"url":1541},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":123,"slug":1708,"dossier":47,"summary":1709,"aliases":1710,"sourceIds":1713,"published":1714,"modified":1715,"checkedAt":7,"severity":1716,"references":1719,"versionKeys":1742,"packageCount":32,"repositoryCount":1745},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1711,1712],"CVE-2026-4539","PYSEC-2026-2987",[123,1712],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1717,1718],{"type":1210,"score":1411},{"type":1316,"score":1413},[1720,1722,1724,1726,1728,1730,1732,1734,1736,1738,1740],{"type":1214,"url":1721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1225,"url":1723},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1225,"url":1725},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1225,"url":1727},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1222,"url":1729},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1225,"url":1731},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1225,"url":1733},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1225,"url":1735},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1225,"url":1737},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1222,"url":1739},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1214,"url":1741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1743,1744],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":124,"slug":1747,"dossier":47,"summary":1748,"aliases":1749,"sourceIds":1753,"published":1754,"modified":1755,"checkedAt":7,"severity":1756,"references":1761,"versionKeys":1771,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1750,1751,1752],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[124,1752],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1757,1759],{"type":1316,"score":1758},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1210,"score":1760},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1762,1764,1766,1768,1770],{"type":1214,"url":1763},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1214,"url":1765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1225,"url":1767},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1225,"url":1769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1222,"url":1427},[1439],{"id":125,"slug":1773,"dossier":47,"summary":1774,"aliases":1775,"sourceIds":1778,"published":1779,"modified":1780,"checkedAt":7,"severity":1781,"references":1784,"versionKeys":1796,"packageCount":32,"repositoryCount":363},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1776,1777],"CVE-2025-69226","PYSEC-2026-1097",[125,1777],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[1782],{"type":1316,"score":1783},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1785,1787,1789,1791,1792,1794],{"type":1225,"url":1786},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1214,"url":1788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1219,"url":1790},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1222,"url":1324},{"type":1222,"url":1793},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1214,"url":1795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1328,1329,1330,1331,1332,1333,1334],{"id":126,"slug":1798,"dossier":47,"summary":1799,"aliases":1800,"sourceIds":1803,"published":1804,"modified":1805,"checkedAt":7,"severity":1806,"references":1810,"versionKeys":1823,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[1801,1802],"CVE-2024-53981","PYSEC-2026-1851",[126,1802],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[1807,1808],{"type":1210,"score":1319},{"type":1316,"score":1809},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1811,1813,1815,1817,1819,1821],{"type":1225,"url":1812},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1214,"url":1814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1225,"url":1816},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1222,"url":1818},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1222,"url":1820},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1214,"url":1822},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[1824],"pypi:python-multipart@0.0.9",{"id":127,"slug":1826,"dossier":47,"summary":1827,"aliases":1828,"sourceIds":1831,"published":1832,"modified":1833,"checkedAt":7,"severity":1834,"references":1836,"versionKeys":1847,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[1829,1830],"CVE-2025-6638","PYSEC-2026-1981",[127,1830],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[1835],{"type":1210,"score":1663},[1837,1839,1840,1841,1842,1844,1845],{"type":1214,"url":1838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1225,"url":1668},{"type":1225,"url":1670},{"type":1222,"url":1256},{"type":1225,"url":1843},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1222,"url":1464},{"type":1214,"url":1846},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1263,1264,1265,1266],{"id":128,"slug":1849,"dossier":90,"summary":1850,"aliases":1851,"sourceIds":1853,"published":1854,"modified":1855,"checkedAt":7,"severity":1856,"references":1859,"versionKeys":1870,"packageCount":32,"repositoryCount":1398},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[1852],"CVE-2026-64847",[128],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[1857],{"type":1316,"score":1858},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1860,1862,1864,1866,1868],{"type":1225,"url":1861},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":1225,"url":1863},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":1225,"url":1865},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":1222,"url":1867},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":1225,"url":1869},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[1871,1872,1873,1874,1875,1876,1877,1878],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":129,"slug":1880,"dossier":47,"summary":1881,"aliases":1882,"sourceIds":1886,"published":1887,"modified":1888,"checkedAt":7,"severity":1889,"references":1894,"versionKeys":1911,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1883,1884,1885],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[129,1885],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1890,1892],{"type":1316,"score":1891},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1210,"score":1893},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1895,1897,1899,1901,1903,1905,1907,1909],{"type":1258,"url":1896},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1214,"url":1898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1420,"url":1900},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1219,"url":1902},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1225,"url":1904},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1222,"url":1906},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1225,"url":1908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1228,"url":1910},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1912,1913,1914,1915],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":130,"slug":1917,"dossier":47,"summary":1918,"aliases":1919,"sourceIds":1922,"published":1923,"modified":1924,"checkedAt":7,"severity":1925,"references":1927,"versionKeys":1936,"packageCount":32,"repositoryCount":103},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[1920,1921],"CVE-2026-53539","PYSEC-2026-3036",[130,1921],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[1926],{"type":1210,"score":1319},[1928,1930,1931,1932,1934],{"type":1225,"url":1929},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1222,"url":1818},{"type":1222,"url":1820},{"type":1214,"url":1933},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1214,"url":1935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[1937,1938,1939,1824],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":131,"slug":1941,"dossier":90,"summary":1942,"aliases":1943,"sourceIds":1947,"published":1948,"modified":1949,"checkedAt":7,"severity":1950,"references":1952,"versionKeys":1962,"packageCount":32,"repositoryCount":104},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1944,1945,1946],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[131,1946],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1951],{"type":1210,"score":1319},[1953,1955,1957,1958,1960,1961],{"type":1258,"url":1954},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1214,"url":1956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1219,"url":1535},{"type":1225,"url":1959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1222,"url":1539},{"type":1214,"url":1541},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":132,"slug":1964,"dossier":47,"summary":1965,"aliases":1966,"sourceIds":1970,"published":1971,"modified":1972,"checkedAt":7,"severity":1973,"references":1977,"versionKeys":1985,"packageCount":32,"repositoryCount":1986},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1967,1968,1969],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[132,1969],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1974,1975],{"type":1210,"score":1415},{"type":1316,"score":1976},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1978,1980,1982,1983],{"type":1214,"url":1979},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1214,"url":1981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1222,"url":1539},{"type":1214,"url":1984},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1546,1547,1548,1549,1550],12,{"id":133,"slug":1988,"dossier":90,"summary":1989,"aliases":1990,"sourceIds":1994,"published":1995,"modified":1996,"checkedAt":7,"severity":1997,"references":2000,"versionKeys":2016,"packageCount":32,"repositoryCount":104},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1991,1992,1993],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[133,1993],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[1998],{"type":1316,"score":1999},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2001,2003,2005,2007,2009,2010,2012,2014],{"type":1225,"url":2002},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1214,"url":2004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1225,"url":2006},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1225,"url":2008},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1222,"url":1539},{"type":1225,"url":2011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1222,"url":2013},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1214,"url":2015},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":134,"slug":2018,"dossier":47,"summary":2019,"aliases":2020,"sourceIds":2023,"published":2024,"modified":2025,"checkedAt":7,"severity":2026,"references":2032,"versionKeys":2043,"packageCount":32,"repositoryCount":1362},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2021,2022],"CVE-2026-34520","PYSEC-2026-2102",[134,2022],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[2027,2029,2030],{"type":1210,"score":2028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1316,"score":1348},{"type":1316,"score":2031},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2033,2035,2037,2039,2040,2041],{"type":1219,"url":2034},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1214,"url":2036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1219,"url":2038},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1222,"url":1324},{"type":1214,"url":1360},{"type":1225,"url":2042},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1328,1329,1330,1331,1332,1333,1334,1335],{"id":135,"slug":2045,"dossier":47,"summary":2046,"aliases":2047,"sourceIds":2050,"published":2051,"modified":2052,"checkedAt":7,"severity":2053,"references":2056,"versionKeys":2062,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2048,2049],"CVE-2026-54277","PYSEC-2026-2110",[135,2049],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[2054,2055],{"type":1316,"score":1589},{"type":1210,"score":1319},[2057,2059,2061],{"type":1214,"url":2058},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1219,"url":2060},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":136,"slug":2064,"dossier":90,"summary":2065,"aliases":2066,"sourceIds":2069,"published":2070,"modified":2071,"checkedAt":7,"severity":2072,"references":2076,"versionKeys":2085,"packageCount":32,"repositoryCount":2090},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2067,2068],"CVE-2026-45409","PYSEC-2026-215",[136,2068],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[2073,2074],{"type":1210,"score":1283},{"type":1316,"score":2075},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2077,2079,2081,2083],{"type":1214,"url":2078},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1214,"url":2080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1222,"url":2082},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1225,"url":2084},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2086,2087,2088,2089],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":137,"slug":2092,"dossier":47,"summary":2093,"aliases":2094,"sourceIds":2097,"published":2098,"modified":2099,"checkedAt":7,"severity":2100,"references":2102,"versionKeys":2113,"packageCount":32,"repositoryCount":363},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2095,2096],"CVE-2025-69224","PYSEC-2026-1099",[137,2096],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[2101],{"type":1316,"score":1348},[2103,2105,2107,2109,2110,2111],{"type":1225,"url":2104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1214,"url":2106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1219,"url":2108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":2112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1328,1329,1330,1331,1332,1333,1334],{"id":138,"slug":2115,"dossier":47,"summary":2116,"aliases":2117,"sourceIds":2120,"published":2121,"modified":2122,"checkedAt":7,"severity":2123,"references":2128,"versionKeys":2140,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2118,2119],"CVE-2026-1839","PYSEC-2026-2288",[138,2119],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[2124,2126],{"type":1210,"score":2125},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1210,"score":2127},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2129,2131,2133,2134,2136,2138],{"type":1214,"url":2130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1219,"url":2132},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1222,"url":1256},{"type":1225,"url":2135},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1258,"url":2137},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1214,"url":2139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1263,1264,1265,1266,1267,1268,1269,1270,1271],{"id":139,"slug":2142,"dossier":47,"summary":2143,"aliases":2144,"sourceIds":2147,"published":2148,"modified":2149,"checkedAt":7,"severity":2150,"references":2152,"versionKeys":2163,"packageCount":32,"repositoryCount":363},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2145,2146],"CVE-2025-69228","PYSEC-2026-1100",[139,2146],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[2151],{"type":1316,"score":1589},[2153,2155,2157,2159,2160,2161],{"type":1225,"url":2154},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1214,"url":2156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1219,"url":2158},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":2162},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1328,1329,1330,1331,1332,1333,1334],{"id":140,"slug":2165,"dossier":47,"summary":2166,"aliases":2167,"sourceIds":2170,"published":2171,"modified":2172,"checkedAt":7,"severity":2173,"references":2176,"versionKeys":2185,"packageCount":32,"repositoryCount":103},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[2168,2169],"CVE-2026-53538","PYSEC-2026-3037",[140,2169],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[2174],{"type":1210,"score":2175},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2177,2179,2180,2181,2183],{"type":1225,"url":2178},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1222,"url":1818},{"type":1222,"url":1820},{"type":1214,"url":2182},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1214,"url":2184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[1937,1938,1939,1824],{"id":141,"slug":2187,"dossier":47,"summary":2188,"aliases":2189,"sourceIds":2192,"published":2193,"modified":2194,"checkedAt":7,"severity":2195,"references":2197,"versionKeys":2208,"packageCount":32,"repositoryCount":363},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2190,2191],"CVE-2025-69223","PYSEC-2026-1101",[141,2191],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[2196],{"type":1210,"score":1319},[2198,2200,2202,2204,2205,2206],{"type":1225,"url":2199},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1214,"url":2201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1219,"url":2203},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":2207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1328,1329,1330,1331,1332,1333,1334],{"id":142,"slug":2210,"dossier":90,"summary":2211,"aliases":2212,"sourceIds":2216,"published":2217,"modified":2218,"checkedAt":7,"severity":2219,"references":2221,"versionKeys":2234,"packageCount":32,"repositoryCount":104},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2213,2214,2215],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[142,2215],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[2220],{"type":1210,"score":1319},[2222,2224,2226,2228,2230,2232,2233],{"type":1258,"url":2223},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1214,"url":2225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1219,"url":2227},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1219,"url":2229},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1225,"url":2231},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1222,"url":1539},{"type":1214,"url":2011},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":143,"slug":2236,"dossier":47,"summary":2237,"aliases":2238,"sourceIds":2241,"published":2242,"modified":2243,"checkedAt":7,"severity":2244,"references":2246,"versionKeys":2257,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2239,2240],"CVE-2024-12720","PYSEC-2026-1982",[143,2240],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[2245],{"type":1210,"score":1663},[2247,2249,2251,2252,2254,2255],{"type":1214,"url":2248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1225,"url":2250},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1222,"url":1256},{"type":1225,"url":2253},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1222,"url":1464},{"type":1214,"url":2256},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1263],{"id":144,"slug":2259,"dossier":47,"summary":2260,"aliases":2261,"sourceIds":2264,"published":2265,"modified":2266,"checkedAt":7,"severity":2267,"references":2270,"versionKeys":2283,"packageCount":32,"repositoryCount":103},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[2262,2263],"CVE-2025-66034","PYSEC-2026-1389",[144,2263],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[2268],{"type":1210,"score":2269},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[2271,2273,2275,2277,2279,2281],{"type":1225,"url":2272},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1214,"url":2274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1225,"url":2276},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1222,"url":2278},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1222,"url":2280},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1214,"url":2282},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[2284,2285,2286,2287,2288,2289],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":145,"slug":2291,"dossier":47,"summary":2292,"aliases":2293,"sourceIds":2296,"published":2297,"modified":2298,"checkedAt":7,"severity":2299,"references":2301,"versionKeys":2318,"packageCount":32,"repositoryCount":2322},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[2294,2295],"CVE-2025-62727","PYSEC-2026-1942",[145,2295],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[2300],{"type":1210,"score":1319},[2302,2304,2306,2308,2311,2313,2315,2316],{"type":1225,"url":2303},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1214,"url":2305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1219,"url":2307},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":2309,"url":2310},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1222,"url":2312},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1225,"url":2314},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1222,"url":1298},{"type":1214,"url":2317},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1303,1304,2319,2320,2321],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",6,{"id":146,"slug":2324,"dossier":47,"summary":2325,"aliases":2326,"sourceIds":2328,"published":2329,"modified":2330,"checkedAt":7,"severity":2331,"references":2334,"versionKeys":2343,"packageCount":32,"repositoryCount":1398},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[2327],"CVE-2026-63374",[146],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[2332],{"type":1316,"score":2333},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2335,2337,2339,2341,2342],{"type":1225,"url":2336},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":1225,"url":2338},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":1225,"url":2340},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":1222,"url":1867},{"type":1225,"url":1869},[1871,1872,1873,1874,1875,1876,1877,1878],{"id":147,"slug":2345,"dossier":47,"summary":2346,"aliases":2347,"sourceIds":2350,"published":2351,"modified":2352,"checkedAt":7,"severity":2353,"references":2355,"versionKeys":2359,"packageCount":32,"repositoryCount":1362},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[2348,2349],"CVE-2026-54283","PYSEC-2026-249",[147,2349],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[2354],{"type":1210,"score":1319},[2356,2358],{"type":1214,"url":2357},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1222,"url":2312},[1302,1303,1304,2319,2320,2321,2360,2361,2362],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":148,"slug":2364,"dossier":47,"summary":2365,"aliases":2366,"sourceIds":2370,"published":2371,"modified":2372,"checkedAt":7,"severity":2373,"references":2376,"versionKeys":2413,"packageCount":32,"repositoryCount":1362},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[2367,2368,2369],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[148,2368],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[2374],{"type":1210,"score":2375},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2377,2379,2381,2383,2385,2387,2389,2391,2393,2395,2396,2398,2401,2403,2405,2407,2409,2411],{"type":1214,"url":2378},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1214,"url":2380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1219,"url":2382},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1225,"url":2384},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1228,"url":2386},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1225,"url":2388},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1225,"url":2390},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1225,"url":2392},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1225,"url":2394},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1222,"url":2312},{"type":1225,"url":2397},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":2399,"url":2400},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1225,"url":2402},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1225,"url":2404},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":1225,"url":2406},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":1225,"url":2408},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":1228,"url":2410},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1214,"url":2412},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1302,1303,1304,2319,2320,2321,2360,2361,2362],{"id":149,"slug":2415,"dossier":47,"summary":2416,"aliases":2417,"sourceIds":2421,"published":2422,"modified":2423,"checkedAt":7,"severity":2424,"references":2428,"versionKeys":2450,"packageCount":32,"repositoryCount":363},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2418,2419,2420],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[149,2420],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[2425,2426],{"type":1210,"score":1411},{"type":1316,"score":2427},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2429,2431,2433,2435,2437,2439,2440,2442,2444,2446,2448],{"type":1214,"url":2430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1225,"url":2432},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1225,"url":2434},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1225,"url":2436},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1225,"url":2438},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1222,"url":1427},{"type":1225,"url":2441},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1225,"url":2443},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1225,"url":2445},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1222,"url":2447},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1214,"url":2449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1439,1440,1441,2451,2452],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":150,"slug":2454,"dossier":90,"summary":2455,"aliases":2456,"sourceIds":2460,"published":2461,"modified":2462,"checkedAt":7,"severity":2463,"references":2465,"versionKeys":2475,"packageCount":32,"repositoryCount":104},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2457,2458,2459],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[150,2459],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2464],{"type":1210,"score":1319},[2466,2468,2470,2471,2473,2474],{"type":1258,"url":2467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1214,"url":2469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1219,"url":1535},{"type":1225,"url":2472},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1222,"url":1539},{"type":1214,"url":1541},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":151,"slug":2477,"dossier":47,"summary":2478,"aliases":2479,"sourceIds":2482,"published":2483,"modified":2484,"checkedAt":7,"severity":2485,"references":2487,"versionKeys":2500,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2480,2481],"CVE-2025-5197","PYSEC-2026-1983",[151,2481],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[2486],{"type":1210,"score":1663},[2488,2490,2492,2494,2495,2497,2498],{"type":1214,"url":2489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1225,"url":2491},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1225,"url":2493},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1222,"url":1256},{"type":1225,"url":2496},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1222,"url":1464},{"type":1214,"url":2499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1263,1264,1265,1266],{"id":152,"slug":2502,"dossier":47,"summary":2503,"aliases":2504,"sourceIds":2507,"published":2508,"modified":2509,"checkedAt":7,"severity":2510,"references":2513,"versionKeys":2524,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[2505,2506],"CVE-2025-53643","PYSEC-2026-1104",[152,2506],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[2511],{"type":1316,"score":2512},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2514,2516,2518,2520,2521,2522],{"type":1225,"url":2515},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1214,"url":2517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1219,"url":2519},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":2523},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1328,1329,1330,1331],{"id":153,"slug":2526,"dossier":47,"summary":2527,"aliases":2528,"sourceIds":2531,"published":2532,"modified":2533,"checkedAt":7,"severity":2534,"references":2538,"versionKeys":2547,"packageCount":32,"repositoryCount":1362},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[2529,2530],"CVE-2026-34518","PYSEC-2026-2100",[153,2530],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[2535,2537],{"type":1210,"score":2536},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1316,"score":1783},[2539,2541,2543,2545,2546],{"type":1219,"url":2540},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1214,"url":2542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1219,"url":2544},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":154,"slug":2549,"dossier":47,"summary":2550,"aliases":2551,"sourceIds":2554,"published":2555,"modified":2556,"checkedAt":7,"severity":2557,"references":2560,"versionKeys":2579,"packageCount":32,"repositoryCount":363},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2552,2553],"CVE-2024-47081","PYSEC-2026-1872",[154,2553],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2558],{"type":1210,"score":2559},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2561,2563,2565,2567,2569,2571,2573,2575,2577],{"type":1225,"url":2562},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1214,"url":2564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1225,"url":2566},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1219,"url":2568},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1222,"url":2570},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1225,"url":2572},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1225,"url":2574},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1222,"url":2576},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1214,"url":2578},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2580,2581],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":155,"slug":2583,"dossier":90,"summary":2584,"aliases":2585,"sourceIds":2589,"published":2590,"modified":2591,"checkedAt":7,"severity":2592,"references":2594,"versionKeys":2607,"packageCount":32,"repositoryCount":104},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2586,2587,2588],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[155,2588],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2593],{"type":1210,"score":1319},[2595,2597,2599,2601,2603,2605,2606],{"type":1258,"url":2596},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1214,"url":2598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1219,"url":2600},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1219,"url":2602},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1225,"url":2604},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1222,"url":1539},{"type":1214,"url":2011},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":156,"slug":2609,"dossier":47,"summary":2610,"aliases":2611,"sourceIds":2614,"published":2615,"modified":2616,"checkedAt":7,"severity":2617,"references":2620,"versionKeys":2637,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2612,2613],"CVE-2024-35195","PYSEC-2026-1873",[156,2613],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2618],{"type":1210,"score":2619},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2621,2623,2625,2627,2629,2630,2632,2634,2635],{"type":1225,"url":2622},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1214,"url":2624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1225,"url":2626},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1219,"url":2628},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1222,"url":2570},{"type":1225,"url":2631},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1225,"url":2633},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1222,"url":2576},{"type":1214,"url":2636},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2580],{"id":157,"slug":2639,"dossier":47,"summary":2640,"aliases":2641,"sourceIds":2644,"published":2645,"modified":2646,"checkedAt":7,"severity":2647,"references":2651,"versionKeys":2657,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[2642,2643],"CVE-2026-54280","PYSEC-2026-2113",[157,2643],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[2648,2650],{"type":1316,"score":2649},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":1319},[2652,2654,2656],{"type":1214,"url":2653},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1219,"url":2655},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":158,"slug":2659,"dossier":47,"summary":2660,"aliases":2661,"sourceIds":2664,"published":2665,"modified":2666,"checkedAt":7,"severity":2667,"references":2671,"versionKeys":2682,"packageCount":32,"repositoryCount":1362},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[2662,2663],"CVE-2026-34525","PYSEC-2026-2103",[158,2663],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[2668,2670],{"type":1316,"score":2669},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1210,"score":1350},[2672,2674,2676,2678,2680,2681],{"type":1219,"url":2673},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1214,"url":2675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1219,"url":2677},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1219,"url":2679},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":159,"slug":2684,"dossier":47,"summary":2685,"aliases":2686,"sourceIds":2690,"published":2691,"modified":2692,"checkedAt":7,"severity":2693,"references":2698,"versionKeys":2714,"packageCount":32,"repositoryCount":420},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2687,2688,2689],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[159],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2694,2696],{"type":1210,"score":2695},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1316,"score":2697},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2699,2701,2703,2705,2706,2708,2710,2712],{"type":1214,"url":2700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1225,"url":2702},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1225,"url":2704},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1222,"url":1427},{"type":1225,"url":2707},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1225,"url":2709},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1225,"url":2711},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1225,"url":2713},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1439,1440],{"id":160,"slug":2716,"dossier":47,"summary":2717,"aliases":2718,"sourceIds":2722,"published":2723,"modified":2724,"checkedAt":7,"severity":2725,"references":2729,"versionKeys":2769,"packageCount":32,"repositoryCount":1745},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2719,2720,2721],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[160,2721],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2726,2728],{"type":1316,"score":2727},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1210,"score":1319},[2730,2732,2734,2736,2738,2740,2741,2743,2745,2747,2749,2751,2753,2755,2757,2759,2761,2763,2765,2767],{"type":1225,"url":2731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1214,"url":2733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1225,"url":2735},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1225,"url":2737},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1225,"url":2739},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1222,"url":1539},{"type":1225,"url":2742},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1225,"url":2744},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1225,"url":2746},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1214,"url":2748},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1214,"url":2750},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1214,"url":2752},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1214,"url":2754},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1214,"url":2756},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1214,"url":2758},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1214,"url":2760},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1214,"url":2762},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1214,"url":2764},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1214,"url":2766},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1214,"url":2768},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1543,1544,1545,1546,1547,1548,1549],{"id":161,"slug":2771,"dossier":47,"summary":2772,"aliases":2773,"sourceIds":2776,"published":2777,"modified":2778,"checkedAt":7,"severity":2779,"references":2782,"versionKeys":2799,"packageCount":32,"repositoryCount":420},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2774,2775],"CVE-2025-27516","PYSEC-2026-1471",[161,2775],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2780],{"type":1316,"score":2781},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2783,2785,2787,2789,2791,2793,2795,2797],{"type":1225,"url":2784},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1214,"url":2786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1219,"url":2788},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1222,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1225,"url":2792},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1225,"url":2794},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1222,"url":2796},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1214,"url":2798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2800,2801],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":162,"slug":2803,"dossier":47,"summary":2804,"aliases":2805,"sourceIds":2808,"published":2809,"modified":2810,"checkedAt":7,"severity":2811,"references":2814,"versionKeys":2829,"packageCount":32,"repositoryCount":1986},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[2806,2807],"CVE-2026-69244","PYSEC-2026-3545",[162,2807],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[2812],{"type":1316,"score":2813},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2815,2817,2819,2821,2822,2824,2825,2827],{"type":1225,"url":2816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1225,"url":2818},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1225,"url":2820},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1222,"url":1324},{"type":1225,"url":2823},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1222,"url":1793},{"type":1214,"url":2826},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1214,"url":2828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[1328,1329,1330,1331,1332,1333,1334,1335,1336,2830],"pypi:aiohttp@3.14.1",{"id":163,"slug":2832,"dossier":47,"summary":2833,"aliases":2834,"sourceIds":2838,"published":2839,"modified":2840,"checkedAt":7,"severity":2841,"references":2846,"versionKeys":2862,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2835,2836,2837],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[163,2837],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2842,2844],{"type":1210,"score":2843},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1316,"score":2845},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2847,2849,2851,2853,2854,2856,2858,2860],{"type":1214,"url":2848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1225,"url":2850},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1225,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1222,"url":1906},{"type":1225,"url":2855},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1225,"url":2857},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1222,"url":2859},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1214,"url":2861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1912],{"id":164,"slug":2864,"dossier":47,"summary":2865,"aliases":2866,"sourceIds":2870,"published":2871,"modified":2872,"checkedAt":7,"severity":2873,"references":2878,"versionKeys":2896,"packageCount":32,"repositoryCount":420},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2867,2868,2869],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[164],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2874,2876],{"type":1210,"score":2875},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1316,"score":2877},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2879,2881,2883,2885,2887,2889,2890,2892,2894],{"type":1214,"url":2880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1225,"url":2882},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1225,"url":2884},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1225,"url":2886},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1225,"url":2888},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1222,"url":1427},{"type":1225,"url":2891},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1225,"url":2893},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1225,"url":2895},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1439,1440],{"id":165,"slug":2898,"dossier":47,"summary":2899,"aliases":2900,"sourceIds":2903,"published":2904,"modified":2905,"checkedAt":7,"severity":2906,"references":2910,"versionKeys":2921,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[2901,2902],"CVE-2024-47874","PYSEC-2026-1943",[165,2902],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[2907,2909],{"type":1210,"score":2908},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1316,"score":1809},[2911,2913,2915,2917,2918,2919],{"type":1225,"url":2912},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1214,"url":2914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1219,"url":2916},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1222,"url":1292},{"type":1222,"url":1298},{"type":1214,"url":2920},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1302],{"id":166,"slug":2923,"dossier":47,"summary":2924,"aliases":2925,"sourceIds":2928,"published":2929,"modified":2930,"checkedAt":7,"severity":2931,"references":2936,"versionKeys":2960,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[2926,2927],"CVE-2026-5241","PYSEC-2026-2290",[166,2927],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[2932,2934],{"type":1210,"score":2933},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1210,"score":2935},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2937,2939,2941,2943,2945,2947,2949,2951,2952,2954,2956,2958],{"type":1214,"url":2938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1219,"url":2940},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1214,"url":2942},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1214,"url":2944},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1225,"url":2946},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1225,"url":2948},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1420,"url":2950},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1222,"url":1256},{"type":1225,"url":2953},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1258,"url":2955},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1225,"url":2957},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1214,"url":2959},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1263,1264,1265,1266,1267,1268,1269,1270,1271],{"id":167,"slug":2962,"dossier":47,"summary":2963,"aliases":2964,"sourceIds":2967,"published":2968,"modified":2969,"checkedAt":7,"severity":2970,"references":2973,"versionKeys":2984,"packageCount":32,"repositoryCount":363},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[2965,2966],"CVE-2025-69230","PYSEC-2026-1105",[167,2966],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[2971],{"type":1316,"score":2972},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2974,2976,2978,2980,2981,2982],{"type":1225,"url":2975},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1214,"url":2977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1219,"url":2979},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":2983},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1328,1329,1330,1331,1332,1333,1334],{"id":168,"slug":2986,"dossier":90,"summary":2987,"aliases":2988,"sourceIds":2992,"published":2993,"modified":2994,"checkedAt":7,"severity":2995,"references":2998,"versionKeys":3012,"packageCount":32,"repositoryCount":104},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2989,2990,2991],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[168,2991],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[2996],{"type":1210,"score":2997},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2999,3001,3003,3005,3007,3008,3009,3010],{"type":1225,"url":3000},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1214,"url":3002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1225,"url":3004},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1225,"url":3006},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1222,"url":1539},{"type":1225,"url":2011},{"type":1222,"url":2013},{"type":1214,"url":3011},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":169,"slug":3014,"dossier":47,"summary":2237,"aliases":3015,"sourceIds":3018,"published":3019,"modified":3020,"checkedAt":7,"severity":3021,"references":3024,"versionKeys":3035,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[3016,3017],"CVE-2025-1194","PYSEC-2026-1984",[169,3017],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[3022],{"type":1210,"score":3023},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3025,3027,3029,3030,3032,3033],{"type":1214,"url":3026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1225,"url":3028},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1222,"url":1256},{"type":1225,"url":3031},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1222,"url":1464},{"type":1214,"url":3034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1263],{"id":170,"slug":3037,"dossier":47,"summary":3038,"aliases":3039,"sourceIds":3042,"published":3043,"modified":3044,"checkedAt":7,"severity":3045,"references":3048,"versionKeys":3054,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[3040,3041],"CVE-2026-54278","PYSEC-2026-2111",[170,3041],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[3046,3047],{"type":1316,"score":1589},{"type":1210,"score":1319},[3049,3051,3052],{"type":1214,"url":3050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1222,"url":1324},{"type":1219,"url":3053},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":171,"slug":3056,"dossier":47,"summary":3057,"aliases":3058,"sourceIds":3061,"published":3062,"modified":3063,"checkedAt":7,"severity":3064,"references":3067,"versionKeys":3086,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3059,3060],"CVE-2024-34062","PYSEC-2026-1976",[171,3060],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[3065],{"type":1210,"score":3066},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3068,3070,3072,3074,3076,3078,3080,3082,3084],{"type":1225,"url":3069},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1214,"url":3071},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1225,"url":3073},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1222,"url":3075},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1225,"url":3077},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1225,"url":3079},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1225,"url":3081},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1222,"url":3083},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1214,"url":3085},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3087],"pypi:tqdm@4.66.2",{"id":172,"slug":3089,"dossier":47,"summary":3090,"aliases":3091,"sourceIds":3094,"published":3095,"modified":3096,"checkedAt":7,"severity":3097,"references":3099,"versionKeys":3112,"packageCount":32,"repositoryCount":363},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3092,3093],"CVE-2025-69229","PYSEC-2026-1106",[172,3093],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[3098],{"type":1316,"score":1589},[3100,3102,3104,3106,3108,3109,3110],{"type":1225,"url":3101},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1214,"url":3103},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1225,"url":3105},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1225,"url":3107},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":3111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1328,1329,1330,1331,1332,1333,1334],{"id":173,"slug":3114,"dossier":90,"summary":3115,"aliases":3116,"sourceIds":3119,"published":3120,"modified":3121,"checkedAt":7,"severity":3122,"references":3127,"versionKeys":3137,"packageCount":32,"repositoryCount":3140},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3117,3118],"CVE-2026-25645","PYSEC-2026-2275",[173,3118],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[3123,3125],{"type":1210,"score":3124},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1210,"score":3126},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3128,3130,3132,3134,3135],{"type":1214,"url":3129},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1214,"url":3131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1219,"url":3133},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1222,"url":2570},{"type":1214,"url":3136},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2580,2581,3138,3139],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":174,"slug":3142,"dossier":47,"summary":3143,"aliases":3144,"sourceIds":3147,"published":3148,"modified":3149,"checkedAt":7,"severity":3150,"references":3152,"versionKeys":3163,"packageCount":32,"repositoryCount":1398},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3145,3146],"CVE-2025-66418","PYSEC-2026-1998",[174,3146],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[3151],{"type":1316,"score":1374},[3153,3155,3157,3159,3160,3161],{"type":1225,"url":3154},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1214,"url":3156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1219,"url":3158},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1222,"url":1389},{"type":1222,"url":1391},{"type":1214,"url":3162},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1393,1394,1395,1396,1397],{"id":175,"slug":3165,"dossier":47,"summary":3166,"aliases":3167,"sourceIds":3170,"published":3171,"modified":3172,"checkedAt":7,"severity":3173,"references":3176,"versionKeys":3191,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3168,3169],"CVE-2024-56201","PYSEC-2026-1472",[175,3169],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3174,3175],{"type":1210,"score":1893},{"type":1316,"score":2781},[3177,3179,3181,3183,3185,3186,3188,3189],{"type":1225,"url":3178},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1214,"url":3180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1225,"url":3182},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1219,"url":3184},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1222,"url":2790},{"type":1225,"url":3187},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1222,"url":2796},{"type":1214,"url":3190},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2800],{"id":176,"slug":3193,"dossier":90,"summary":3194,"aliases":3195,"sourceIds":3199,"published":3200,"modified":3201,"checkedAt":7,"severity":3202,"references":3205,"versionKeys":3217,"packageCount":32,"repositoryCount":3140},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[3196,3197,3198],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[176,3198],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[3203],{"type":1210,"score":3204},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3206,3208,3210,3212,3214,3215],{"type":1258,"url":3207},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1214,"url":3209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1219,"url":3211},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1225,"url":3213},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1222,"url":1906},{"type":1214,"url":3216},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1912,1913,1914,1915,3218,3219,3220,3221,3222,3223,3224,3225],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":177,"slug":3227,"dossier":47,"summary":3228,"aliases":3229,"sourceIds":3232,"published":3233,"modified":3234,"checkedAt":7,"severity":3235,"references":3238,"versionKeys":3259,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3230,3231],"CVE-2024-34064","PYSEC-2026-1474",[177,3231],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3236],{"type":1210,"score":3237},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3239,3241,3243,3245,3246,3248,3250,3252,3254,3256,3257],{"type":1225,"url":3240},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1214,"url":3242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1219,"url":3244},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1222,"url":2790},{"type":1225,"url":3247},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1225,"url":3249},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1225,"url":3251},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1225,"url":3253},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1225,"url":3255},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1222,"url":2796},{"type":1214,"url":3258},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2800],{"id":178,"slug":3261,"dossier":47,"summary":3262,"aliases":3263,"sourceIds":3266,"published":3267,"modified":3268,"checkedAt":7,"severity":3269,"references":3272,"versionKeys":3281,"packageCount":32,"repositoryCount":1362},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3264,3265],"CVE-2026-34513","PYSEC-2026-2095",[178,3265],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[3270,3271],{"type":1316,"score":1505},{"type":1210,"score":1319},[3273,3275,3277,3279,3280],{"type":1219,"url":3274},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1214,"url":3276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1219,"url":3278},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":179,"slug":3283,"dossier":47,"summary":3284,"aliases":3285,"sourceIds":3288,"published":3289,"modified":3290,"checkedAt":7,"severity":3291,"references":3296,"versionKeys":3304,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3286,3287],"CVE-2026-47265","PYSEC-2026-2105",[179,3287],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[3292,3294],{"type":1316,"score":3293},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1210,"score":3295},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3297,3299,3301,3303],{"type":1219,"url":3298},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1214,"url":3300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1219,"url":3302},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":180,"slug":3306,"dossier":47,"summary":3307,"aliases":3308,"sourceIds":3311,"published":3312,"modified":3313,"checkedAt":7,"severity":3314,"references":3319,"versionKeys":3325,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3309,3310],"CVE-2026-54276","PYSEC-2026-2109",[180,3310],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[3315,3317],{"type":1316,"score":3316},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1210,"score":3318},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3320,3322,3324],{"type":1214,"url":3321},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1219,"url":3323},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":181,"slug":3327,"dossier":47,"summary":3328,"aliases":3329,"sourceIds":3332,"published":3333,"modified":3334,"checkedAt":7,"severity":3335,"references":3339,"versionKeys":3356,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[3330,3331],"CVE-2025-67221","PYSEC-2026-107",[181,3331],"2026-01-22T17:16:01.433Z","2026-09-10T03:50:33.258377926Z",[3336,3338],{"type":1316,"score":3337},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1210,"score":1319},[3340,3342,3344,3346,3348,3350,3352,3354],{"type":1214,"url":3341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":1225,"url":3343},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":1225,"url":3345},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":1225,"url":3347},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":1222,"url":3349},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1258,"url":3351},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":1225,"url":3353},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":1214,"url":3355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[3357,3358,3359,3360],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":182,"slug":3362,"dossier":47,"summary":3363,"aliases":3364,"sourceIds":3367,"published":3368,"modified":3369,"checkedAt":7,"severity":3370,"references":3374,"versionKeys":3390,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[3365,3366],"CVE-2024-11394","PYSEC-2024-229",[182,3366],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[3371,3373],{"type":1210,"score":3372},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1210,"score":2843},[3375,3377,3379,3381,3382,3384,3386,3388],{"type":1214,"url":3376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1225,"url":3378},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1225,"url":3380},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1222,"url":1256},{"type":1225,"url":3383},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1225,"url":3385},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1214,"url":3387},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1214,"url":3389},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1263],{"id":183,"slug":3392,"dossier":47,"summary":3393,"aliases":3394,"sourceIds":3397,"published":3398,"modified":3399,"checkedAt":7,"severity":3400,"references":3405,"versionKeys":3423,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[3395,3396],"CVE-2026-34993","PYSEC-2026-2104",[183,3396],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[3401,3403],{"type":1210,"score":3402},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1210,"score":3404},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3406,3408,3410,3412,3413,3415,3417,3419,3420,3421],{"type":1219,"url":3407},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1214,"url":3409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1219,"url":3411},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1222,"url":1324},{"type":1225,"url":3414},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1225,"url":3416},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1214,"url":3418},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1214,"url":2942},{"type":1214,"url":2944},{"type":1420,"url":3422},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":184,"slug":3425,"dossier":47,"summary":3426,"aliases":3427,"sourceIds":3430,"published":3431,"modified":3432,"checkedAt":7,"severity":3433,"references":3435,"versionKeys":3446,"packageCount":32,"repositoryCount":363},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[3428,3429],"CVE-2025-69227","PYSEC-2026-1107",[184,3429],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[3434],{"type":1316,"score":1589},[3436,3438,3440,3442,3443,3444],{"type":1225,"url":3437},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1214,"url":3439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1225,"url":3441},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":3445},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1328,1329,1330,1331,1332,1333,1334],{"id":185,"slug":3448,"dossier":90,"summary":3449,"aliases":3450,"sourceIds":3454,"published":3455,"modified":3456,"checkedAt":7,"severity":3457,"references":3459,"versionKeys":3473,"packageCount":32,"repositoryCount":104},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[3451,3452,3453],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[185,3453],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[3458],{"type":1210,"score":1319},[3460,3462,3464,3466,3468,3469,3470,3471],{"type":1225,"url":3461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1214,"url":3463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1225,"url":3465},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1225,"url":3467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1222,"url":1539},{"type":1225,"url":2011},{"type":1222,"url":2013},{"type":1214,"url":3472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":186,"slug":3475,"dossier":47,"summary":3476,"aliases":3477,"sourceIds":3480,"published":3481,"modified":3482,"checkedAt":7,"severity":3483,"references":3485,"versionKeys":3498,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[3478,3479],"CVE-2025-3264","PYSEC-2026-1985",[186,3479],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[3484],{"type":1210,"score":1663},[3486,3488,3490,3492,3493,3495,3496],{"type":1214,"url":3487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1225,"url":3489},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1225,"url":3491},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1222,"url":1256},{"type":1225,"url":3494},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1222,"url":1464},{"type":1214,"url":3497},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1263],{"id":187,"slug":3500,"dossier":47,"summary":3501,"aliases":3502,"sourceIds":3505,"published":3506,"modified":3507,"checkedAt":7,"severity":3508,"references":3511,"versionKeys":3519,"packageCount":32,"repositoryCount":1362},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[3503,3504],"CVE-2026-54282","PYSEC-2026-248",[187,3504],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[3509,3510],{"type":1210,"score":2175},{"type":1210,"score":1350},[3512,3514,3516,3517],{"type":1214,"url":3513},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1214,"url":3515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1222,"url":2312},{"type":1225,"url":3518},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1302,1303,1304,2319,2320,2321,2360,2361,2362],{"id":188,"slug":3521,"dossier":47,"summary":3522,"aliases":3523,"sourceIds":3526,"published":3527,"modified":3528,"checkedAt":7,"severity":3529,"references":3534,"versionKeys":3547,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[3524,3525],"CVE-2024-5206","PYSEC-2024-110",[188,3525],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[3530,3532],{"type":1210,"score":3531},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1210,"score":3533},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3535,3537,3539,3541,3543,3545],{"type":1214,"url":3536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":1219,"url":3538},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":1225,"url":3540},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":1222,"url":3542},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":1225,"url":3544},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":1214,"url":3546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[3548],"pypi:scikit-learn@1.3.2",{"id":189,"slug":3550,"dossier":47,"summary":3551,"aliases":3552,"sourceIds":3555,"published":3556,"modified":3557,"checkedAt":7,"severity":3558,"references":3563,"versionKeys":3572,"packageCount":32,"repositoryCount":1362},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[3553,3554],"CVE-2026-34516","PYSEC-2026-2098",[189,3554],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[3559,3560,3561],{"type":1210,"score":1319},{"type":1316,"score":1589},{"type":1316,"score":3562},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3564,3566,3568,3570,3571],{"type":1219,"url":3565},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1214,"url":3567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1219,"url":3569},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":190,"slug":3574,"dossier":47,"summary":3575,"aliases":3576,"sourceIds":3579,"published":3580,"modified":3581,"checkedAt":7,"severity":3582,"references":3585,"versionKeys":3591,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[3577,3578],"CVE-2026-50269","PYSEC-2026-2106",[190,3578],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[3583,3584],{"type":1316,"score":1348},{"type":1210,"score":1319},[3586,3588,3590],{"type":1214,"url":3587},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1219,"url":3589},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1222,"url":1324},[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":191,"slug":3593,"dossier":47,"summary":3594,"aliases":3595,"sourceIds":3598,"published":3599,"modified":3600,"checkedAt":7,"severity":3601,"references":3604,"versionKeys":3612,"packageCount":32,"repositoryCount":401},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3596,3597],"CVE-2026-44432","PYSEC-2026-142",[191,3597],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3602,3603],{"type":1210,"score":1319},{"type":1316,"score":1374},[3605,3607,3609,3611],{"type":1214,"url":3606},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1214,"url":3608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1225,"url":3610},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1222,"url":1389},[3613],"pypi:urllib3@2.6.3",{"id":192,"slug":3615,"dossier":47,"summary":3616,"aliases":3617,"sourceIds":3620,"published":3621,"modified":3622,"checkedAt":7,"severity":3623,"references":3626,"versionKeys":3639,"packageCount":32,"repositoryCount":1986},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3618,3619],"CVE-2026-28684","PYSEC-2026-2270",[192,3619],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[3624],{"type":1210,"score":3625},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3627,3629,3631,3633,3635,3637],{"type":1219,"url":3628},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1214,"url":3630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1219,"url":3632},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1225,"url":3634},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1222,"url":3636},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1214,"url":3638},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3640,3641,3642,3643],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":193,"slug":3645,"dossier":47,"summary":3646,"aliases":3647,"sourceIds":3650,"published":3651,"modified":3652,"checkedAt":7,"severity":3653,"references":3656,"versionKeys":3671,"packageCount":32,"repositoryCount":1986},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[3648,3649],"CVE-2026-69243","PYSEC-2026-3546",[193,3649],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[3654],{"type":1316,"score":3655},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3657,3659,3661,3663,3664,3666,3667,3669],{"type":1225,"url":3658},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1225,"url":3660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1225,"url":3662},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1222,"url":1324},{"type":1225,"url":3665},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1222,"url":1793},{"type":1214,"url":3668},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1214,"url":3670},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[1328,1329,1330,1331,1332,1333,1334,1335,1336,2830],{"id":194,"slug":3673,"dossier":47,"summary":3674,"aliases":3675,"sourceIds":3678,"published":3679,"modified":3680,"checkedAt":7,"severity":3681,"references":3683,"versionKeys":3694,"packageCount":32,"repositoryCount":2322},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[3676,3677],"CVE-2026-40347","PYSEC-2026-3038",[194,3677],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[3682],{"type":1210,"score":1283},[3684,3686,3688,3689,3691,3692],{"type":1225,"url":3685},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1214,"url":3687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1222,"url":1818},{"type":1225,"url":3690},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1222,"url":1820},{"type":1214,"url":3693},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[1937,1938,1824],{"id":195,"slug":3696,"dossier":47,"summary":3697,"aliases":3698,"sourceIds":3701,"published":3702,"modified":3703,"checkedAt":7,"severity":3704,"references":3706,"versionKeys":3719,"packageCount":32,"repositoryCount":1986},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[3699,3700],"CVE-2026-59881","PYSEC-2026-3547",[195,3700],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[3705],{"type":1316,"score":2075},[3707,3709,3711,3713,3715,3716,3717],{"type":1225,"url":3708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1214,"url":3710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1225,"url":3712},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1225,"url":3714},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":3718},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[1328,1329,1330,1331,1332,1333,1334,1335,1336,2830],{"id":196,"slug":3721,"dossier":47,"summary":3722,"aliases":3723,"sourceIds":3726,"published":3727,"modified":3728,"checkedAt":7,"severity":3729,"references":3731,"versionKeys":3742,"packageCount":32,"repositoryCount":363},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[3724,3725],"CVE-2025-69225","PYSEC-2026-1109",[196,3725],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[3730],{"type":1316,"score":1348},[3732,3734,3736,3738,3739,3740],{"type":1225,"url":3733},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1214,"url":3735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1219,"url":3737},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1222,"url":1324},{"type":1222,"url":1793},{"type":1214,"url":3741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1328,1329,1330,1331,1332,1333,1334],{"id":197,"slug":3744,"dossier":47,"summary":3745,"aliases":3746,"sourceIds":3749,"published":3750,"modified":3751,"checkedAt":7,"severity":3752,"references":3755,"versionKeys":3764,"packageCount":32,"repositoryCount":1362},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[3747,3748],"CVE-2026-34519","PYSEC-2026-2101",[197,3748],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[3753,3754],{"type":1316,"score":1348},{"type":1210,"score":1350},[3756,3758,3760,3762,3763],{"type":1219,"url":3757},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1214,"url":3759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1219,"url":3761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":198,"slug":3766,"dossier":47,"summary":3767,"aliases":3768,"sourceIds":3771,"published":3772,"modified":3773,"checkedAt":7,"severity":3774,"references":3777,"versionKeys":3786,"packageCount":32,"repositoryCount":1362},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[3769,3770],"CVE-2026-34515","PYSEC-2026-2097",[198,3770],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[3775,3776],{"type":1316,"score":3293},{"type":1210,"score":3295},[3778,3780,3782,3784,3785],{"type":1219,"url":3779},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1214,"url":3781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1219,"url":3783},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":199,"slug":3788,"dossier":47,"summary":3789,"aliases":3790,"sourceIds":3794,"published":3795,"modified":3796,"checkedAt":7,"severity":3797,"references":3800,"versionKeys":3813,"packageCount":32,"repositoryCount":2322},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3791,3792,3793],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[199,3793],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3798,3799],{"type":1210,"score":1283},{"type":1210,"score":1319},[3801,3803,3805,3807,3809,3811,3812],{"type":1258,"url":3802},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1214,"url":3804},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1219,"url":3806},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1219,"url":3808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1225,"url":3810},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1222,"url":1539},{"type":1214,"url":2011},[1548,1549,1550,1551],{"id":200,"slug":3815,"dossier":47,"summary":3816,"aliases":3817,"sourceIds":3820,"published":3481,"modified":3821,"checkedAt":7,"severity":3822,"references":3825,"versionKeys":3838,"packageCount":32,"repositoryCount":401},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[3818,3819],"CVE-2025-3777","PYSEC-2026-1986",[200,3819],"2026-09-10T03:50:26.198077196Z",[3823],{"type":1210,"score":3824},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3826,3828,3830,3831,3833,3835,3836],{"type":1214,"url":3827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1225,"url":3829},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1222,"url":1256},{"type":1225,"url":3832},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1225,"url":3834},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1222,"url":1464},{"type":1214,"url":3837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1263,1264,1265],{"id":201,"slug":3840,"dossier":90,"summary":3841,"aliases":3842,"sourceIds":3846,"published":3847,"modified":3848,"checkedAt":7,"severity":3849,"references":3851,"versionKeys":3862,"packageCount":32,"repositoryCount":104},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3843,3844,3845],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[201,3845],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3850],{"type":1210,"score":1319},[3852,3854,3856,3858,3860,3861],{"type":1258,"url":3853},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1214,"url":3855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1219,"url":3857},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1225,"url":3859},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1222,"url":1539},{"type":1214,"url":1541},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":202,"slug":3864,"dossier":47,"summary":3865,"aliases":3866,"sourceIds":3869,"published":3870,"modified":3871,"checkedAt":7,"severity":3872,"references":3874,"versionKeys":3883,"packageCount":32,"repositoryCount":2322},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[3867,3868],"CVE-2026-42561","PYSEC-2026-3039",[202,3868],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[3873],{"type":1210,"score":1319},[3875,3877,3879,3880,3881],{"type":1225,"url":3876},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1214,"url":3878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1222,"url":1818},{"type":1222,"url":1820},{"type":1214,"url":3882},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[1937,1938,1824],{"id":203,"slug":3885,"dossier":47,"summary":3886,"aliases":3887,"sourceIds":3890,"published":3891,"modified":3892,"checkedAt":7,"severity":3893,"references":3895,"versionKeys":3907,"packageCount":32,"repositoryCount":363},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3888,3889],"CVE-2025-50181","PYSEC-2026-1999",[203,3889],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3894],{"type":1210,"score":1563},[3896,3898,3900,3902,3903,3904,3905],{"type":1225,"url":3897},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1214,"url":3899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1219,"url":3901},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1222,"url":1389},{"type":1225,"url":1573},{"type":1222,"url":1391},{"type":1214,"url":3906},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1393,1394,1395,1396],{"id":204,"slug":3909,"dossier":47,"summary":3910,"aliases":3911,"sourceIds":3915,"published":3916,"modified":3917,"checkedAt":7,"severity":3918,"references":3921,"versionKeys":3933,"packageCount":32,"repositoryCount":1398},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3912,3913,3914],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[204,3914],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3919,3920],{"type":1316,"score":2727},{"type":1210,"score":2127},[3922,3923,3925,3927,3929,3931,3932],{"type":1225,"url":2731},{"type":1219,"url":3924},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1214,"url":3926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1219,"url":3928},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1219,"url":3930},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1222,"url":1539},{"type":1214,"url":1984},[1543,1544,1545,1546,1547,1548,1549,1550],{"id":205,"slug":3935,"dossier":47,"summary":3936,"aliases":3937,"sourceIds":3940,"published":3481,"modified":3941,"checkedAt":7,"severity":3942,"references":3944,"versionKeys":3955,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[3938,3939],"CVE-2025-3263","PYSEC-2026-1987",[205,3939],"2026-07-07T17:56:57.889099913Z",[3943],{"type":1210,"score":1663},[3945,3947,3948,3949,3950,3952,3953],{"type":1214,"url":3946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1225,"url":3489},{"type":1225,"url":3491},{"type":1222,"url":1256},{"type":1225,"url":3951},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1222,"url":1464},{"type":1214,"url":3954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1263],{"id":206,"slug":3957,"dossier":47,"summary":3958,"aliases":3959,"sourceIds":3962,"published":3963,"modified":3964,"checkedAt":7,"severity":3965,"references":3969,"versionKeys":3982,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3960,3961],"CVE-2024-56326","PYSEC-2026-1475",[206,3961],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3966,3968],{"type":1210,"score":3967},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1316,"score":2781},[3970,3972,3974,3976,3977,3978,3979,3980],{"type":1225,"url":3971},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1214,"url":3973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1219,"url":3975},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1222,"url":2790},{"type":1225,"url":3187},{"type":1225,"url":2792},{"type":1222,"url":2796},{"type":1214,"url":3981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2800],{"id":207,"slug":3984,"dossier":90,"summary":3985,"aliases":3986,"sourceIds":3989,"published":3990,"modified":3991,"checkedAt":7,"severity":3992,"references":3996,"versionKeys":4002,"packageCount":32,"repositoryCount":3140},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3987,3988],"CVE-2026-44431","PYSEC-2026-141",[207,3988],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3993,3994],{"type":1210,"score":2536},{"type":1316,"score":3995},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3997,3999,4001],{"type":1214,"url":3998},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1214,"url":4000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1222,"url":1389},[1393,1394,1395,1396,1397,3613],{"id":208,"slug":4004,"dossier":47,"summary":4005,"aliases":4006,"sourceIds":4010,"published":4011,"modified":4012,"checkedAt":7,"severity":4013,"references":4017,"versionKeys":4035,"packageCount":32,"repositoryCount":4040},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[4007,4008,4009],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[208],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[4014,4015],{"type":1210,"score":2875},{"type":1316,"score":4016},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4018,4020,4022,4024,4026,4028,4029,4031,4033],{"type":1214,"url":4019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1225,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1225,"url":4023},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1225,"url":4025},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1225,"url":4027},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1222,"url":1427},{"type":1225,"url":4030},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1225,"url":4032},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1225,"url":4034},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1439,1440,1441,2451,2452,4036,4037,4038,4039],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",13,{"id":209,"slug":4042,"dossier":47,"summary":4043,"aliases":4044,"sourceIds":4047,"published":4048,"modified":4049,"checkedAt":7,"severity":4050,"references":4053,"versionKeys":4068,"packageCount":32,"repositoryCount":4040},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4045,4046],"CVE-2026-22701","PYSEC-2026-1374",[209,4046],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[4051],{"type":1210,"score":4052},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4054,4056,4058,4060,4062,4064,4066],{"type":1225,"url":4055},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1214,"url":4057},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1225,"url":4059},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1225,"url":4061},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1222,"url":4063},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1222,"url":4065},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1214,"url":4067},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4069,4070,4071,4072],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":210,"slug":4074,"dossier":47,"summary":4075,"aliases":4076,"sourceIds":4079,"published":4080,"modified":4081,"checkedAt":7,"severity":4082,"references":4085,"versionKeys":4099,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[4077,4078],"CVE-2025-2099","PYSEC-2025-40",[210,4078],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[4083,4084],{"type":1210,"score":1663},{"type":1210,"score":1319},[4086,4088,4090,4092,4093,4095,4097],{"type":1214,"url":4087},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1225,"url":4089},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1219,"url":4091},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1222,"url":1256},{"type":1225,"url":4094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1225,"url":4096},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1214,"url":4098},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1263],{"id":211,"slug":4101,"dossier":47,"summary":3363,"aliases":4102,"sourceIds":4105,"published":4106,"modified":4107,"checkedAt":7,"severity":4108,"references":4112,"versionKeys":4126,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[4103,4104],"CVE-2024-11392","PYSEC-2024-227",[211,4104],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[4109,4111],{"type":1210,"score":4110},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1210,"score":2843},[4113,4115,4116,4117,4118,4120,4122,4124],{"type":1214,"url":4114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1225,"url":3378},{"type":1225,"url":3380},{"type":1222,"url":1256},{"type":1225,"url":4119},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1225,"url":4121},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1214,"url":4123},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1214,"url":4125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1263],{"id":212,"slug":4128,"dossier":47,"summary":4129,"aliases":4130,"sourceIds":4134,"published":4135,"modified":4136,"checkedAt":7,"severity":4137,"references":4140,"versionKeys":4154,"packageCount":32,"repositoryCount":1398},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4131,4132,4133],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[212,4133],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[4138,4139],{"type":1210,"score":1415},{"type":1316,"score":1976},[4141,4143,4145,4147,4149,4150,4151,4152],{"type":1225,"url":4142},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1214,"url":4144},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1225,"url":4146},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1225,"url":4148},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1222,"url":1539},{"type":1225,"url":1984},{"type":1222,"url":2013},{"type":1214,"url":4153},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1543,1544,1545,1546,1547,1548,1549,1550],{"id":213,"slug":4156,"dossier":47,"summary":4157,"aliases":4158,"sourceIds":4161,"published":4162,"modified":4163,"checkedAt":7,"severity":4164,"references":4166,"versionKeys":4181,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4159,4160],"CVE-2025-6051","PYSEC-2026-1988",[213,4160],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[4165],{"type":1210,"score":1663},[4167,4169,4171,4173,4175,4176,4178,4179],{"type":1214,"url":4168},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1225,"url":4170},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1225,"url":4172},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1225,"url":4174},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1222,"url":1256},{"type":1225,"url":4177},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1222,"url":1464},{"type":1214,"url":4180},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1263,1264,1265,1266],{"id":214,"slug":4183,"dossier":47,"summary":4184,"aliases":4185,"sourceIds":4188,"published":4189,"modified":4190,"checkedAt":7,"severity":4191,"references":4194,"versionKeys":4207,"packageCount":32,"repositoryCount":4040},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4186,4187],"CVE-2026-25087","PYSEC-2026-113",[214,4187],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[4192],{"type":1210,"score":4193},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4195,4197,4199,4201,4203,4205],{"type":1214,"url":4196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1219,"url":4198},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1222,"url":4200},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1225,"url":4202},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1214,"url":4204},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1214,"url":4206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4208,4209,4210,4211],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":215,"slug":4213,"dossier":47,"summary":4214,"aliases":4215,"sourceIds":4219,"published":2871,"modified":4220,"checkedAt":7,"severity":4221,"references":4224,"versionKeys":4242,"packageCount":32,"repositoryCount":1398},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4216,4217,4218],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[215],"2026-09-10T03:49:48.419046410Z",[4222,4223],{"type":1210,"score":2875},{"type":1316,"score":4016},[4225,4227,4229,4231,4233,4235,4236,4238,4240],{"type":1214,"url":4226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1225,"url":4228},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1225,"url":4230},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1225,"url":4232},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1225,"url":4234},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1222,"url":1427},{"type":1225,"url":4237},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1225,"url":4239},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1225,"url":4241},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4243,4244,4245,1439,1440,1441,2451,2452,4036,4037,4038,4039],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":216,"slug":4247,"dossier":47,"summary":4248,"aliases":4249,"sourceIds":4252,"published":4253,"modified":4254,"checkedAt":7,"severity":4255,"references":4258,"versionKeys":4267,"packageCount":32,"repositoryCount":103},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[4250,4251],"CVE-2026-53540","PYSEC-2026-3040",[216,4251],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[4256],{"type":1210,"score":4257},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4259,4261,4262,4263,4265],{"type":1225,"url":4260},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1222,"url":1818},{"type":1222,"url":1820},{"type":1214,"url":4264},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1214,"url":4266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[1937,1938,1939,1824],{"id":217,"slug":4269,"dossier":47,"summary":4270,"aliases":4271,"sourceIds":4274,"published":4275,"modified":4276,"checkedAt":7,"severity":4277,"references":4279,"versionKeys":4290,"packageCount":32,"repositoryCount":103},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[4272,4273],"CVE-2026-53537","PYSEC-2026-3041",[217,4273],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[4278],{"type":1210,"score":2175},[4280,4282,4284,4285,4287,4289],{"type":1225,"url":4281},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1214,"url":4283},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1222,"url":1818},{"type":1214,"url":4286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1225,"url":4288},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1222,"url":1820},[1937,1938,1939,1824],{"id":218,"slug":4292,"dossier":47,"summary":4293,"aliases":4294,"sourceIds":4298,"published":2871,"modified":4299,"checkedAt":7,"severity":4300,"references":4303,"versionKeys":4318,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4295,4296,4297],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[218],"2026-06-10T17:41:15.774477397Z",[4301,4302],{"type":1210,"score":2875},{"type":1316,"score":2877},[4304,4306,4307,4308,4309,4311,4312,4314,4316],{"type":1214,"url":4305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1225,"url":2882},{"type":1225,"url":2884},{"type":1225,"url":2886},{"type":1225,"url":4310},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1222,"url":1427},{"type":1225,"url":4313},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1225,"url":4315},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1225,"url":4317},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1439,1440,1441,2451,2452,4036,4037],{"id":219,"slug":4320,"dossier":90,"summary":4321,"aliases":4322,"sourceIds":4326,"published":4327,"modified":4328,"checkedAt":7,"severity":4329,"references":4331,"versionKeys":4345,"packageCount":32,"repositoryCount":104},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[4323,4324,4325],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[219,4325],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[4330],{"type":1316,"score":1809},[4332,4334,4336,4338,4340,4341,4342,4343],{"type":1225,"url":4333},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1214,"url":4335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1225,"url":4337},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1225,"url":4339},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1222,"url":1539},{"type":1225,"url":2011},{"type":1222,"url":2013},{"type":1214,"url":4344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":220,"slug":4347,"dossier":47,"summary":4348,"aliases":4349,"sourceIds":4352,"published":4353,"modified":4354,"checkedAt":7,"severity":4355,"references":4358,"versionKeys":4371,"packageCount":32,"repositoryCount":401},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[4350,4351],"CVE-2025-43859","PYSEC-2026-348",[220,4351],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[4356],{"type":1210,"score":4357},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4359,4361,4363,4365,4367,4369],{"type":1225,"url":4360},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1214,"url":4362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1225,"url":4364},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1222,"url":4366},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1222,"url":4368},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1214,"url":4370},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[4372],"pypi:h11@0.14.0",{"id":221,"slug":4374,"dossier":47,"summary":4375,"aliases":4376,"sourceIds":4379,"published":4380,"modified":4381,"checkedAt":7,"severity":4382,"references":4386,"versionKeys":4395,"packageCount":32,"repositoryCount":1362},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[4377,4378],"CVE-2026-22815","PYSEC-2026-2094",[221,4378],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[4383,4384],{"type":1316,"score":2075},{"type":1316,"score":4385},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4387,4389,4391,4393,4394],{"type":1219,"url":4388},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1214,"url":4390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1219,"url":4392},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1222,"url":1324},{"type":1214,"url":1360},[1328,1329,1330,1331,1332,1333,1334,1335],{"id":222,"slug":4397,"dossier":47,"summary":4398,"aliases":4399,"sourceIds":4402,"published":4403,"modified":4404,"checkedAt":7,"severity":4405,"references":4408,"versionKeys":4425,"packageCount":32,"repositoryCount":4040},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4400,4401],"CVE-2025-68146","PYSEC-2026-1375",[222,4401],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[4406],{"type":1210,"score":4407},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4409,4411,4413,4414,4416,4418,4420,4421,4423],{"type":1225,"url":4410},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1225,"url":4412},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1222,"url":4063},{"type":1225,"url":4415},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1225,"url":4417},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1225,"url":4419},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1222,"url":4065},{"type":1214,"url":4422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1214,"url":4424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4069,4070,4071,4072],{"id":223,"slug":4427,"dossier":47,"summary":4428,"aliases":4429,"sourceIds":4433,"published":4434,"modified":4435,"checkedAt":7,"severity":4436,"references":4439,"versionKeys":4477,"packageCount":32,"repositoryCount":1398},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4430,4431,4432],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[223,4432],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[4437,4438],{"type":1210,"score":1319},{"type":1316,"score":1809},[4440,4442,4444,4446,4448,4449,4451,4453,4455,4457,4459,4461,4462,4464,4466,4468,4469,4471,4473,4475],{"type":1225,"url":4441},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1214,"url":4443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1225,"url":4445},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1225,"url":4447},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1222,"url":1539},{"type":1225,"url":4450},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1225,"url":4452},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1225,"url":4454},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1214,"url":4456},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1214,"url":4458},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1214,"url":4460},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1214,"url":2754},{"type":1214,"url":4463},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1214,"url":4465},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1214,"url":4467},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1214,"url":2756},{"type":1214,"url":4470},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1214,"url":4472},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1214,"url":4474},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1214,"url":4476},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1543,1544,1545,1546,1547,1548,1549,1550],{"id":224,"slug":4479,"dossier":47,"summary":4480,"aliases":4481,"sourceIds":4485,"published":4486,"modified":4487,"checkedAt":7,"severity":4488,"references":4491,"versionKeys":4500,"packageCount":32,"repositoryCount":1398},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4482,4483,4484],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[224,4484],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[4489,4490],{"type":1210,"score":1415},{"type":1316,"score":1976},[4492,4494,4496,4498,4499],{"type":1214,"url":4493},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1214,"url":4495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1225,"url":4497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1222,"url":1539},{"type":1214,"url":1984},[1543,1544,1545,1546,1547,1548,1549,1550],{"id":225,"slug":4502,"dossier":47,"summary":4503,"aliases":4504,"sourceIds":4507,"published":4508,"modified":4509,"checkedAt":7,"severity":4510,"references":4513,"versionKeys":4526,"packageCount":32,"repositoryCount":2322},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[4505,4506],"CVE-2026-24486","PYSEC-2026-1852",[225,4506],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[4511],{"type":1210,"score":4512},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4514,4516,4518,4520,4521,4523,4524],{"type":1225,"url":4515},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1214,"url":4517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1225,"url":4519},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1222,"url":1818},{"type":1225,"url":4522},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1222,"url":1820},{"type":1214,"url":4525},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[1937,1938,1824],{"id":226,"slug":4528,"dossier":47,"summary":4529,"aliases":4530,"sourceIds":4533,"published":4534,"modified":4535,"checkedAt":7,"severity":4536,"references":4538,"versionKeys":4560,"packageCount":32,"repositoryCount":1362},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[4531,4532],"CVE-2026-48818","PYSEC-2026-2281",[226,4532],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[4537],{"type":1210,"score":3295},[4539,4541,4542,4544,4546,4548,4550,4552,4554,4556,4558],{"type":1214,"url":4540},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1222,"url":2312},{"type":1225,"url":4543},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1225,"url":4545},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1214,"url":4547},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1214,"url":4549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1214,"url":4551},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1214,"url":4553},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":1420,"url":4555},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1219,"url":4557},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1219,"url":4559},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1302,1303,1304,2319,2320,2321,2360,2361,2362],{"id":227,"slug":4562,"dossier":47,"summary":3363,"aliases":4563,"sourceIds":4566,"published":3368,"modified":4567,"checkedAt":7,"severity":4568,"references":4571,"versionKeys":4585,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[4564,4565],"CVE-2024-11393","PYSEC-2024-228",[227,4565],"2026-09-10T03:50:55.987633957Z",[4569,4570],{"type":1210,"score":3372},{"type":1210,"score":2843},[4572,4574,4575,4576,4577,4579,4581,4583],{"type":1214,"url":4573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1225,"url":3378},{"type":1225,"url":3380},{"type":1222,"url":1256},{"type":1225,"url":4578},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1225,"url":4580},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1214,"url":4582},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1214,"url":4584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1263],{"id":228,"slug":4587,"dossier":47,"summary":4588,"aliases":4589,"sourceIds":4593,"published":4594,"modified":4595,"checkedAt":7,"severity":4596,"references":4601,"versionKeys":4617,"packageCount":32,"repositoryCount":420},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[4590,4591,4592],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[228],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[4597,4599],{"type":1210,"score":4598},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1316,"score":4600},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4602,4604,4606,4608,4610,4611,4613,4615],{"type":1214,"url":4603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1225,"url":4605},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1225,"url":4607},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1225,"url":4609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1222,"url":1427},{"type":1225,"url":4612},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1225,"url":4614},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1225,"url":4616},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1439,1440],{"id":229,"slug":4619,"dossier":47,"summary":4620,"aliases":4621,"sourceIds":4624,"published":4625,"modified":4626,"checkedAt":7,"severity":4627,"references":4629,"versionKeys":4636,"packageCount":32,"repositoryCount":1362},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[4622,4623],"CVE-2026-48817","PYSEC-2026-2280",[229,4623],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[4628],{"type":1210,"score":1350},[4630,4632,4634,4635],{"type":1214,"url":4631},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1214,"url":4633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1222,"url":2312},{"type":1214,"url":4553},[1302,1303,1304,2319,2320,2321,2360,2361,2362],{"id":230,"slug":4638,"dossier":47,"summary":4639,"aliases":4640,"sourceIds":4643,"published":4644,"modified":4645,"checkedAt":7,"severity":4646,"references":4649,"versionKeys":4655,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[4641,4642],"CVE-2026-54274","PYSEC-2026-2108",[230,4642],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[4647,4648],{"type":1316,"score":1589},{"type":1210,"score":1319},[4650,4652,4653],{"type":1214,"url":4651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1222,"url":1324},{"type":1219,"url":4654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1328,1329,1330,1331,1332,1333,1334,1335,1336],{"id":231,"slug":4657,"dossier":47,"summary":4658,"aliases":4659,"sourceIds":4663,"published":4664,"modified":4665,"checkedAt":7,"severity":4666,"references":4669,"versionKeys":4683,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4660,4661,4662],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[231,4662],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[4667],{"type":1210,"score":4668},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4670,4672,4674,4676,4678,4680,4681],{"type":1214,"url":4671},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1214,"url":4673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1225,"url":4675},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1219,"url":4677},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1225,"url":4679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1222,"url":1539},{"type":1225,"url":4682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1546],{"id":232,"slug":4685,"dossier":90,"summary":4686,"aliases":4687,"sourceIds":4691,"published":4692,"modified":4693,"checkedAt":7,"severity":4694,"references":4697,"versionKeys":4708,"packageCount":32,"repositoryCount":104},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[4688,4689,4690],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[232,4690],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[4695],{"type":1210,"score":4696},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4698,4700,4702,4704,4706,4707],{"type":1258,"url":4699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1214,"url":4701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1219,"url":4703},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1219,"url":4705},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1222,"url":1539},{"type":1214,"url":2011},[1543,1544,1545,1546,1547,1548,1549,1550,1551],{"id":233,"slug":4710,"dossier":47,"summary":4711,"aliases":4712,"sourceIds":4715,"published":4716,"modified":4717,"checkedAt":7,"severity":4718,"references":4721,"versionKeys":4734,"packageCount":32,"repositoryCount":1986},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[4713,4714],"CVE-2026-9856","PYSEC-2026-3929",[233,4714],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[4719],{"type":1210,"score":4720},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4722,4724,4726,4728,4729,4731,4732],{"type":1214,"url":4723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":1225,"url":4725},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":1225,"url":4727},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":1222,"url":1256},{"type":1225,"url":4730},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":1222,"url":1464},{"type":1214,"url":4733},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[1263,1264,1265,1266,1267,1268,1269,1270,1271,4735],"pypi:transformers@5.8.0",{"id":234,"slug":4737,"dossier":47,"summary":83,"aliases":4738,"sourceIds":4741,"published":4742,"modified":4743,"checkedAt":7,"severity":4744,"references":4746,"versionKeys":4755,"packageCount":32,"repositoryCount":420},"pysec-2025-198-62b25ed4",[4739,4740],"BIT-pytorch-2025-46148","CVE-2025-46148",[234],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[4745],{"type":1210,"score":2536},[4747,4749,4751,4753],{"type":1214,"url":4748},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1214,"url":4750},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1420,"url":4752},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1219,"url":4754},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1439,1440],{"id":235,"slug":4757,"dossier":47,"summary":83,"aliases":4758,"sourceIds":4761,"published":4762,"modified":4763,"checkedAt":7,"severity":4764,"references":4766,"versionKeys":4772,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[4759,4760],"BIT-pytorch-2025-46149","CVE-2025-46149",[235],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[4765],{"type":1210,"score":2536},[4767,4768,4770],{"type":1214,"url":4748},{"type":1420,"url":4769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1219,"url":4771},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1440],{"id":236,"slug":4774,"dossier":47,"summary":83,"aliases":4775,"sourceIds":4778,"published":4779,"modified":4780,"checkedAt":7,"severity":4781,"references":4783,"versionKeys":4791,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[4776,4777],"BIT-pytorch-2025-46150","CVE-2025-46150",[236],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4782],{"type":1210,"score":2536},[4784,4785,4787,4789],{"type":1214,"url":4748},{"type":1420,"url":4786},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1420,"url":4788},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1219,"url":4790},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1440],{"id":237,"slug":4793,"dossier":47,"summary":83,"aliases":4794,"sourceIds":4797,"published":4798,"modified":4799,"checkedAt":7,"severity":4800,"references":4802,"versionKeys":4808,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4795,4796],"BIT-pytorch-2025-46152","CVE-2025-46152",[237],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4801],{"type":1210,"score":1283},[4803,4804,4806],{"type":1214,"url":4748},{"type":1420,"url":4805},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1219,"url":4807},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1440],{"id":238,"slug":4810,"dossier":47,"summary":83,"aliases":4811,"sourceIds":4814,"published":4815,"modified":4816,"checkedAt":7,"severity":4817,"references":4819,"versionKeys":4829,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4812,4813],"BIT-pytorch-2025-46153","CVE-2025-46153",[238],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4818],{"type":1210,"score":2536},[4820,4822,4823,4825,4827],{"type":1225,"url":4821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1214,"url":4748},{"type":1214,"url":4824},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1420,"url":4826},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1219,"url":4828},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1440],{"id":239,"slug":4831,"dossier":47,"summary":83,"aliases":4832,"sourceIds":4835,"published":4836,"modified":4837,"checkedAt":7,"severity":4838,"references":4840,"versionKeys":4845,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[4833,4834],"BIT-pytorch-2025-55551","CVE-2025-55551",[239],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4839],{"type":1210,"score":1319},[4841,4843],{"type":1214,"url":4842},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1420,"url":4844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1439,1440,1441,2451,2452,4036],{"id":240,"slug":4847,"dossier":47,"summary":83,"aliases":4848,"sourceIds":4851,"published":4852,"modified":4853,"checkedAt":7,"severity":4854,"references":4856,"versionKeys":4860,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[4849,4850],"BIT-pytorch-2025-55552","CVE-2025-55552",[240],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4855],{"type":1210,"score":1319},[4857,4858],{"type":1214,"url":4842},{"type":1420,"url":4859},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1439,1440,1441,2451,2452,4036],{"id":241,"slug":4862,"dossier":47,"summary":83,"aliases":4863,"sourceIds":4866,"published":4867,"modified":4868,"checkedAt":7,"severity":4869,"references":4871,"versionKeys":4877,"packageCount":32,"repositoryCount":401},"pysec-2025-205-fd5e58fd",[4864,4865],"BIT-pytorch-2025-55553","CVE-2025-55553",[241],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4870],{"type":1210,"score":1319},[4872,4873,4875],{"type":1214,"url":4842},{"type":1420,"url":4874},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1219,"url":4876},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1439,1440,1441],{"id":242,"slug":4879,"dossier":47,"summary":83,"aliases":4880,"sourceIds":4883,"published":4884,"modified":4885,"checkedAt":7,"severity":4886,"references":4888,"versionKeys":4892,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[4881,4882],"BIT-pytorch-2025-55554","CVE-2025-55554",[242],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4887],{"type":1210,"score":1283},[4889,4890],{"type":1214,"url":4842},{"type":1420,"url":4891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1439,1440,1441,2451,2452,4036],{"id":243,"slug":4894,"dossier":47,"summary":83,"aliases":4895,"sourceIds":4898,"published":4899,"modified":4900,"checkedAt":7,"severity":4901,"references":4903,"versionKeys":4909,"packageCount":32,"repositoryCount":401},"pysec-2025-207-2abef3fc",[4896,4897],"BIT-pytorch-2025-55557","CVE-2025-55557",[243],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4902],{"type":1210,"score":1319},[4904,4905,4907],{"type":1214,"url":4842},{"type":1420,"url":4906},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1219,"url":4908},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1439,1440,1441],{"id":244,"slug":4911,"dossier":47,"summary":83,"aliases":4912,"sourceIds":4915,"published":4916,"modified":4917,"checkedAt":7,"severity":4918,"references":4920,"versionKeys":4926,"packageCount":32,"repositoryCount":401},"pysec-2025-208-6e93fe9d",[4913,4914],"BIT-pytorch-2025-55558","CVE-2025-55558",[244],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[4919],{"type":1210,"score":1319},[4921,4922,4924],{"type":1214,"url":4842},{"type":1420,"url":4923},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1219,"url":4925},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1439,1440,1441],{"id":245,"slug":4928,"dossier":47,"summary":83,"aliases":4929,"sourceIds":4932,"published":4933,"modified":4934,"checkedAt":7,"severity":4935,"references":4937,"versionKeys":4943,"packageCount":32,"repositoryCount":401},"pysec-2025-209-e6f352b0",[4930,4931],"BIT-pytorch-2025-55560","CVE-2025-55560",[245],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[4936],{"type":1210,"score":1319},[4938,4939,4941],{"type":1214,"url":4842},{"type":1420,"url":4940},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1219,"url":4942},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1439,1440,1441],{"id":246,"slug":4945,"dossier":47,"summary":83,"aliases":4946,"sourceIds":4948,"published":4949,"modified":4950,"checkedAt":7,"severity":4951,"references":4953,"versionKeys":4956,"packageCount":32,"repositoryCount":4957},"pysec-2025-211-d8bd15de",[4947],"CVE-2025-14920",[246],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[4952],{"type":1210,"score":1249},[4954],{"type":1214,"url":4955},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1263,1264,1265,1266,1267],5,{"id":247,"slug":4959,"dossier":47,"summary":83,"aliases":4960,"sourceIds":4962,"published":4963,"modified":4964,"checkedAt":7,"severity":4965,"references":4967,"versionKeys":4970,"packageCount":32,"repositoryCount":4957},"pysec-2025-212-a011b97d",[4961],"CVE-2025-14921",[247],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[4966],{"type":1210,"score":1249},[4968],{"type":1214,"url":4969},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1263,1264,1265,1266,1267],{"id":248,"slug":4972,"dossier":47,"summary":83,"aliases":4973,"sourceIds":4975,"published":4976,"modified":4977,"checkedAt":7,"severity":4978,"references":4980,"versionKeys":4983,"packageCount":32,"repositoryCount":4957},"pysec-2025-213-9043dc9b",[4974],"CVE-2025-14924",[248],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[4979],{"type":1210,"score":1249},[4981],{"type":1214,"url":4982},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1263,1264,1265,1266,1267],{"id":249,"slug":4985,"dossier":47,"summary":83,"aliases":4986,"sourceIds":4988,"published":4989,"modified":4990,"checkedAt":7,"severity":4991,"references":4993,"versionKeys":4996,"packageCount":32,"repositoryCount":4957},"pysec-2025-214-eb241255",[4987],"CVE-2025-14926",[249],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[4992],{"type":1210,"score":1249},[4994],{"type":1214,"url":4995},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1263,1264,1265,1266,1267],{"id":250,"slug":4998,"dossier":47,"summary":83,"aliases":4999,"sourceIds":5001,"published":5002,"modified":5003,"checkedAt":7,"severity":5004,"references":5006,"versionKeys":5009,"packageCount":32,"repositoryCount":4957},"pysec-2025-215-6064f491",[5000],"CVE-2025-14927",[250],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[5005],{"type":1210,"score":1249},[5007],{"type":1214,"url":5008},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1263,1264,1265,1266,1267],{"id":251,"slug":5011,"dossier":47,"summary":83,"aliases":5012,"sourceIds":5014,"published":5015,"modified":5016,"checkedAt":7,"severity":5017,"references":5019,"versionKeys":5022,"packageCount":32,"repositoryCount":4957},"pysec-2025-216-5708ed01",[5013],"CVE-2025-14928",[251],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[5018],{"type":1210,"score":1249},[5020],{"type":1214,"url":5021},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1263,1264,1265,1266,1267],{"id":252,"slug":5024,"dossier":47,"summary":83,"aliases":5025,"sourceIds":5027,"published":5028,"modified":5029,"checkedAt":7,"severity":5030,"references":5032,"versionKeys":5035,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[5026],"CVE-2025-14929",[252],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[5031],{"type":1210,"score":1249},[5033],{"type":1214,"url":5034},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1263,1264,1265,1266,1267,1268,1269,1270,1271],{"id":253,"slug":5037,"dossier":47,"summary":83,"aliases":5038,"sourceIds":5040,"published":5041,"modified":5042,"checkedAt":7,"severity":5043,"references":5045,"versionKeys":5048,"packageCount":32,"repositoryCount":363},"pysec-2025-218-39811fc3",[5039],"CVE-2025-14930",[253],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[5044],{"type":1210,"score":1249},[5046],{"type":1214,"url":5047},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1263,1264,1265,1266,1267,1268],{"id":254,"slug":5050,"dossier":47,"summary":83,"aliases":5051,"sourceIds":5054,"published":5055,"modified":5056,"checkedAt":7,"severity":5057,"references":5059,"versionKeys":5070,"packageCount":32,"repositoryCount":5071},"pysec-2026-139-96951ff6",[5052,5053],"BIT-pytorch-2026-4538","CVE-2026-4538",[254],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[5058],{"type":1210,"score":3967},[5060,5062,5064,5066,5068],{"type":1225,"url":5061},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1214,"url":5063},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1214,"url":5065},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1420,"url":5067},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1219,"url":5069},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4243,1439,1440,1441,2451,2452,4036,4037,4038,4039],14,{"id":255,"slug":5073,"dossier":90,"summary":83,"aliases":5074,"sourceIds":5077,"published":5078,"modified":5079,"checkedAt":7,"severity":5080,"references":5083,"versionKeys":5098,"packageCount":32,"repositoryCount":104},"pysec-2026-2132-627bf7c7",[5075,5076],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[255],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5081],{"type":1210,"score":5082},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5084,5086,5088,5090,5092,5094,5096],{"type":1225,"url":5085},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1225,"url":5087},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1214,"url":5089},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1214,"url":5091},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1420,"url":5093},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1219,"url":5095},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1258,"url":5097},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5099,5100,5101,5102,5103,5104],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":256,"slug":5106,"dossier":47,"summary":83,"aliases":5107,"sourceIds":5112,"published":5113,"modified":5114,"checkedAt":7,"severity":5115,"references":5117,"versionKeys":5133,"packageCount":32,"repositoryCount":4040},"pysec-2026-2286-8795b007",[5108,5109,5110,5111],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[256],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5116],{"type":1210,"score":2843},[5118,5120,5122,5123,5125,5127,5129,5131],{"type":1225,"url":5119},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1225,"url":5121},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1214,"url":3418},{"type":1214,"url":5124},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1214,"url":5126},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1420,"url":5128},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1420,"url":5130},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1219,"url":5132},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1439,1440,1441,2451,2452,4036,4037,4038,4039],{"id":257,"slug":5135,"dossier":47,"summary":83,"aliases":5136,"sourceIds":5138,"published":5139,"modified":5140,"checkedAt":7,"severity":5141,"references":5144,"versionKeys":5153,"packageCount":32,"repositoryCount":2322},"pysec-2026-3716-664d8bb8",[5137],"CVE-2026-66007",[257],"2026-07-24T15:19:07.493Z","2026-08-19T13:45:02.994125715Z",[5142],{"type":1316,"score":5143},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5145,5147,5149,5151],{"type":1420,"url":5146},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fissues\u002F8324",{"type":1219,"url":5148},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fcommit\u002Ff989ef9b4cc6c0039a7a82458eebca49e2b58b4b",{"type":1219,"url":5150},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fpull\u002F8325",{"type":1219,"url":5152},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdatasets-path-traversal-via-unsanitized-file-name-metadata",[5154,5155,5156,5157,5158,5159],"pypi:datasets@3.2.0","pypi:datasets@3.5.1","pypi:datasets@3.6.0","pypi:datasets@4.3.0","pypi:datasets@4.4.1","pypi:datasets@4.8.5",1790757843582]