[{"data":1,"prerenderedAt":19353},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11332":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":77,"entity":78,"evidence":561,"related":566},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-15T06:22:58.222Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-15T06:19:38.732Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5086,5074,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":71,"topPackage":72},2871,51,9941,11,63,2832,39,1120,43,{"id":73,"slug":74,"label":75,"repositoryCount":33,"repositoryShare":76},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":118,"artifactResolvedComponentCount":118,"exactManifestPinCount":39,"packageCount":119,"ecosystems":120,"aiPackageCount":32,"licenseExpressionCount":35,"unknownLicensePackageCount":32,"advisoryIds":123,"advisoryCount":556,"providers":557},"opencode:11332","opencode-11332",11332,"sprachbuchung-erzmobil","erzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil",null,"https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil","b89e10e2d7dc3fe7766c171353dd4e15df8f3e07","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fcommit\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07","2026-10-27T12:05:13.998Z","2026-10-27T12:05:12.000Z",{"complete":91,"entryCount":92,"truncated":47},true,490,[94,103,111],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},"dashboard\u002Fpackage-lock.json","npm-lock","3953686d66a918f77e6a34d09ae6bbdc69d186b2","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fdashboard\u002Fpackage-lock.json","b6bb9f6359bbea5da66f8bbd840794270f5e5e08a6099742a59d53ef3494aeca",419338,"parsed",759,{"path":104,"kind":105,"blobSha":106,"sourceUrl":107,"commitSha":86,"contentSha256":108,"byteCount":109,"state":101,"componentCount":110},"sbom.cdx.json","cyclonedx-json","3349aa5ad7f9ceb0d1bae546f292be001343662a","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fsbom.cdx.json","75dcc620214a3fcc98f4e8798b8b4f9d9db47c47c4da5074833e4dddddef01b0",266969,781,{"path":56,"kind":112,"blobSha":113,"sourceUrl":114,"commitSha":86,"contentSha256":115,"byteCount":116,"state":101,"componentCount":117},"uv-lock","d586704dfa97d255af772ed32d3278fe3ecd5c3b","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fuv.lock","3756746b4a4032cb0c77482692f2914d91928e9d92d8fc835b28e466623b7d1e",488931,206,1746,927,[121,122],"npm","pypi",[124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555],"GHSA-22hg-r758-rrw9","GHSA-239g-whfq-7xj9","GHSA-23c5-xmqv-rm74","GHSA-23mf-xhv8-69c2","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-25h7-pfq9-p65f","GHSA-27h8-gf7j-v5hc","GHSA-27r3-jxmh-p828","GHSA-284h-m62q-gf8w","GHSA-2883-xcg3-v3hh","GHSA-28wg-ghj8-5hjv","GHSA-2c2j-9gv5-cj73","GHSA-2f96-g7mh-g2hx","GHSA-2fqr-mr3j-6wp8","GHSA-2g4f-4pwh-qvx6","GHSA-2g87-pp6c-29x5","GHSA-2gqq-gqf2-x968","GHSA-2gx3-rcp4-g85q","GHSA-2h4p-vjrc-8xpq","GHSA-2jfj-6hjv-fm6j","GHSA-2m5v-pch6-74hx","GHSA-2mjp-6q6p-2qxm","GHSA-2qfp-q593-8484","GHSA-2v37-7h3g-55p8","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-333x-w4r6-6crp","GHSA-35jp-ww65-95wh","GHSA-35p6-xmwp-9g52","GHSA-37ch-88jc-xwx2","GHSA-38jv-5279-wg99","GHSA-394h-qwmc-48pf","GHSA-3f7w-8rr8-f37f","GHSA-3g43-6gmg-66jw","GHSA-3gg2-335m-rxc6","GHSA-3j72-p6qg-6xp7","GHSA-3jxr-9vmj-r5cp","GHSA-3p68-rc4w-qgx5","GHSA-3ppc-4f35-3m26","GHSA-3pq3-5fj3-cg6v","GHSA-3rp5-jjmw-4wv2","GHSA-3v7f-55p6-f55p","GHSA-3w6x-2g7m-8v23","GHSA-3wq7-rqq7-wx6j","GHSA-3wxw-xv34-2frg","GHSA-3xpg-4rpp-hhhm","GHSA-42h9-826w-cgv3","GHSA-42vr-xj54-vc7v","GHSA-43fc-jf86-j433","GHSA-43mp-35q3-x3fq","GHSA-445q-vr5w-6q77","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-46wx-v44x-9hh2","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-494p-63j8-28p3","GHSA-4992-7rv2-5pvq","GHSA-4cwx-7wf7-3272","GHSA-4fh9-h7wg-q85m","GHSA-4fvr-rgm6-gqmc","GHSA-4gmw-gg2m-w46p","GHSA-4h7h-rv7c-7m2v","GHSA-4hjh-wcwx-xvwj","GHSA-4hqw-qxg8-jxx2","GHSA-4j63-6c4x-wfg4","GHSA-4m76-xfj5-7975","GHSA-4m7w-qmgq-4wj5","GHSA-4mjr-xmp4-gh2g","GHSA-4qv8-2p9j-2685","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4w7w-5xrc-9h26","GHSA-4w7w-66w2-5vf9","GHSA-4x4j-2g7c-83w6","GHSA-4x5r-pxfx-6jf8","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52cp-r559-cp3m","GHSA-537c-gmf6-5ccf","GHSA-539m-9xh6-q6rr","GHSA-542g-h47m-68v8","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-558c-9hv2-4prj","GHSA-55wc-3pg8-jfw6","GHSA-5639-2j2p-m4mx","GHSA-567q-5qvw-pf92","GHSA-587h-7wmj-h5pm","GHSA-58r4-6rv3-gfh8","GHSA-597g-3phw-6986","GHSA-59cr-6r3x-644w","GHSA-59g5-xgcq-4qw3","GHSA-5c9x-8gcm-mpgx","GHSA-5h93-6whr-6q8j","GHSA-5p39-cfhj-2xmp","GHSA-5p4m-2wfm-xmqj","GHSA-5rvq-cxj2-64vf","GHSA-5vjq-rrrf-7h2q","GHSA-5wmx-573v-2qwq","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-5xxx-qhh7-9287","GHSA-62hf-57xw-28j9","GHSA-62p4-gmf7-7g93","GHSA-62q4-447f-wv8h","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-6655-6qjp-jx7x","GHSA-68fv-2mgg-jv7q","GHSA-698v-4r3x-3vcv","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-6chq-wfr3-2hj9","GHSA-6cjc-53gc-5rqm","GHSA-6g55-p6wh-862q","GHSA-6hr6-w5qg-qmwg","GHSA-6j4f-fj2g-mc7p","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6p8h-3wgx-97gf","GHSA-6pq8-jhm2-2vcw","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rw7-vpxm-498p","GHSA-6w3r-xr62-4xcp","GHSA-6w46-j5rx-g56g","GHSA-73rr-hh4g-fpgx","GHSA-73wf-gq98-2v4g","GHSA-74r2-7ff9-mjj2","GHSA-752w-5fwx-jx9f","GHSA-7545-fcxq-7j24","GHSA-768j-98cg-p3fv","GHSA-777c-7fjr-54vf","GHSA-7833-fr7j-v32q","GHSA-78g4-xqwv-q3g8","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7g44-g9rc-x53w","GHSA-7gcm-g887-7qv7","GHSA-7mwm-ghpf-9vrm","GHSA-7q8q-rj6j-mhjq","GHSA-7r86-cg39-jmmj","GHSA-7rv5-mrxv-xcr9","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-83vg-56qc-22m7","GHSA-8436-99hf-9mmv","GHSA-847f-9342-265h","GHSA-84m7-p3x7-pcfv","GHSA-86qp-5c8j-p5mr","GHSA-8988-9cw3-xx77","GHSA-898c-q2cr-xwhg","GHSA-8g5g-8vmr-9782","GHSA-8mcc-hrx5-hvxc","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8rjx-v5ww-45pp","GHSA-8v84-f9pq-wr9x","GHSA-8v8h-hg4w-mvq2","GHSA-8wjv-2p76-3863","GHSA-8xcm-r25x-g524","GHSA-93m4-6634-74q7","GHSA-94p4-4cq8-9g67","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-956x-8gvw-wg5v","GHSA-966j-vmvw-g2g9","GHSA-97r2-qh9m-474h","GHSA-983w-rhvv-gwmv","GHSA-993g-76c3-p5m4","GHSA-9fm3-97px-rjf6","GHSA-9fr6-4gfg-395g","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9jrq-w75r-8gcw","GHSA-9rj7-rf2p-w77r","GHSA-9v7f-9g4p-ffgj","GHSA-9v8h-qqgm-4m35","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9wx9-5pv9-3349","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-9xwg-3r6f-jcx2","GHSA-c2c7-rcm5-vvqj","GHSA-c427-h43c-vf67","GHSA-c6hw-5grf-ff96","GHSA-c83g-rgw3-j3cx","GHSA-c947-3pg5-gm8q","GHSA-c978-59m8-c77v","GHSA-cfh3-3jmp-rvhc","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cw65-gx24-rc82","GHSA-cwqr-hh33-gh44","GHSA-cx28-75q4-x26q","GHSA-f269-vfmq-vjvj","GHSA-f2g6-542v-9j58","GHSA-f72v-6w45-q472","GHSA-f86p-h4j2-7qgj","GHSA-f886-m6hf-6m8v","GHSA-f96h-pmfr-66vw","GHSA-f9j4-qggq-h239","GHSA-f9xw-jh8m-3mwq","GHSA-fc2g-4w5p-6whm","GHSA-fc9g-5qg7-mf45","GHSA-ffc3-869f-jxw9","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fq56-3cx3-fjxp","GHSA-fvcv-3m26-pcqx","GHSA-fx2h-pf6j-xcff","GHSA-fx3j-rwgx-fr94","GHSA-fxqj-rqcc-2cmp","GHSA-g3cq-j2xw-wf74","GHSA-g3hv-75wg-m249","GHSA-g4jq-h2w9-997c","GHSA-g4qv-2jxx-769h","GHSA-g5vv-9gxw-82hx","GHSA-g6cj-pr64-35w5","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-g8m3-5g58-fq7m","GHSA-g9mf-h72j-4rw9","GHSA-gc5v-m9x4-r6x2","GHSA-gcqx-w48m-w2h4","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gjv8-xp57-g29c","GHSA-gm37-52c6-37mw","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq48-pqfc-9p58","GHSA-gvp8-978c-rx2q","GHSA-gx76-c99x-2c96","GHSA-h4gh-qq45-vh27","GHSA-h67p-54hq-rp68","GHSA-h75v-3vvj-5mfj","GHSA-h7mg-cq63-vhpq","GHSA-hcc4-c3v8-rx92","GHSA-hfxv-24rg-xrqf","GHSA-hg6j-4rv6-33pg","GHSA-hh9p-6wh2-4mfc","GHSA-hhxq-47xx-j5xx","GHSA-hmq2-w58f-27jc","GHSA-hmw2-7cc7-3qxx","GHSA-hpj7-wq8m-9hgp","GHSA-hxm8-2xgr-2p9m","GHSA-j4m9-6w36-pw47","GHSA-j5f8-grm9-p9fc","GHSA-j8f7-rjxc-mr56","GHSA-j8rh-479h-cp32","GHSA-j934-xhv5-fg8f","GHSA-jf6q-chmf-3h3v","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jhhc-3hcp-qhm5","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jm66-cg57-jjv5","GHSA-jm78-9fvv-mhgr","GHSA-jp82-jpqv-5vv3","GHSA-jpvv-r467-5p4w","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jqcg-44mw-7w3h","GHSA-jqfw-vq24-v9c3","GHSA-jqh4-m9w3-8hp9","GHSA-jr45-8vmc-qm54","GHSA-jwrc-g2q2-pq5p","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m5qp-6w8w-w647","GHSA-m64x-33q8-m5h7","GHSA-m6qw-4cw2-hm4m","GHSA-m7pr-hjqh-92cm","GHSA-m8rv-5g2x-5cg5","GHSA-m959-cc7f-wv43","GHSA-mf5v-w3w3-f6cg","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mh29-5h37-fv8m","GHSA-mh99-v99m-4gvg","GHSA-mj87-hwqh-73pj","GHSA-mmhr-3c5m-f64f","GHSA-mmx7-hfxf-jppx","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mrhx-c7xc-m3w5","GHSA-mrwp-f3q8-3g9p","GHSA-mv93-w799-cj2w","GHSA-mwf2-3pr3-8698","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p498-v437-472g","GHSA-p4g4-x82p-q773","GHSA-p4wg-p73j-c528","GHSA-p538-c434-8v24","GHSA-p58f-9548-mpm2","GHSA-p88m-4jfj-68fv","GHSA-p8hx-v2p6-rp84","GHSA-p92q-9vqr-4j8v","GHSA-p998-jp59-783m","GHSA-p9ff-h696-f583","GHSA-pchr-8j38-3x4p","GHSA-pf86-5x62-jrwf","GHSA-pg7v-jwj7-p798","GHSA-phc3-fgpg-7m6h","GHSA-phj9-mv4w-65pm","GHSA-pmjh-fq2x-6v4x","GHSA-pmv8-rq9r-6j72","GHSA-pmwg-cvhr-8vh7","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pr7r-676h-xcf6","GHSA-pwv6-vv43-88gr","GHSA-pxh4-856f-4h89","GHSA-q2hr-2g5m-vwhr","GHSA-q2x7-8rv6-6q7h","GHSA-q45j-58j2-45rg","GHSA-q8mj-m7cp-5q26","GHSA-q8qp-cvcw-x6jj","GHSA-qccp-gfcp-xxvc","GHSA-qhr7-859c-m2p7","GHSA-qmgc-5h2g-mvrw","GHSA-qmx5-4p3x-wvqf","GHSA-qrxm-fqhp-jwvm","GHSA-qx2v-qp2m-jg93","GHSA-r28c-9q8g-f849","GHSA-r4q5-vmmm-2653","GHSA-r53p-7pc4-xj5r","GHSA-r543-q48m-4c9j","GHSA-r6ph-v2qm-q3c2","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-r825-w8mm-5pxw","GHSA-r9mr-m37c-5fr3","GHSA-rf6f-7fwh-wjgh","GHSA-rfgq-q3w2-pmv2","GHSA-rfgv-xxqx-mfg5","GHSA-rfpc-qcw5-3pc4","GHSA-rgw5-rvv9-x895","GHSA-rmxm-3fg6-px4f","GHSA-rpm5-65cw-6hj4","GHSA-rq7h-c2jc-7f22","GHSA-rwj8-pgh3-r573","GHSA-rwrf-2pqf-9j8j","GHSA-rx4f-c7p8-82vq","GHSA-rxp7-6hxx-x8q5","GHSA-v3r7-h72x-cjcm","GHSA-v422-hmwv-36x6","GHSA-v4x8-3wr5-3wq8","GHSA-v6wh-96g9-6wx3","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-v9p9-hfj2-hcw8","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vf2m-468p-8v99","GHSA-vffw-93wf-4j4q","GHSA-vh66-26gq-q6x8","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vrm6-8vpv-qv8q","GHSA-vx6w-vv9f-6gvg","GHSA-vxj4-q4g9-crj7","GHSA-vxpw-j846-p89q","GHSA-vxq7-64xx-v4gw","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w4fh-qvv9-3v23","GHSA-w6j9-cwv2-h6wq","GHSA-w74x-v6f9-j3xg","GHSA-w7fw-mjwx-w883","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-w8jc-g24h-crhw","GHSA-w9j2-pvgh-6h63","GHSA-whj4-6x5x-4v2j","GHSA-wjr9-j795-jxcr","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wp97-x4hv-qvhp","GHSA-wqgw-9xfh-qf2g","GHSA-wqp7-x3pw-xc5r","GHSA-wvpp-8hx9-p66j","GHSA-x2qx-6953-8485","GHSA-x33g-cr3x-6449","GHSA-x746-7m8f-x49c","GHSA-x78j-v8h9-3j2q","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xcvg-w56q-r89m","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xgmm-8j9v-c9wx","GHSA-xhjh-pmcv-23jw","GHSA-xhq7-xmqj-769h","GHSA-xj96-63gp-2gmr","GHSA-xjj6-f33q-929c","GHSA-xvh5-g6gv-559v","GHSA-xwg4-73v4-xw9w","GHSA-xx6v-rp6x-q39c","PYSEC-2025-183",432,[558],{"id":559,"label":560},"openai","OpenAI",{"files":562,"occurrenceCount":118},[563,564,565],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},{"path":104,"kind":105,"blobSha":106,"sourceUrl":107,"commitSha":86,"contentSha256":108,"byteCount":109,"state":101,"componentCount":110},{"path":56,"kind":112,"blobSha":113,"sourceUrl":114,"commitSha":86,"contentSha256":115,"byteCount":116,"state":101,"componentCount":117},{"packages":567,"vulnerabilities":8496},[568,580,591,602,613,624,633,643,653,662,672,682,693,703,712,721,731,740,750,759,768,777,787,797,808,817,826,836,845,854,863,872,881,890,899,908,918,927,936,945,954,964,973,982,991,1001,1010,1019,1028,1037,1046,1055,1064,1073,1082,1091,1100,1109,1118,1127,1136,1145,1155,1164,1173,1182,1192,1202,1210,1218,1227,1236,1244,1253,1261,1270,1278,1286,1295,1303,1311,1319,1327,1335,1343,1351,1359,1367,1375,1383,1391,1399,1407,1415,1423,1431,1440,1449,1458,1467,1476,1485,1494,1503,1511,1519,1528,1537,1546,1555,1563,1572,1581,1590,1598,1606,1615,1624,1634,1643,1652,1661,1670,1679,1688,1697,1706,1715,1724,1733,1742,1751,1760,1769,1777,1786,1795,1804,1813,1822,1831,1840,1849,1858,1866,1874,1883,1892,1901,1909,1918,1926,1935,1943,1951,1960,1969,1978,1987,1996,2004,2012,2021,2029,2038,2047,2055,2064,2072,2081,2090,2099,2108,2116,2125,2133,2142,2150,2158,2166,2175,2183,2192,2201,2210,2218,2226,2235,2243,2251,2260,2268,2277,2285,2293,2301,2309,2318,2326,2335,2344,2352,2360,2368,2376,2384,2392,2400,2408,2416,2424,2432,2440,2448,2456,2464,2473,2482,2491,2500,2509,2517,2525,2533,2541,2549,2557,2565,2573,2581,2589,2597,2605,2613,2621,2630,2639,2647,2656,2665,2674,2684,2693,2702,2711,2720,2728,2737,2746,2755,2764,2773,2782,2791,2800,2809,2817,2825,2833,2842,2850,2859,2868,2876,2885,2894,2903,2912,2921,2930,2938,2947,2956,2965,2974,2982,2990,2998,3006,3014,3022,3030,3038,3046,3055,3064,3073,3081,3090,3099,3108,3117,3126,3135,3145,3154,3163,3172,3181,3190,3198,3206,3215,3224,3233,3243,3251,3260,3269,3278,3286,3294,3303,3312,3321,3330,3339,3348,3357,3366,3374,3383,3392,3401,3410,3419,3427,3436,3444,3452,3461,3470,3479,3489,3497,3507,3516,3525,3533,3541,3550,3558,3567,3575,3584,3592,3601,3610,3619,3627,3635,3643,3652,3661,3669,3677,3687,3695,3703,3711,3720,3728,3736,3745,3754,3763,3772,3780,3789,3798,3807,3815,3823,3831,3839,3847,3855,3864,3872,3880,3888,3896,3905,3914,3923,3931,3940,3949,3958,3967,3976,3984,3992,4000,4008,4016,4025,4033,4041,4049,4057,4066,4074,4083,4092,4101,4109,4117,4125,4134,4142,4151,4160,4168,4176,4185,4193,4202,4211,4220,4229,4237,4245,4253,4261,4270,4278,4287,4295,4304,4313,4322,4331,4340,4349,4358,4367,4376,4384,4392,4400,4409,4418,4427,4436,4446,4454,4462,4471,4479,4487,4496,4504,4513,4522,4531,4540,4549,4558,4566,4574,4582,4591,4600,4609,4617,4625,4634,4643,4652,4660,4669,4678,4686,4694,4702,4710,4718,4726,4735,4743,4752,4761,4770,4779,4788,4797,4808,4816,4824,4832,4841,4850,4858,4867,4875,4883,4891,4899,4908,4917,4926,4935,4944,4952,4960,4968,4977,4985,4994,5002,5010,5018,5027,5035,5044,5053,5061,5069,5077,5085,5094,5103,5112,5121,5129,5137,5146,5155,5163,5171,5180,5189,5198,5206,5214,5222,5231,5239,5247,5255,5264,5272,5280,5288,5296,5305,5313,5321,5329,5337,5345,5353,5361,5370,5379,5387,5396,5405,5414,5423,5432,5440,5448,5456,5464,5473,5481,5490,5499,5508,5517,5526,5535,5543,5551,5560,5570,5578,5586,5594,5602,5610,5618,5626,5634,5642,5650,5658,5667,5675,5685,5694,5702,5710,5718,5726,5734,5743,5752,5760,5768,5776,5784,5792,5800,5808,5816,5824,5832,5840,5848,5856,5864,5872,5880,5888,5896,5904,5912,5921,5929,5937,5945,5953,5961,5969,5977,5985,5993,6001,6009,6017,6025,6033,6041,6049,6057,6065,6073,6081,6089,6097,6105,6113,6121,6129,6137,6145,6153,6161,6169,6177,6185,6194,6204,6213,6221,6229,6237,6246,6254,6263,6271,6280,6288,6297,6306,6314,6322,6330,6338,6347,6356,6364,6372,6382,6391,6401,6410,6419,6428,6437,6445,6453,6462,6471,6480,6489,6497,6505,6513,6521,6529,6537,6546,6555,6563,6571,6581,6589,6597,6605,6614,6622,6630,6639,6647,6656,6664,6672,6680,6688,6696,6705,6713,6722,6730,6739,6747,6756,6765,6774,6782,6791,6800,6809,6818,6827,6836,6845,6853,6862,6870,6878,6887,6896,6905,6914,6923,6933,6944,6952,6961,6969,6977,6986,6995,7004,7013,7022,7031,7040,7048,7057,7066,7074,7082,7090,7098,7106,7114,7123,7132,7141,7150,7159,7168,7176,7184,7193,7202,7210,7218,7227,7235,7244,7252,7260,7268,7276,7284,7292,7300,7308,7316,7324,7332,7340,7349,7357,7365,7373,7381,7389,7397,7406,7414,7423,7431,7439,7448,7457,7465,7473,7481,7490,7499,7509,7517,7526,7535,7543,7551,7559,7568,7576,7584,7593,7601,7609,7617,7625,7633,7641,7650,7659,7667,7676,7685,7694,7702,7710,7719,7727,7735,7743,7751,7760,7768,7776,7784,7792,7800,7808,7816,7824,7832,7841,7849,7858,7866,7874,7882,7890,7899,7907,7915,7923,7932,7941,7949,7957,7965,7974,7982,7992,8000,8009,8018,8026,8034,8043,8052,8060,8068,8074,8082,8091,8100,8108,8117,8125,8133,8141,8149,8157,8165,8173,8181,8189,8197,8205,8213,8221,8230,8238,8247,8255,8264,8272,8280,8288,8296,8304,8314,8322,8330,8339,8347,8355,8363,8372,8380,8388,8397,8405,8413,8422,8430,8439,8447,8455,8463,8472,8480,8488],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":91,"provider":573,"advisoryCount":39,"licenseExpressions":574,"versions":576,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":579},"package:pypi:openai","openai-0dd26ac5","pypi:openai","OpenAI SDK",{"id":559,"label":560},[575],"Apache-2.0",[577],"2.54.0",2,[104,56],{"id":581,"slug":582,"identity":583,"label":584,"aiRelevant":47,"provider":84,"advisoryCount":67,"licenseExpressions":585,"versions":588,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":590},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",[586,587],"HPND","MIT-CMU",[589],"13.0.0",[104,56],{"id":592,"slug":593,"identity":594,"label":595,"aiRelevant":47,"provider":84,"advisoryCount":596,"licenseExpressions":597,"versions":599,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":601},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[575,598],"Apache-2.0 AND MIT",[600],"3.14.5",[104,56],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":47,"provider":84,"advisoryCount":607,"licenseExpressions":608,"versions":610,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":612},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",37,[609],"BSD-3-Clause",[611],"3.2.1",[56],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":47,"provider":84,"advisoryCount":618,"licenseExpressions":619,"versions":621,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":623},"package:npm:axios","axios-9a6bcef0","npm:axios","axios",36,[620],"MIT",[622],"1.20.0",[95,104],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":47,"provider":84,"advisoryCount":35,"licenseExpressions":629,"versions":630,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":632},"package:npm:undici","undici-9dcd4f20","npm:undici","undici",[620],[631],"7.29.1",[95,104],{"id":634,"slug":635,"identity":636,"label":637,"aiRelevant":47,"provider":84,"advisoryCount":638,"licenseExpressions":639,"versions":640,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":642},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",22,[620],[641],"2.15.1",[104,56],{"id":644,"slug":645,"identity":646,"label":647,"aiRelevant":47,"provider":84,"advisoryCount":648,"licenseExpressions":649,"versions":650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":652},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",20,[620],[651],"21.14.13",[56],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":47,"provider":84,"advisoryCount":42,"licenseExpressions":658,"versions":659,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":661},"package:npm:vite","vite-d48e852f","npm:vite","vite",[620],[660],"8.3.5",[95,104],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":47,"provider":84,"advisoryCount":66,"licenseExpressions":667,"versions":669,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":671},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[620,668],"Unlicense",[670],"4.2.4",[56],{"id":673,"slug":674,"identity":675,"label":676,"aiRelevant":47,"provider":84,"advisoryCount":677,"licenseExpressions":678,"versions":679,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":681},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[620],[680],"2.8.0",[104,56],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":47,"provider":84,"advisoryCount":687,"licenseExpressions":688,"versions":690,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":692},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[689],"Apache-2.0 OR BSD-3-Clause",[691],"50.0.2",[104,56],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":47,"provider":84,"advisoryCount":698,"licenseExpressions":699,"versions":700,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":702},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[575],[701],"0.0.32",[104,56],{"id":704,"slug":705,"identity":706,"label":707,"aiRelevant":47,"provider":84,"advisoryCount":698,"licenseExpressions":708,"versions":709,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":711},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[620],[710],"3.0.3",[56],{"id":713,"slug":714,"identity":715,"label":716,"aiRelevant":47,"provider":84,"advisoryCount":698,"licenseExpressions":717,"versions":718,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":720},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[609],[719],"1.9.0",[104,56],{"id":722,"slug":723,"identity":724,"label":725,"aiRelevant":47,"provider":84,"advisoryCount":726,"licenseExpressions":727,"versions":728,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":730},"package:npm:brace-expansion","brace-expansion-b42dfb29","npm:brace-expansion","brace-expansion",7,[620],[729],"5.0.12",[95,104],{"id":732,"slug":733,"identity":734,"label":735,"aiRelevant":47,"provider":84,"advisoryCount":726,"licenseExpressions":736,"versions":737,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":739},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[620],[738],"1.30.0",[104,56],{"id":741,"slug":742,"identity":743,"label":744,"aiRelevant":47,"provider":84,"advisoryCount":745,"licenseExpressions":746,"versions":747,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":749},"package:npm:hono","hono-02d807eb","npm:hono","hono",5,[620],[748],"4.13.13",[95,104],{"id":751,"slug":752,"identity":753,"label":754,"aiRelevant":47,"provider":84,"advisoryCount":745,"licenseExpressions":755,"versions":756,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":758},"package:npm:js-yaml","js-yaml-a53d8d92","npm:js-yaml","js-yaml",[620],[757],"4.3.2",[95,104],{"id":760,"slug":761,"identity":762,"label":763,"aiRelevant":47,"provider":84,"advisoryCount":745,"licenseExpressions":764,"versions":765,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":767},"package:npm:qs","qs-d2ee785a","npm:qs","qs",[609],[766],"6.16.0",[95,104],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":47,"provider":84,"advisoryCount":745,"licenseExpressions":773,"versions":774,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":776},"package:npm:seroval","seroval-dd986b83","npm:seroval","seroval",[620],[775],"1.6.7",[95,104],{"id":778,"slug":779,"identity":780,"label":781,"aiRelevant":47,"provider":84,"advisoryCount":782,"licenseExpressions":783,"versions":784,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":786},"package:npm:fast-uri","fast-uri-130fc36a","npm:fast-uri","fast-uri",4,[609],[785],"3.1.8",[95,104],{"id":788,"slug":789,"identity":790,"label":791,"aiRelevant":47,"provider":84,"advisoryCount":782,"licenseExpressions":792,"versions":794,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":796},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[609,793],"non-standard",[795],"3.1.6",[56],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":47,"provider":84,"advisoryCount":782,"licenseExpressions":802,"versions":805,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":807},"package:npm:minimatch","minimatch-91a6ff84","npm:minimatch","minimatch",[803,804],"BlueOak-1.0.0","ISC",[806],"10.2.6",[95,104],{"id":809,"slug":810,"identity":811,"label":812,"aiRelevant":47,"provider":84,"advisoryCount":782,"licenseExpressions":813,"versions":814,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":816},"package:npm:postcss","postcss-6e1650ce","npm:postcss","postcss",[620],[815],"8.5.31",[95,104],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":47,"provider":84,"advisoryCount":782,"licenseExpressions":822,"versions":823,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":825},"package:pypi:weasyprint","weasyprint-637c63f5","pypi:weasyprint","weasyprint",[793],[824],"70.0",[56],{"id":827,"slug":828,"identity":829,"label":830,"aiRelevant":47,"provider":84,"advisoryCount":831,"licenseExpressions":832,"versions":833,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":835},"package:pypi:mako","mako-ed406373","pypi:mako","mako",3,[620],[834],"1.4.3",[104,56],{"id":837,"slug":838,"identity":839,"label":840,"aiRelevant":47,"provider":84,"advisoryCount":831,"licenseExpressions":841,"versions":842,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":844},"package:npm:nanoid","nanoid-93076b34","npm:nanoid","nanoid",[620],[843],"3.3.20",[95,104],{"id":846,"slug":847,"identity":848,"label":849,"aiRelevant":47,"provider":84,"advisoryCount":831,"licenseExpressions":850,"versions":851,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":853},"package:pypi:pymdown-extensions","pymdown-extensions-74c5b54c","pypi:pymdown-extensions","pymdown-extensions",[620],[852],"12.3",[56],{"id":855,"slug":856,"identity":857,"label":858,"aiRelevant":47,"provider":84,"advisoryCount":831,"licenseExpressions":859,"versions":860,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":862},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[575],[861],"2.34.2",[104,56],{"id":864,"slug":865,"identity":866,"label":867,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":868,"versions":869,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":871},"package:npm:@hono\u002Fnode-server","hono-node-server-b6d77065","npm:@hono\u002Fnode-server","@hono\u002Fnode-server",[620],[870],"1.19.17",[95,104],{"id":873,"slug":874,"identity":875,"label":876,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":877,"versions":878,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":880},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[620],[879],"4.15.1",[104,56],{"id":882,"slug":883,"identity":884,"label":885,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":886,"versions":887,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":889},"package:npm:body-parser","body-parser-5bf85abf","npm:body-parser","body-parser",[620],[888],"2.3.0",[95,104],{"id":891,"slug":892,"identity":893,"label":894,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":895,"versions":896,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":898},"package:pypi:brotli","brotli-9f215eb0","pypi:brotli","brotli",[620],[897],"1.2.1",[56],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":904,"versions":905,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":907},"package:npm:browserslist","browserslist-09335db7","npm:browserslist","browserslist",[620],[906],"4.29.0",[95,104],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":913,"versions":915,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":917},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[914],"MPL-2.0",[916],"2026.10.19",[104,56],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":923,"versions":924,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":926},"package:npm:flatted","flatted-bf8d419e","npm:flatted","flatted",[804],[925],"3.4.4",[95],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":932,"versions":933,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":935},"package:npm:follow-redirects","follow-redirects-d49b3d60","npm:follow-redirects","follow-redirects",[620],[934],"1.16.1",[95,104],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":941,"versions":942,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":944},"package:pypi:h2","h2-d3161986","pypi:h2","h2",[620],[943],"4.4.1",[104,56],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":950,"versions":951,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":953},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[575],[952],"1.45.1",[104,56],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":959,"versions":960,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":963},"package:npm:picomatch","picomatch-a3008e9b","npm:picomatch","picomatch",[620],[961,962],"2.3.2","4.0.7",[95,104],{"id":965,"slug":966,"identity":967,"label":968,"aiRelevant":47,"provider":84,"advisoryCount":578,"licenseExpressions":969,"versions":970,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":972},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[609],[971],"6.33.6",[104,56],{"id":974,"slug":975,"identity":976,"label":977,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":978,"versions":979,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":981},"package:npm:@babel\u002Fcore","babel-core-632b3ee7","npm:@babel\u002Fcore","@babel\u002Fcore",[620],[980],"7.29.7",[95,104],{"id":983,"slug":984,"identity":985,"label":986,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":987,"versions":988,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":990},"package:npm:@humanfs\u002Fnode","humanfs-node-63ca4f78","npm:@humanfs\u002Fnode","@humanfs\u002Fnode",[575],[989],"0.16.8",[95],{"id":992,"slug":993,"identity":994,"label":995,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":996,"versions":997,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":1000},"package:npm:ajv","ajv-dd73454f","npm:ajv","ajv",[620],[998,999],"6.15.0","8.20.0",[95,104],{"id":1002,"slug":1003,"identity":1004,"label":1005,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1006,"versions":1007,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1009},"package:pypi:azure-core","azure-core-999f329c","pypi:azure-core","azure-core",[620],[1008],"1.41.0",[104,56],{"id":1011,"slug":1012,"identity":1013,"label":1014,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1015,"versions":1016,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1018},"package:pypi:brotlicffi","brotlicffi-2b85a746","pypi:brotlicffi","brotlicffi",[620],[1017],"1.2.1.0",[56],{"id":1020,"slug":1021,"identity":1022,"label":1023,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1024,"versions":1025,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1027},"package:npm:deepmerge","deepmerge-33ca4e59","npm:deepmerge","deepmerge",[620],[1026],"4.3.1",[95,104],{"id":1029,"slug":1030,"identity":1031,"label":1032,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1033,"versions":1034,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1036},"package:npm:diff","diff-c3901306","npm:diff","diff",[609],[1035],"8.0.4",[95,104],{"id":1038,"slug":1039,"identity":1040,"label":1041,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1042,"versions":1043,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1045},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[620],[1044],"4.67.0",[56],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1051,"versions":1052,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1054},"package:npm:form-data","form-data-19f364b7","npm:form-data","form-data",[620],[1053],"4.0.6",[95,104],{"id":1056,"slug":1057,"identity":1058,"label":1059,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1060,"versions":1061,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1063},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[620],[1062],"0.16.0",[104,56],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1069,"versions":1070,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1072},"package:pypi:hpack","hpack-ae99dcfa","pypi:hpack","hpack",[620],[1071],"4.2.0",[104,56],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1078,"versions":1079,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1081},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[609,793],[1080],"3.20",[104,56],{"id":1083,"slug":1084,"identity":1085,"label":1086,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1087,"versions":1088,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1090},"package:npm:ip-address","ip-address-06addbf3","npm:ip-address","ip-address",[620],[1089],"10.7.2",[95,104],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1096,"versions":1097,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1099},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[609],[1098],"3.11.1",[104,56],{"id":1101,"slug":1102,"identity":1103,"label":1104,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1105,"versions":1106,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1108},"package:npm:mdast-util-to-hast","mdast-util-to-hast-18f18478","npm:mdast-util-to-hast","mdast-util-to-hast",[620],[1107],"13.2.1",[95,104],{"id":1110,"slug":1111,"identity":1112,"label":1113,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1114,"versions":1115,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1117},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[575],[1116],"7.1.0",[104,56],{"id":1119,"slug":1120,"identity":1121,"label":1122,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1123,"versions":1124,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1126},"package:npm:path-to-regexp","path-to-regexp-7c531171","npm:path-to-regexp","path-to-regexp",[620],[1125],"8.4.2",[95,104],{"id":1128,"slug":1129,"identity":1130,"label":1131,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1132,"versions":1133,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1135},"package:npm:proxy-addr","proxy-addr-70423975","npm:proxy-addr","proxy-addr",[620],[1134],"2.0.8",[95,104],{"id":1137,"slug":1138,"identity":1139,"label":1140,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1141,"versions":1142,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1144},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[620],[1143],"2.16.0",[104,56],{"id":1146,"slug":1147,"identity":1148,"label":1149,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1150,"versions":1152,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1154},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[1151],"BSD-2-Clause",[1153],"2.21.0",[56],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1160,"versions":1161,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1163},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[620],[1162],"9.1.1",[56],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1169,"versions":1170,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1172},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[609],[1171],"1.2.4",[104,56],{"id":1174,"slug":1175,"identity":1176,"label":1177,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1178,"versions":1179,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1181},"package:npm:source-map-js","source-map-js-41a605c1","npm:source-map-js","source-map-js",[609],[1180],"1.2.2",[95,104],{"id":1183,"slug":1184,"identity":1185,"label":1186,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1187,"versions":1189,"dossier":91,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1191},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[1188],"MIT AND MPL-2.0",[1190],"4.70.1",[104,56],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1197,"versions":1198,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":1201},"package:npm:zod","zod-5dbeeafb","npm:zod","zod",[620],[1199,1200],"3.25.76","4.6.5",[95,104],{"id":1203,"slug":1204,"identity":1205,"label":1206,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1207,"versions":1208,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1209},"package:npm:@babel\u002Fcode-frame","babel-code-frame-d957c518","npm:@babel\u002Fcode-frame","@babel\u002Fcode-frame",[620],[980],[95,104],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1215,"versions":1216,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1217},"package:npm:@babel\u002Fcompat-data","babel-compat-data-a62084ad","npm:@babel\u002Fcompat-data","@babel\u002Fcompat-data",[620],[980],[95,104],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1223,"versions":1224,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1226},"package:npm:@babel\u002Fgenerator","babel-generator-ccac1203","npm:@babel\u002Fgenerator","@babel\u002Fgenerator",[620],[1225],"7.29.8",[95,104],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1232,"versions":1233,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1235},"package:npm:@babel\u002Fhelper-annotate-as-pure","babel-helper-annotate-as-pure-87c36399","npm:@babel\u002Fhelper-annotate-as-pure","@babel\u002Fhelper-annotate-as-pure",[620],[1234],"7.27.3",[95,104],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1241,"versions":1242,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1243},"package:npm:@babel\u002Fhelper-compilation-targets","babel-helper-compilation-targets-87d93937","npm:@babel\u002Fhelper-compilation-targets","@babel\u002Fhelper-compilation-targets",[620],[980],[95,104],{"id":1245,"slug":1246,"identity":1247,"label":1248,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1249,"versions":1250,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1252},"package:npm:@babel\u002Fhelper-create-class-features-plugin","babel-helper-create-class-features-plugin-77ddeb9a","npm:@babel\u002Fhelper-create-class-features-plugin","@babel\u002Fhelper-create-class-features-plugin",[620],[1251],"7.28.6",[95,104],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1258,"versions":1259,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1260},"package:npm:@babel\u002Fhelper-globals","babel-helper-globals-0e9ab9db","npm:@babel\u002Fhelper-globals","@babel\u002Fhelper-globals",[620],[980],[95,104],{"id":1262,"slug":1263,"identity":1264,"label":1265,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1266,"versions":1267,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1269},"package:npm:@babel\u002Fhelper-member-expression-to-functions","babel-helper-member-expression-to-functions-334410bf","npm:@babel\u002Fhelper-member-expression-to-functions","@babel\u002Fhelper-member-expression-to-functions",[620],[1268],"7.28.5",[95,104],{"id":1271,"slug":1272,"identity":1273,"label":1274,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1275,"versions":1276,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1277},"package:npm:@babel\u002Fhelper-module-imports","babel-helper-module-imports-dbfc0776","npm:@babel\u002Fhelper-module-imports","@babel\u002Fhelper-module-imports",[620],[980],[95,104],{"id":1279,"slug":1280,"identity":1281,"label":1282,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1283,"versions":1284,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1285},"package:npm:@babel\u002Fhelper-module-transforms","babel-helper-module-transforms-fea089b3","npm:@babel\u002Fhelper-module-transforms","@babel\u002Fhelper-module-transforms",[620],[980],[95,104],{"id":1287,"slug":1288,"identity":1289,"label":1290,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1291,"versions":1292,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1294},"package:npm:@babel\u002Fhelper-optimise-call-expression","babel-helper-optimise-call-expression-e02554f6","npm:@babel\u002Fhelper-optimise-call-expression","@babel\u002Fhelper-optimise-call-expression",[620],[1293],"7.27.1",[95,104],{"id":1296,"slug":1297,"identity":1298,"label":1299,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1300,"versions":1301,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1302},"package:npm:@babel\u002Fhelper-plugin-utils","babel-helper-plugin-utils-a27c98fa","npm:@babel\u002Fhelper-plugin-utils","@babel\u002Fhelper-plugin-utils",[620],[1251],[95,104],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1308,"versions":1309,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1310},"package:npm:@babel\u002Fhelper-replace-supers","babel-helper-replace-supers-aaf10973","npm:@babel\u002Fhelper-replace-supers","@babel\u002Fhelper-replace-supers",[620],[1251],[95,104],{"id":1312,"slug":1313,"identity":1314,"label":1315,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1316,"versions":1317,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1318},"package:npm:@babel\u002Fhelper-skip-transparent-expression-wrappers","babel-helper-skip-transparent-expression-wrappers-71673859","npm:@babel\u002Fhelper-skip-transparent-expression-wrappers","@babel\u002Fhelper-skip-transparent-expression-wrappers",[620],[1293],[95,104],{"id":1320,"slug":1321,"identity":1322,"label":1323,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1324,"versions":1325,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1326},"package:npm:@babel\u002Fhelper-string-parser","babel-helper-string-parser-50d29bcc","npm:@babel\u002Fhelper-string-parser","@babel\u002Fhelper-string-parser",[620],[980],[95,104],{"id":1328,"slug":1329,"identity":1330,"label":1331,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1332,"versions":1333,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1334},"package:npm:@babel\u002Fhelper-validator-identifier","babel-helper-validator-identifier-b255380b","npm:@babel\u002Fhelper-validator-identifier","@babel\u002Fhelper-validator-identifier",[620],[980],[95,104],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1340,"versions":1341,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1342},"package:npm:@babel\u002Fhelper-validator-option","babel-helper-validator-option-ff70c556","npm:@babel\u002Fhelper-validator-option","@babel\u002Fhelper-validator-option",[620],[980],[95,104],{"id":1344,"slug":1345,"identity":1346,"label":1347,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1348,"versions":1349,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1350},"package:npm:@babel\u002Fhelpers","babel-helpers-14903e70","npm:@babel\u002Fhelpers","@babel\u002Fhelpers",[620],[980],[95,104],{"id":1352,"slug":1353,"identity":1354,"label":1355,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1356,"versions":1357,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1358},"package:npm:@babel\u002Fparser","babel-parser-90a7ae44","npm:@babel\u002Fparser","@babel\u002Fparser",[620],[1225],[95,104],{"id":1360,"slug":1361,"identity":1362,"label":1363,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1364,"versions":1365,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1366},"package:npm:@babel\u002Fplugin-syntax-jsx","babel-plugin-syntax-jsx-1e3853b7","npm:@babel\u002Fplugin-syntax-jsx","@babel\u002Fplugin-syntax-jsx",[620],[1251],[95,104],{"id":1368,"slug":1369,"identity":1370,"label":1371,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1372,"versions":1373,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1374},"package:npm:@babel\u002Fplugin-syntax-typescript","babel-plugin-syntax-typescript-86970e37","npm:@babel\u002Fplugin-syntax-typescript","@babel\u002Fplugin-syntax-typescript",[620],[1251],[95,104],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1380,"versions":1381,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1382},"package:npm:@babel\u002Fplugin-transform-modules-commonjs","babel-plugin-transform-modules-commonjs-d191b1c2","npm:@babel\u002Fplugin-transform-modules-commonjs","@babel\u002Fplugin-transform-modules-commonjs",[620],[1251],[95,104],{"id":1384,"slug":1385,"identity":1386,"label":1387,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1388,"versions":1389,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1390},"package:npm:@babel\u002Fplugin-transform-typescript","babel-plugin-transform-typescript-ebf16b34","npm:@babel\u002Fplugin-transform-typescript","@babel\u002Fplugin-transform-typescript",[620],[1251],[95,104],{"id":1392,"slug":1393,"identity":1394,"label":1395,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1396,"versions":1397,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1398},"package:npm:@babel\u002Fpreset-typescript","babel-preset-typescript-f4f3124b","npm:@babel\u002Fpreset-typescript","@babel\u002Fpreset-typescript",[620],[1268],[95,104],{"id":1400,"slug":1401,"identity":1402,"label":1403,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1404,"versions":1405,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1406},"package:npm:@babel\u002Fruntime","babel-runtime-2e1b7c1b","npm:@babel\u002Fruntime","@babel\u002Fruntime",[620],[980],[95,104],{"id":1408,"slug":1409,"identity":1410,"label":1411,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1412,"versions":1413,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1414},"package:npm:@babel\u002Ftemplate","babel-template-1de2b79c","npm:@babel\u002Ftemplate","@babel\u002Ftemplate",[620],[980],[95,104],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1420,"versions":1421,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1422},"package:npm:@babel\u002Ftraverse","babel-traverse-7876b2c3","npm:@babel\u002Ftraverse","@babel\u002Ftraverse",[620],[1225],[95,104],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1428,"versions":1429,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1430},"package:npm:@babel\u002Ftypes","babel-types-7b046801","npm:@babel\u002Ftypes","@babel\u002Ftypes",[620],[1225],[95,104],{"id":1432,"slug":1433,"identity":1434,"label":1435,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1436,"versions":1437,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":1439},"package:npm:@base-ui\u002Freact","base-ui-react-07009e5c","npm:@base-ui\u002Freact","@base-ui\u002Freact",[620],[1438],"1.8.0",[95,104],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1445,"versions":1446,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1448},"package:npm:@base-ui\u002Futils","base-ui-utils-3afb3ca8","npm:@base-ui\u002Futils","@base-ui\u002Futils",[620],[1447],"0.4.0",[95,104],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1454,"versions":1455,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1457},"package:npm:@cacheable\u002Fmemory","cacheable-memory-e2aaab13","npm:@cacheable\u002Fmemory","@cacheable\u002Fmemory",[620],[1456],"2.2.0",[95],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1463,"versions":1464,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1466},"package:npm:@cacheable\u002Futils","cacheable-utils-6145ea41","npm:@cacheable\u002Futils","@cacheable\u002Futils",[620],[1465],"2.5.0",[95],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1472,"versions":1473,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1475},"package:npm:@date-fns\u002Ftz","date-fns-tz-f32b7dd3","npm:@date-fns\u002Ftz","@date-fns\u002Ftz",[620],[1474],"1.4.1",[95,104],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1481,"versions":1482,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1484},"package:npm:@dotenvx\u002Fdotenvx","dotenvx-dotenvx-447509bb","npm:@dotenvx\u002Fdotenvx","@dotenvx\u002Fdotenvx",[609],[1483],"1.64.0",[95,104],{"id":1486,"slug":1487,"identity":1488,"label":1489,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1490,"versions":1491,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1493},"package:npm:@ecies\u002Fciphers","ecies-ciphers-e7b00c68","npm:@ecies\u002Fciphers","@ecies\u002Fciphers",[620],[1492],"0.2.6",[95,104],{"id":1495,"slug":1496,"identity":1497,"label":1498,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1499,"versions":1500,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1502},"package:npm:@emnapi\u002Fcore","emnapi-core-3406767f","npm:@emnapi\u002Fcore","@emnapi\u002Fcore",[620],[1501],"1.11.1",[104],{"id":1504,"slug":1505,"identity":1506,"label":1507,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1508,"versions":1509,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1510},"package:npm:@emnapi\u002Fruntime","emnapi-runtime-9e20d99c","npm:@emnapi\u002Fruntime","@emnapi\u002Fruntime",[620],[1501],[104],{"id":1512,"slug":1513,"identity":1514,"label":1515,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1516,"versions":1517,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1518},"package:npm:@emnapi\u002Fwasi-threads","emnapi-wasi-threads-d3f1c692","npm:@emnapi\u002Fwasi-threads","@emnapi\u002Fwasi-threads",[620],[1180],[104],{"id":1520,"slug":1521,"identity":1522,"label":1523,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1524,"versions":1525,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1527},"package:npm:@eslint-community\u002Feslint-utils","eslint-community-eslint-utils-c7538f47","npm:@eslint-community\u002Feslint-utils","@eslint-community\u002Feslint-utils",[620],[1526],"4.9.1",[95],{"id":1529,"slug":1530,"identity":1531,"label":1532,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1533,"versions":1534,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1536},"package:npm:@eslint-community\u002Fregexpp","eslint-community-regexpp-df306a50","npm:@eslint-community\u002Fregexpp","@eslint-community\u002Fregexpp",[620],[1535],"4.12.2",[95],{"id":1538,"slug":1539,"identity":1540,"label":1541,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1542,"versions":1543,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1545},"package:npm:@eslint\u002Fconfig-array","eslint-config-array-64c9736b","npm:@eslint\u002Fconfig-array","@eslint\u002Fconfig-array",[575],[1544],"0.23.5",[95],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1551,"versions":1552,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1554},"package:npm:@eslint\u002Fconfig-helpers","eslint-config-helpers-a4919ae1","npm:@eslint\u002Fconfig-helpers","@eslint\u002Fconfig-helpers",[575],[1553],"0.7.0",[95],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1560,"versions":1561,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1562},"package:npm:@eslint\u002Fcore","eslint-core-78aa818b","npm:@eslint\u002Fcore","@eslint\u002Fcore",[575],[897],[95],{"id":1564,"slug":1565,"identity":1566,"label":1567,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1568,"versions":1569,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1571},"package:npm:@eslint\u002Fjs","eslint-js-b7322adc","npm:@eslint\u002Fjs","@eslint\u002Fjs",[620],[1570],"10.0.1",[95],{"id":1573,"slug":1574,"identity":1575,"label":1576,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1577,"versions":1578,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1580},"package:npm:@eslint\u002Fobject-schema","eslint-object-schema-c1bb953b","npm:@eslint\u002Fobject-schema","@eslint\u002Fobject-schema",[575],[1579],"3.0.5",[95],{"id":1582,"slug":1583,"identity":1584,"label":1585,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1586,"versions":1587,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1589},"package:npm:@eslint\u002Fplugin-kit","eslint-plugin-kit-be347b9f","npm:@eslint\u002Fplugin-kit","@eslint\u002Fplugin-kit",[575],[1588],"0.7.3",[95],{"id":1591,"slug":1592,"identity":1593,"label":1594,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1595,"versions":1596,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1597},"package:npm:@floating-ui\u002Fcore","floating-ui-core-226c6ce1","npm:@floating-ui\u002Fcore","@floating-ui\u002Fcore",[620],[1438],[95,104],{"id":1599,"slug":1600,"identity":1601,"label":1602,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1603,"versions":1604,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1605},"package:npm:@floating-ui\u002Fdom","floating-ui-dom-92a0b816","npm:@floating-ui\u002Fdom","@floating-ui\u002Fdom",[620],[1438],[95,104],{"id":1607,"slug":1608,"identity":1609,"label":1610,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1611,"versions":1612,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1614},"package:npm:@floating-ui\u002Freact-dom","floating-ui-react-dom-41c4c55a","npm:@floating-ui\u002Freact-dom","@floating-ui\u002Freact-dom",[620],[1613],"2.1.9",[95,104],{"id":1616,"slug":1617,"identity":1618,"label":1619,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1620,"versions":1621,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1623},"package:npm:@floating-ui\u002Futils","floating-ui-utils-a5f87317","npm:@floating-ui\u002Futils","@floating-ui\u002Futils",[620],[1622],"0.2.12",[95,104],{"id":1625,"slug":1626,"identity":1627,"label":1628,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1629,"versions":1631,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":1633},"package:npm:@fontsource-variable\u002Fgeist","fontsource-variable-geist-e092d3ef","npm:@fontsource-variable\u002Fgeist","@fontsource-variable\u002Fgeist",[1630],"OFL-1.1",[1632],"5.3.0",[95,104],{"id":1635,"slug":1636,"identity":1637,"label":1638,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1639,"versions":1640,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1642},"package:npm:@humanfs\u002Fcore","humanfs-core-ae1d1f57","npm:@humanfs\u002Fcore","@humanfs\u002Fcore",[575],[1641],"0.19.2",[95],{"id":1644,"slug":1645,"identity":1646,"label":1647,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1648,"versions":1649,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1651},"package:npm:@humanfs\u002Ftypes","humanfs-types-de42ddb8","npm:@humanfs\u002Ftypes","@humanfs\u002Ftypes",[575],[1650],"0.15.0",[95],{"id":1653,"slug":1654,"identity":1655,"label":1656,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1657,"versions":1658,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1660},"package:npm:@humanwhocodes\u002Fmodule-importer","humanwhocodes-module-importer-2bdf1883","npm:@humanwhocodes\u002Fmodule-importer","@humanwhocodes\u002Fmodule-importer",[575],[1659],"1.0.1",[95],{"id":1662,"slug":1663,"identity":1664,"label":1665,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1666,"versions":1667,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1669},"package:npm:@humanwhocodes\u002Fretry","humanwhocodes-retry-179e58ff","npm:@humanwhocodes\u002Fretry","@humanwhocodes\u002Fretry",[575],[1668],"0.4.3",[95],{"id":1671,"slug":1672,"identity":1673,"label":1674,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1675,"versions":1676,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1678},"package:npm:@jridgewell\u002Fgen-mapping","jridgewell-gen-mapping-c100bb57","npm:@jridgewell\u002Fgen-mapping","@jridgewell\u002Fgen-mapping",[620],[1677],"0.3.13",[95,104],{"id":1680,"slug":1681,"identity":1682,"label":1683,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1684,"versions":1685,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1687},"package:npm:@jridgewell\u002Fremapping","jridgewell-remapping-a8cddd40","npm:@jridgewell\u002Fremapping","@jridgewell\u002Fremapping",[620],[1686],"2.3.5",[95,104],{"id":1689,"slug":1690,"identity":1691,"label":1692,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1693,"versions":1694,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1696},"package:npm:@jridgewell\u002Fresolve-uri","jridgewell-resolve-uri-f80859d6","npm:@jridgewell\u002Fresolve-uri","@jridgewell\u002Fresolve-uri",[620],[1695],"3.1.2",[95,104],{"id":1698,"slug":1699,"identity":1700,"label":1701,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1702,"versions":1703,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1705},"package:npm:@jridgewell\u002Fsourcemap-codec","jridgewell-sourcemap-codec-1b6bbd68","npm:@jridgewell\u002Fsourcemap-codec","@jridgewell\u002Fsourcemap-codec",[620],[1704],"1.5.5",[95,104],{"id":1707,"slug":1708,"identity":1709,"label":1710,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1711,"versions":1712,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1714},"package:npm:@jridgewell\u002Ftrace-mapping","jridgewell-trace-mapping-c6f15179","npm:@jridgewell\u002Ftrace-mapping","@jridgewell\u002Ftrace-mapping",[620],[1713],"0.3.31",[95,104],{"id":1716,"slug":1717,"identity":1718,"label":1719,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1720,"versions":1721,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1723},"package:npm:@keyv\u002Fbigmap","keyv-bigmap-76fbc824","npm:@keyv\u002Fbigmap","@keyv\u002Fbigmap",[620],[1722],"1.3.1",[95],{"id":1725,"slug":1726,"identity":1727,"label":1728,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1729,"versions":1730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1732},"package:npm:@keyv\u002Fserialize","keyv-serialize-d7a49bfb","npm:@keyv\u002Fserialize","@keyv\u002Fserialize",[620],[1731],"1.1.1",[95],{"id":1734,"slug":1735,"identity":1736,"label":1737,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1738,"versions":1739,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1741},"package:npm:@modelcontextprotocol\u002Fsdk","modelcontextprotocol-sdk-252ea8a6","npm:@modelcontextprotocol\u002Fsdk","@modelcontextprotocol\u002Fsdk",[620],[1740],"1.32.1",[95,104],{"id":1743,"slug":1744,"identity":1745,"label":1746,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1747,"versions":1748,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1750},"package:npm:@napi-rs\u002Fwasm-runtime","napi-rs-wasm-runtime-38e2befb","npm:@napi-rs\u002Fwasm-runtime","@napi-rs\u002Fwasm-runtime",[620],[1749],"1.1.4",[104],{"id":1752,"slug":1753,"identity":1754,"label":1755,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1756,"versions":1757,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1759},"package:npm:@noble\u002Fciphers","noble-ciphers-c180756e","npm:@noble\u002Fciphers","@noble\u002Fciphers",[620],[1758],"1.3.0",[95,104],{"id":1761,"slug":1762,"identity":1763,"label":1764,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1765,"versions":1766,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1768},"package:npm:@noble\u002Fcurves","noble-curves-4ef91d43","npm:@noble\u002Fcurves","@noble\u002Fcurves",[620],[1767],"1.9.7",[95,104],{"id":1770,"slug":1771,"identity":1772,"label":1773,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1774,"versions":1775,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1776},"package:npm:@noble\u002Fhashes","noble-hashes-aeabb965","npm:@noble\u002Fhashes","@noble\u002Fhashes",[620],[1438],[95,104],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1782,"versions":1783,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1785},"package:npm:@nodelib\u002Ffs.scandir","nodelib-fs-scandir-1c10ead4","npm:@nodelib\u002Ffs.scandir","@nodelib\u002Ffs.scandir",[620],[1784],"2.1.5",[95,104],{"id":1787,"slug":1788,"identity":1789,"label":1790,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1791,"versions":1792,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1794},"package:npm:@nodelib\u002Ffs.stat","nodelib-fs-stat-b7824bf1","npm:@nodelib\u002Ffs.stat","@nodelib\u002Ffs.stat",[620],[1793],"2.0.5",[95,104],{"id":1796,"slug":1797,"identity":1798,"label":1799,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1800,"versions":1801,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1803},"package:npm:@nodelib\u002Ffs.walk","nodelib-fs-walk-731ca7cb","npm:@nodelib\u002Ffs.walk","@nodelib\u002Ffs.walk",[620],[1802],"1.2.8",[95,104],{"id":1805,"slug":1806,"identity":1807,"label":1808,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1809,"versions":1810,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1812},"package:npm:@oxc-project\u002Ftypes","oxc-project-types-24a167b3","npm:@oxc-project\u002Ftypes","@oxc-project\u002Ftypes",[620],[1811],"0.154.0",[95,104],{"id":1814,"slug":1815,"identity":1816,"label":1817,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1818,"versions":1819,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1821},"package:npm:@radix-ui\u002Fnumber","radix-ui-number-581a3ecf","npm:@radix-ui\u002Fnumber","@radix-ui\u002Fnumber",[620],[1820],"1.1.3",[95,104],{"id":1823,"slug":1824,"identity":1825,"label":1826,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1827,"versions":1828,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1830},"package:npm:@radix-ui\u002Fprimitive","radix-ui-primitive-89244aca","npm:@radix-ui\u002Fprimitive","@radix-ui\u002Fprimitive",[620],[1829],"1.1.7",[95,104],{"id":1832,"slug":1833,"identity":1834,"label":1835,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1836,"versions":1837,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1839},"package:npm:@radix-ui\u002Freact-accessible-icon","radix-ui-react-accessible-icon-a630715c","npm:@radix-ui\u002Freact-accessible-icon","@radix-ui\u002Freact-accessible-icon",[620],[1838],"1.1.15",[95,104],{"id":1841,"slug":1842,"identity":1843,"label":1844,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1845,"versions":1846,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1848},"package:npm:@radix-ui\u002Freact-accordion","radix-ui-react-accordion-e9510ee0","npm:@radix-ui\u002Freact-accordion","@radix-ui\u002Freact-accordion",[620],[1847],"1.2.20",[95,104],{"id":1850,"slug":1851,"identity":1852,"label":1853,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1854,"versions":1855,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1857},"package:npm:@radix-ui\u002Freact-alert-dialog","radix-ui-react-alert-dialog-ecfddaf1","npm:@radix-ui\u002Freact-alert-dialog","@radix-ui\u002Freact-alert-dialog",[620],[1856],"1.1.23",[95,104],{"id":1859,"slug":1860,"identity":1861,"label":1862,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1863,"versions":1864,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1865},"package:npm:@radix-ui\u002Freact-arrow","radix-ui-react-arrow-0d7b9e5e","npm:@radix-ui\u002Freact-arrow","@radix-ui\u002Freact-arrow",[620],[1838],[95,104],{"id":1867,"slug":1868,"identity":1869,"label":1870,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1871,"versions":1872,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1873},"package:npm:@radix-ui\u002Freact-aspect-ratio","radix-ui-react-aspect-ratio-86842968","npm:@radix-ui\u002Freact-aspect-ratio","@radix-ui\u002Freact-aspect-ratio",[620],[1838],[95,104],{"id":1875,"slug":1876,"identity":1877,"label":1878,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1879,"versions":1880,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1882},"package:npm:@radix-ui\u002Freact-avatar","radix-ui-react-avatar-23783ea4","npm:@radix-ui\u002Freact-avatar","@radix-ui\u002Freact-avatar",[620],[1881],"1.2.6",[95,104],{"id":1884,"slug":1885,"identity":1886,"label":1887,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1888,"versions":1889,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1891},"package:npm:@radix-ui\u002Freact-checkbox","radix-ui-react-checkbox-839a806e","npm:@radix-ui\u002Freact-checkbox","@radix-ui\u002Freact-checkbox",[620],[1890],"1.3.11",[95,104],{"id":1893,"slug":1894,"identity":1895,"label":1896,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1897,"versions":1898,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1900},"package:npm:@radix-ui\u002Freact-collapsible","radix-ui-react-collapsible-2676b67f","npm:@radix-ui\u002Freact-collapsible","@radix-ui\u002Freact-collapsible",[620],[1899],"1.1.20",[95,104],{"id":1902,"slug":1903,"identity":1904,"label":1905,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1906,"versions":1907,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1908},"package:npm:@radix-ui\u002Freact-collection","radix-ui-react-collection-e7fefa5c","npm:@radix-ui\u002Freact-collection","@radix-ui\u002Freact-collection",[620],[1838],[95,104],{"id":1910,"slug":1911,"identity":1912,"label":1913,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1914,"versions":1915,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1917},"package:npm:@radix-ui\u002Freact-compose-refs","radix-ui-react-compose-refs-a50a329f","npm:@radix-ui\u002Freact-compose-refs","@radix-ui\u002Freact-compose-refs",[620],[1916],"1.1.5",[95,104],{"id":1919,"slug":1920,"identity":1921,"label":1922,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1923,"versions":1924,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1925},"package:npm:@radix-ui\u002Freact-context","radix-ui-react-context-576ee6a1","npm:@radix-ui\u002Freact-context","@radix-ui\u002Freact-context",[620],[1180],[95,104],{"id":1927,"slug":1928,"identity":1929,"label":1930,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1931,"versions":1932,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1934},"package:npm:@radix-ui\u002Freact-context-menu","radix-ui-react-context-menu-17a66bb5","npm:@radix-ui\u002Freact-context-menu","@radix-ui\u002Freact-context-menu",[620],[1933],"2.3.7",[95,104],{"id":1936,"slug":1937,"identity":1938,"label":1939,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1940,"versions":1941,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1942},"package:npm:@radix-ui\u002Freact-dialog","radix-ui-react-dialog-c9ec934b","npm:@radix-ui\u002Freact-dialog","@radix-ui\u002Freact-dialog",[620],[1856],[95,104],{"id":1944,"slug":1945,"identity":1946,"label":1947,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1948,"versions":1949,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1950},"package:npm:@radix-ui\u002Freact-direction","radix-ui-react-direction-54eadc4b","npm:@radix-ui\u002Freact-direction","@radix-ui\u002Freact-direction",[620],[1749],[95,104],{"id":1952,"slug":1953,"identity":1954,"label":1955,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1956,"versions":1957,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1959},"package:npm:@radix-ui\u002Freact-dismissable-layer","radix-ui-react-dismissable-layer-a3c6e769","npm:@radix-ui\u002Freact-dismissable-layer","@radix-ui\u002Freact-dismissable-layer",[620],[1958],"1.1.19",[95,104],{"id":1961,"slug":1962,"identity":1963,"label":1964,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1965,"versions":1966,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1968},"package:npm:@radix-ui\u002Freact-dropdown-menu","radix-ui-react-dropdown-menu-bc75d3c0","npm:@radix-ui\u002Freact-dropdown-menu","@radix-ui\u002Freact-dropdown-menu",[620],[1967],"2.1.24",[95,104],{"id":1970,"slug":1971,"identity":1972,"label":1973,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1974,"versions":1975,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1977},"package:npm:@radix-ui\u002Freact-focus-guards","radix-ui-react-focus-guards-42cfef3a","npm:@radix-ui\u002Freact-focus-guards","@radix-ui\u002Freact-focus-guards",[620],[1976],"1.1.6",[95,104],{"id":1979,"slug":1980,"identity":1981,"label":1982,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1983,"versions":1984,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1986},"package:npm:@radix-ui\u002Freact-focus-scope","radix-ui-react-focus-scope-29a5bbac","npm:@radix-ui\u002Freact-focus-scope","@radix-ui\u002Freact-focus-scope",[620],[1985],"1.1.16",[95,104],{"id":1988,"slug":1989,"identity":1990,"label":1991,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1992,"versions":1993,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":1995},"package:npm:@radix-ui\u002Freact-form","radix-ui-react-form-f33c0802","npm:@radix-ui\u002Freact-form","@radix-ui\u002Freact-form",[620],[1994],"0.1.16",[95,104],{"id":1997,"slug":1998,"identity":1999,"label":2000,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2001,"versions":2002,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2003},"package:npm:@radix-ui\u002Freact-hover-card","radix-ui-react-hover-card-eb8c4657","npm:@radix-ui\u002Freact-hover-card","@radix-ui\u002Freact-hover-card",[620],[1856],[95,104],{"id":2005,"slug":2006,"identity":2007,"label":2008,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2009,"versions":2010,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2011},"package:npm:@radix-ui\u002Freact-id","radix-ui-react-id-987d2e61","npm:@radix-ui\u002Freact-id","@radix-ui\u002Freact-id",[620],[1749],[95,104],{"id":2013,"slug":2014,"identity":2015,"label":2016,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2017,"versions":2018,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2020},"package:npm:@radix-ui\u002Freact-label","radix-ui-react-label-d3c208c7","npm:@radix-ui\u002Freact-label","@radix-ui\u002Freact-label",[620],[2019],"2.1.15",[95,104],{"id":2022,"slug":2023,"identity":2024,"label":2025,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2026,"versions":2027,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2028},"package:npm:@radix-ui\u002Freact-menu","radix-ui-react-menu-46fcb999","npm:@radix-ui\u002Freact-menu","@radix-ui\u002Freact-menu",[620],[1967],[95,104],{"id":2030,"slug":2031,"identity":2032,"label":2033,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2034,"versions":2035,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2037},"package:npm:@radix-ui\u002Freact-menubar","radix-ui-react-menubar-08d55efa","npm:@radix-ui\u002Freact-menubar","@radix-ui\u002Freact-menubar",[620],[2036],"1.1.24",[95,104],{"id":2039,"slug":2040,"identity":2041,"label":2042,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2043,"versions":2044,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2046},"package:npm:@radix-ui\u002Freact-navigation-menu","radix-ui-react-navigation-menu-8d483544","npm:@radix-ui\u002Freact-navigation-menu","@radix-ui\u002Freact-navigation-menu",[620],[2045],"1.2.22",[95,104],{"id":2048,"slug":2049,"identity":2050,"label":2051,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2052,"versions":2053,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2054},"package:npm:@radix-ui\u002Freact-one-time-password-field","radix-ui-react-one-time-password-field-76b294fc","npm:@radix-ui\u002Freact-one-time-password-field","@radix-ui\u002Freact-one-time-password-field",[620],[1994],[95,104],{"id":2056,"slug":2057,"identity":2058,"label":2059,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2060,"versions":2061,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2063},"package:npm:@radix-ui\u002Freact-password-toggle-field","radix-ui-react-password-toggle-field-991121f8","npm:@radix-ui\u002Freact-password-toggle-field","@radix-ui\u002Freact-password-toggle-field",[620],[2062],"0.1.11",[95,104],{"id":2065,"slug":2066,"identity":2067,"label":2068,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2069,"versions":2070,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2071},"package:npm:@radix-ui\u002Freact-popover","radix-ui-react-popover-da57f2a6","npm:@radix-ui\u002Freact-popover","@radix-ui\u002Freact-popover",[620],[1856],[95,104],{"id":2073,"slug":2074,"identity":2075,"label":2076,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2077,"versions":2078,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2080},"package:npm:@radix-ui\u002Freact-popper","radix-ui-react-popper-831b72db","npm:@radix-ui\u002Freact-popper","@radix-ui\u002Freact-popper",[620],[2079],"1.3.7",[95,104],{"id":2082,"slug":2083,"identity":2084,"label":2085,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2086,"versions":2087,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2089},"package:npm:@radix-ui\u002Freact-portal","radix-ui-react-portal-1382c60d","npm:@radix-ui\u002Freact-portal","@radix-ui\u002Freact-portal",[620],[2088],"1.1.17",[95,104],{"id":2091,"slug":2092,"identity":2093,"label":2094,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2095,"versions":2096,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2098},"package:npm:@radix-ui\u002Freact-presence","radix-ui-react-presence-adbec356","npm:@radix-ui\u002Freact-presence","@radix-ui\u002Freact-presence",[620],[2097],"1.1.10",[95,104],{"id":2100,"slug":2101,"identity":2102,"label":2103,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2104,"versions":2105,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2107},"package:npm:@radix-ui\u002Freact-primitive","radix-ui-react-primitive-89b4f1d1","npm:@radix-ui\u002Freact-primitive","@radix-ui\u002Freact-primitive",[620],[2106],"2.1.10",[95,104],{"id":2109,"slug":2110,"identity":2111,"label":2112,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2113,"versions":2114,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2115},"package:npm:@radix-ui\u002Freact-progress","radix-ui-react-progress-48e46dbe","npm:@radix-ui\u002Freact-progress","@radix-ui\u002Freact-progress",[620],[1985],[95,104],{"id":2117,"slug":2118,"identity":2119,"label":2120,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2121,"versions":2122,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2124},"package:npm:@radix-ui\u002Freact-radio-group","radix-ui-react-radio-group-672dcea5","npm:@radix-ui\u002Freact-radio-group","@radix-ui\u002Freact-radio-group",[620],[2123],"1.4.7",[95,104],{"id":2126,"slug":2127,"identity":2128,"label":2129,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2130,"versions":2131,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2132},"package:npm:@radix-ui\u002Freact-roving-focus","radix-ui-react-roving-focus-aab71eef","npm:@radix-ui\u002Freact-roving-focus","@radix-ui\u002Freact-roving-focus",[620],[1958],[95,104],{"id":2134,"slug":2135,"identity":2136,"label":2137,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2138,"versions":2139,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2141},"package:npm:@radix-ui\u002Freact-scroll-area","radix-ui-react-scroll-area-f6a4a63b","npm:@radix-ui\u002Freact-scroll-area","@radix-ui\u002Freact-scroll-area",[620],[2140],"1.2.18",[95,104],{"id":2143,"slug":2144,"identity":2145,"label":2146,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2147,"versions":2148,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2149},"package:npm:@radix-ui\u002Freact-select","radix-ui-react-select-5eaaf38a","npm:@radix-ui\u002Freact-select","@radix-ui\u002Freact-select",[620],[1933],[95,104],{"id":2151,"slug":2152,"identity":2153,"label":2154,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2155,"versions":2156,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2157},"package:npm:@radix-ui\u002Freact-separator","radix-ui-react-separator-3ab6e92e","npm:@radix-ui\u002Freact-separator","@radix-ui\u002Freact-separator",[620],[1838],[95,104],{"id":2159,"slug":2160,"identity":2161,"label":2162,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2163,"versions":2164,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2165},"package:npm:@radix-ui\u002Freact-slider","radix-ui-react-slider-4ec942a5","npm:@radix-ui\u002Freact-slider","@radix-ui\u002Freact-slider",[620],[2123],[95,104],{"id":2167,"slug":2168,"identity":2169,"label":2170,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2171,"versions":2172,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2174},"package:npm:@radix-ui\u002Freact-slot","radix-ui-react-slot-0b5c1020","npm:@radix-ui\u002Freact-slot","@radix-ui\u002Freact-slot",[620],[2173],"1.3.3",[95,104],{"id":2176,"slug":2177,"identity":2178,"label":2179,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2180,"versions":2181,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2182},"package:npm:@radix-ui\u002Freact-switch","radix-ui-react-switch-954a4ee2","npm:@radix-ui\u002Freact-switch","@radix-ui\u002Freact-switch",[620],[2079],[95,104],{"id":2184,"slug":2185,"identity":2186,"label":2187,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2188,"versions":2189,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2191},"package:npm:@radix-ui\u002Freact-tabs","radix-ui-react-tabs-d1364061","npm:@radix-ui\u002Freact-tabs","@radix-ui\u002Freact-tabs",[620],[2190],"1.1.21",[95,104],{"id":2193,"slug":2194,"identity":2195,"label":2196,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2197,"versions":2198,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2200},"package:npm:@radix-ui\u002Freact-toast","radix-ui-react-toast-d3a9320e","npm:@radix-ui\u002Freact-toast","@radix-ui\u002Freact-toast",[620],[2199],"1.2.23",[95,104],{"id":2202,"slug":2203,"identity":2204,"label":2205,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2206,"versions":2207,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2209},"package:npm:@radix-ui\u002Freact-toggle","radix-ui-react-toggle-84169dad","npm:@radix-ui\u002Freact-toggle","@radix-ui\u002Freact-toggle",[620],[2208],"1.1.18",[95,104],{"id":2211,"slug":2212,"identity":2213,"label":2214,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2215,"versions":2216,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2217},"package:npm:@radix-ui\u002Freact-toggle-group","radix-ui-react-toggle-group-4ba3d8a4","npm:@radix-ui\u002Freact-toggle-group","@radix-ui\u002Freact-toggle-group",[620],[1958],[95,104],{"id":2219,"slug":2220,"identity":2221,"label":2222,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2223,"versions":2224,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2225},"package:npm:@radix-ui\u002Freact-toolbar","radix-ui-react-toolbar-2cd2cf6e","npm:@radix-ui\u002Freact-toolbar","@radix-ui\u002Freact-toolbar",[620],[1958],[95,104],{"id":2227,"slug":2228,"identity":2229,"label":2230,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2231,"versions":2232,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2234},"package:npm:@radix-ui\u002Freact-tooltip","radix-ui-react-tooltip-bf2eced6","npm:@radix-ui\u002Freact-tooltip","@radix-ui\u002Freact-tooltip",[620],[2233],"1.2.16",[95,104],{"id":2236,"slug":2237,"identity":2238,"label":2239,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2240,"versions":2241,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2242},"package:npm:@radix-ui\u002Freact-use-callback-ref","radix-ui-react-use-callback-ref-bdf07aa2","npm:@radix-ui\u002Freact-use-callback-ref","@radix-ui\u002Freact-use-callback-ref",[620],[1749],[95,104],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2248,"versions":2249,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2250},"package:npm:@radix-ui\u002Freact-use-controllable-state","radix-ui-react-use-controllable-state-6f6994ba","npm:@radix-ui\u002Freact-use-controllable-state","@radix-ui\u002Freact-use-controllable-state",[620],[1881],[95,104],{"id":2252,"slug":2253,"identity":2254,"label":2255,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2256,"versions":2257,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2259},"package:npm:@radix-ui\u002Freact-use-effect-event","radix-ui-react-use-effect-event-0dc07ac7","npm:@radix-ui\u002Freact-use-effect-event","@radix-ui\u002Freact-use-effect-event",[620],[2258],"0.0.5",[95,104],{"id":2261,"slug":2262,"identity":2263,"label":2264,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2265,"versions":2266,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2267},"package:npm:@radix-ui\u002Freact-use-escape-keydown","radix-ui-react-use-escape-keydown-1f78b742","npm:@radix-ui\u002Freact-use-escape-keydown","@radix-ui\u002Freact-use-escape-keydown",[620],[1916],[95,104],{"id":2269,"slug":2270,"identity":2271,"label":2272,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2273,"versions":2274,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2276},"package:npm:@radix-ui\u002Freact-use-is-hydrated","radix-ui-react-use-is-hydrated-931af649","npm:@radix-ui\u002Freact-use-is-hydrated","@radix-ui\u002Freact-use-is-hydrated",[620],[2275],"0.1.3",[95,104],{"id":2278,"slug":2279,"identity":2280,"label":2281,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2282,"versions":2283,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2284},"package:npm:@radix-ui\u002Freact-use-layout-effect","radix-ui-react-use-layout-effect-cd01a3ed","npm:@radix-ui\u002Freact-use-layout-effect","@radix-ui\u002Freact-use-layout-effect",[620],[1749],[95,104],{"id":2286,"slug":2287,"identity":2288,"label":2289,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2290,"versions":2291,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2292},"package:npm:@radix-ui\u002Freact-use-previous","radix-ui-react-use-previous-54a0a81a","npm:@radix-ui\u002Freact-use-previous","@radix-ui\u002Freact-use-previous",[620],[1749],[95,104],{"id":2294,"slug":2295,"identity":2296,"label":2297,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2298,"versions":2299,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2300},"package:npm:@radix-ui\u002Freact-use-rect","radix-ui-react-use-rect-7d2d8eb9","npm:@radix-ui\u002Freact-use-rect","@radix-ui\u002Freact-use-rect",[620],[1749],[95,104],{"id":2302,"slug":2303,"identity":2304,"label":2305,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2306,"versions":2307,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2308},"package:npm:@radix-ui\u002Freact-use-size","radix-ui-react-use-size-0ec9d7a7","npm:@radix-ui\u002Freact-use-size","@radix-ui\u002Freact-use-size",[620],[1749],[95,104],{"id":2310,"slug":2311,"identity":2312,"label":2313,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2314,"versions":2315,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2317},"package:npm:@radix-ui\u002Freact-visually-hidden","radix-ui-react-visually-hidden-b9c56e4c","npm:@radix-ui\u002Freact-visually-hidden","@radix-ui\u002Freact-visually-hidden",[620],[2316],"1.2.11",[95,104],{"id":2319,"slug":2320,"identity":2321,"label":2322,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2323,"versions":2324,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2325},"package:npm:@radix-ui\u002Frect","radix-ui-rect-bd869810","npm:@radix-ui\u002Frect","@radix-ui\u002Frect",[620],[1820],[95,104],{"id":2327,"slug":2328,"identity":2329,"label":2330,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2331,"versions":2332,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2334},"package:npm:@reduxjs\u002Ftoolkit","reduxjs-toolkit-37f98765","npm:@reduxjs\u002Ftoolkit","@reduxjs\u002Ftoolkit",[620],[2333],"2.11.2",[95,104],{"id":2336,"slug":2337,"identity":2338,"label":2339,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2340,"versions":2341,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2343},"package:npm:@rolldown\u002Fbinding-android-arm-eabi","rolldown-binding-android-arm-eabi-aafa4a7a","npm:@rolldown\u002Fbinding-android-arm-eabi","@rolldown\u002Fbinding-android-arm-eabi",[620],[2342],"1.2.14",[95,104],{"id":2345,"slug":2346,"identity":2347,"label":2348,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2349,"versions":2350,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2351},"package:npm:@rolldown\u002Fbinding-android-arm64","rolldown-binding-android-arm64-4fba01e6","npm:@rolldown\u002Fbinding-android-arm64","@rolldown\u002Fbinding-android-arm64",[620],[2342],[95,104],{"id":2353,"slug":2354,"identity":2355,"label":2356,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2357,"versions":2358,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2359},"package:npm:@rolldown\u002Fbinding-darwin-arm64","rolldown-binding-darwin-arm64-c68272ff","npm:@rolldown\u002Fbinding-darwin-arm64","@rolldown\u002Fbinding-darwin-arm64",[620],[2342],[95,104],{"id":2361,"slug":2362,"identity":2363,"label":2364,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2365,"versions":2366,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2367},"package:npm:@rolldown\u002Fbinding-darwin-x64","rolldown-binding-darwin-x64-530717d4","npm:@rolldown\u002Fbinding-darwin-x64","@rolldown\u002Fbinding-darwin-x64",[620],[2342],[95,104],{"id":2369,"slug":2370,"identity":2371,"label":2372,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2373,"versions":2374,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2375},"package:npm:@rolldown\u002Fbinding-freebsd-x64","rolldown-binding-freebsd-x64-9a434b5e","npm:@rolldown\u002Fbinding-freebsd-x64","@rolldown\u002Fbinding-freebsd-x64",[620],[2342],[95,104],{"id":2377,"slug":2378,"identity":2379,"label":2380,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2381,"versions":2382,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2383},"package:npm:@rolldown\u002Fbinding-linux-arm-gnueabihf","rolldown-binding-linux-arm-gnueabihf-5b12188b","npm:@rolldown\u002Fbinding-linux-arm-gnueabihf","@rolldown\u002Fbinding-linux-arm-gnueabihf",[620],[2342],[95,104],{"id":2385,"slug":2386,"identity":2387,"label":2388,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2389,"versions":2390,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2391},"package:npm:@rolldown\u002Fbinding-linux-arm64-gnu","rolldown-binding-linux-arm64-gnu-4d84f50b","npm:@rolldown\u002Fbinding-linux-arm64-gnu","@rolldown\u002Fbinding-linux-arm64-gnu",[620],[2342],[95,104],{"id":2393,"slug":2394,"identity":2395,"label":2396,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2397,"versions":2398,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2399},"package:npm:@rolldown\u002Fbinding-linux-arm64-musl","rolldown-binding-linux-arm64-musl-30032dd1","npm:@rolldown\u002Fbinding-linux-arm64-musl","@rolldown\u002Fbinding-linux-arm64-musl",[620],[2342],[95,104],{"id":2401,"slug":2402,"identity":2403,"label":2404,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2405,"versions":2406,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2407},"package:npm:@rolldown\u002Fbinding-linux-ppc64-gnu","rolldown-binding-linux-ppc64-gnu-5949f425","npm:@rolldown\u002Fbinding-linux-ppc64-gnu","@rolldown\u002Fbinding-linux-ppc64-gnu",[620],[2342],[95,104],{"id":2409,"slug":2410,"identity":2411,"label":2412,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2413,"versions":2414,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2415},"package:npm:@rolldown\u002Fbinding-linux-s390x-gnu","rolldown-binding-linux-s390x-gnu-b2becc57","npm:@rolldown\u002Fbinding-linux-s390x-gnu","@rolldown\u002Fbinding-linux-s390x-gnu",[620],[2342],[95,104],{"id":2417,"slug":2418,"identity":2419,"label":2420,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2421,"versions":2422,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2423},"package:npm:@rolldown\u002Fbinding-linux-x64-gnu","rolldown-binding-linux-x64-gnu-552bf0d8","npm:@rolldown\u002Fbinding-linux-x64-gnu","@rolldown\u002Fbinding-linux-x64-gnu",[620],[2342],[95,104],{"id":2425,"slug":2426,"identity":2427,"label":2428,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2429,"versions":2430,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2431},"package:npm:@rolldown\u002Fbinding-linux-x64-musl","rolldown-binding-linux-x64-musl-e9aa57fe","npm:@rolldown\u002Fbinding-linux-x64-musl","@rolldown\u002Fbinding-linux-x64-musl",[620],[2342],[95,104],{"id":2433,"slug":2434,"identity":2435,"label":2436,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2437,"versions":2438,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2439},"package:npm:@rolldown\u002Fbinding-openharmony-arm64","rolldown-binding-openharmony-arm64-a55f4196","npm:@rolldown\u002Fbinding-openharmony-arm64","@rolldown\u002Fbinding-openharmony-arm64",[620],[2342],[95,104],{"id":2441,"slug":2442,"identity":2443,"label":2444,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2445,"versions":2446,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2447},"package:npm:@rolldown\u002Fbinding-win32-arm64-msvc","rolldown-binding-win32-arm64-msvc-b4f088cf","npm:@rolldown\u002Fbinding-win32-arm64-msvc","@rolldown\u002Fbinding-win32-arm64-msvc",[620],[2342],[95,104],{"id":2449,"slug":2450,"identity":2451,"label":2452,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2453,"versions":2454,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2455},"package:npm:@rolldown\u002Fbinding-win32-x64-msvc","rolldown-binding-win32-x64-msvc-cc6d5954","npm:@rolldown\u002Fbinding-win32-x64-msvc","@rolldown\u002Fbinding-win32-x64-msvc",[620],[2342],[95,104],{"id":2457,"slug":2458,"identity":2459,"label":2460,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2461,"versions":2462,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2463},"package:npm:@rolldown\u002Fpluginutils","rolldown-pluginutils-73ff273e","npm:@rolldown\u002Fpluginutils","@rolldown\u002Fpluginutils",[620],[1659],[95,104],{"id":2465,"slug":2466,"identity":2467,"label":2468,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2469,"versions":2470,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2472},"package:npm:@sec-ant\u002Freadable-stream","sec-ant-readable-stream-3c590ee3","npm:@sec-ant\u002Freadable-stream","@sec-ant\u002Freadable-stream",[620],[2471],"0.4.1",[95,104],{"id":2474,"slug":2475,"identity":2476,"label":2477,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2478,"versions":2479,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2481},"package:npm:@sindresorhus\u002Fmerge-streams","sindresorhus-merge-streams-3bf40078","npm:@sindresorhus\u002Fmerge-streams","@sindresorhus\u002Fmerge-streams",[620],[2480],"4.0.0",[95,104],{"id":2483,"slug":2484,"identity":2485,"label":2486,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2487,"versions":2488,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2490},"package:npm:@standard-schema\u002Fspec","standard-schema-spec-d214ce9f","npm:@standard-schema\u002Fspec","@standard-schema\u002Fspec",[620],[2489],"1.1.0",[95,104],{"id":2492,"slug":2493,"identity":2494,"label":2495,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2496,"versions":2497,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2499},"package:npm:@standard-schema\u002Futils","standard-schema-utils-81950b73","npm:@standard-schema\u002Futils","@standard-schema\u002Futils",[620],[2498],"0.3.0",[95,104],{"id":2501,"slug":2502,"identity":2503,"label":2504,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2505,"versions":2506,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2508},"package:npm:@tailwindcss\u002Fnode","tailwindcss-node-5a7bda04","npm:@tailwindcss\u002Fnode","@tailwindcss\u002Fnode",[620],[2507],"4.3.3",[95,104],{"id":2510,"slug":2511,"identity":2512,"label":2513,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2514,"versions":2515,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2516},"package:npm:@tailwindcss\u002Foxide","tailwindcss-oxide-bc0deb5e","npm:@tailwindcss\u002Foxide","@tailwindcss\u002Foxide",[620],[2507],[95,104],{"id":2518,"slug":2519,"identity":2520,"label":2521,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2522,"versions":2523,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2524},"package:npm:@tailwindcss\u002Foxide-android-arm64","tailwindcss-oxide-android-arm64-ee536c9e","npm:@tailwindcss\u002Foxide-android-arm64","@tailwindcss\u002Foxide-android-arm64",[620],[2507],[95,104],{"id":2526,"slug":2527,"identity":2528,"label":2529,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2530,"versions":2531,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2532},"package:npm:@tailwindcss\u002Foxide-darwin-arm64","tailwindcss-oxide-darwin-arm64-292dea54","npm:@tailwindcss\u002Foxide-darwin-arm64","@tailwindcss\u002Foxide-darwin-arm64",[620],[2507],[95,104],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2538,"versions":2539,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2540},"package:npm:@tailwindcss\u002Foxide-darwin-x64","tailwindcss-oxide-darwin-x64-47d8c409","npm:@tailwindcss\u002Foxide-darwin-x64","@tailwindcss\u002Foxide-darwin-x64",[620],[2507],[95,104],{"id":2542,"slug":2543,"identity":2544,"label":2545,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2546,"versions":2547,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2548},"package:npm:@tailwindcss\u002Foxide-freebsd-x64","tailwindcss-oxide-freebsd-x64-2a2dd5a3","npm:@tailwindcss\u002Foxide-freebsd-x64","@tailwindcss\u002Foxide-freebsd-x64",[620],[2507],[95,104],{"id":2550,"slug":2551,"identity":2552,"label":2553,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2554,"versions":2555,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2556},"package:npm:@tailwindcss\u002Foxide-linux-arm-gnueabihf","tailwindcss-oxide-linux-arm-gnueabihf-26461187","npm:@tailwindcss\u002Foxide-linux-arm-gnueabihf","@tailwindcss\u002Foxide-linux-arm-gnueabihf",[620],[2507],[95,104],{"id":2558,"slug":2559,"identity":2560,"label":2561,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2562,"versions":2563,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2564},"package:npm:@tailwindcss\u002Foxide-linux-arm64-gnu","tailwindcss-oxide-linux-arm64-gnu-6c30a655","npm:@tailwindcss\u002Foxide-linux-arm64-gnu","@tailwindcss\u002Foxide-linux-arm64-gnu",[620],[2507],[95,104],{"id":2566,"slug":2567,"identity":2568,"label":2569,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2570,"versions":2571,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2572},"package:npm:@tailwindcss\u002Foxide-linux-arm64-musl","tailwindcss-oxide-linux-arm64-musl-edeb0668","npm:@tailwindcss\u002Foxide-linux-arm64-musl","@tailwindcss\u002Foxide-linux-arm64-musl",[620],[2507],[95,104],{"id":2574,"slug":2575,"identity":2576,"label":2577,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2578,"versions":2579,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2580},"package:npm:@tailwindcss\u002Foxide-linux-x64-gnu","tailwindcss-oxide-linux-x64-gnu-1b7e7116","npm:@tailwindcss\u002Foxide-linux-x64-gnu","@tailwindcss\u002Foxide-linux-x64-gnu",[620],[2507],[95,104],{"id":2582,"slug":2583,"identity":2584,"label":2585,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2586,"versions":2587,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2588},"package:npm:@tailwindcss\u002Foxide-linux-x64-musl","tailwindcss-oxide-linux-x64-musl-6ecbe2a8","npm:@tailwindcss\u002Foxide-linux-x64-musl","@tailwindcss\u002Foxide-linux-x64-musl",[620],[2507],[95,104],{"id":2590,"slug":2591,"identity":2592,"label":2593,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2594,"versions":2595,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2596},"package:npm:@tailwindcss\u002Foxide-wasm32-wasi","tailwindcss-oxide-wasm32-wasi-ca1d3da4","npm:@tailwindcss\u002Foxide-wasm32-wasi","@tailwindcss\u002Foxide-wasm32-wasi",[620],[2507],[95,104],{"id":2598,"slug":2599,"identity":2600,"label":2601,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2602,"versions":2603,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2604},"package:npm:@tailwindcss\u002Foxide-win32-arm64-msvc","tailwindcss-oxide-win32-arm64-msvc-155b7f53","npm:@tailwindcss\u002Foxide-win32-arm64-msvc","@tailwindcss\u002Foxide-win32-arm64-msvc",[620],[2507],[95,104],{"id":2606,"slug":2607,"identity":2608,"label":2609,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2610,"versions":2611,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2612},"package:npm:@tailwindcss\u002Foxide-win32-x64-msvc","tailwindcss-oxide-win32-x64-msvc-ec1bb11f","npm:@tailwindcss\u002Foxide-win32-x64-msvc","@tailwindcss\u002Foxide-win32-x64-msvc",[620],[2507],[95,104],{"id":2614,"slug":2615,"identity":2616,"label":2617,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2618,"versions":2619,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":2620},"package:npm:@tailwindcss\u002Fvite","tailwindcss-vite-719b0a4f","npm:@tailwindcss\u002Fvite","@tailwindcss\u002Fvite",[620],[2507],[95,104],{"id":2622,"slug":2623,"identity":2624,"label":2625,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2626,"versions":2627,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2629},"package:npm:@tanstack\u002Fhistory","tanstack-history-7dd0468e","npm:@tanstack\u002Fhistory","@tanstack\u002Fhistory",[620],[2628],"1.162.4",[95,104],{"id":2631,"slug":2632,"identity":2633,"label":2634,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2635,"versions":2636,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2638},"package:npm:@tanstack\u002Fquery-core","tanstack-query-core-9a0f2868","npm:@tanstack\u002Fquery-core","@tanstack\u002Fquery-core",[620],[2637],"5.104.0",[95,104],{"id":2640,"slug":2641,"identity":2642,"label":2643,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2644,"versions":2645,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":2646},"package:npm:@tanstack\u002Freact-query","tanstack-react-query-049e9666","npm:@tanstack\u002Freact-query","@tanstack\u002Freact-query",[620],[2637],[95,104],{"id":2648,"slug":2649,"identity":2650,"label":2651,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2652,"versions":2653,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":2655},"package:npm:@tanstack\u002Freact-router","tanstack-react-router-0acc9b30","npm:@tanstack\u002Freact-router","@tanstack\u002Freact-router",[620],[2654],"1.170.40",[95,104],{"id":2657,"slug":2658,"identity":2659,"label":2660,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2661,"versions":2662,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":2664},"package:npm:@tanstack\u002Freact-router-devtools","tanstack-react-router-devtools-48fe6b35","npm:@tanstack\u002Freact-router-devtools","@tanstack\u002Freact-router-devtools",[620],[2663],"1.167.2",[95,104],{"id":2666,"slug":2667,"identity":2668,"label":2669,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2670,"versions":2671,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2673},"package:npm:@tanstack\u002Freact-store","tanstack-react-store-b1d17193","npm:@tanstack\u002Freact-store","@tanstack\u002Freact-store",[620],[2672],"0.11.1",[95,104],{"id":2675,"slug":2676,"identity":2677,"label":2678,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2679,"versions":2680,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":2683},"package:npm:@tanstack\u002Frouter-core","tanstack-router-core-e8c8be62","npm:@tanstack\u002Frouter-core","@tanstack\u002Frouter-core",[620],[2681,2682],"1.171.32","1.171.33",[95,104],{"id":2685,"slug":2686,"identity":2687,"label":2688,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2689,"versions":2690,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2692},"package:npm:@tanstack\u002Frouter-devtools-core","tanstack-router-devtools-core-b3340ea1","npm:@tanstack\u002Frouter-devtools-core","@tanstack\u002Frouter-devtools-core",[620],[2691],"1.168.2",[95,104],{"id":2694,"slug":2695,"identity":2696,"label":2697,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2698,"versions":2699,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2701},"package:npm:@tanstack\u002Frouter-generator","tanstack-router-generator-b6ba584d","npm:@tanstack\u002Frouter-generator","@tanstack\u002Frouter-generator",[620],[2700],"1.167.38",[95],{"id":2703,"slug":2704,"identity":2705,"label":2706,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2707,"versions":2708,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":2710},"package:npm:@tanstack\u002Frouter-plugin","tanstack-router-plugin-8bc6db3e","npm:@tanstack\u002Frouter-plugin","@tanstack\u002Frouter-plugin",[620],[2709],"1.168.40",[95],{"id":2712,"slug":2713,"identity":2714,"label":2715,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2716,"versions":2717,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2719},"package:npm:@tanstack\u002Frouter-utils","tanstack-router-utils-e1dbb6f5","npm:@tanstack\u002Frouter-utils","@tanstack\u002Frouter-utils",[620],[2718],"1.162.3",[95],{"id":2721,"slug":2722,"identity":2723,"label":2724,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2725,"versions":2726,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2727},"package:npm:@tanstack\u002Fstore","tanstack-store-37e795f0","npm:@tanstack\u002Fstore","@tanstack\u002Fstore",[620],[2672],[95,104],{"id":2729,"slug":2730,"identity":2731,"label":2732,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2733,"versions":2734,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2736},"package:npm:@tanstack\u002Fvirtual-file-routes","tanstack-virtual-file-routes-a6d6195c","npm:@tanstack\u002Fvirtual-file-routes","@tanstack\u002Fvirtual-file-routes",[620],[2735],"1.162.0",[95],{"id":2738,"slug":2739,"identity":2740,"label":2741,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2742,"versions":2743,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2745},"package:npm:@ts-morph\u002Fcommon","ts-morph-common-1c7ef627","npm:@ts-morph\u002Fcommon","@ts-morph\u002Fcommon",[620],[2744],"0.27.0",[95,104],{"id":2747,"slug":2748,"identity":2749,"label":2750,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2751,"versions":2752,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2754},"package:npm:@tybys\u002Fwasm-util","tybys-wasm-util-031dcc8d","npm:@tybys\u002Fwasm-util","@tybys\u002Fwasm-util",[620],[2753],"0.10.2",[104],{"id":2756,"slug":2757,"identity":2758,"label":2759,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2760,"versions":2761,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2763},"package:npm:@types\u002Fd3-array","types-d3-array-a29b6cf2","npm:@types\u002Fd3-array","@types\u002Fd3-array",[620],[2762],"3.2.2",[95,104],{"id":2765,"slug":2766,"identity":2767,"label":2768,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2769,"versions":2770,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2772},"package:npm:@types\u002Fd3-color","types-d3-color-e40fd440","npm:@types\u002Fd3-color","@types\u002Fd3-color",[620],[2771],"3.1.3",[95,104],{"id":2774,"slug":2775,"identity":2776,"label":2777,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2778,"versions":2779,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2781},"package:npm:@types\u002Fd3-ease","types-d3-ease-149b739c","npm:@types\u002Fd3-ease","@types\u002Fd3-ease",[620],[2780],"3.0.2",[95,104],{"id":2783,"slug":2784,"identity":2785,"label":2786,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2787,"versions":2788,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2790},"package:npm:@types\u002Fd3-interpolate","types-d3-interpolate-7f90ad6f","npm:@types\u002Fd3-interpolate","@types\u002Fd3-interpolate",[620],[2789],"3.0.4",[95,104],{"id":2792,"slug":2793,"identity":2794,"label":2795,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2796,"versions":2797,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2799},"package:npm:@types\u002Fd3-path","types-d3-path-960b1008","npm:@types\u002Fd3-path","@types\u002Fd3-path",[620],[2798],"3.1.1",[95,104],{"id":2801,"slug":2802,"identity":2803,"label":2804,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2805,"versions":2806,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2808},"package:npm:@types\u002Fd3-scale","types-d3-scale-5a3300ab","npm:@types\u002Fd3-scale","@types\u002Fd3-scale",[620],[2807],"4.0.9",[95,104],{"id":2810,"slug":2811,"identity":2812,"label":2813,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2814,"versions":2815,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2816},"package:npm:@types\u002Fd3-shape","types-d3-shape-7b817826","npm:@types\u002Fd3-shape","@types\u002Fd3-shape",[620],[785],[95,104],{"id":2818,"slug":2819,"identity":2820,"label":2821,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2822,"versions":2823,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2824},"package:npm:@types\u002Fd3-time","types-d3-time-f20949e6","npm:@types\u002Fd3-time","@types\u002Fd3-time",[620],[2789],[95,104],{"id":2826,"slug":2827,"identity":2828,"label":2829,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2830,"versions":2831,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2832},"package:npm:@types\u002Fd3-timer","types-d3-timer-23dd2733","npm:@types\u002Fd3-timer","@types\u002Fd3-timer",[620],[2780],[95,104],{"id":2834,"slug":2835,"identity":2836,"label":2837,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2838,"versions":2839,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2841},"package:npm:@types\u002Fdebug","types-debug-09342db5","npm:@types\u002Fdebug","@types\u002Fdebug",[620],[2840],"4.1.13",[95,104],{"id":2843,"slug":2844,"identity":2845,"label":2846,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2847,"versions":2848,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2849},"package:npm:@types\u002Fesrecurse","types-esrecurse-39b3ab02","npm:@types\u002Fesrecurse","@types\u002Fesrecurse",[620],[1026],[95],{"id":2851,"slug":2852,"identity":2853,"label":2854,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2855,"versions":2856,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2858},"package:npm:@types\u002Festree","types-estree-8dde2b7e","npm:@types\u002Festree","@types\u002Festree",[620],[2857],"1.0.8",[95,104],{"id":2860,"slug":2861,"identity":2862,"label":2863,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2864,"versions":2865,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2867},"package:npm:@types\u002Festree-jsx","types-estree-jsx-65519fd8","npm:@types\u002Festree-jsx","@types\u002Festree-jsx",[620],[2866],"1.0.5",[95,104],{"id":2869,"slug":2870,"identity":2871,"label":2872,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2873,"versions":2874,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2875},"package:npm:@types\u002Fhast","types-hast-976cd29f","npm:@types\u002Fhast","@types\u002Fhast",[620],[2789],[95,104],{"id":2877,"slug":2878,"identity":2879,"label":2880,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2881,"versions":2882,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2884},"package:npm:@types\u002Fjson-schema","types-json-schema-71e9bb24","npm:@types\u002Fjson-schema","@types\u002Fjson-schema",[620],[2883],"7.0.15",[95],{"id":2886,"slug":2887,"identity":2888,"label":2889,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2890,"versions":2891,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2893},"package:npm:@types\u002Fmdast","types-mdast-ca137420","npm:@types\u002Fmdast","@types\u002Fmdast",[620],[2892],"4.0.4",[95,104],{"id":2895,"slug":2896,"identity":2897,"label":2898,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2899,"versions":2900,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2902},"package:npm:@types\u002Fms","types-ms-7aa68791","npm:@types\u002Fms","@types\u002Fms",[620],[2901],"2.1.0",[95,104],{"id":2904,"slug":2905,"identity":2906,"label":2907,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2908,"versions":2909,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":2911},"package:npm:@types\u002Fnode","types-node-893179a0","npm:@types\u002Fnode","@types\u002Fnode",[620],[2910],"26.6.2",[95,104],{"id":2913,"slug":2914,"identity":2915,"label":2916,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2917,"versions":2918,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2920},"package:npm:@types\u002Fprismjs","types-prismjs-3298ce7a","npm:@types\u002Fprismjs","@types\u002Fprismjs",[620],[2919],"1.26.6",[95,104],{"id":2922,"slug":2923,"identity":2924,"label":2925,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2926,"versions":2927,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":2929},"package:npm:@types\u002Freact","types-react-1801b994","npm:@types\u002Freact","@types\u002Freact",[620],[2928],"19.3.0",[95,104],{"id":2931,"slug":2932,"identity":2933,"label":2934,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2935,"versions":2936,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":2937},"package:npm:@types\u002Freact-dom","types-react-dom-0822f902","npm:@types\u002Freact-dom","@types\u002Freact-dom",[620],[2928],[95,104],{"id":2939,"slug":2940,"identity":2941,"label":2942,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2943,"versions":2944,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":2946},"package:npm:@types\u002Funist","types-unist-33c4c02a","npm:@types\u002Funist","@types\u002Funist",[620],[2945,710],"2.0.11",[95,104],{"id":2948,"slug":2949,"identity":2950,"label":2951,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2952,"versions":2953,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2955},"package:npm:@types\u002Fuse-sync-external-store","types-use-sync-external-store-82a5c51e","npm:@types\u002Fuse-sync-external-store","@types\u002Fuse-sync-external-store",[620],[2954],"0.0.6",[95,104],{"id":2957,"slug":2958,"identity":2959,"label":2960,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2961,"versions":2962,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":2964},"package:npm:@types\u002Fvalidate-npm-package-name","types-validate-npm-package-name-ba658174","npm:@types\u002Fvalidate-npm-package-name","@types\u002Fvalidate-npm-package-name",[620],[2963],"4.0.2",[95,104],{"id":2966,"slug":2967,"identity":2968,"label":2969,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2970,"versions":2971,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2973},"package:npm:@typescript-eslint\u002Feslint-plugin","typescript-eslint-eslint-plugin-37895b16","npm:@typescript-eslint\u002Feslint-plugin","@typescript-eslint\u002Feslint-plugin",[620],[2972],"8.70.0",[95],{"id":2975,"slug":2976,"identity":2977,"label":2978,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2979,"versions":2980,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2981},"package:npm:@typescript-eslint\u002Fparser","typescript-eslint-parser-30fb3abf","npm:@typescript-eslint\u002Fparser","@typescript-eslint\u002Fparser",[1151,620],[2972],[95],{"id":2983,"slug":2984,"identity":2985,"label":2986,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2987,"versions":2988,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2989},"package:npm:@typescript-eslint\u002Fproject-service","typescript-eslint-project-service-4325b1df","npm:@typescript-eslint\u002Fproject-service","@typescript-eslint\u002Fproject-service",[620],[2972],[95],{"id":2991,"slug":2992,"identity":2993,"label":2994,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2995,"versions":2996,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2997},"package:npm:@typescript-eslint\u002Fscope-manager","typescript-eslint-scope-manager-9cced343","npm:@typescript-eslint\u002Fscope-manager","@typescript-eslint\u002Fscope-manager",[620],[2972],[95],{"id":2999,"slug":3000,"identity":3001,"label":3002,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3003,"versions":3004,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3005},"package:npm:@typescript-eslint\u002Ftsconfig-utils","typescript-eslint-tsconfig-utils-1c650a80","npm:@typescript-eslint\u002Ftsconfig-utils","@typescript-eslint\u002Ftsconfig-utils",[620],[2972],[95],{"id":3007,"slug":3008,"identity":3009,"label":3010,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3011,"versions":3012,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3013},"package:npm:@typescript-eslint\u002Ftype-utils","typescript-eslint-type-utils-7cdfbb29","npm:@typescript-eslint\u002Ftype-utils","@typescript-eslint\u002Ftype-utils",[620],[2972],[95],{"id":3015,"slug":3016,"identity":3017,"label":3018,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3019,"versions":3020,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3021},"package:npm:@typescript-eslint\u002Ftypes","typescript-eslint-types-77f3f786","npm:@typescript-eslint\u002Ftypes","@typescript-eslint\u002Ftypes",[620],[2972],[95],{"id":3023,"slug":3024,"identity":3025,"label":3026,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3027,"versions":3028,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3029},"package:npm:@typescript-eslint\u002Ftypescript-estree","typescript-eslint-typescript-estree-82954698","npm:@typescript-eslint\u002Ftypescript-estree","@typescript-eslint\u002Ftypescript-estree",[1151,620],[2972],[95],{"id":3031,"slug":3032,"identity":3033,"label":3034,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3035,"versions":3036,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3037},"package:npm:@typescript-eslint\u002Futils","typescript-eslint-utils-688d256d","npm:@typescript-eslint\u002Futils","@typescript-eslint\u002Futils",[620],[2972],[95],{"id":3039,"slug":3040,"identity":3041,"label":3042,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3043,"versions":3044,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3045},"package:npm:@typescript-eslint\u002Fvisitor-keys","typescript-eslint-visitor-keys-fbb1a81d","npm:@typescript-eslint\u002Fvisitor-keys","@typescript-eslint\u002Fvisitor-keys",[620],[2972],[95],{"id":3047,"slug":3048,"identity":3049,"label":3050,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3051,"versions":3052,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3054},"package:npm:@uiw\u002Fcopy-to-clipboard","uiw-copy-to-clipboard-8bead46c","npm:@uiw\u002Fcopy-to-clipboard","@uiw\u002Fcopy-to-clipboard",[620],[3053],"1.0.21",[95,104],{"id":3056,"slug":3057,"identity":3058,"label":3059,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3060,"versions":3061,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3063},"package:npm:@uiw\u002Freact-markdown-preview","uiw-react-markdown-preview-8928ea94","npm:@uiw\u002Freact-markdown-preview","@uiw\u002Freact-markdown-preview",[620],[3062],"5.2.1",[95,104],{"id":3065,"slug":3066,"identity":3067,"label":3068,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3069,"versions":3070,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":3072},"package:npm:@uiw\u002Freact-md-editor","uiw-react-md-editor-ba7a4bdd","npm:@uiw\u002Freact-md-editor","@uiw\u002Freact-md-editor",[620],[3071],"4.1.2",[95,104],{"id":3074,"slug":3075,"identity":3076,"label":3077,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3078,"versions":3079,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3080},"package:npm:@ungap\u002Fstructured-clone","ungap-structured-clone-ab04e895","npm:@ungap\u002Fstructured-clone","@ungap\u002Fstructured-clone",[804],[1722],[95,104],{"id":3082,"slug":3083,"identity":3084,"label":3085,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3086,"versions":3087,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":3089},"package:npm:@vitejs\u002Fplugin-react","vitejs-plugin-react-0eef6115","npm:@vitejs\u002Fplugin-react","@vitejs\u002Fplugin-react",[620],[3088],"6.1.1",[95],{"id":3091,"slug":3092,"identity":3093,"label":3094,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3095,"versions":3096,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3098},"package:npm:accepts","accepts-be3cbd71","npm:accepts","accepts",[620],[3097],"2.0.0",[95,104],{"id":3100,"slug":3101,"identity":3102,"label":3103,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3104,"versions":3105,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3107},"package:npm:acorn","acorn-7462fc91","npm:acorn","acorn",[620],[3106],"8.18.0",[95],{"id":3109,"slug":3110,"identity":3111,"label":3112,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3113,"versions":3114,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3116},"package:npm:acorn-jsx","acorn-jsx-39f7c275","npm:acorn-jsx","acorn-jsx",[620],[3115],"5.3.2",[95],{"id":3118,"slug":3119,"identity":3120,"label":3121,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3122,"versions":3123,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3125},"package:npm:agent-base","agent-base-a3970bdd","npm:agent-base","agent-base",[620],[3124],"6.0.2",[95,104],{"id":3127,"slug":3128,"identity":3129,"label":3130,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3131,"versions":3132,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3134},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[575],[3133],"25.1.0",[104,56],{"id":3136,"slug":3137,"identity":3138,"label":3139,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3140,"versions":3142,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3144},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[3141],"PSF-2.0",[3143],"2.7.1",[104,56],{"id":3146,"slug":3147,"identity":3148,"label":3149,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3150,"versions":3151,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3153},"package:pypi:aiohttp-retry","aiohttp-retry-70699ddd","pypi:aiohttp-retry","aiohttp-retry",[620],[3152],"2.9.1",[104,56],{"id":3155,"slug":3156,"identity":3157,"label":3158,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3159,"versions":3160,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3162},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[575],[3161],"1.4.0",[104,56],{"id":3164,"slug":3165,"identity":3166,"label":3167,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3168,"versions":3169,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3171},"package:pypi:aiosmtplib","aiosmtplib-e8671b81","pypi:aiosmtplib","aiosmtplib",[620],[3170],"5.1.3",[104,56],{"id":3173,"slug":3174,"identity":3175,"label":3176,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3177,"versions":3178,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3180},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[620],[3179],"0.22.1",[56],{"id":3182,"slug":3183,"identity":3184,"label":3185,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3186,"versions":3187,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3189},"package:npm:ajv-formats","ajv-formats-78fbf756","npm:ajv-formats","ajv-formats",[620],[3188],"3.0.1",[95,104],{"id":3191,"slug":3192,"identity":3193,"label":3194,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3195,"versions":3196,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3197},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[620],[622],[104,56],{"id":3199,"slug":3200,"identity":3201,"label":3202,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3203,"versions":3204,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3205},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[620],[2258],[104,56],{"id":3207,"slug":3208,"identity":3209,"label":3210,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3211,"versions":3212,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3214},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[620],[3213],"0.8.0",[104,56],{"id":3216,"slug":3217,"identity":3218,"label":3219,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3220,"versions":3221,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3223},"package:npm:ansi-regex","ansi-regex-920343ce","npm:ansi-regex","ansi-regex",[620],[3222],"6.2.2",[95,104],{"id":3225,"slug":3226,"identity":3227,"label":3228,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3229,"versions":3230,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3232},"package:npm:ansis","ansis-fa431623","npm:ansis","ansis",[804],[3231],"4.4.0",[95],{"id":3234,"slug":3235,"identity":3236,"label":3237,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3238,"versions":3240,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3242},"package:npm:argparse","argparse-b5701db7","npm:argparse","argparse",[620,3141,3239],"Python-2.0",[3241],"2.0.1",[95,104],{"id":3244,"slug":3245,"identity":3246,"label":3247,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3248,"versions":3249,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3250},"package:npm:aria-hidden","aria-hidden-c855d183","npm:aria-hidden","aria-hidden",[620],[1881],[95,104],{"id":3252,"slug":3253,"identity":3254,"label":3255,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3256,"versions":3257,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3259},"package:pypi:ast-serialize","ast-serialize-4fe42cf9","pypi:ast-serialize","ast-serialize",[620],[3258],"0.13.1",[56],{"id":3261,"slug":3262,"identity":3263,"label":3264,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3265,"versions":3266,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3268},"package:npm:ast-types","ast-types-47084315","npm:ast-types","ast-types",[620],[3267],"0.16.1",[95,104],{"id":3270,"slug":3271,"identity":3272,"label":3273,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3274,"versions":3276,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3277},"package:pypi:astroid","astroid-12016648","pypi:astroid","astroid",[3275],"LGPL-2.1-or-later",[2892],[56],{"id":3279,"slug":3280,"identity":3281,"label":3282,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3283,"versions":3284,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3285},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[575],[2780],[56],{"id":3287,"slug":3288,"identity":3289,"label":3290,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3291,"versions":3292,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3293},"package:npm:asynckit","asynckit-084253d2","npm:asynckit","asynckit",[620],[1447],[95,104],{"id":3295,"slug":3296,"identity":3297,"label":3298,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3299,"versions":3300,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3302},"package:pypi:asyncpg","asyncpg-0fe19492","pypi:asyncpg","asyncpg",[575],[3301],"0.32.0",[104,56],{"id":3304,"slug":3305,"identity":3306,"label":3307,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3308,"versions":3309,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3311},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[620],[3310],"26.1.0",[104,56],{"id":3313,"slug":3314,"identity":3315,"label":3316,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3317,"versions":3318,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3320},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[3141],[3319],"0.2.2",[104,56],{"id":3322,"slug":3323,"identity":3324,"label":3325,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3326,"versions":3327,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3329},"package:pypi:azure-storage-queue","azure-storage-queue-fc8a7c70","pypi:azure-storage-queue","azure-storage-queue",[620],[3328],"12.18.0",[104,56],{"id":3331,"slug":3332,"identity":3333,"label":3334,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3335,"versions":3336,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3338},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[609],[3337],"2.18.0",[104,56],{"id":3340,"slug":3341,"identity":3342,"label":3343,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3344,"versions":3345,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3347},"package:npm:babel-dead-code-elimination","babel-dead-code-elimination-be561d65","npm:babel-dead-code-elimination","babel-dead-code-elimination",[620],[3346],"1.0.12",[95],{"id":3349,"slug":3350,"identity":3351,"label":3352,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3353,"versions":3354,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3356},"package:pypi:backrefs","backrefs-b5389480","pypi:backrefs","backrefs",[620],[3355],"8.1",[56],{"id":3358,"slug":3359,"identity":3360,"label":3361,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3362,"versions":3363,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3365},"package:npm:bail","bail-8d9e1b54","npm:bail","bail",[620],[3364],"2.0.2",[95,104],{"id":3367,"slug":3368,"identity":3369,"label":3370,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3371,"versions":3372,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3373},"package:npm:balanced-match","balanced-match-bdbd1dc3","npm:balanced-match","balanced-match",[620],[2892],[95,104],{"id":3375,"slug":3376,"identity":3377,"label":3378,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3379,"versions":3380,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3382},"package:npm:baseline-browser-mapping","baseline-browser-mapping-e31a849c","npm:baseline-browser-mapping","baseline-browser-mapping",[575],[3381],"2.11.25",[95,104],{"id":3384,"slug":3385,"identity":3386,"label":3387,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3388,"versions":3389,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3391},"package:npm:bcp-47-match","bcp-47-match-4036a9ba","npm:bcp-47-match","bcp-47-match",[620],[3390],"2.0.3",[95,104],{"id":3393,"slug":3394,"identity":3395,"label":3396,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3397,"versions":3398,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":3400},"package:pypi:bcrypt","bcrypt-f766cbbf","pypi:bcrypt","bcrypt",[575],[3399],"5.0.0",[104,56],{"id":3402,"slug":3403,"identity":3404,"label":3405,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3406,"versions":3407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3409},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[620],[3408],"4.15.0",[56],{"id":3411,"slug":3412,"identity":3413,"label":3414,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3415,"versions":3416,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3418},"package:npm:boolbase","boolbase-23160ca2","npm:boolbase","boolbase",[804],[3417],"1.0.0",[95,104],{"id":3420,"slug":3421,"identity":3422,"label":3423,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3424,"versions":3425,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3426},"package:npm:braces","braces-16233bc9","npm:braces","braces",[620],[710],[95,104],{"id":3428,"slug":3429,"identity":3430,"label":3431,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3432,"versions":3433,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3435},"package:npm:bundle-name","bundle-name-d8e83f6d","npm:bundle-name","bundle-name",[620],[3434],"4.1.0",[95,104],{"id":3437,"slug":3438,"identity":3439,"label":3440,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3441,"versions":3442,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3443},"package:npm:bytes","bytes-8a22cc41","npm:bytes","bytes",[620],[1695],[95,104],{"id":3445,"slug":3446,"identity":3447,"label":3448,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3449,"versions":3450,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3451},"package:npm:cacheable","cacheable-0089dd05","npm:cacheable","cacheable",[620],[1465],[95],{"id":3453,"slug":3454,"identity":3455,"label":3456,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3457,"versions":3458,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3460},"package:npm:call-bind-apply-helpers","call-bind-apply-helpers-78957419","npm:call-bind-apply-helpers","call-bind-apply-helpers",[620],[3459],"1.0.2",[95,104],{"id":3462,"slug":3463,"identity":3464,"label":3465,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3466,"versions":3467,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3469},"package:npm:call-bound","call-bound-9572ae3f","npm:call-bound","call-bound",[620],[3468],"1.0.4",[95,104],{"id":3471,"slug":3472,"identity":3473,"label":3474,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3475,"versions":3476,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3478},"package:npm:callsites","callsites-3381460c","npm:callsites","callsites",[620],[3477],"3.1.0",[95,104],{"id":3480,"slug":3481,"identity":3482,"label":3483,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3484,"versions":3486,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3488},"package:npm:caniuse-lite","caniuse-lite-e06ab132","npm:caniuse-lite","caniuse-lite",[3485],"CC-BY-4.0",[3487],"1.0.30001810",[95,104],{"id":3490,"slug":3491,"identity":3492,"label":3493,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3494,"versions":3495,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3496},"package:npm:ccount","ccount-1701465a","npm:ccount","ccount",[620],[3241],[95,104],{"id":3498,"slug":3499,"identity":3500,"label":3501,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3502,"versions":3504,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3506},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[620,3503],"MIT-0",[3505],"2.1.1",[104,56],{"id":3508,"slug":3509,"identity":3510,"label":3511,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3512,"versions":3513,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3515},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[620],[3514],"3.5.0",[56],{"id":3517,"slug":3518,"identity":3519,"label":3520,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3521,"versions":3522,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3524},"package:npm:chalk","chalk-8df0bdaf","npm:chalk","chalk",[620],[3523],"5.6.2",[95,104],{"id":3526,"slug":3527,"identity":3528,"label":3529,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3530,"versions":3531,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3532},"package:npm:character-entities","character-entities-fadf7f03","npm:character-entities","character-entities",[620],[3364],[95,104],{"id":3534,"slug":3535,"identity":3536,"label":3537,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3538,"versions":3539,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3540},"package:npm:character-entities-html4","character-entities-html4-979c8601","npm:character-entities-html4","character-entities-html4",[620],[2901],[95,104],{"id":3542,"slug":3543,"identity":3544,"label":3545,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3546,"versions":3547,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3549},"package:npm:character-entities-legacy","character-entities-legacy-72cfb89e","npm:character-entities-legacy","character-entities-legacy",[620],[3548],"3.0.0",[95,104],{"id":3551,"slug":3552,"identity":3553,"label":3554,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3555,"versions":3556,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3557},"package:npm:character-reference-invalid","character-reference-invalid-791f1a58","npm:character-reference-invalid","character-reference-invalid",[620],[3241],[95,104],{"id":3559,"slug":3560,"identity":3561,"label":3562,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3563,"versions":3564,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3566},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[620],[3565],"3.5.2",[104,56],{"id":3568,"slug":3569,"identity":3570,"label":3571,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3572,"versions":3573,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3574},"package:npm:chokidar","chokidar-52c6aecd","npm:chokidar","chokidar",[620],[3399],[95],{"id":3576,"slug":3577,"identity":3578,"label":3579,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3580,"versions":3581,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":3583},"package:npm:class-variance-authority","class-variance-authority-3a19330f","npm:class-variance-authority","class-variance-authority",[575],[3582],"0.7.1",[95,104],{"id":3585,"slug":3586,"identity":3587,"label":3588,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3589,"versions":3590,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3591},"package:npm:cli-cursor","cli-cursor-c7c50cdb","npm:cli-cursor","cli-cursor",[620],[3399],[95,104],{"id":3593,"slug":3594,"identity":3595,"label":3596,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3597,"versions":3598,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3600},"package:npm:cli-spinners","cli-spinners-df2ee187","npm:cli-spinners","cli-spinners",[620],[3599],"2.9.2",[95,104],{"id":3602,"slug":3603,"identity":3604,"label":3605,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3606,"versions":3607,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3609},"package:pypi:click","click-ef97f731","pypi:click","click",[609,793],[3608],"8.5.0",[104,56],{"id":3611,"slug":3612,"identity":3613,"label":3614,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3615,"versions":3616,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3618},"package:pypi:click-option-group","click-option-group-43453dea","pypi:click-option-group","click-option-group",[609],[3617],"0.5.9",[56],{"id":3620,"slug":3621,"identity":3622,"label":3623,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3624,"versions":3625,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":3626},"package:npm:clsx","clsx-302ac87a","npm:clsx","clsx",[620],[3505],[95,104],{"id":3628,"slug":3629,"identity":3630,"label":3631,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3632,"versions":3633,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":3634},"package:npm:cmdk","cmdk-91729400","npm:cmdk","cmdk",[620],[1731],[95,104],{"id":3636,"slug":3637,"identity":3638,"label":3639,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3640,"versions":3641,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3642},"package:npm:cn","cn-18e9ace0","npm:cn","cn",[620],[1492],[95,104],{"id":3644,"slug":3645,"identity":3646,"label":3647,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3648,"versions":3649,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3651},"package:npm:code-block-writer","code-block-writer-bafd27e7","npm:code-block-writer","code-block-writer",[620],[3650],"13.0.3",[95,104],{"id":3653,"slug":3654,"identity":3655,"label":3656,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3657,"versions":3658,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3660},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[793],[3659],"0.4.6",[56],{"id":3662,"slug":3663,"identity":3664,"label":3665,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3666,"versions":3667,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3668},"package:npm:combined-stream","combined-stream-b0356c50","npm:combined-stream","combined-stream",[620],[2857],[95,104],{"id":3670,"slug":3671,"identity":3672,"label":3673,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3674,"versions":3675,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3676},"package:npm:comma-separated-tokens","comma-separated-tokens-938b545a","npm:comma-separated-tokens","comma-separated-tokens",[620],[3390],[95,104],{"id":3678,"slug":3679,"identity":3680,"label":3681,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3682,"versions":3683,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":3686},"package:npm:commander","commander-e4ed5c85","npm:commander","commander",[620],[3684,3685],"11.1.0","14.0.3",[95,104],{"id":3688,"slug":3689,"identity":3690,"label":3691,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3692,"versions":3693,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3694},"package:npm:content-disposition","content-disposition-87619660","npm:content-disposition","content-disposition",[620],[2489],[95,104],{"id":3696,"slug":3697,"identity":3698,"label":3699,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3700,"versions":3701,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":3702},"package:npm:content-type","content-type-7fa6e83d","npm:content-type","content-type",[620],[2866,2901],[95,104],{"id":3704,"slug":3705,"identity":3706,"label":3707,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3708,"versions":3709,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3710},"package:npm:convert-source-map","convert-source-map-78f51653","npm:convert-source-map","convert-source-map",[620],[3097],[95,104],{"id":3712,"slug":3713,"identity":3714,"label":3715,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3716,"versions":3717,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3719},"package:npm:cookie","cookie-a2a53f4d","npm:cookie","cookie",[620],[3718],"0.7.2",[95,104],{"id":3721,"slug":3722,"identity":3723,"label":3724,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3725,"versions":3726,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3727},"package:npm:cookie-es","cookie-es-fccb14d2","npm:cookie-es","cookie-es",[620],[2798],[95,104],{"id":3729,"slug":3730,"identity":3731,"label":3732,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3733,"versions":3734,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3735},"package:npm:cookie-signature","cookie-signature-429a9ed6","npm:cookie-signature","cookie-signature",[620],[1180],[95,104],{"id":3737,"slug":3738,"identity":3739,"label":3740,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3741,"versions":3742,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3744},"package:npm:cors","cors-4759e73f","npm:cors","cors",[620],[3743],"2.8.6",[95,104],{"id":3746,"slug":3747,"identity":3748,"label":3749,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3750,"versions":3751,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3753},"package:npm:cosmiconfig","cosmiconfig-75133a25","npm:cosmiconfig","cosmiconfig",[620],[3752],"9.0.1",[95,104],{"id":3755,"slug":3756,"identity":3757,"label":3758,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3759,"versions":3760,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3762},"package:npm:cross-spawn","cross-spawn-11ddd240","npm:cross-spawn","cross-spawn",[620],[3761],"7.0.6",[95,104],{"id":3764,"slug":3765,"identity":3766,"label":3767,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3768,"versions":3769,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3771},"package:npm:css-selector-parser","css-selector-parser-0831c071","npm:css-selector-parser","css-selector-parser",[620],[3770],"3.3.0",[95,104],{"id":3773,"slug":3774,"identity":3775,"label":3776,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3777,"versions":3778,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3779},"package:npm:cssesc","cssesc-1c461bf4","npm:cssesc","cssesc",[620],[3548],[95,104],{"id":3781,"slug":3782,"identity":3783,"label":3784,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3785,"versions":3786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3788},"package:pypi:cssselect2","cssselect2-87d00b2b","pypi:cssselect2","cssselect2",[793],[3787],"0.10.1",[56],{"id":3790,"slug":3791,"identity":3792,"label":3793,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3794,"versions":3795,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3797},"package:npm:csstype","csstype-64cd134e","npm:csstype","csstype",[620],[3796],"3.2.3",[95,104],{"id":3799,"slug":3800,"identity":3801,"label":3802,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3803,"versions":3804,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3806},"package:npm:d3-array","d3-array-d7030bb5","npm:d3-array","d3-array",[609,804],[3805],"3.2.4",[95,104],{"id":3808,"slug":3809,"identity":3810,"label":3811,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3812,"versions":3813,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3814},"package:npm:d3-color","d3-color-1b82248b","npm:d3-color","d3-color",[804],[3477],[95,104],{"id":3816,"slug":3817,"identity":3818,"label":3819,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3820,"versions":3821,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3822},"package:npm:d3-ease","d3-ease-325f140b","npm:d3-ease","d3-ease",[609],[3188],[95,104],{"id":3824,"slug":3825,"identity":3826,"label":3827,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3828,"versions":3829,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3830},"package:npm:d3-format","d3-format-6da42c7c","npm:d3-format","d3-format",[804],[1695],[95,104],{"id":3832,"slug":3833,"identity":3834,"label":3835,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3836,"versions":3837,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3838},"package:npm:d3-interpolate","d3-interpolate-0a6d9932","npm:d3-interpolate","d3-interpolate",[804],[3188],[95,104],{"id":3840,"slug":3841,"identity":3842,"label":3843,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3844,"versions":3845,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3846},"package:npm:d3-path","d3-path-0f72af98","npm:d3-path","d3-path",[609,804],[3477],[95,104],{"id":3848,"slug":3849,"identity":3850,"label":3851,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3852,"versions":3853,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3854},"package:npm:d3-scale","d3-scale-6d449a2e","npm:d3-scale","d3-scale",[804],[2963],[95,104],{"id":3856,"slug":3857,"identity":3858,"label":3859,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3860,"versions":3861,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3863},"package:npm:d3-shape","d3-shape-ce111f69","npm:d3-shape","d3-shape",[609,804],[3862],"3.2.0",[95,104],{"id":3865,"slug":3866,"identity":3867,"label":3868,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3869,"versions":3870,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3871},"package:npm:d3-time","d3-time-8374a368","npm:d3-time","d3-time",[804],[3477],[95,104],{"id":3873,"slug":3874,"identity":3875,"label":3876,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3877,"versions":3878,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3879},"package:npm:d3-time-format","d3-time-format-57557ec1","npm:d3-time-format","d3-time-format",[804],[3434],[95,104],{"id":3881,"slug":3882,"identity":3883,"label":3884,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3885,"versions":3886,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3887},"package:npm:d3-timer","d3-timer-2e634c1e","npm:d3-timer","d3-timer",[804],[3188],[95,104],{"id":3889,"slug":3890,"identity":3891,"label":3892,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3893,"versions":3894,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":3895},"package:npm:date-fns","date-fns-b797eff3","npm:date-fns","date-fns",[620],[3231],[95,104],{"id":3897,"slug":3898,"identity":3899,"label":3900,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3901,"versions":3902,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3904},"package:npm:debug","debug-e3b3b23f","npm:debug","debug",[620],[3903],"4.4.3",[95,104],{"id":3906,"slug":3907,"identity":3908,"label":3909,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3910,"versions":3911,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3913},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[620],[3912],"1.8.22",[56],{"id":3915,"slug":3916,"identity":3917,"label":3918,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3919,"versions":3920,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3922},"package:npm:decimal.js-light","decimal-js-light-bca5bfff","npm:decimal.js-light","decimal.js-light",[620],[3921],"2.5.1",[95,104],{"id":3924,"slug":3925,"identity":3926,"label":3927,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3928,"versions":3929,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3930},"package:npm:decode-named-character-reference","decode-named-character-reference-d0c309dc","npm:decode-named-character-reference","decode-named-character-reference",[620],[1758],[95,104],{"id":3932,"slug":3933,"identity":3934,"label":3935,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3936,"versions":3937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3939},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[1151,793],[3938],"5.3.1",[56],{"id":3941,"slug":3942,"identity":3943,"label":3944,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3945,"versions":3946,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3948},"package:npm:dedent","dedent-30f4112e","npm:dedent","dedent",[620],[3947],"1.7.2",[95,104],{"id":3950,"slug":3951,"identity":3952,"label":3953,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3954,"versions":3955,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3957},"package:npm:deep-is","deep-is-0ee8b226","npm:deep-is","deep-is",[620],[3956],"0.1.4",[95],{"id":3959,"slug":3960,"identity":3961,"label":3962,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3963,"versions":3964,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3966},"package:npm:default-browser","default-browser-7bc285c6","npm:default-browser","default-browser",[620],[3965],"5.5.0",[95,104],{"id":3968,"slug":3969,"identity":3970,"label":3971,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3972,"versions":3973,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3975},"package:npm:default-browser-id","default-browser-id-1306286c","npm:default-browser-id","default-browser-id",[620],[3974],"5.0.1",[95,104],{"id":3977,"slug":3978,"identity":3979,"label":3980,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3981,"versions":3982,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3983},"package:npm:define-lazy-prop","define-lazy-prop-370561b8","npm:define-lazy-prop","define-lazy-prop",[620],[3548],[95,104],{"id":3985,"slug":3986,"identity":3987,"label":3988,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3989,"versions":3990,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3991},"package:npm:delayed-stream","delayed-stream-b1ee7639","npm:delayed-stream","delayed-stream",[620],[3417],[95,104],{"id":3993,"slug":3994,"identity":3995,"label":3996,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3997,"versions":3998,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":3999},"package:npm:depd","depd-8c68abf1","npm:depd","depd",[620],[3097],[95,104],{"id":4001,"slug":4002,"identity":4003,"label":4004,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4005,"versions":4006,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4007},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[620],[1722],[104,56],{"id":4009,"slug":4010,"identity":4011,"label":4012,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4013,"versions":4014,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4015},"package:npm:dequal","dequal-7b882b20","npm:dequal","dequal",[620],[3390],[95,104],{"id":4017,"slug":4018,"identity":4019,"label":4020,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4021,"versions":4022,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4024},"package:npm:detect-libc","detect-libc-b4be90cb","npm:detect-libc","detect-libc",[575],[4023],"2.1.2",[95,104],{"id":4026,"slug":4027,"identity":4028,"label":4029,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4030,"versions":4031,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4032},"package:npm:detect-node-es","detect-node-es-2d46ab7b","npm:detect-node-es","detect-node-es",[620],[2489],[95,104],{"id":4034,"slug":4035,"identity":4036,"label":4037,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4038,"versions":4039,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4040},"package:npm:devlop","devlop-b37fc7f6","npm:devlop","devlop",[620],[2489],[95,104],{"id":4042,"slug":4043,"identity":4044,"label":4045,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4046,"versions":4047,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4048},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[609],[2471],[56],{"id":4050,"slug":4051,"identity":4052,"label":4053,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4054,"versions":4055,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4056},"package:npm:direction","direction-5463ec66","npm:direction","direction",[620],[3241],[95,104],{"id":4058,"slug":4059,"identity":4060,"label":4061,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4062,"versions":4063,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4065},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[3141],[4064],"0.4.4",[56],{"id":4067,"slug":4068,"identity":4069,"label":4070,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4071,"versions":4072,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4073},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[575],[719],[104,56],{"id":4075,"slug":4076,"identity":4077,"label":4078,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4079,"versions":4080,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4082},"package:pypi:docopt","docopt-a034efe2","pypi:docopt","docopt",[620],[4081],"0.6.2",[56],{"id":4084,"slug":4085,"identity":4086,"label":4087,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4088,"versions":4089,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4091},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[620],[4090],"0.18.0",[104,56],{"id":4093,"slug":4094,"identity":4095,"label":4096,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4097,"versions":4098,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4100},"package:npm:dotenv","dotenv-230bc017","npm:dotenv","dotenv",[1151],[4099],"17.4.2",[95,104],{"id":4102,"slug":4103,"identity":4104,"label":4096,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4105,"versions":4106,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":4108},"package:pypi:dotenv","dotenv-c49c342b","pypi:dotenv",[620],[4107],"0.9.9",[104,56],{"id":4110,"slug":4111,"identity":4112,"label":4113,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4114,"versions":4115,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4116},"package:pypi:dotty-dict","dotty-dict-33e68274","pypi:dotty-dict","dotty-dict",[620],[1722],[56],{"id":4118,"slug":4119,"identity":4120,"label":4121,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4122,"versions":4123,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4124},"package:npm:dunder-proto","dunder-proto-06a3ed8c","npm:dunder-proto","dunder-proto",[620],[1659],[95,104],{"id":4126,"slug":4127,"identity":4128,"label":4129,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4130,"versions":4131,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4133},"package:npm:eciesjs","eciesjs-5462e624","npm:eciesjs","eciesjs",[620],[4132],"0.4.18",[95,104],{"id":4135,"slug":4136,"identity":4137,"label":4138,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4139,"versions":4140,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4141},"package:npm:ee-first","ee-first-53b9047e","npm:ee-first","ee-first",[620],[1731],[95,104],{"id":4143,"slug":4144,"identity":4145,"label":4146,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4147,"versions":4148,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4150},"package:npm:electron-to-chromium","electron-to-chromium-375b132f","npm:electron-to-chromium","electron-to-chromium",[804],[4149],"1.5.433",[95,104],{"id":4152,"slug":4153,"identity":4154,"label":4155,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4156,"versions":4157,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4159},"package:npm:embla-carousel","embla-carousel-2aafeebe","npm:embla-carousel","embla-carousel",[620],[4158],"8.6.0",[95,104],{"id":4161,"slug":4162,"identity":4163,"label":4164,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4165,"versions":4166,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":4167},"package:npm:embla-carousel-react","embla-carousel-react-836fc6dc","npm:embla-carousel-react","embla-carousel-react",[620],[4158],[95,104],{"id":4169,"slug":4170,"identity":4171,"label":4172,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4173,"versions":4174,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4175},"package:npm:embla-carousel-reactive-utils","embla-carousel-reactive-utils-bfd4d795","npm:embla-carousel-reactive-utils","embla-carousel-reactive-utils",[620],[4158],[95,104],{"id":4177,"slug":4178,"identity":4179,"label":4180,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4181,"versions":4182,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4184},"package:npm:emoji-regex","emoji-regex-8e51d994","npm:emoji-regex","emoji-regex",[620],[4183],"10.6.0",[95,104],{"id":4186,"slug":4187,"identity":4188,"label":4189,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4190,"versions":4191,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4192},"package:npm:encodeurl","encodeurl-7def4e10","npm:encodeurl","encodeurl",[620],[3097],[95,104],{"id":4194,"slug":4195,"identity":4196,"label":4197,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4198,"versions":4199,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4201},"package:npm:enhanced-resolve","enhanced-resolve-3bd00f72","npm:enhanced-resolve","enhanced-resolve",[620],[4200],"5.25.1",[95,104],{"id":4203,"slug":4204,"identity":4205,"label":4206,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4207,"versions":4208,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4210},"package:npm:entities","entities-dadc420c","npm:entities","entities",[1151],[4209],"6.0.1",[95,104],{"id":4212,"slug":4213,"identity":4214,"label":4215,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4216,"versions":4217,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4219},"package:npm:env-paths","env-paths-2a051888","npm:env-paths","env-paths",[620],[4218],"2.2.1",[95,104],{"id":4221,"slug":4222,"identity":4223,"label":4224,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4225,"versions":4226,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4228},"package:npm:error-ex","error-ex-ab587189","npm:error-ex","error-ex",[620],[4227],"1.3.4",[95,104],{"id":4230,"slug":4231,"identity":4232,"label":4233,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4234,"versions":4235,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4236},"package:npm:es-define-property","es-define-property-47323fb6","npm:es-define-property","es-define-property",[620],[1659],[95,104],{"id":4238,"slug":4239,"identity":4240,"label":4241,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4242,"versions":4243,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4244},"package:npm:es-errors","es-errors-ef18b576","npm:es-errors","es-errors",[620],[1758],[95,104],{"id":4246,"slug":4247,"identity":4248,"label":4249,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4250,"versions":4251,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4252},"package:npm:es-object-atoms","es-object-atoms-c0d03b04","npm:es-object-atoms","es-object-atoms",[620],[1731],[95,104],{"id":4254,"slug":4255,"identity":4256,"label":4257,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4258,"versions":4259,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4260},"package:npm:es-set-tostringtag","es-set-tostringtag-10bc0ea9","npm:es-set-tostringtag","es-set-tostringtag",[620],[2901],[95,104],{"id":4262,"slug":4263,"identity":4264,"label":4265,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4266,"versions":4267,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4269},"package:npm:es-toolkit","es-toolkit-4d2306f5","npm:es-toolkit","es-toolkit",[620],[4268],"1.46.0",[95,104],{"id":4271,"slug":4272,"identity":4273,"label":4274,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4275,"versions":4276,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4277},"package:npm:escalade","escalade-6fb20cfb","npm:escalade","escalade",[620],[3862],[95,104],{"id":4279,"slug":4280,"identity":4281,"label":4282,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4283,"versions":4284,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4286},"package:npm:escape-html","escape-html-fb926c89","npm:escape-html","escape-html",[620],[4285],"1.0.3",[95,104],{"id":4288,"slug":4289,"identity":4290,"label":4291,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4292,"versions":4293,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":4294},"package:npm:escape-string-regexp","escape-string-regexp-48b4cb67","npm:escape-string-regexp","escape-string-regexp",[620],[2480,3399],[95,104],{"id":4296,"slug":4297,"identity":4298,"label":4299,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4300,"versions":4301,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4303},"package:npm:eslint","eslint-421604c9","npm:eslint","eslint",[620],[4302],"10.11.0",[95],{"id":4305,"slug":4306,"identity":4307,"label":4308,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4309,"versions":4310,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4312},"package:npm:eslint-plugin-react-hooks","eslint-plugin-react-hooks-14270148","npm:eslint-plugin-react-hooks","eslint-plugin-react-hooks",[620],[4311],"7.1.1",[95],{"id":4314,"slug":4315,"identity":4316,"label":4317,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4318,"versions":4319,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4321},"package:npm:eslint-plugin-react-refresh","eslint-plugin-react-refresh-be6657b2","npm:eslint-plugin-react-refresh","eslint-plugin-react-refresh",[620],[4320],"0.5.7",[95],{"id":4323,"slug":4324,"identity":4325,"label":4326,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4327,"versions":4328,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4330},"package:npm:eslint-scope","eslint-scope-e94b244d","npm:eslint-scope","eslint-scope",[1151],[4329],"9.1.2",[95],{"id":4332,"slug":4333,"identity":4334,"label":4335,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4336,"versions":4337,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4339},"package:npm:eslint-visitor-keys","eslint-visitor-keys-32b1188a","npm:eslint-visitor-keys","eslint-visitor-keys",[575],[4338,3974],"3.4.3",[95],{"id":4341,"slug":4342,"identity":4343,"label":4344,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4345,"versions":4346,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4348},"package:npm:espree","espree-00afe3f4","npm:espree","espree",[1151],[4347],"11.2.0",[95],{"id":4350,"slug":4351,"identity":4352,"label":4353,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4354,"versions":4355,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4357},"package:npm:esprima","esprima-33701895","npm:esprima","esprima",[1151],[4356],"4.0.1",[95,104],{"id":4359,"slug":4360,"identity":4361,"label":4362,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4363,"versions":4364,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4366},"package:npm:esquery","esquery-c9ae3aa0","npm:esquery","esquery",[609],[4365],"1.7.0",[95],{"id":4368,"slug":4369,"identity":4370,"label":4371,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4372,"versions":4373,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4375},"package:npm:esrecurse","esrecurse-4abfbbe8","npm:esrecurse","esrecurse",[1151],[4374],"4.3.0",[95],{"id":4377,"slug":4378,"identity":4379,"label":4380,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4381,"versions":4382,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4383},"package:npm:estraverse","estraverse-042e57d4","npm:estraverse","estraverse",[1151],[1632],[95],{"id":4385,"slug":4386,"identity":4387,"label":4388,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4389,"versions":4390,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4391},"package:npm:estree-util-is-identifier-name","estree-util-is-identifier-name-16401954","npm:estree-util-is-identifier-name","estree-util-is-identifier-name",[620],[3548],[95,104],{"id":4393,"slug":4394,"identity":4395,"label":4396,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4397,"versions":4398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4399},"package:npm:esutils","esutils-333daa20","npm:esutils","esutils",[1151],[3390],[95],{"id":4401,"slug":4402,"identity":4403,"label":4404,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4405,"versions":4406,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4408},"package:npm:etag","etag-5bf82a9a","npm:etag","etag",[620],[4407],"1.8.1",[95,104],{"id":4410,"slug":4411,"identity":4412,"label":4413,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4414,"versions":4415,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4417},"package:npm:eventemitter3","eventemitter3-dd086b94","npm:eventemitter3","eventemitter3",[620],[4416],"5.0.4",[95,104],{"id":4419,"slug":4420,"identity":4421,"label":4422,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4423,"versions":4424,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4426},"package:npm:eventsource","eventsource-b1d9e25a","npm:eventsource","eventsource",[620],[4425],"3.0.7",[95,104],{"id":4428,"slug":4429,"identity":4430,"label":4431,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4432,"versions":4433,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4435},"package:npm:eventsource-parser","eventsource-parser-1bfc59a5","npm:eventsource-parser","eventsource-parser",[620],[4434],"3.0.8",[95,104],{"id":4437,"slug":4438,"identity":4439,"label":4440,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4441,"versions":4442,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":4445},"package:npm:execa","execa-1234354e","npm:execa","execa",[620],[4443,4444],"5.1.1","9.6.1",[95,104],{"id":4447,"slug":4448,"identity":4449,"label":4450,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4451,"versions":4452,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4453},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[620],[888],[56],{"id":4455,"slug":4456,"identity":4457,"label":4458,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4459,"versions":4460,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4461},"package:npm:express","express-1db97c49","npm:express","express",[620],[3062],[95,104],{"id":4463,"slug":4464,"identity":4465,"label":4466,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4467,"versions":4468,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4470},"package:npm:express-rate-limit","express-rate-limit-d59e1958","npm:express-rate-limit","express-rate-limit",[620],[4469],"8.5.2",[95,104],{"id":4472,"slug":4473,"identity":4474,"label":4475,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4476,"versions":4477,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4478},"package:npm:extend","extend-a49ffc1d","npm:extend","extend",[620],[2780],[95,104],{"id":4480,"slug":4481,"identity":4482,"label":4483,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4484,"versions":4485,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4486},"package:npm:fast-deep-equal","fast-deep-equal-9efeb437","npm:fast-deep-equal","fast-deep-equal",[620],[2771],[95,104],{"id":4488,"slug":4489,"identity":4490,"label":4491,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4492,"versions":4493,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4495},"package:npm:fast-glob","fast-glob-252e51fb","npm:fast-glob","fast-glob",[620],[4494],"3.3.3",[95,104],{"id":4497,"slug":4498,"identity":4499,"label":4500,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4501,"versions":4502,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4503},"package:npm:fast-json-stable-stringify","fast-json-stable-stringify-178e5c18","npm:fast-json-stable-stringify","fast-json-stable-stringify",[620],[2901],[95],{"id":4505,"slug":4506,"identity":4507,"label":4508,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4509,"versions":4510,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4512},"package:npm:fast-levenshtein","fast-levenshtein-08886bf2","npm:fast-levenshtein","fast-levenshtein",[620],[4511],"2.0.6",[95],{"id":4514,"slug":4515,"identity":4516,"label":4517,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4518,"versions":4519,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":4521},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[620],[4520],"0.141.1",[104,56],{"id":4523,"slug":4524,"identity":4525,"label":4526,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4527,"versions":4528,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4530},"package:npm:fastq","fastq-cc3d7764","npm:fastq","fastq",[804],[4529],"1.20.1",[95,104],{"id":4532,"slug":4533,"identity":4534,"label":4535,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4536,"versions":4537,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4539},"package:npm:fdir","fdir-d78fecd4","npm:fdir","fdir",[620],[4538],"6.5.0",[95,104],{"id":4541,"slug":4542,"identity":4543,"label":4544,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4545,"versions":4546,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4548},"package:npm:figures","figures-d69096f0","npm:figures","figures",[620],[4547],"6.1.0",[95,104],{"id":4550,"slug":4551,"identity":4552,"label":4553,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4554,"versions":4555,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4557},"package:npm:file-entry-cache","file-entry-cache-126c69d4","npm:file-entry-cache","file-entry-cache",[620],[4556],"11.1.5",[95],{"id":4559,"slug":4560,"identity":4561,"label":4562,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4563,"versions":4564,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4565},"package:npm:fill-range","fill-range-2ea43335","npm:fill-range","fill-range",[620],[4311],[95,104],{"id":4567,"slug":4568,"identity":4569,"label":4570,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4571,"versions":4572,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4573},"package:npm:finalhandler","finalhandler-7a4e31f4","npm:finalhandler","finalhandler",[620],[3505],[95,104],{"id":4575,"slug":4576,"identity":4577,"label":4578,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4579,"versions":4580,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4581},"package:npm:find-up","find-up-bf684d3a","npm:find-up","find-up",[620],[3399],[95],{"id":4583,"slug":4584,"identity":4585,"label":4586,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4587,"versions":4588,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4590},"package:npm:flat-cache","flat-cache-b7f57c59","npm:flat-cache","flat-cache",[620],[4589],"6.1.23",[95],{"id":4592,"slug":4593,"identity":4594,"label":4595,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4596,"versions":4597,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4599},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[575],[4598],"25.12.19",[104,56],{"id":4601,"slug":4602,"identity":4603,"label":4604,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4605,"versions":4606,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4608},"package:npm:forwarded","forwarded-752269ca","npm:forwarded","forwarded",[620],[4607],"0.2.0",[95,104],{"id":4610,"slug":4611,"identity":4612,"label":4613,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4614,"versions":4615,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4616},"package:npm:fresh","fresh-eb605422","npm:fresh","fresh",[620],[3097],[95,104],{"id":4618,"slug":4619,"identity":4620,"label":4621,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4622,"versions":4623,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4624},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[575],[1438],[104,56],{"id":4626,"slug":4627,"identity":4628,"label":4629,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4630,"versions":4631,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4633},"package:npm:fs-extra","fs-extra-d5f614b1","npm:fs-extra","fs-extra",[620],[4632],"11.3.4",[95,104],{"id":4635,"slug":4636,"identity":4637,"label":4638,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4639,"versions":4640,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4642},"package:npm:fsevents","fsevents-f43d69ec","npm:fsevents","fsevents",[620],[4641],"2.3.3",[95,104],{"id":4644,"slug":4645,"identity":4646,"label":4647,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4648,"versions":4649,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4651},"package:npm:function-bind","function-bind-45751970","npm:function-bind","function-bind",[620],[4650],"1.1.2",[95,104],{"id":4653,"slug":4654,"identity":4655,"label":4656,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4657,"versions":4658,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4659},"package:npm:fuzzysort","fuzzysort-795a26a9","npm:fuzzysort","fuzzysort",[620],[3477],[95,104],{"id":4661,"slug":4662,"identity":4663,"label":4664,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4665,"versions":4666,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4668},"package:npm:gensync","gensync-102f0859","npm:gensync","gensync",[620],[4667],"1.0.0-beta.2",[95,104],{"id":4670,"slug":4671,"identity":4672,"label":4673,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4674,"versions":4675,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4677},"package:npm:get-east-asian-width","get-east-asian-width-fa28f6a7","npm:get-east-asian-width","get-east-asian-width",[620],[4676],"1.5.0",[95,104],{"id":4679,"slug":4680,"identity":4681,"label":4682,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4683,"versions":4684,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4685},"package:npm:get-intrinsic","get-intrinsic-2b696d7d","npm:get-intrinsic","get-intrinsic",[620],[1758],[95,104],{"id":4687,"slug":4688,"identity":4689,"label":4690,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4691,"versions":4692,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4693},"package:npm:get-nonce","get-nonce-a5be7768","npm:get-nonce","get-nonce",[620],[1659],[95,104],{"id":4695,"slug":4696,"identity":4697,"label":4698,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4699,"versions":4700,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4701},"package:npm:get-own-enumerable-keys","get-own-enumerable-keys-eaae0cb2","npm:get-own-enumerable-keys","get-own-enumerable-keys",[620],[3417],[95,104],{"id":4703,"slug":4704,"identity":4705,"label":4706,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4707,"versions":4708,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4709},"package:npm:get-proto","get-proto-1cc62888","npm:get-proto","get-proto",[620],[1659],[95,104],{"id":4711,"slug":4712,"identity":4713,"label":4714,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4715,"versions":4716,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":4717},"package:npm:get-stream","get-stream-320a5eb9","npm:get-stream","get-stream",[620],[4209,3752],[95,104],{"id":4719,"slug":4720,"identity":4721,"label":4722,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4723,"versions":4724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4725},"package:pypi:ghp-import","ghp-import-17055206","pypi:ghp-import","ghp-import",[575],[2901],[56],{"id":4727,"slug":4728,"identity":4729,"label":4730,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4731,"versions":4732,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4734},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[793],[4733],"4.0.12",[56],{"id":4736,"slug":4737,"identity":4738,"label":4739,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4740,"versions":4741,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4742},"package:npm:github-slugger","github-slugger-71153285","npm:github-slugger","github-slugger",[804],[3097],[95,104],{"id":4744,"slug":4745,"identity":4746,"label":4747,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4748,"versions":4749,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":4751},"package:npm:glob-parent","glob-parent-3d212448","npm:glob-parent","glob-parent",[804],[4750,3124],"5.1.2",[95,104],{"id":4753,"slug":4754,"identity":4755,"label":4756,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4757,"versions":4758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4760},"package:npm:globals","globals-6245888b","npm:globals","globals",[620],[4759],"17.12.0",[95],{"id":4762,"slug":4763,"identity":4764,"label":4765,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4766,"versions":4767,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4769},"package:npm:goober","goober-129a261c","npm:goober","goober",[620],[4768],"2.1.19",[95,104],{"id":4771,"slug":4772,"identity":4773,"label":4774,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4775,"versions":4776,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4778},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[575],[4777],"1.75.5",[104,56],{"id":4780,"slug":4781,"identity":4782,"label":4783,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4784,"versions":4785,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4787},"package:npm:gopd","gopd-3abcb949","npm:gopd","gopd",[620],[4786],"1.2.0",[95,104],{"id":4789,"slug":4790,"identity":4791,"label":4792,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4793,"versions":4794,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4796},"package:npm:graceful-fs","graceful-fs-0b6c8932","npm:graceful-fs","graceful-fs",[804],[4795],"4.2.11",[95,104],{"id":4798,"slug":4799,"identity":4800,"label":4801,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4802,"versions":4805,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4807},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[620,4803,4804],"MIT AND PSF-2.0","MIT AND Python-2.0",[4806],"3.5.6",[104,56],{"id":4809,"slug":4810,"identity":4811,"label":4812,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4813,"versions":4814,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4815},"package:pypi:griffelib","griffelib-750f9275","pypi:griffelib","griffelib",[804],[961],[104,56],{"id":4817,"slug":4818,"identity":4819,"label":4820,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4821,"versions":4822,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4823},"package:npm:has-symbols","has-symbols-4abfccb0","npm:has-symbols","has-symbols",[620],[2489],[95,104],{"id":4825,"slug":4826,"identity":4827,"label":4828,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4829,"versions":4830,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4831},"package:npm:has-tostringtag","has-tostringtag-ca3c086c","npm:has-tostringtag","has-tostringtag",[620],[3459],[95,104],{"id":4833,"slug":4834,"identity":4835,"label":4836,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4837,"versions":4838,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4840},"package:npm:hashery","hashery-699de3fd","npm:hashery","hashery",[620],[4839],"1.5.1",[95],{"id":4842,"slug":4843,"identity":4844,"label":4845,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4846,"versions":4847,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4849},"package:npm:hasown","hasown-c4159556","npm:hasown","hasown",[620],[4848],"2.0.4",[95,104],{"id":4851,"slug":4852,"identity":4853,"label":4854,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4855,"versions":4856,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4857},"package:npm:hast-util-from-html","hast-util-from-html-b7fa7ac7","npm:hast-util-from-html","hast-util-from-html",[620],[3390],[95,104],{"id":4859,"slug":4860,"identity":4861,"label":4862,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4863,"versions":4864,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4866},"package:npm:hast-util-from-parse5","hast-util-from-parse5-4eaf729b","npm:hast-util-from-parse5","hast-util-from-parse5",[620],[4865],"8.0.3",[95,104],{"id":4868,"slug":4869,"identity":4870,"label":4871,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4872,"versions":4873,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4874},"package:npm:hast-util-has-property","hast-util-has-property-78931d31","npm:hast-util-has-property","hast-util-has-property",[620],[3548],[95,104],{"id":4876,"slug":4877,"identity":4878,"label":4879,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4880,"versions":4881,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4882},"package:npm:hast-util-heading-rank","hast-util-heading-rank-e117b11e","npm:hast-util-heading-rank","hast-util-heading-rank",[620],[3548],[95,104],{"id":4884,"slug":4885,"identity":4886,"label":4887,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4888,"versions":4889,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4890},"package:npm:hast-util-is-element","hast-util-is-element-3bc52b2c","npm:hast-util-is-element","hast-util-is-element",[620],[3548],[95,104],{"id":4892,"slug":4893,"identity":4894,"label":4895,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4896,"versions":4897,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4898},"package:npm:hast-util-parse-selector","hast-util-parse-selector-e8996606","npm:hast-util-parse-selector","hast-util-parse-selector",[620],[2480],[95,104],{"id":4900,"slug":4901,"identity":4902,"label":4903,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4904,"versions":4905,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4907},"package:npm:hast-util-raw","hast-util-raw-c7946ecc","npm:hast-util-raw","hast-util-raw",[620],[4906],"9.1.0",[95,104],{"id":4909,"slug":4910,"identity":4911,"label":4912,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4913,"versions":4914,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4916},"package:npm:hast-util-select","hast-util-select-463d3ede","npm:hast-util-select","hast-util-select",[620],[4915],"6.0.4",[95,104],{"id":4918,"slug":4919,"identity":4920,"label":4921,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4922,"versions":4923,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4925},"package:npm:hast-util-to-html","hast-util-to-html-f4ac12ec","npm:hast-util-to-html","hast-util-to-html",[620],[4924],"9.0.5",[95,104],{"id":4927,"slug":4928,"identity":4929,"label":4930,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4931,"versions":4932,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4934},"package:npm:hast-util-to-jsx-runtime","hast-util-to-jsx-runtime-7e0c3661","npm:hast-util-to-jsx-runtime","hast-util-to-jsx-runtime",[620],[4933],"2.3.6",[95,104],{"id":4936,"slug":4937,"identity":4938,"label":4939,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4940,"versions":4941,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4943},"package:npm:hast-util-to-parse5","hast-util-to-parse5-89ad8f13","npm:hast-util-to-parse5","hast-util-to-parse5",[620],[4942],"8.0.1",[95,104],{"id":4945,"slug":4946,"identity":4947,"label":4948,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4949,"versions":4950,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4951},"package:npm:hast-util-to-string","hast-util-to-string-936c8d7e","npm:hast-util-to-string","hast-util-to-string",[620],[3188],[95,104],{"id":4953,"slug":4954,"identity":4955,"label":4956,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4957,"versions":4958,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4959},"package:npm:hast-util-whitespace","hast-util-whitespace-8daf8cab","npm:hast-util-whitespace","hast-util-whitespace",[620],[3548],[95,104],{"id":4961,"slug":4962,"identity":4963,"label":4964,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4965,"versions":4966,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4967},"package:npm:hastscript","hastscript-3c8216dc","npm:hastscript","hastscript",[620],[3752],[95,104],{"id":4969,"slug":4970,"identity":4971,"label":4972,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4973,"versions":4974,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4976},"package:npm:hermes-estree","hermes-estree-aea47267","npm:hermes-estree","hermes-estree",[620],[4975],"0.25.1",[95],{"id":4978,"slug":4979,"identity":4980,"label":4981,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4982,"versions":4983,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4984},"package:npm:hermes-parser","hermes-parser-e7c3b0a8","npm:hermes-parser","hermes-parser",[620],[4975],[95],{"id":4986,"slug":4987,"identity":4988,"label":4989,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4990,"versions":4991,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":4993},"package:npm:hookified","hookified-81aa52fa","npm:hookified","hookified",[620],[4992,1456],"1.15.1",[95],{"id":4995,"slug":4996,"identity":4997,"label":4998,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":4999,"versions":5000,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5001},"package:npm:html-url-attributes","html-url-attributes-f6365024","npm:html-url-attributes","html-url-attributes",[620],[3188],[95,104],{"id":5003,"slug":5004,"identity":5005,"label":5006,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5007,"versions":5008,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5009},"package:npm:html-void-elements","html-void-elements-fe14cfa5","npm:html-void-elements","html-void-elements",[620],[3548],[95,104],{"id":5011,"slug":5012,"identity":5013,"label":5014,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5015,"versions":5016,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5017},"package:npm:http-errors","http-errors-a224027f","npm:http-errors","http-errors",[620],[3241],[95,104],{"id":5019,"slug":5020,"identity":5021,"label":5022,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5023,"versions":5024,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5026},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[609],[5025],"1.0.9",[104,56],{"id":5028,"slug":5029,"identity":5030,"label":5031,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5032,"versions":5033,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5034},"package:npm:https-proxy-agent","https-proxy-agent-0ae16386","npm:https-proxy-agent","https-proxy-agent",[620],[3974],[95,104],{"id":5036,"slug":5037,"identity":5038,"label":5039,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5040,"versions":5041,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5043},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[620],[5042],"0.9.0",[104,56],{"id":5045,"slug":5046,"identity":5047,"label":5048,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5049,"versions":5050,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":5052},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[609],[5051],"0.28.1",[104,56],{"id":5054,"slug":5055,"identity":5056,"label":5057,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5058,"versions":5059,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5060},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[620],[1668],[104,56],{"id":5062,"slug":5063,"identity":5064,"label":5065,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5066,"versions":5067,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5068},"package:npm:human-signals","human-signals-f5f4f158","npm:human-signals","human-signals",[575],[2901,4942],[95,104],{"id":5070,"slug":5071,"identity":5072,"label":5073,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5074,"versions":5075,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5076},"package:pypi:hyperframe","hyperframe-e8ff0952","pypi:hyperframe","hyperframe",[620],[4547],[104,56],{"id":5078,"slug":5079,"identity":5080,"label":5081,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5082,"versions":5083,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5084},"package:npm:iconv-lite","iconv-lite-cfec4972","npm:iconv-lite","iconv-lite",[620],[3718],[95,104],{"id":5086,"slug":5087,"identity":5088,"label":5089,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5090,"versions":5091,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5093},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[620],[5092],"2.6.20",[56],{"id":5095,"slug":5096,"identity":5097,"label":5098,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5099,"versions":5100,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":5102},"package:npm:ignore","ignore-3015b1fc","npm:ignore","ignore",[620],[3115,5101],"7.0.9",[95,104],{"id":5104,"slug":5105,"identity":5106,"label":5107,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5108,"versions":5109,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5111},"package:npm:immer","immer-55532025","npm:immer","immer",[620],[5110],"11.1.18",[95,104],{"id":5113,"slug":5114,"identity":5115,"label":5116,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5117,"versions":5118,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5120},"package:npm:import-fresh","import-fresh-66023a8c","npm:import-fresh","import-fresh",[620],[5119],"3.3.1",[95,104],{"id":5122,"slug":5123,"identity":5124,"label":5125,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5126,"versions":5127,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5128},"package:npm:imurmurhash","imurmurhash-24981ac0","npm:imurmurhash","imurmurhash",[620],[3956],[95],{"id":5130,"slug":5131,"identity":5132,"label":5133,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5134,"versions":5135,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5136},"package:npm:inherits","inherits-bef218e5","npm:inherits","inherits",[804],[4848],[95,104],{"id":5138,"slug":5139,"identity":5140,"label":5141,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5142,"versions":5143,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5145},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[620],[5144],"2.3.1",[56],{"id":5147,"slug":5148,"identity":5149,"label":5150,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5151,"versions":5152,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5154},"package:npm:inline-style-parser","inline-style-parser-1aeed0d8","npm:inline-style-parser","inline-style-parser",[620],[5153],"0.2.7",[95,104],{"id":5156,"slug":5157,"identity":5158,"label":5159,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5160,"versions":5161,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":5162},"package:npm:input-otp","input-otp-b2c180c5","npm:input-otp","input-otp",[620],[4676],[95,104],{"id":5164,"slug":5165,"identity":5166,"label":5167,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5168,"versions":5169,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5170},"package:npm:internmap","internmap-00fa1d76","npm:internmap","internmap",[804],[3390],[95,104],{"id":5172,"slug":5173,"identity":5174,"label":5175,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5176,"versions":5177,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5179},"package:npm:ipaddr.js","ipaddr-js-20a3bae6","npm:ipaddr.js","ipaddr.js",[620],[5178],"1.9.1",[95,104],{"id":5181,"slug":5182,"identity":5183,"label":5184,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5185,"versions":5186,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5188},"package:pypi:ipdb","ipdb-fbd53910","pypi:ipdb","ipdb",[609],[5187],"0.13.13",[56],{"id":5190,"slug":5191,"identity":5192,"label":5193,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5194,"versions":5195,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5197},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[609],[5196],"9.17.1",[56],{"id":5199,"slug":5200,"identity":5201,"label":5202,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5203,"versions":5204,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5205},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[793],[1731],[56],{"id":5207,"slug":5208,"identity":5209,"label":5210,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5211,"versions":5212,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5213},"package:npm:is-alphabetical","is-alphabetical-796b345e","npm:is-alphabetical","is-alphabetical",[620],[3241],[95,104],{"id":5215,"slug":5216,"identity":5217,"label":5218,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5219,"versions":5220,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5221},"package:npm:is-alphanumerical","is-alphanumerical-7faaa48c","npm:is-alphanumerical","is-alphanumerical",[620],[3241],[95,104],{"id":5223,"slug":5224,"identity":5225,"label":5226,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5227,"versions":5228,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5230},"package:npm:is-arrayish","is-arrayish-aba830f6","npm:is-arrayish","is-arrayish",[620],[5229],"0.2.1",[95,104],{"id":5232,"slug":5233,"identity":5234,"label":5235,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5236,"versions":5237,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5238},"package:npm:is-decimal","is-decimal-2f11a7f7","npm:is-decimal","is-decimal",[620],[3241],[95,104],{"id":5240,"slug":5241,"identity":5242,"label":5243,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5244,"versions":5245,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5246},"package:npm:is-docker","is-docker-8be7f538","npm:is-docker","is-docker",[620],[3548],[95,104],{"id":5248,"slug":5249,"identity":5250,"label":5251,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5252,"versions":5253,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5254},"package:npm:is-extglob","is-extglob-1afbb12e","npm:is-extglob","is-extglob",[620],[3505],[95,104],{"id":5256,"slug":5257,"identity":5258,"label":5259,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5260,"versions":5261,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5263},"package:npm:is-glob","is-glob-dc8c90d2","npm:is-glob","is-glob",[620],[5262],"4.0.3",[95,104],{"id":5265,"slug":5266,"identity":5267,"label":5268,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5269,"versions":5270,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5271},"package:npm:is-hexadecimal","is-hexadecimal-f99521ce","npm:is-hexadecimal","is-hexadecimal",[620],[3241],[95,104],{"id":5273,"slug":5274,"identity":5275,"label":5276,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5277,"versions":5278,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5279},"package:npm:is-in-ssh","is-in-ssh-f5e90a30","npm:is-in-ssh","is-in-ssh",[620],[3417],[95,104],{"id":5281,"slug":5282,"identity":5283,"label":5284,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5285,"versions":5286,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5287},"package:npm:is-inside-container","is-inside-container-686bd0fe","npm:is-inside-container","is-inside-container",[620],[3417],[95,104],{"id":5289,"slug":5290,"identity":5291,"label":5292,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5293,"versions":5294,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5295},"package:npm:is-interactive","is-interactive-195b706b","npm:is-interactive","is-interactive",[620],[3097],[95,104],{"id":5297,"slug":5298,"identity":5299,"label":5300,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5301,"versions":5302,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5304},"package:npm:is-number","is-number-c0feb6a5","npm:is-number","is-number",[620],[5303],"7.0.0",[95,104],{"id":5306,"slug":5307,"identity":5308,"label":5309,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5310,"versions":5311,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5312},"package:npm:is-obj","is-obj-ef6d3426","npm:is-obj","is-obj",[620],[3548],[95,104],{"id":5314,"slug":5315,"identity":5316,"label":5317,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5318,"versions":5319,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5320},"package:npm:is-plain-obj","is-plain-obj-f8b24205","npm:is-plain-obj","is-plain-obj",[620],[3434],[95,104],{"id":5322,"slug":5323,"identity":5324,"label":5325,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5326,"versions":5327,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5328},"package:npm:is-promise","is-promise-04c84dd0","npm:is-promise","is-promise",[620],[2480],[95,104],{"id":5330,"slug":5331,"identity":5332,"label":5333,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5334,"versions":5335,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5336},"package:npm:is-regexp","is-regexp-2d0c3977","npm:is-regexp","is-regexp",[620],[3477],[95,104],{"id":5338,"slug":5339,"identity":5340,"label":5341,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5342,"versions":5343,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5344},"package:npm:is-stream","is-stream-cebd7dab","npm:is-stream","is-stream",[620],[3241,4356],[95,104],{"id":5346,"slug":5347,"identity":5348,"label":5349,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5350,"versions":5351,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5352},"package:npm:is-unicode-supported","is-unicode-supported-28b534d6","npm:is-unicode-supported","is-unicode-supported",[620],[1758,2901],[95,104],{"id":5354,"slug":5355,"identity":5356,"label":5357,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5358,"versions":5359,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5360},"package:npm:is-wsl","is-wsl-02f7fa6a","npm:is-wsl","is-wsl",[620],[2798],[95,104],{"id":5362,"slug":5363,"identity":5364,"label":5365,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5366,"versions":5367,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5369},"package:npm:isbot","isbot-62434f54","npm:isbot","isbot",[668],[5368],"5.1.39",[95,104],{"id":5371,"slug":5372,"identity":5373,"label":5374,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5375,"versions":5376,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5378},"package:npm:isexe","isexe-47f89bdf","npm:isexe","isexe",[803,804],[3097,5377],"3.1.5",[95,104],{"id":5380,"slug":5381,"identity":5382,"label":5383,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5384,"versions":5385,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5386},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[609],[3718],[104,56],{"id":5388,"slug":5389,"identity":5390,"label":5391,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5392,"versions":5393,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5395},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[620],[5394],"9.0.2",[56],{"id":5397,"slug":5398,"identity":5399,"label":5400,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5401,"versions":5402,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5404},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[620],[5403],"0.20.1",[56],{"id":5406,"slug":5407,"identity":5408,"label":5409,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5410,"versions":5411,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5413},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[620],[5412],"0.17.0",[104,56],{"id":5415,"slug":5416,"identity":5417,"label":5418,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5419,"versions":5420,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5422},"package:npm:jiti","jiti-82df3f95","npm:jiti","jiti",[620],[5421],"2.7.0",[95,104],{"id":5424,"slug":5425,"identity":5426,"label":5427,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5428,"versions":5429,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5431},"package:npm:jose","jose-3db1b283","npm:jose","jose",[620],[5430],"6.2.3",[95,104],{"id":5433,"slug":5434,"identity":5435,"label":5436,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5437,"versions":5438,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5439},"package:npm:js-tokens","js-tokens-8b3f06fa","npm:js-tokens","js-tokens",[620],[2480],[95,104],{"id":5441,"slug":5442,"identity":5443,"label":5444,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5445,"versions":5446,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5447},"package:npm:jsesc","jsesc-96b39045","npm:jsesc","jsesc",[620],[3477],[95,104],{"id":5449,"slug":5450,"identity":5451,"label":5452,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5453,"versions":5454,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5455},"package:npm:json-parse-even-better-errors","json-parse-even-better-errors-49f997fe","npm:json-parse-even-better-errors","json-parse-even-better-errors",[620],[5144],[95,104],{"id":5457,"slug":5458,"identity":5459,"label":5460,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5461,"versions":5462,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":5463},"package:npm:json-schema-traverse","json-schema-traverse-5fe5e658","npm:json-schema-traverse","json-schema-traverse",[620],[2471,3417],[95,104],{"id":5465,"slug":5466,"identity":5467,"label":5468,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5469,"versions":5470,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5472},"package:npm:json-schema-typed","json-schema-typed-e82a9ee2","npm:json-schema-typed","json-schema-typed",[1151],[5471],"8.0.2",[95,104],{"id":5474,"slug":5475,"identity":5476,"label":5477,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5478,"versions":5479,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5480},"package:npm:json-stable-stringify-without-jsonify","json-stable-stringify-without-jsonify-58ac8634","npm:json-stable-stringify-without-jsonify","json-stable-stringify-without-jsonify",[620],[1659],[95],{"id":5482,"slug":5483,"identity":5484,"label":5485,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5486,"versions":5487,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5489},"package:npm:json5","json5-2e47090b","npm:json5","json5",[620],[5488],"2.2.3",[95,104],{"id":5491,"slug":5492,"identity":5493,"label":5494,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5495,"versions":5496,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5498},"package:npm:jsonfile","jsonfile-a7643986","npm:jsonfile","jsonfile",[620],[5497],"6.2.1",[95,104],{"id":5500,"slug":5501,"identity":5502,"label":5503,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5504,"versions":5505,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5507},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[620],[5506],"4.26.0",[104,56],{"id":5509,"slug":5510,"identity":5511,"label":5512,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5513,"versions":5514,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5516},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[620],[5515],"2025.9.1",[104,56],{"id":5518,"slug":5519,"identity":5520,"label":5521,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5522,"versions":5523,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5525},"package:npm:keyv","keyv-f710ed0f","npm:keyv","keyv",[620],[5524],"5.6.0",[95],{"id":5527,"slug":5528,"identity":5529,"label":5530,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5531,"versions":5532,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5534},"package:npm:kleur","kleur-37f67ac0","npm:kleur","kleur",[620],[710,5533],"4.1.5",[95,104],{"id":5536,"slug":5537,"identity":5538,"label":5539,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5540,"versions":5541,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5542},"package:npm:levn","levn-1b7ee804","npm:levn","levn",[620],[2471],[95],{"id":5544,"slug":5545,"identity":5546,"label":5547,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5548,"versions":5549,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5550},"package:pypi:librt","librt-be98c166","pypi:librt","librt",[620],[1062],[56],{"id":5552,"slug":5553,"identity":5554,"label":5555,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5556,"versions":5557,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5559},"package:pypi:libsass","libsass-a516c5c0","pypi:libsass","libsass",[620],[5558],"0.23.0",[56],{"id":5561,"slug":5562,"identity":5563,"label":5564,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5565,"versions":5566,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5569},"package:npm:lightningcss","lightningcss-c58528d1","npm:lightningcss","lightningcss",[914],[5567,5568],"1.32.0","1.33.0",[95,104],{"id":5571,"slug":5572,"identity":5573,"label":5574,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5575,"versions":5576,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5577},"package:npm:lightningcss-android-arm64","lightningcss-android-arm64-9590ce22","npm:lightningcss-android-arm64","lightningcss-android-arm64",[914],[5567,5568],[95,104],{"id":5579,"slug":5580,"identity":5581,"label":5582,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5583,"versions":5584,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5585},"package:npm:lightningcss-darwin-arm64","lightningcss-darwin-arm64-f50d3ffb","npm:lightningcss-darwin-arm64","lightningcss-darwin-arm64",[914],[5567,5568],[95,104],{"id":5587,"slug":5588,"identity":5589,"label":5590,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5591,"versions":5592,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5593},"package:npm:lightningcss-darwin-x64","lightningcss-darwin-x64-d1e6258e","npm:lightningcss-darwin-x64","lightningcss-darwin-x64",[914],[5567,5568],[95,104],{"id":5595,"slug":5596,"identity":5597,"label":5598,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5599,"versions":5600,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5601},"package:npm:lightningcss-freebsd-x64","lightningcss-freebsd-x64-980efbea","npm:lightningcss-freebsd-x64","lightningcss-freebsd-x64",[914],[5567,5568],[95,104],{"id":5603,"slug":5604,"identity":5605,"label":5606,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5607,"versions":5608,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5609},"package:npm:lightningcss-linux-arm-gnueabihf","lightningcss-linux-arm-gnueabihf-fa17a0b9","npm:lightningcss-linux-arm-gnueabihf","lightningcss-linux-arm-gnueabihf",[914],[5567,5568],[95,104],{"id":5611,"slug":5612,"identity":5613,"label":5614,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5615,"versions":5616,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5617},"package:npm:lightningcss-linux-arm64-gnu","lightningcss-linux-arm64-gnu-94e49992","npm:lightningcss-linux-arm64-gnu","lightningcss-linux-arm64-gnu",[914],[5567,5568],[95,104],{"id":5619,"slug":5620,"identity":5621,"label":5622,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5623,"versions":5624,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5625},"package:npm:lightningcss-linux-arm64-musl","lightningcss-linux-arm64-musl-6ab82229","npm:lightningcss-linux-arm64-musl","lightningcss-linux-arm64-musl",[914],[5567,5568],[95,104],{"id":5627,"slug":5628,"identity":5629,"label":5630,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5631,"versions":5632,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5633},"package:npm:lightningcss-linux-x64-gnu","lightningcss-linux-x64-gnu-7ca4fe6b","npm:lightningcss-linux-x64-gnu","lightningcss-linux-x64-gnu",[914],[5567,5568],[95,104],{"id":5635,"slug":5636,"identity":5637,"label":5638,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5639,"versions":5640,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5641},"package:npm:lightningcss-linux-x64-musl","lightningcss-linux-x64-musl-58b7df26","npm:lightningcss-linux-x64-musl","lightningcss-linux-x64-musl",[914],[5567,5568],[95,104],{"id":5643,"slug":5644,"identity":5645,"label":5646,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5647,"versions":5648,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5649},"package:npm:lightningcss-win32-arm64-msvc","lightningcss-win32-arm64-msvc-611f8e1b","npm:lightningcss-win32-arm64-msvc","lightningcss-win32-arm64-msvc",[914],[5567,5568],[95,104],{"id":5651,"slug":5652,"identity":5653,"label":5654,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5655,"versions":5656,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":5657},"package:npm:lightningcss-win32-x64-msvc","lightningcss-win32-x64-msvc-a0bbc0ce","npm:lightningcss-win32-x64-msvc","lightningcss-win32-x64-msvc",[914],[5567,5568],[95,104],{"id":5659,"slug":5660,"identity":5661,"label":5662,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5663,"versions":5664,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5666},"package:pypi:limits","limits-3fbfd900","pypi:limits","limits",[620],[5665],"5.8.0",[104,56],{"id":5668,"slug":5669,"identity":5670,"label":5671,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5672,"versions":5673,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5674},"package:npm:lines-and-columns","lines-and-columns-2a720476","npm:lines-and-columns","lines-and-columns",[620],[1171],[95,104],{"id":5676,"slug":5677,"identity":5678,"label":5679,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5680,"versions":5682,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5684},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[575,1151,5681,793],"BSD-2-Clause AND Apache-2.0 WITH LLVM-exception",[5683],"0.50.0",[104,56],{"id":5686,"slug":5687,"identity":5688,"label":5689,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5690,"versions":5691,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5693},"package:npm:locate-path","locate-path-b0cb3d76","npm:locate-path","locate-path",[620],[5692],"6.0.0",[95],{"id":5695,"slug":5696,"identity":5697,"label":5698,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5699,"versions":5700,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5701},"package:npm:log-symbols","log-symbols-772a44bf","npm:log-symbols","log-symbols",[620],[5692],[95,104],{"id":5703,"slug":5704,"identity":5705,"label":5706,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5707,"versions":5708,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":5709},"package:pypi:loguru","loguru-e43ce3bb","pypi:loguru","loguru",[620],[1588],[104,56],{"id":5711,"slug":5712,"identity":5713,"label":5714,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5715,"versions":5716,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5717},"package:npm:longest-streak","longest-streak-29a5f621","npm:longest-streak","longest-streak",[620],[3477],[95,104],{"id":5719,"slug":5720,"identity":5721,"label":5722,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5723,"versions":5724,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5725},"package:pypi:loudness","loudness-06e89bbf","pypi:loudness","loudness",[620],[4607],[104,56],{"id":5727,"slug":5728,"identity":5729,"label":5730,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5731,"versions":5732,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5733},"package:npm:lru-cache","lru-cache-e88912e8","npm:lru-cache","lru-cache",[803,804],[4443],[95,104],{"id":5735,"slug":5736,"identity":5737,"label":5738,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5739,"versions":5740,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":5742},"package:npm:lucide-react","lucide-react-a154fc81","npm:lucide-react","lucide-react",[804],[5741],"1.48.0",[95,104],{"id":5744,"slug":5745,"identity":5746,"label":5747,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5748,"versions":5749,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5751},"package:npm:magic-string","magic-string-57707138","npm:magic-string","magic-string",[620],[5750],"0.30.21",[95,104],{"id":5753,"slug":5754,"identity":5755,"label":5756,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5757,"versions":5758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5759},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[620],[1071],[56],{"id":5761,"slug":5762,"identity":5763,"label":5764,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5765,"versions":5766,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5767},"package:npm:markdown-table","markdown-table-6bc447bb","npm:markdown-table","markdown-table",[620],[2789],[95,104],{"id":5769,"slug":5770,"identity":5771,"label":5772,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5773,"versions":5774,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5775},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[609],[2789],[104,56],{"id":5777,"slug":5778,"identity":5779,"label":5780,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5781,"versions":5782,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5783},"package:npm:math-intrinsics","math-intrinsics-8ccaf44c","npm:math-intrinsics","math-intrinsics",[620],[2489],[95,104],{"id":5785,"slug":5786,"identity":5787,"label":5788,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5789,"versions":5790,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5791},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[609],[3319],[56],{"id":5793,"slug":5794,"identity":5795,"label":5796,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5797,"versions":5798,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5799},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[620],[1553],[56],{"id":5801,"slug":5802,"identity":5803,"label":5804,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5805,"versions":5806,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5807},"package:npm:mdast-util-find-and-replace","mdast-util-find-and-replace-a446a0eb","npm:mdast-util-find-and-replace","mdast-util-find-and-replace",[620],[2780],[95,104],{"id":5809,"slug":5810,"identity":5811,"label":5812,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5813,"versions":5814,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5815},"package:npm:mdast-util-from-markdown","mdast-util-from-markdown-400c606c","npm:mdast-util-from-markdown","mdast-util-from-markdown",[620],[3390],[95,104],{"id":5817,"slug":5818,"identity":5819,"label":5820,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5821,"versions":5822,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5823},"package:npm:mdast-util-gfm","mdast-util-gfm-091e29c3","npm:mdast-util-gfm","mdast-util-gfm",[620],[3477],[95,104],{"id":5825,"slug":5826,"identity":5827,"label":5828,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5829,"versions":5830,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5831},"package:npm:mdast-util-gfm-autolink-literal","mdast-util-gfm-autolink-literal-48f344f0","npm:mdast-util-gfm-autolink-literal","mdast-util-gfm-autolink-literal",[620],[3241],[95,104],{"id":5833,"slug":5834,"identity":5835,"label":5836,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5837,"versions":5838,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5839},"package:npm:mdast-util-gfm-footnote","mdast-util-gfm-footnote-bd727231","npm:mdast-util-gfm-footnote","mdast-util-gfm-footnote",[620],[2901],[95,104],{"id":5841,"slug":5842,"identity":5843,"label":5844,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5845,"versions":5846,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5847},"package:npm:mdast-util-gfm-strikethrough","mdast-util-gfm-strikethrough-190e64fd","npm:mdast-util-gfm-strikethrough","mdast-util-gfm-strikethrough",[620],[3097],[95,104],{"id":5849,"slug":5850,"identity":5851,"label":5852,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5853,"versions":5854,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5855},"package:npm:mdast-util-gfm-table","mdast-util-gfm-table-a1aad123","npm:mdast-util-gfm-table","mdast-util-gfm-table",[620],[3097],[95,104],{"id":5857,"slug":5858,"identity":5859,"label":5860,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5861,"versions":5862,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5863},"package:npm:mdast-util-gfm-task-list-item","mdast-util-gfm-task-list-item-268dddc7","npm:mdast-util-gfm-task-list-item","mdast-util-gfm-task-list-item",[620],[3097],[95,104],{"id":5865,"slug":5866,"identity":5867,"label":5868,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5869,"versions":5870,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5871},"package:npm:mdast-util-mdx-expression","mdast-util-mdx-expression-561b68a8","npm:mdast-util-mdx-expression","mdast-util-mdx-expression",[620],[3241],[95,104],{"id":5873,"slug":5874,"identity":5875,"label":5876,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5877,"versions":5878,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5879},"package:npm:mdast-util-mdx-jsx","mdast-util-mdx-jsx-904d32a8","npm:mdast-util-mdx-jsx","mdast-util-mdx-jsx",[620],[3862],[95,104],{"id":5881,"slug":5882,"identity":5883,"label":5884,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5885,"versions":5886,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5887},"package:npm:mdast-util-mdxjs-esm","mdast-util-mdxjs-esm-b0facab2","npm:mdast-util-mdxjs-esm","mdast-util-mdxjs-esm",[620],[3241],[95,104],{"id":5889,"slug":5890,"identity":5891,"label":5892,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5893,"versions":5894,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5895},"package:npm:mdast-util-phrasing","mdast-util-phrasing-29a5c68e","npm:mdast-util-phrasing","mdast-util-phrasing",[620],[3434],[95,104],{"id":5897,"slug":5898,"identity":5899,"label":5900,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5901,"versions":5902,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5903},"package:npm:mdast-util-to-markdown","mdast-util-to-markdown-19aea245","npm:mdast-util-to-markdown","mdast-util-to-markdown",[620],[4023],[95,104],{"id":5905,"slug":5906,"identity":5907,"label":5908,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5909,"versions":5910,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5911},"package:npm:mdast-util-to-string","mdast-util-to-string-04f6a9c9","npm:mdast-util-to-string","mdast-util-to-string",[620],[2480],[95,104],{"id":5913,"slug":5914,"identity":5915,"label":5916,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5917,"versions":5918,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5920},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[620],[5919],"0.1.2",[56],{"id":5922,"slug":5923,"identity":5924,"label":5925,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5926,"versions":5927,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5928},"package:npm:media-typer","media-typer-fd5f066e","npm:media-typer","media-typer",[620],[2489],[95,104],{"id":5930,"slug":5931,"identity":5932,"label":5933,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5934,"versions":5935,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5936},"package:npm:merge-descriptors","merge-descriptors-16241c3a","npm:merge-descriptors","merge-descriptors",[620],[3097],[95,104],{"id":5938,"slug":5939,"identity":5940,"label":5941,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5942,"versions":5943,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5944},"package:npm:merge-stream","merge-stream-d0a3d295","npm:merge-stream","merge-stream",[620],[3097],[95,104],{"id":5946,"slug":5947,"identity":5948,"label":5949,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5950,"versions":5951,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5952},"package:npm:merge2","merge2-39f0191e","npm:merge2","merge2",[620],[1474],[95,104],{"id":5954,"slug":5955,"identity":5956,"label":5957,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5958,"versions":5959,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5960},"package:pypi:mergedeep","mergedeep-77a23f49","pypi:mergedeep","mergedeep",[620],[4227],[56],{"id":5962,"slug":5963,"identity":5964,"label":5965,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5966,"versions":5967,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5968},"package:npm:micromark","micromark-55bbc568","npm:micromark","micromark",[620],[2963],[95,104],{"id":5970,"slug":5971,"identity":5972,"label":5973,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5974,"versions":5975,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5976},"package:npm:micromark-core-commonmark","micromark-core-commonmark-195430fe","npm:micromark-core-commonmark","micromark-core-commonmark",[620],[3390],[95,104],{"id":5978,"slug":5979,"identity":5980,"label":5981,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5982,"versions":5983,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5984},"package:npm:micromark-extension-gfm","micromark-extension-gfm-d83f6864","npm:micromark-extension-gfm","micromark-extension-gfm",[620],[3548],[95,104],{"id":5986,"slug":5987,"identity":5988,"label":5989,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5990,"versions":5991,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":5992},"package:npm:micromark-extension-gfm-autolink-literal","micromark-extension-gfm-autolink-literal-6fb38d16","npm:micromark-extension-gfm-autolink-literal","micromark-extension-gfm-autolink-literal",[620],[2901],[95,104],{"id":5994,"slug":5995,"identity":5996,"label":5997,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":5998,"versions":5999,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6000},"package:npm:micromark-extension-gfm-footnote","micromark-extension-gfm-footnote-972092cc","npm:micromark-extension-gfm-footnote","micromark-extension-gfm-footnote",[620],[2901],[95,104],{"id":6002,"slug":6003,"identity":6004,"label":6005,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6006,"versions":6007,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6008},"package:npm:micromark-extension-gfm-strikethrough","micromark-extension-gfm-strikethrough-e57211a9","npm:micromark-extension-gfm-strikethrough","micromark-extension-gfm-strikethrough",[620],[2901],[95,104],{"id":6010,"slug":6011,"identity":6012,"label":6013,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6014,"versions":6015,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6016},"package:npm:micromark-extension-gfm-table","micromark-extension-gfm-table-2cfc1887","npm:micromark-extension-gfm-table","micromark-extension-gfm-table",[620],[3505],[95,104],{"id":6018,"slug":6019,"identity":6020,"label":6021,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6022,"versions":6023,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6024},"package:npm:micromark-extension-gfm-tagfilter","micromark-extension-gfm-tagfilter-39b91d25","npm:micromark-extension-gfm-tagfilter","micromark-extension-gfm-tagfilter",[620],[3097],[95,104],{"id":6026,"slug":6027,"identity":6028,"label":6029,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6030,"versions":6031,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6032},"package:npm:micromark-extension-gfm-task-list-item","micromark-extension-gfm-task-list-item-dad1b650","npm:micromark-extension-gfm-task-list-item","micromark-extension-gfm-task-list-item",[620],[2901],[95,104],{"id":6034,"slug":6035,"identity":6036,"label":6037,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6038,"versions":6039,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6040},"package:npm:micromark-factory-destination","micromark-factory-destination-293963ae","npm:micromark-factory-destination","micromark-factory-destination",[620],[3241],[95,104],{"id":6042,"slug":6043,"identity":6044,"label":6045,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6046,"versions":6047,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6048},"package:npm:micromark-factory-label","micromark-factory-label-3ab1ecf9","npm:micromark-factory-label","micromark-factory-label",[620],[3241],[95,104],{"id":6050,"slug":6051,"identity":6052,"label":6053,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6054,"versions":6055,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6056},"package:npm:micromark-factory-space","micromark-factory-space-c47a5adb","npm:micromark-factory-space","micromark-factory-space",[620],[3241],[95,104],{"id":6058,"slug":6059,"identity":6060,"label":6061,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6062,"versions":6063,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6064},"package:npm:micromark-factory-title","micromark-factory-title-ece0d9b2","npm:micromark-factory-title","micromark-factory-title",[620],[3241],[95,104],{"id":6066,"slug":6067,"identity":6068,"label":6069,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6070,"versions":6071,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6072},"package:npm:micromark-factory-whitespace","micromark-factory-whitespace-04b6efd9","npm:micromark-factory-whitespace","micromark-factory-whitespace",[620],[3241],[95,104],{"id":6074,"slug":6075,"identity":6076,"label":6077,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6078,"versions":6079,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6080},"package:npm:micromark-util-character","micromark-util-character-7601c4de","npm:micromark-util-character","micromark-util-character",[620],[3505],[95,104],{"id":6082,"slug":6083,"identity":6084,"label":6085,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6086,"versions":6087,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6088},"package:npm:micromark-util-chunked","micromark-util-chunked-101a1909","npm:micromark-util-chunked","micromark-util-chunked",[620],[3241],[95,104],{"id":6090,"slug":6091,"identity":6092,"label":6093,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6094,"versions":6095,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6096},"package:npm:micromark-util-classify-character","micromark-util-classify-character-de955105","npm:micromark-util-classify-character","micromark-util-classify-character",[620],[3241],[95,104],{"id":6098,"slug":6099,"identity":6100,"label":6101,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6102,"versions":6103,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6104},"package:npm:micromark-util-combine-extensions","micromark-util-combine-extensions-5b258c79","npm:micromark-util-combine-extensions","micromark-util-combine-extensions",[620],[3241],[95,104],{"id":6106,"slug":6107,"identity":6108,"label":6109,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6110,"versions":6111,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6112},"package:npm:micromark-util-decode-numeric-character-reference","micromark-util-decode-numeric-character-reference-69132fb7","npm:micromark-util-decode-numeric-character-reference","micromark-util-decode-numeric-character-reference",[620],[3364],[95,104],{"id":6114,"slug":6115,"identity":6116,"label":6117,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6118,"versions":6119,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6120},"package:npm:micromark-util-decode-string","micromark-util-decode-string-a0d91cc4","npm:micromark-util-decode-string","micromark-util-decode-string",[620],[3241],[95,104],{"id":6122,"slug":6123,"identity":6124,"label":6125,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6126,"versions":6127,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6128},"package:npm:micromark-util-encode","micromark-util-encode-2a1c6cb9","npm:micromark-util-encode","micromark-util-encode",[620],[3241],[95,104],{"id":6130,"slug":6131,"identity":6132,"label":6133,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6134,"versions":6135,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6136},"package:npm:micromark-util-html-tag-name","micromark-util-html-tag-name-02488597","npm:micromark-util-html-tag-name","micromark-util-html-tag-name",[620],[3241],[95,104],{"id":6138,"slug":6139,"identity":6140,"label":6141,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6142,"versions":6143,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6144},"package:npm:micromark-util-normalize-identifier","micromark-util-normalize-identifier-a9758761","npm:micromark-util-normalize-identifier","micromark-util-normalize-identifier",[620],[3241],[95,104],{"id":6146,"slug":6147,"identity":6148,"label":6149,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6150,"versions":6151,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6152},"package:npm:micromark-util-resolve-all","micromark-util-resolve-all-0f225c93","npm:micromark-util-resolve-all","micromark-util-resolve-all",[620],[3241],[95,104],{"id":6154,"slug":6155,"identity":6156,"label":6157,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6158,"versions":6159,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6160},"package:npm:micromark-util-sanitize-uri","micromark-util-sanitize-uri-44638e5e","npm:micromark-util-sanitize-uri","micromark-util-sanitize-uri",[620],[3241],[95,104],{"id":6162,"slug":6163,"identity":6164,"label":6165,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6166,"versions":6167,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6168},"package:npm:micromark-util-subtokenize","micromark-util-subtokenize-bbc2eccf","npm:micromark-util-subtokenize","micromark-util-subtokenize",[620],[2901],[95,104],{"id":6170,"slug":6171,"identity":6172,"label":6173,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6174,"versions":6175,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6176},"package:npm:micromark-util-symbol","micromark-util-symbol-0cbff0df","npm:micromark-util-symbol","micromark-util-symbol",[620],[3241],[95,104],{"id":6178,"slug":6179,"identity":6180,"label":6181,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6182,"versions":6183,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6184},"package:npm:micromark-util-types","micromark-util-types-ac5660bc","npm:micromark-util-types","micromark-util-types",[620],[3364],[95,104],{"id":6186,"slug":6187,"identity":6188,"label":6189,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6190,"versions":6191,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6193},"package:npm:micromatch","micromatch-5e92d7dd","npm:micromatch","micromatch",[620],[6192],"4.0.8",[95,104],{"id":6195,"slug":6196,"identity":6197,"label":6198,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6199,"versions":6200,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":6203},"package:npm:mime-db","mime-db-2aca89e7","npm:mime-db","mime-db",[620],[6201,6202],"1.52.0","1.54.0",[95,104],{"id":6205,"slug":6206,"identity":6207,"label":6208,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6209,"versions":6210,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":6212},"package:npm:mime-types","mime-types-a32c45ef","npm:mime-types","mime-types",[620],[6211,2780],"2.1.35",[95,104],{"id":6214,"slug":6215,"identity":6216,"label":6217,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6218,"versions":6219,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6220},"package:npm:mimic-fn","mimic-fn-1b56a239","npm:mimic-fn","mimic-fn",[620],[2901],[95,104],{"id":6222,"slug":6223,"identity":6224,"label":6225,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6226,"versions":6227,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6228},"package:npm:mimic-function","mimic-function-5b93d1fd","npm:mimic-function","mimic-function",[620],[3974],[95,104],{"id":6230,"slug":6231,"identity":6232,"label":6233,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6234,"versions":6235,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6236},"package:npm:minimist","minimist-f0c39d1e","npm:minimist","minimist",[620],[1802],[95,104],{"id":6238,"slug":6239,"identity":6240,"label":6241,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6242,"versions":6243,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6245},"package:pypi:mkdocs","mkdocs-a74efb5d","pypi:mkdocs","mkdocs",[1151],[6244],"1.6.1",[56],{"id":6247,"slug":6248,"identity":6249,"label":6250,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6251,"versions":6252,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6253},"package:pypi:mkdocs-get-deps","mkdocs-get-deps-504099a6","pypi:mkdocs-get-deps","mkdocs-get-deps",[620],[3319],[56],{"id":6255,"slug":6256,"identity":6257,"label":6258,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6259,"versions":6260,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6262},"package:pypi:mkdocs-material","mkdocs-material-59ad908c","pypi:mkdocs-material","mkdocs-material",[620],[6261],"9.7.7",[56],{"id":6264,"slug":6265,"identity":6266,"label":6267,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6268,"versions":6269,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6270},"package:pypi:mkdocs-material-extensions","mkdocs-material-extensions-9672e965","pypi:mkdocs-material-extensions","mkdocs-material-extensions",[620],[1722],[56],{"id":6272,"slug":6273,"identity":6274,"label":6275,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6276,"versions":6277,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6279},"package:pypi:mkdocs-to-pdf","mkdocs-to-pdf-41f8f7a9","pypi:mkdocs-to-pdf","mkdocs-to-pdf",[620],[6278],"0.12.1",[56],{"id":6281,"slug":6282,"identity":6283,"label":6284,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6285,"versions":6286,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6287},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[609],[1758],[104,56],{"id":6289,"slug":6290,"identity":6291,"label":6292,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6293,"versions":6294,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6296},"package:npm:ms","ms-1f5985e4","npm:ms","ms",[620],[6295],"2.1.3",[95,104],{"id":6298,"slug":6299,"identity":6300,"label":6301,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6302,"versions":6303,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6305},"package:pypi:mypy","mypy-2008b5d3","pypi:mypy","mypy",[620],[6304],"2.4.0",[56],{"id":6307,"slug":6308,"identity":6309,"label":6310,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6311,"versions":6312,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6313},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[620],[2489],[56],{"id":6315,"slug":6316,"identity":6317,"label":6318,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6319,"versions":6320,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6321},"package:npm:natural-compare","natural-compare-948a7244","npm:natural-compare","natural-compare",[620],[3161],[95],{"id":6323,"slug":6324,"identity":6325,"label":6326,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6327,"versions":6328,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6329},"package:npm:negotiator","negotiator-44ced9f0","npm:negotiator","negotiator",[620],[3417],[95,104],{"id":6331,"slug":6332,"identity":6333,"label":6334,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6335,"versions":6336,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":6337},"package:npm:next-themes","next-themes-9e7031bb","npm:next-themes","next-themes",[620],[3659],[95,104],{"id":6339,"slug":6340,"identity":6341,"label":6342,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6343,"versions":6344,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6346},"package:npm:node-releases","node-releases-e645deb1","npm:node-releases","node-releases",[620],[6345],"2.0.56",[95,104],{"id":6348,"slug":6349,"identity":6350,"label":6351,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6352,"versions":6353,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6355},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[609,793],[6354],"1.11.0",[104,56],{"id":6357,"slug":6358,"identity":6359,"label":6360,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6361,"versions":6362,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":6363},"package:npm:npm-run-path","npm-run-path-b2a4132a","npm:npm-run-path","npm-run-path",[620],[4356,5692],[95,104],{"id":6365,"slug":6366,"identity":6367,"label":6368,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6369,"versions":6370,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6371},"package:npm:nth-check","nth-check-0cd8cb4c","npm:nth-check","nth-check",[1151],[3505],[95,104],{"id":6373,"slug":6374,"identity":6375,"label":6376,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6377,"versions":6379,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6381},"package:pypi:num2words","num2words-21434d3a","pypi:num2words","num2words",[6378],"LGPL-2.1",[6380],"0.5.14",[104,56],{"id":6383,"slug":6384,"identity":6385,"label":6386,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6387,"versions":6388,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6390},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[793],[6389],"0.68.0",[104,56],{"id":6392,"slug":6393,"identity":6394,"label":6395,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6396,"versions":6398,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6400},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[6397,793],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[6399],"2.5.4",[104,56],{"id":6402,"slug":6403,"identity":6404,"label":6405,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6406,"versions":6407,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6409},"package:npm:object-assign","object-assign-fa9dc3dc","npm:object-assign","object-assign",[620],[6408],"4.1.1",[95,104],{"id":6411,"slug":6412,"identity":6413,"label":6414,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6415,"versions":6416,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6418},"package:npm:object-inspect","object-inspect-e860635c","npm:object-inspect","object-inspect",[620],[6417],"1.13.4",[95,104],{"id":6420,"slug":6421,"identity":6422,"label":6423,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6424,"versions":6425,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6427},"package:npm:object-treeify","object-treeify-b80577d7","npm:object-treeify","object-treeify",[620],[6426],"1.1.33",[95,104],{"id":6429,"slug":6430,"identity":6431,"label":6432,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6433,"versions":6434,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6436},"package:npm:on-finished","on-finished-7268054d","npm:on-finished","on-finished",[620],[6435],"2.4.1",[95,104],{"id":6438,"slug":6439,"identity":6440,"label":6441,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6442,"versions":6443,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6444},"package:npm:once","once-15d11e4d","npm:once","once",[804],[3161],[95,104],{"id":6446,"slug":6447,"identity":6448,"label":6449,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6450,"versions":6451,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":6452},"package:npm:onetime","onetime-a2a82057","npm:onetime","onetime",[620],[4750,5303],[95,104],{"id":6454,"slug":6455,"identity":6456,"label":6457,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6458,"versions":6459,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6461},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[620],[6460],"1.24.4",[104,56],{"id":6463,"slug":6464,"identity":6465,"label":6466,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6467,"versions":6468,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6470},"package:npm:open","open-ea526a80","npm:open","open",[620],[6469],"11.0.0",[95,104],{"id":6472,"slug":6473,"identity":6474,"label":6475,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6476,"versions":6477,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6479},"package:pypi:openai-agents","openai-agents-9a2ca669","pypi:openai-agents","openai-agents",[620],[6478],"0.13.6",[104,56],{"id":6481,"slug":6482,"identity":6483,"label":6484,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6485,"versions":6486,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6488},"package:pypi:opentelemetry-exporter-http-transport","opentelemetry-exporter-http-transport-6aa16cfc","pypi:opentelemetry-exporter-http-transport","opentelemetry-exporter-http-transport",[575],[6487],"0.66b1",[104,56],{"id":6490,"slug":6491,"identity":6492,"label":6493,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6494,"versions":6495,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6496},"package:pypi:opentelemetry-exporter-otlp-common","opentelemetry-exporter-otlp-common-1383434b","pypi:opentelemetry-exporter-otlp-common","opentelemetry-exporter-otlp-common",[575],[6487],[104,56],{"id":6498,"slug":6499,"identity":6500,"label":6501,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6502,"versions":6503,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6504},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[575],[952],[104,56],{"id":6506,"slug":6507,"identity":6508,"label":6509,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6510,"versions":6511,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6512},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[575],[952],[104,56],{"id":6514,"slug":6515,"identity":6516,"label":6517,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6518,"versions":6519,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6520},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[575],[952],[104,56],{"id":6522,"slug":6523,"identity":6524,"label":6525,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6526,"versions":6527,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6528},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[575],[952],[104,56],{"id":6530,"slug":6531,"identity":6532,"label":6533,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6534,"versions":6535,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6536},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[575],[6487],[104,56],{"id":6538,"slug":6539,"identity":6540,"label":6541,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6542,"versions":6543,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6545},"package:npm:optionator","optionator-8de2d3ef","npm:optionator","optionator",[620],[6544],"0.9.4",[95],{"id":6547,"slug":6548,"identity":6549,"label":6550,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6551,"versions":6552,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6554},"package:npm:ora","ora-e208f4d8","npm:ora","ora",[620],[6553],"8.2.0",[95,104],{"id":6556,"slug":6557,"identity":6558,"label":6559,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6560,"versions":6561,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6562},"package:npm:p-limit","p-limit-989e28a2","npm:p-limit","p-limit",[620],[3477],[95],{"id":6564,"slug":6565,"identity":6566,"label":6567,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6568,"versions":6569,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6570},"package:npm:p-locate","p-locate-df7c6699","npm:p-locate","p-locate",[620],[3399],[95],{"id":6572,"slug":6573,"identity":6574,"label":6575,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6576,"versions":6578,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6580},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[6577,793],"Apache-2.0 OR BSD-2-Clause",[6579],"26.3",[104,56],{"id":6582,"slug":6583,"identity":6584,"label":6585,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6586,"versions":6587,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6588},"package:pypi:paginate","paginate-5ae8b120","pypi:paginate","paginate",[620],[4320],[56],{"id":6590,"slug":6591,"identity":6592,"label":6593,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6594,"versions":6595,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6596},"package:npm:parent-module","parent-module-09f7937b","npm:parent-module","parent-module",[620],[1659],[95,104],{"id":6598,"slug":6599,"identity":6600,"label":6601,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6602,"versions":6603,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6604},"package:npm:parse-entities","parse-entities-5c37e9d8","npm:parse-entities","parse-entities",[620],[2963],[95,104],{"id":6606,"slug":6607,"identity":6608,"label":6609,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6610,"versions":6611,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6613},"package:npm:parse-json","parse-json-f7a0a4f2","npm:parse-json","parse-json",[620],[6612],"5.2.0",[95,104],{"id":6615,"slug":6616,"identity":6617,"label":6618,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6619,"versions":6620,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6621},"package:npm:parse-ms","parse-ms-29a5c8ce","npm:parse-ms","parse-ms",[620],[2480],[95,104],{"id":6623,"slug":6624,"identity":6625,"label":6626,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6627,"versions":6628,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6629},"package:npm:parse-numeric-range","parse-numeric-range-12084147","npm:parse-numeric-range","parse-numeric-range",[804],[1758],[95,104],{"id":6631,"slug":6632,"identity":6633,"label":6634,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6635,"versions":6636,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6638},"package:npm:parse5","parse5-7a4b420d","npm:parse5","parse5",[620],[6637],"7.3.0",[95,104],{"id":6640,"slug":6641,"identity":6642,"label":6643,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6644,"versions":6645,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6646},"package:npm:parseurl","parseurl-2b58ab3c","npm:parseurl","parseurl",[620],[2173],[95,104],{"id":6648,"slug":6649,"identity":6650,"label":6651,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6652,"versions":6653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6655},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[620],[6654],"0.8.7",[56],{"id":6657,"slug":6658,"identity":6659,"label":6660,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6661,"versions":6662,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6663},"package:npm:path-browserify","path-browserify-4c14fc14","npm:path-browserify","path-browserify",[620],[1659],[95,104],{"id":6665,"slug":6666,"identity":6667,"label":6668,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6669,"versions":6670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6671},"package:npm:path-exists","path-exists-912be959","npm:path-exists","path-exists",[620],[2480],[95],{"id":6673,"slug":6674,"identity":6675,"label":6676,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6677,"versions":6678,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":6679},"package:npm:path-key","path-key-369bc367","npm:path-key","path-key",[620],[2798,2480],[95,104],{"id":6681,"slug":6682,"identity":6683,"label":6684,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6685,"versions":6686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6687},"package:npm:pathe","pathe-d655e854","npm:pathe","pathe",[620],[3390],[95],{"id":6689,"slug":6690,"identity":6691,"label":6692,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6693,"versions":6694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6695},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[914],[1731],[56],{"id":6697,"slug":6698,"identity":6699,"label":6700,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6701,"versions":6702,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6704},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[804],[6703],"4.9.0",[56],{"id":6706,"slug":6707,"identity":6708,"label":6709,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6710,"versions":6711,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6712},"package:npm:picocolors","picocolors-63d33c23","npm:picocolors","picocolors",[804],[1731],[95,104],{"id":6714,"slug":6715,"identity":6716,"label":6717,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6718,"versions":6719,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6721},"package:pypi:pipecat-ai","pipecat-ai-3fa93743","pypi:pipecat-ai","pipecat-ai",[1151],[6720],"1.14.0",[104,56],{"id":6723,"slug":6724,"identity":6725,"label":6726,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6727,"versions":6728,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6729},"package:npm:pkce-challenge","pkce-challenge-f9f15269","npm:pkce-challenge","pkce-challenge",[620],[3974],[95,104],{"id":6731,"slug":6732,"identity":6733,"label":6734,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6735,"versions":6736,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6738},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[620],[6737],"4.13.5",[56],{"id":6740,"slug":6741,"identity":6742,"label":6743,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6744,"versions":6745,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6746},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[620],[4365],[56],{"id":6748,"slug":6749,"identity":6750,"label":6751,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6752,"versions":6753,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6755},"package:npm:postcss-selector-parser","postcss-selector-parser-e1de6cba","npm:postcss-selector-parser","postcss-selector-parser",[620],[6754],"7.1.6",[95,104],{"id":6757,"slug":6758,"identity":6759,"label":6760,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6761,"versions":6762,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6764},"package:npm:powershell-utils","powershell-utils-6fdd7cc1","npm:powershell-utils","powershell-utils",[620],[6763],"0.1.0",[95,104],{"id":6766,"slug":6767,"identity":6768,"label":6769,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6770,"versions":6771,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6773},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[620],[6772],"4.7.0",[56],{"id":6775,"slug":6776,"identity":6777,"label":6778,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6779,"versions":6780,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6781},"package:npm:prelude-ls","prelude-ls-64dbf7f1","npm:prelude-ls","prelude-ls",[620],[897],[95],{"id":6783,"slug":6784,"identity":6785,"label":6786,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6787,"versions":6788,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":6790},"package:npm:prettier","prettier-48ef094b","npm:prettier","prettier",[620],[6789],"3.9.8",[95],{"id":6792,"slug":6793,"identity":6794,"label":6795,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6796,"versions":6797,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":6799},"package:npm:prettier-plugin-tailwindcss","prettier-plugin-tailwindcss-9dc36172","npm:prettier-plugin-tailwindcss","prettier-plugin-tailwindcss",[620],[6798],"0.8.1",[95],{"id":6801,"slug":6802,"identity":6803,"label":6804,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6805,"versions":6806,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6808},"package:npm:pretty-ms","pretty-ms-09063416","npm:pretty-ms","pretty-ms",[620],[6807],"9.3.0",[95,104],{"id":6810,"slug":6811,"identity":6812,"label":6813,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6814,"versions":6815,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6817},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[609,793],[6816],"3.0.53",[104,56],{"id":6819,"slug":6820,"identity":6821,"label":6822,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6823,"versions":6824,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6826},"package:npm:prompts","prompts-86e18d33","npm:prompts","prompts",[620],[6825],"2.4.2",[95,104],{"id":6828,"slug":6829,"identity":6830,"label":6831,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6832,"versions":6833,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6835},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[575],[6834],"0.5.4",[104,56],{"id":6837,"slug":6838,"identity":6839,"label":6840,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6841,"versions":6842,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6844},"package:npm:property-information","property-information-4a9b5253","npm:property-information","property-information",[620],[6843],"7.2.0",[95,104],{"id":6846,"slug":6847,"identity":6848,"label":6849,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6850,"versions":6851,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6852},"package:npm:proxy-from-env","proxy-from-env-30b120c8","npm:proxy-from-env","proxy-from-env",[620],[2901],[95,104],{"id":6854,"slug":6855,"identity":6856,"label":6857,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6858,"versions":6859,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6861},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[609],[6860],"7.2.2",[56],{"id":6863,"slug":6864,"identity":6865,"label":6866,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6867,"versions":6868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6869},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[804],[1553],[56],{"id":6871,"slug":6872,"identity":6873,"label":6874,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6875,"versions":6876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6877},"package:npm:punycode","punycode-ffd39662","npm:punycode","punycode",[620],[5144],[95],{"id":6879,"slug":6880,"identity":6881,"label":6882,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6883,"versions":6884,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6886},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[620],[6885],"0.2.4",[56],{"id":6888,"slug":6889,"identity":6890,"label":6891,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6892,"versions":6893,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6895},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[609],[6894],"3.11",[104,56],{"id":6897,"slug":6898,"identity":6899,"label":6900,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6901,"versions":6902,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":6904},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[620],[6903],"2.14.1",[104,56],{"id":6906,"slug":6907,"identity":6908,"label":6909,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6910,"versions":6911,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":6913},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[620],[6912],"2.50.1",[104,56],{"id":6915,"slug":6916,"identity":6917,"label":6918,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6919,"versions":6920,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6922},"package:pypi:pydyf","pydyf-60de6213","pypi:pydyf","pydyf",[793],[6921],"0.13.0",[56],{"id":6924,"slug":6925,"identity":6926,"label":6927,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6928,"versions":6930,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6932},"package:pypi:pylint","pylint-25488847","pypi:pylint","pylint",[6929],"GPL-2.0-or-later",[6931],"4.0.10",[56],{"id":6934,"slug":6935,"identity":6936,"label":6937,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6938,"versions":6941,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6943},"package:pypi:pyphen","pyphen-9e168dac","pypi:pyphen","pyphen",[6929,6939,6940],"LGPL-2.0-or-later","MPL-1.1",[6942],"0.18.1",[56],{"id":6945,"slug":6946,"identity":6947,"label":6948,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6949,"versions":6950,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6951},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[575],[3161],[56],{"id":6953,"slug":6954,"identity":6955,"label":6956,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6957,"versions":6958,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6960},"package:pypi:pytest-rerunfailures","pytest-rerunfailures-4c7ba7f5","pypi:pytest-rerunfailures","pytest-rerunfailures",[914],[6959],"16.7",[56],{"id":6962,"slug":6963,"identity":6964,"label":6965,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6966,"versions":6967,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6968},"package:pypi:pytest-timeout","pytest-timeout-60d0ba05","pypi:pytest-timeout","pytest-timeout",[620],[6304],[56],{"id":6970,"slug":6971,"identity":6972,"label":6973,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6974,"versions":6975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6976},"package:pypi:python-barcode","python-barcode-38ddfa72","pypi:python-barcode","python-barcode",[620],[3267],[56],{"id":6978,"slug":6979,"identity":6980,"label":6981,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6982,"versions":6983,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6985},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[793],[6984],"2.9.0.post0",[56],{"id":6987,"slug":6988,"identity":6989,"label":6990,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":6991,"versions":6992,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6994},"package:pypi:python-discovery","python-discovery-6dfeea81","pypi:python-discovery","python-discovery",[620],[6993],"1.6.4",[56],{"id":6996,"slug":6997,"identity":6998,"label":6999,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7000,"versions":7002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7003},"package:pypi:python-gitlab","python-gitlab-ca77f17a","pypi:python-gitlab","python-gitlab",[7001],"LGPL-3.0-or-later",[4158],[56],{"id":7005,"slug":7006,"identity":7007,"label":7008,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7009,"versions":7010,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7012},"package:pypi:python-semantic-release","python-semantic-release-abd077f0","pypi:python-semantic-release","python-semantic-release",[620],[7011],"10.7.0",[56],{"id":7014,"slug":7015,"identity":7016,"label":7017,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7018,"versions":7019,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7021},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[7020],"312",[56],{"id":7023,"slug":7024,"identity":7025,"label":7026,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7027,"versions":7028,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7030},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[620],[7029],"6.0.3",[104,56],{"id":7032,"slug":7033,"identity":7034,"label":7035,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7036,"versions":7037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7039},"package:pypi:pyyaml-env-tag","pyyaml-env-tag-7c09b2b4","pypi:pyyaml-env-tag","pyyaml-env-tag",[620],[7038],"1.1",[56],{"id":7041,"slug":7042,"identity":7043,"label":7044,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7045,"versions":7046,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7047},"package:npm:qified","qified-75549a5f","npm:qified","qified",[620],[3787],[95],{"id":7049,"slug":7050,"identity":7051,"label":7052,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7053,"versions":7054,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7056},"package:pypi:qrcode","qrcode-dc7f5ffb","pypi:qrcode","qrcode",[793],[7055],"8.2",[56],{"id":7058,"slug":7059,"identity":7060,"label":7061,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7062,"versions":7063,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7065},"package:npm:queue-microtask","queue-microtask-3a600ba4","npm:queue-microtask","queue-microtask",[620],[7064],"1.2.3",[95,104],{"id":7067,"slug":7068,"identity":7069,"label":7070,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7071,"versions":7072,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7073},"package:npm:radix-ui","radix-ui-46d73883","npm:radix-ui","radix-ui",[620],[775],[95,104],{"id":7075,"slug":7076,"identity":7077,"label":7078,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7079,"versions":7080,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7081},"package:npm:range-parser","range-parser-64541a01","npm:range-parser","range-parser",[620],[897],[95,104],{"id":7083,"slug":7084,"identity":7085,"label":7086,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7087,"versions":7088,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7089},"package:npm:raw-body","raw-body-ab6f4962","npm:raw-body","raw-body",[620],[2780],[95,104],{"id":7091,"slug":7092,"identity":7093,"label":7094,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7095,"versions":7096,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7097},"package:npm:react","react-29607ded","npm:react","react",[620],[2928],[95,104],{"id":7099,"slug":7100,"identity":7101,"label":7102,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7103,"versions":7104,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7105},"package:npm:react-day-picker","react-day-picker-47672710","npm:react-day-picker","react-day-picker",[620],[1570],[95,104],{"id":7107,"slug":7108,"identity":7109,"label":7110,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7111,"versions":7112,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7113},"package:npm:react-dom","react-dom-fb4a1520","npm:react-dom","react-dom",[620],[2928],[95,104],{"id":7115,"slug":7116,"identity":7117,"label":7118,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7119,"versions":7120,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7122},"package:npm:react-is","react-is-d95e9978","npm:react-is","react-is",[620],[7121],"19.2.5",[95,104],{"id":7124,"slug":7125,"identity":7126,"label":7127,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7128,"versions":7129,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7131},"package:npm:react-markdown","react-markdown-62167450","npm:react-markdown","react-markdown",[620],[7130],"10.1.0",[95,104],{"id":7133,"slug":7134,"identity":7135,"label":7136,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7137,"versions":7138,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7140},"package:npm:react-redux","react-redux-683d99aa","npm:react-redux","react-redux",[620],[7139],"9.2.0",[95,104],{"id":7142,"slug":7143,"identity":7144,"label":7145,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7146,"versions":7147,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7149},"package:npm:react-remove-scroll","react-remove-scroll-fb631c55","npm:react-remove-scroll","react-remove-scroll",[620],[7148],"2.7.2",[95,104],{"id":7151,"slug":7152,"identity":7153,"label":7154,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7155,"versions":7156,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7158},"package:npm:react-remove-scroll-bar","react-remove-scroll-bar-09543480","npm:react-remove-scroll-bar","react-remove-scroll-bar",[620],[7157],"2.3.8",[95,104],{"id":7160,"slug":7161,"identity":7162,"label":7163,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7164,"versions":7165,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7167},"package:npm:react-resizable-panels","react-resizable-panels-8b9ad5c4","npm:react-resizable-panels","react-resizable-panels",[620],[7166],"4.14.1",[95,104],{"id":7169,"slug":7170,"identity":7171,"label":7172,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7173,"versions":7174,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7175},"package:npm:react-style-singleton","react-style-singleton-023f9f7d","npm:react-style-singleton","react-style-singleton",[620],[5488],[95,104],{"id":7177,"slug":7178,"identity":7179,"label":7180,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7181,"versions":7182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7183},"package:npm:readdirp","readdirp-8a27c4bc","npm:readdirp","readdirp",[620],[4443],[95],{"id":7185,"slug":7186,"identity":7187,"label":7188,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7189,"versions":7190,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7192},"package:npm:recast","recast-8192fc08","npm:recast","recast",[620],[7191],"0.23.11",[95,104],{"id":7194,"slug":7195,"identity":7196,"label":7197,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7198,"versions":7199,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7201},"package:npm:recharts","recharts-61e9d91c","npm:recharts","recharts",[620],[7200],"3.10.1",[95,104],{"id":7203,"slug":7204,"identity":7205,"label":7206,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7207,"versions":7208,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7209},"package:npm:redux","redux-4962b903","npm:redux","redux",[620],[3974],[95,104],{"id":7211,"slug":7212,"identity":7213,"label":7214,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7215,"versions":7216,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7217},"package:npm:redux-thunk","redux-thunk-6e5de0fb","npm:redux-thunk","redux-thunk",[620],[3477],[95,104],{"id":7219,"slug":7220,"identity":7221,"label":7222,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7223,"versions":7224,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7226},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[620],[7225],"0.37.0",[104,56],{"id":7228,"slug":7229,"identity":7230,"label":7231,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7232,"versions":7233,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7234},"package:npm:refractor","refractor-d9f014dd","npm:refractor","refractor",[620],[3399],[95,104],{"id":7236,"slug":7237,"identity":7238,"label":7239,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7240,"versions":7241,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7243},"package:npm:rehype","rehype-326ca846","npm:rehype","rehype",[620],[7242],"13.0.2",[95,104],{"id":7245,"slug":7246,"identity":7247,"label":7248,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7249,"versions":7250,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7251},"package:npm:rehype-attr","rehype-attr-ab618519","npm:rehype-attr","rehype-attr",[620],[2963],[95,104],{"id":7253,"slug":7254,"identity":7255,"label":7256,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7257,"versions":7258,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7259},"package:npm:rehype-autolink-headings","rehype-autolink-headings-d314de6b","npm:rehype-autolink-headings","rehype-autolink-headings",[620],[1116],[95,104],{"id":7261,"slug":7262,"identity":7263,"label":7264,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7265,"versions":7266,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7267},"package:npm:rehype-ignore","rehype-ignore-77a2340f","npm:rehype-ignore","rehype-ignore",[620],[3390],[95,104],{"id":7269,"slug":7270,"identity":7271,"label":7272,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7273,"versions":7274,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7275},"package:npm:rehype-parse","rehype-parse-2e7c5ec2","npm:rehype-parse","rehype-parse",[620],[3752],[95,104],{"id":7277,"slug":7278,"identity":7279,"label":7280,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7281,"versions":7282,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7283},"package:npm:rehype-prism-plus","rehype-prism-plus-a723284c","npm:rehype-prism-plus","rehype-prism-plus",[620],[3364],[95,104],{"id":7285,"slug":7286,"identity":7287,"label":7288,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7289,"versions":7290,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7291},"package:npm:rehype-raw","rehype-raw-f1f2bc28","npm:rehype-raw","rehype-raw",[620],[5303],[95,104],{"id":7293,"slug":7294,"identity":7295,"label":7296,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7297,"versions":7298,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7299},"package:npm:rehype-rewrite","rehype-rewrite-674ca3a8","npm:rehype-rewrite","rehype-rewrite",[620],[2892],[95,104],{"id":7301,"slug":7302,"identity":7303,"label":7304,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7305,"versions":7306,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7307},"package:npm:rehype-slug","rehype-slug-12617363","npm:rehype-slug","rehype-slug",[620],[5692],[95,104],{"id":7309,"slug":7310,"identity":7311,"label":7312,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7313,"versions":7314,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7315},"package:npm:rehype-stringify","rehype-stringify-94c9fbb6","npm:rehype-stringify","rehype-stringify",[620],[1570],[95,104],{"id":7317,"slug":7318,"identity":7319,"label":7320,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7321,"versions":7322,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7323},"package:npm:remark-gfm","remark-gfm-7828ea76","npm:remark-gfm","remark-gfm",[620],[4356],[95,104],{"id":7325,"slug":7326,"identity":7327,"label":7328,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7329,"versions":7330,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7331},"package:npm:remark-github-blockquote-alert","remark-github-blockquote-alert-7622d9a0","npm:remark-github-blockquote-alert","remark-github-blockquote-alert",[620],[1722],[95,104],{"id":7333,"slug":7334,"identity":7335,"label":7336,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7337,"versions":7338,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7339},"package:npm:remark-parse","remark-parse-4812c797","npm:remark-parse","remark-parse",[620],[6469],[95,104],{"id":7341,"slug":7342,"identity":7343,"label":7344,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7345,"versions":7346,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7348},"package:npm:remark-rehype","remark-rehype-f68daab1","npm:remark-rehype","remark-rehype",[620],[7347],"11.1.2",[95,104],{"id":7350,"slug":7351,"identity":7352,"label":7353,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7354,"versions":7355,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7356},"package:npm:remark-stringify","remark-stringify-d466fc2a","npm:remark-stringify","remark-stringify",[620],[6469],[95,104],{"id":7358,"slug":7359,"identity":7360,"label":7361,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7362,"versions":7363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7364},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[575],[3417],[56],{"id":7366,"slug":7367,"identity":7368,"label":7369,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7370,"versions":7371,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7372},"package:npm:require-from-string","require-from-string-c13fac7a","npm:require-from-string","require-from-string",[620],[3364],[95,104],{"id":7374,"slug":7375,"identity":7376,"label":7377,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7378,"versions":7379,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7380},"package:pypi:resampy","resampy-8b55441c","pypi:resampy","resampy",[804],[1668],[104,56],{"id":7382,"slug":7383,"identity":7384,"label":7385,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7386,"versions":7387,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":7388},"package:npm:reselect","reselect-ed47b27b","npm:reselect","reselect",[620],[6612,1632],[95,104],{"id":7390,"slug":7391,"identity":7392,"label":7393,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7394,"versions":7395,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7396},"package:npm:resolve-from","resolve-from-28917033","npm:resolve-from","resolve-from",[620],[2480],[95,104],{"id":7398,"slug":7399,"identity":7400,"label":7401,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7402,"versions":7403,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7405},"package:npm:restore-cursor","restore-cursor-87a0e680","npm:restore-cursor","restore-cursor",[620],[7404],"5.1.0",[95,104],{"id":7407,"slug":7408,"identity":7409,"label":7410,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7411,"versions":7412,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7413},"package:npm:reusify","reusify-3316f946","npm:reusify","reusify",[620],[2489],[95,104],{"id":7415,"slug":7416,"identity":7417,"label":7418,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7419,"versions":7420,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7422},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[620],[7421],"15.0.0",[56],{"id":7424,"slug":7425,"identity":7426,"label":7427,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7428,"versions":7429,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7430},"package:npm:rolldown","rolldown-53931726","npm:rolldown","rolldown",[620],[2342],[95,104],{"id":7432,"slug":7433,"identity":7434,"label":7435,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7436,"versions":7437,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7438},"package:npm:router","router-05a7fc6e","npm:router","router",[620],[1456],[95,104],{"id":7440,"slug":7441,"identity":7442,"label":7443,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7444,"versions":7445,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7447},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[620],[7446],"2026.9.1",[104,56],{"id":7449,"slug":7450,"identity":7451,"label":7452,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7453,"versions":7454,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7456},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[620],[7455],"0.16.10",[56],{"id":7458,"slug":7459,"identity":7460,"label":7461,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7462,"versions":7463,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7464},"package:npm:run-applescript","run-applescript-39774afe","npm:run-applescript","run-applescript",[620],[1116],[95,104],{"id":7466,"slug":7467,"identity":7468,"label":7469,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7470,"versions":7471,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7472},"package:npm:run-parallel","run-parallel-50a8a921","npm:run-parallel","run-parallel",[620],[4786],[95,104],{"id":7474,"slug":7475,"identity":7476,"label":7477,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7478,"versions":7479,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7480},"package:npm:safer-buffer","safer-buffer-ecb57a88","npm:safer-buffer","safer-buffer",[620],[4023],[95,104],{"id":7482,"slug":7483,"identity":7484,"label":7485,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7486,"versions":7487,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7489},"package:npm:scheduler","scheduler-f5eceb7d","npm:scheduler","scheduler",[620],[7488],"0.28.0",[95,104],{"id":7491,"slug":7492,"identity":7493,"label":7494,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7495,"versions":7496,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":7498},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[793],[7497],"1.18.1",[104,56],{"id":7500,"slug":7501,"identity":7502,"label":7503,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7504,"versions":7505,"dossier":47,"occurrenceCount":831,"directOccurrenceCount":39,"evidenceFiles":7508},"package:npm:semver","semver-8e84695e","npm:semver","semver",[804],[7506,7507],"6.3.1","7.8.5",[95,104],{"id":7510,"slug":7511,"identity":7512,"label":7513,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7514,"versions":7515,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7516},"package:npm:send","send-d870dc25","npm:send","send",[620],[897],[95,104],{"id":7518,"slug":7519,"identity":7520,"label":7521,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7522,"versions":7523,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7525},"package:pypi:sentencex","sentencex-dc1cf0e2","pypi:sentencex","sentencex",[620],[7524],"1.0.32",[104,56],{"id":7527,"slug":7528,"identity":7529,"label":7530,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7531,"versions":7532,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":7534},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[620],[7533],"2.72.0",[104,56],{"id":7536,"slug":7537,"identity":7538,"label":7539,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7540,"versions":7541,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7542},"package:npm:seroval-plugins","seroval-plugins-5204bbff","npm:seroval-plugins","seroval-plugins",[620],[775],[95,104],{"id":7544,"slug":7545,"identity":7546,"label":7547,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7548,"versions":7549,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7550},"package:npm:serve-static","serve-static-9b722b2d","npm:serve-static","serve-static",[620],[4218],[95,104],{"id":7552,"slug":7553,"identity":7554,"label":7555,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7556,"versions":7557,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7558},"package:npm:setprototypeof","setprototypeof-e3faf556","npm:setprototypeof","setprototypeof",[804],[4786],[95,104],{"id":7560,"slug":7561,"identity":7562,"label":7563,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7564,"versions":7565,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7567},"package:npm:shadcn","shadcn-418c56ec","npm:shadcn","shadcn",[620],[7566],"4.21.0",[95,104],{"id":7569,"slug":7570,"identity":7571,"label":7572,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7573,"versions":7574,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7575},"package:npm:shebang-command","shebang-command-e7e36d5c","npm:shebang-command","shebang-command",[620],[3097],[95,104],{"id":7577,"slug":7578,"identity":7579,"label":7580,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7581,"versions":7582,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7583},"package:npm:shebang-regex","shebang-regex-37d0cef7","npm:shebang-regex","shebang-regex",[620],[3548],[95,104],{"id":7585,"slug":7586,"identity":7587,"label":7588,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7589,"versions":7590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7592},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[804],[7591],"1.5.4",[56],{"id":7594,"slug":7595,"identity":7596,"label":7597,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7598,"versions":7599,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7600},"package:npm:side-channel","side-channel-d59c04c6","npm:side-channel","side-channel",[620],[1731],[95,104],{"id":7602,"slug":7603,"identity":7604,"label":7605,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7606,"versions":7607,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7608},"package:npm:side-channel-list","side-channel-list-46f991b9","npm:side-channel-list","side-channel-list",[620],[1659],[95,104],{"id":7610,"slug":7611,"identity":7612,"label":7613,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7614,"versions":7615,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7616},"package:npm:side-channel-map","side-channel-map-2deeb875","npm:side-channel-map","side-channel-map",[620],[1659],[95,104],{"id":7618,"slug":7619,"identity":7620,"label":7621,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7622,"versions":7623,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7624},"package:npm:side-channel-weakmap","side-channel-weakmap-d3de1245","npm:side-channel-weakmap","side-channel-weakmap",[620],[3459],[95,104],{"id":7626,"slug":7627,"identity":7628,"label":7629,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7630,"versions":7631,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":7632},"package:npm:signal-exit","signal-exit-81be8954","npm:signal-exit","signal-exit",[804],[4425,3434],[95,104],{"id":7634,"slug":7635,"identity":7636,"label":7637,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7638,"versions":7639,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7640},"package:npm:sisteransi","sisteransi-4e7f1197","npm:sisteransi","sisteransi",[620],[2866],[95,104],{"id":7642,"slug":7643,"identity":7644,"label":7645,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7646,"versions":7647,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7649},"package:pypi:six","six-3c3888bd","pypi:six","six",[620],[7648],"1.17.0",[56],{"id":7651,"slug":7652,"identity":7653,"label":7654,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7655,"versions":7656,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":7658},"package:pypi:slowapi","slowapi-f9a4c599","pypi:slowapi","slowapi",[620],[7657],"0.1.10",[104,56],{"id":7660,"slug":7661,"identity":7662,"label":7663,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7664,"versions":7665,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7666},"package:npm:smart-buffer","smart-buffer-bf4702a2","npm:smart-buffer","smart-buffer",[620],[1071],[95,104],{"id":7668,"slug":7669,"identity":7670,"label":7671,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7672,"versions":7673,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7675},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[609],[7674],"5.0.3",[56],{"id":7677,"slug":7678,"identity":7679,"label":7680,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7681,"versions":7683,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7684},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[7682],"Apache-2.0 OR MIT",[1722],[104,56],{"id":7686,"slug":7687,"identity":7688,"label":7689,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7690,"versions":7691,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7693},"package:npm:socks","socks-d172a456","npm:socks","socks",[620],[7692],"2.8.10",[95,104],{"id":7695,"slug":7696,"identity":7697,"label":7698,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7699,"versions":7700,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7701},"package:npm:sonner","sonner-929a7298","npm:sonner","sonner",[620],[1134],[95,104],{"id":7703,"slug":7704,"identity":7705,"label":7706,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7707,"versions":7708,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7709},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[609],[3258],[104,56],{"id":7711,"slug":7712,"identity":7713,"label":7714,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7715,"versions":7716,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7718},"package:npm:source-map","source-map-40e335ad","npm:source-map","source-map",[609],[7717],"0.6.1",[95,104],{"id":7720,"slug":7721,"identity":7722,"label":7723,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7724,"versions":7725,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7726},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[6939,3275],[3417],[104,56],{"id":7728,"slug":7729,"identity":7730,"label":7731,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7732,"versions":7733,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7734},"package:npm:space-separated-tokens","space-separated-tokens-c471a577","npm:space-separated-tokens","space-separated-tokens",[620],[3364],[95,104],{"id":7736,"slug":7737,"identity":7738,"label":7739,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7740,"versions":7741,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":7742},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[620],[1784],[104,56],{"id":7744,"slug":7745,"identity":7746,"label":7747,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7748,"versions":7749,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7750},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[609],[3514],[104,56],{"id":7752,"slug":7753,"identity":7754,"label":7755,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7756,"versions":7757,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7759},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[620],[7758],"0.6.3",[56],{"id":7761,"slug":7762,"identity":7763,"label":7764,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7765,"versions":7766,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7767},"package:npm:statuses","statuses-c4dfedb5","npm:statuses","statuses",[620],[3364],[95,104],{"id":7769,"slug":7770,"identity":7771,"label":7772,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7773,"versions":7774,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7775},"package:npm:stdin-discarder","stdin-discarder-f4e99411","npm:stdin-discarder","stdin-discarder",[620],[3319],[95,104],{"id":7777,"slug":7778,"identity":7779,"label":7780,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7781,"versions":7782,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7783},"package:npm:string-width","string-width-79897e90","npm:string-width","string-width",[620],[6843],[95,104],{"id":7785,"slug":7786,"identity":7787,"label":7788,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7789,"versions":7790,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7791},"package:npm:stringify-entities","stringify-entities-125d7ead","npm:stringify-entities","stringify-entities",[620],[2892],[95,104],{"id":7793,"slug":7794,"identity":7795,"label":7796,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7797,"versions":7798,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7799},"package:npm:stringify-object","stringify-object-01a8c0cb","npm:stringify-object","stringify-object",[1151],[3399],[95,104],{"id":7801,"slug":7802,"identity":7803,"label":7804,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7805,"versions":7806,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7807},"package:npm:strip-ansi","strip-ansi-bbd27d8f","npm:strip-ansi","strip-ansi",[620],[6843],[95,104],{"id":7809,"slug":7810,"identity":7811,"label":7812,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7813,"versions":7814,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7815},"package:npm:strip-bom","strip-bom-9f52200c","npm:strip-bom","strip-bom",[620],[3548],[95,104],{"id":7817,"slug":7818,"identity":7819,"label":7820,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7821,"versions":7822,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":7823},"package:npm:strip-final-newline","strip-final-newline-40ad4c14","npm:strip-final-newline","strip-final-newline",[620],[3097,2480],[95,104],{"id":7825,"slug":7826,"identity":7827,"label":7828,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7829,"versions":7830,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7831},"package:npm:style-to-js","style-to-js-7af2bdaf","npm:style-to-js","style-to-js",[620],[2190],[95,104],{"id":7833,"slug":7834,"identity":7835,"label":7836,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7837,"versions":7838,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7840},"package:npm:style-to-object","style-to-object-dc5ae31c","npm:style-to-object","style-to-object",[620],[7839],"1.0.14",[95,104],{"id":7842,"slug":7843,"identity":7844,"label":7845,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7846,"versions":7847,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7848},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[609,620,793],[6720],[104,56],{"id":7850,"slug":7851,"identity":7852,"label":7853,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7854,"versions":7855,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7857},"package:npm:tailwind-merge","tailwind-merge-149e8091","npm:tailwind-merge","tailwind-merge",[620],[7856],"3.7.0",[95,104],{"id":7859,"slug":7860,"identity":7861,"label":7862,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7863,"versions":7864,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7865},"package:npm:tailwindcss","tailwindcss-73c205c0","npm:tailwindcss","tailwindcss",[620],[2507],[95,104],{"id":7867,"slug":7868,"identity":7869,"label":7870,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7871,"versions":7872,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7873},"package:npm:tapable","tapable-41f824e6","npm:tapable","tapable",[620],[4641],[95,104],{"id":7875,"slug":7876,"identity":7877,"label":7878,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7879,"versions":7880,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7881},"package:npm:tiny-invariant","tiny-invariant-b42ee6ec","npm:tiny-invariant","tiny-invariant",[620],[2173],[95,104],{"id":7883,"slug":7884,"identity":7885,"label":7886,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7887,"versions":7888,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7889},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[793],[4839],[56],{"id":7891,"slug":7892,"identity":7893,"label":7894,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7895,"versions":7896,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7898},"package:npm:tinyglobby","tinyglobby-dc19540c","npm:tinyglobby","tinyglobby",[620],[7897],"0.2.17",[95,104],{"id":7900,"slug":7901,"identity":7902,"label":7903,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7904,"versions":7905,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7906},"package:pypi:tinyhtml5","tinyhtml5-2f138940","pypi:tinyhtml5","tinyhtml5",[620],[2901],[56],{"id":7908,"slug":7909,"identity":7910,"label":7911,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7912,"versions":7913,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7914},"package:npm:to-regex-range","to-regex-range-468662f2","npm:to-regex-range","to-regex-range",[620],[3974],[95,104],{"id":7916,"slug":7917,"identity":7918,"label":7919,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7920,"versions":7921,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7922},"package:npm:toidentifier","toidentifier-d7c0e2d2","npm:toidentifier","toidentifier",[620],[1659],[95,104],{"id":7924,"slug":7925,"identity":7926,"label":7927,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7928,"versions":7929,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7931},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[620],[7930],"0.15.2",[56],{"id":7933,"slug":7934,"identity":7935,"label":7936,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7937,"versions":7938,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7940},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[609],[7939],"5.16.1",[56],{"id":7942,"slug":7943,"identity":7944,"label":7945,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7946,"versions":7947,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7948},"package:npm:trim-lines","trim-lines-d6032ca4","npm:trim-lines","trim-lines",[620],[3188],[95,104],{"id":7950,"slug":7951,"identity":7952,"label":7953,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7954,"versions":7955,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7956},"package:npm:trough","trough-9f16011a","npm:trough","trough",[620],[1456],[95,104],{"id":7958,"slug":7959,"identity":7960,"label":7961,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7962,"versions":7963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7964},"package:npm:ts-api-utils","ts-api-utils-07fd653b","npm:ts-api-utils","ts-api-utils",[620],[1465],[95],{"id":7966,"slug":7967,"identity":7968,"label":7969,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7970,"versions":7971,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7973},"package:npm:ts-morph","ts-morph-6d1fe574","npm:ts-morph","ts-morph",[620],[7972],"26.0.0",[95,104],{"id":7975,"slug":7976,"identity":7977,"label":7978,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7979,"versions":7980,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7981},"package:npm:tsconfig-paths","tsconfig-paths-70d85491","npm:tsconfig-paths","tsconfig-paths",[620],[1071],[95,104],{"id":7983,"slug":7984,"identity":7985,"label":7986,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7987,"versions":7989,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":7991},"package:npm:tslib","tslib-d05e0935","npm:tslib","tslib",[7988],"0BSD",[7990],"2.8.1",[95,104],{"id":7993,"slug":7994,"identity":7995,"label":7996,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":7997,"versions":7998,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":7999},"package:npm:tw-animate-css","tw-animate-css-c0808f2a","npm:tw-animate-css","tw-animate-css",[620],[3161],[95,104],{"id":8001,"slug":8002,"identity":8003,"label":8004,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8005,"versions":8006,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":8008},"package:pypi:twilio","twilio-fea8bb79","pypi:twilio","twilio",[620],[8007],"9.12.0",[104,56],{"id":8010,"slug":8011,"identity":8012,"label":8013,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8014,"versions":8015,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8017},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[620],[8016],"0.0.89",[56],{"id":8019,"slug":8020,"identity":8021,"label":8022,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8023,"versions":8024,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8025},"package:npm:type-check","type-check-a7a05ff6","npm:type-check","type-check",[620],[1447],[95],{"id":8027,"slug":8028,"identity":8029,"label":8030,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8031,"versions":8032,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8033},"package:npm:type-is","type-is-95471b5f","npm:type-is","type-is",[620],[2901],[95,104],{"id":8035,"slug":8036,"identity":8037,"label":8038,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8039,"versions":8040,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8042},"package:pypi:types-requests","types-requests-1c349d80","pypi:types-requests","types-requests",[575],[8041],"2.33.0.20261006",[104,56],{"id":8044,"slug":8045,"identity":8046,"label":8047,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8048,"versions":8049,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8051},"package:pypi:types-ujson","types-ujson-a1c81a59","pypi:types-ujson","types-ujson",[575],[8050],"5.10.0.20250822",[56],{"id":8053,"slug":8054,"identity":8055,"label":8056,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8057,"versions":8058,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":8059},"package:npm:typescript","typescript-9b49e36c","npm:typescript","typescript",[575],[7029],[95,104],{"id":8061,"slug":8062,"identity":8063,"label":8064,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8065,"versions":8066,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":8067},"package:npm:typescript-eslint","typescript-eslint-63885413","npm:typescript-eslint","typescript-eslint",[620],[2972],[95],{"id":73,"slug":74,"identity":8069,"label":75,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8070,"versions":8071,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8073},"pypi:typing-extensions",[3141,793],[8072],"4.16.0",[104,56],{"id":8075,"slug":8076,"identity":8077,"label":8078,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8079,"versions":8080,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8081},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[620],[4064],[104,56],{"id":8083,"slug":8084,"identity":8085,"label":8086,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8087,"versions":8088,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":8090},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[575],[8089],"2026.5",[104,56],{"id":8092,"slug":8093,"identity":8094,"label":8095,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8096,"versions":8097,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8099},"package:npm:undici-types","undici-types-385a20bc","npm:undici-types","undici-types",[620],[8098],"8.9.0",[95,104],{"id":8101,"slug":8102,"identity":8103,"label":8104,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8105,"versions":8106,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8107},"package:npm:unicorn-magic","unicorn-magic-cc44159a","npm:unicorn-magic","unicorn-magic",[620],[2498],[95,104],{"id":8109,"slug":8110,"identity":8111,"label":8112,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8113,"versions":8114,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8116},"package:npm:unified","unified-d3d1b160","npm:unified","unified",[620],[8115],"11.0.5",[95,104],{"id":8118,"slug":8119,"identity":8120,"label":8121,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8122,"versions":8123,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8124},"package:npm:unist-util-filter","unist-util-filter-9d40f8ab","npm:unist-util-filter","unist-util-filter",[620],[3974],[95,104],{"id":8126,"slug":8127,"identity":8128,"label":8129,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8130,"versions":8131,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8132},"package:npm:unist-util-is","unist-util-is-500f2b54","npm:unist-util-is","unist-util-is",[620],[4209],[95,104],{"id":8134,"slug":8135,"identity":8136,"label":8137,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8138,"versions":8139,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8140},"package:npm:unist-util-position","unist-util-position-501a2562","npm:unist-util-position","unist-util-position",[620],[3399],[95,104],{"id":8142,"slug":8143,"identity":8144,"label":8145,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8146,"versions":8147,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8148},"package:npm:unist-util-stringify-position","unist-util-stringify-position-297cc0d5","npm:unist-util-stringify-position","unist-util-stringify-position",[620],[2480],[95,104],{"id":8150,"slug":8151,"identity":8152,"label":8153,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8154,"versions":8155,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":8156},"package:npm:unist-util-visit","unist-util-visit-97738386","npm:unist-util-visit","unist-util-visit",[620],[3399,7404],[95,104],{"id":8158,"slug":8159,"identity":8160,"label":8161,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8162,"versions":8163,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8164},"package:npm:unist-util-visit-parents","unist-util-visit-parents-fed995ef","npm:unist-util-visit-parents","unist-util-visit-parents",[620],[3124],[95,104],{"id":8166,"slug":8167,"identity":8168,"label":8169,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8170,"versions":8171,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8172},"package:npm:universalify","universalify-024c7947","npm:universalify","universalify",[620],[3241],[95,104],{"id":8174,"slug":8175,"identity":8176,"label":8177,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8178,"versions":8179,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8180},"package:npm:unpipe","unpipe-0327ee3f","npm:unpipe","unpipe",[620],[3417],[95,104],{"id":8182,"slug":8183,"identity":8184,"label":8185,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8186,"versions":8187,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8188},"package:npm:unplugin","unplugin-cc9b53f3","npm:unplugin","unplugin",[620],[3770],[95],{"id":8190,"slug":8191,"identity":8192,"label":8193,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8194,"versions":8195,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8196},"package:npm:update-browserslist-db","update-browserslist-db-75400f27","npm:update-browserslist-db","update-browserslist-db",[620],[2173],[95,104],{"id":8198,"slug":8199,"identity":8200,"label":8201,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8202,"versions":8203,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8204},"package:npm:uri-js","uri-js-1053a491","npm:uri-js","uri-js",[1151],[943],[95],{"id":8206,"slug":8207,"identity":8208,"label":8209,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8210,"versions":8211,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8212},"package:npm:use-callback-ref","use-callback-ref-e82b364e","npm:use-callback-ref","use-callback-ref",[620],[2173],[95,104],{"id":8214,"slug":8215,"identity":8216,"label":8217,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8218,"versions":8219,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8220},"package:npm:use-sidecar","use-sidecar-b0a9a935","npm:use-sidecar","use-sidecar",[620],[1820],[95,104],{"id":8222,"slug":8223,"identity":8224,"label":8225,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8226,"versions":8227,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8229},"package:npm:use-sync-external-store","use-sync-external-store-085f0fd1","npm:use-sync-external-store","use-sync-external-store",[620],[8228],"1.6.0",[95,104],{"id":8231,"slug":8232,"identity":8233,"label":8234,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8235,"versions":8236,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8237},"package:npm:util-deprecate","util-deprecate-2b1985a1","npm:util-deprecate","util-deprecate",[620],[3459],[95,104],{"id":8239,"slug":8240,"identity":8241,"label":8242,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8243,"versions":8244,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":8246},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[609],[8245],"0.53.0",[104,56],{"id":8248,"slug":8249,"identity":8250,"label":8251,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8252,"versions":8253,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8254},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[620],[5558],[104,56],{"id":8256,"slug":8257,"identity":8258,"label":8259,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8260,"versions":8261,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8263},"package:npm:validate-npm-package-name","validate-npm-package-name-1ea4086a","npm:validate-npm-package-name","validate-npm-package-name",[804],[8262],"7.0.2",[95,104],{"id":8265,"slug":8266,"identity":8267,"label":8268,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8269,"versions":8270,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8271},"package:npm:vary","vary-f8fd7044","npm:vary","vary",[620],[4650],[95,104],{"id":8273,"slug":8274,"identity":8275,"label":8276,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8277,"versions":8278,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":578,"evidenceFiles":8279},"package:npm:vaul","vaul-ba55d071","npm:vaul","vaul",[620],[4650],[95,104],{"id":8281,"slug":8282,"identity":8283,"label":8284,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8285,"versions":8286,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8287},"package:npm:vfile","vfile-33c4321c","npm:vfile","vfile",[620],[7029],[95,104],{"id":8289,"slug":8290,"identity":8291,"label":8292,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8293,"versions":8294,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8295},"package:npm:vfile-location","vfile-location-f2ca8efa","npm:vfile-location","vfile-location",[620],[7674],[95,104],{"id":8297,"slug":8298,"identity":8299,"label":8300,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8301,"versions":8302,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8303},"package:npm:vfile-message","vfile-message-95198ca1","npm:vfile-message","vfile-message",[620],[5262],[95,104],{"id":8305,"slug":8306,"identity":8307,"label":8308,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8309,"versions":8311,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8313},"package:npm:victory-vendor","victory-vendor-1fd44678","npm:victory-vendor","victory-vendor",[8310],"ISC AND MIT",[8312],"37.3.6",[95,104],{"id":8315,"slug":8316,"identity":8317,"label":8318,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8319,"versions":8320,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8321},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[575],[5692],[56],{"id":8323,"slug":8324,"identity":8325,"label":8326,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8327,"versions":8328,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8329},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[620],[1758],[104,56],{"id":8331,"slug":8332,"identity":8333,"label":8334,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8335,"versions":8336,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8338},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[620],[8337],"0.9.2",[104,56],{"id":8340,"slug":8341,"identity":8342,"label":8343,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8344,"versions":8345,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8346},"package:npm:web-namespaces","web-namespaces-2f44061f","npm:web-namespaces","web-namespaces",[620],[3241],[95,104],{"id":8348,"slug":8349,"identity":8350,"label":8351,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8352,"versions":8353,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8354},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[793],[7717],[56],{"id":8356,"slug":8357,"identity":8358,"label":8359,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8360,"versions":8361,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8362},"package:npm:webpack-virtual-modules","webpack-virtual-modules-a9467704","npm:webpack-virtual-modules","webpack-virtual-modules",[620],[4081],[95],{"id":8364,"slug":8365,"identity":8366,"label":8367,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8368,"versions":8369,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":32,"evidenceFiles":8371},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[609],[8370],"13.1",[104,56],{"id":8373,"slug":8374,"identity":8375,"label":8376,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8377,"versions":8378,"dossier":47,"occurrenceCount":782,"directOccurrenceCount":39,"evidenceFiles":8379},"package:npm:which","which-1e7f9364","npm:which","which",[804],[3364,2480],[95,104],{"id":8381,"slug":8382,"identity":8383,"label":8384,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8385,"versions":8386,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8387},"package:pypi:win32-setctime","win32-setctime-649675e1","pypi:win32-setctime","win32-setctime",[620],[4786],[56],{"id":8389,"slug":8390,"identity":8391,"label":8392,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8393,"versions":8394,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8396},"package:npm:word-wrap","word-wrap-124a9003","npm:word-wrap","word-wrap",[620],[8395],"1.2.5",[95],{"id":8398,"slug":8399,"identity":8400,"label":8401,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8402,"versions":8403,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8404},"package:npm:wrappy","wrappy-f4e94e3b","npm:wrappy","wrappy",[804],[3459],[95,104],{"id":8406,"slug":8407,"identity":8408,"label":8409,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8410,"versions":8411,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8412},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[1151,793],[3921],[104,56],{"id":8414,"slug":8415,"identity":8416,"label":8417,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8418,"versions":8419,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8421},"package:npm:wsl-utils","wsl-utils-2721a0d6","npm:wsl-utils","wsl-utils",[620],[8420],"0.3.1",[95,104],{"id":8423,"slug":8424,"identity":8425,"label":8426,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8427,"versions":8428,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8429},"package:npm:yallist","yallist-7f7ac870","npm:yallist","yallist",[804],[2798],[95,104],{"id":8431,"slug":8432,"identity":8433,"label":8434,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8435,"versions":8436,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8438},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[575],[8437],"1.25.1",[104,56],{"id":8440,"slug":8441,"identity":8442,"label":8443,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8444,"versions":8445,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8446},"package:npm:yocto-queue","yocto-queue-1d448017","npm:yocto-queue","yocto-queue",[620],[6763],[95],{"id":8448,"slug":8449,"identity":8450,"label":8451,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8452,"versions":8453,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8454},"package:npm:yocto-spinner","yocto-spinner-7c8aa105","npm:yocto-spinner","yocto-spinner",[620],[2489],[95,104],{"id":8456,"slug":8457,"identity":8458,"label":8459,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8460,"versions":8461,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8462},"package:npm:yoctocolors","yoctocolors-31353206","npm:yoctocolors","yoctocolors",[620],[4023],[95,104],{"id":8464,"slug":8465,"identity":8466,"label":8467,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8468,"versions":8469,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8471},"package:npm:zod-to-json-schema","zod-to-json-schema-075caf94","npm:zod-to-json-schema","zod-to-json-schema",[804],[8470],"3.25.2",[95,104],{"id":8473,"slug":8474,"identity":8475,"label":8476,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8477,"versions":8478,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8479},"package:npm:zod-validation-error","zod-validation-error-a3cf2664","npm:zod-validation-error","zod-validation-error",[620],[2963],[95],{"id":8481,"slug":8482,"identity":8483,"label":8484,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8485,"versions":8486,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8487},"package:pypi:zopfli","zopfli-5e2184a1","pypi:zopfli","zopfli",[575],[1668],[56],{"id":8489,"slug":8490,"identity":8491,"label":8492,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":8493,"versions":8494,"dossier":47,"occurrenceCount":578,"directOccurrenceCount":39,"evidenceFiles":8495},"package:npm:zwitch","zwitch-d8ea4eb0","npm:zwitch","zwitch",[620],[4848],[95,104],[8497,8536,8573,8598,8620,8655,8679,8701,8724,8747,8778,8805,8840,8871,8904,8935,8969,9005,9048,9078,9108,9140,9165,9197,9222,9262,9292,9317,9343,9379,9401,9431,9454,9482,9510,9536,9567,9594,9612,9634,9661,9701,9737,9756,9780,9809,9831,9849,9872,9902,9926,9959,9984,10013,10037,10054,10081,10107,10129,10148,10174,10195,10219,10240,10265,10290,10310,10339,10357,10388,10409,10434,10453,10471,10494,10521,10545,10568,10592,10623,10652,10674,10692,10733,10758,10781,10805,10825,10850,10879,10902,10926,10954,10981,11004,11027,11054,11076,11103,11120,11153,11191,11205,11229,11252,11281,11299,11323,11346,11367,11397,11420,11443,11473,11500,11527,11546,11572,11598,11619,11642,11672,11695,11718,11744,11761,11781,11807,11833,11860,11883,11904,11927,11953,11976,12012,12038,12060,12083,12120,12145,12168,12189,12211,12234,12266,12289,12321,12345,12373,12405,12427,12467,12490,12518,12537,12563,12590,12609,12630,12654,12678,12704,12732,12783,12815,12835,12857,12887,12905,12936,12958,12981,13013,13037,13073,13093,13120,13149,13173,13201,13223,13245,13277,13300,13327,13350,13376,13405,13443,13469,13493,13515,13542,13566,13631,13658,13678,13708,13730,13750,13770,13795,13814,13839,13861,13881,13902,13925,13979,14002,14034,14061,14084,14104,14125,14145,14166,14191,14213,14248,14273,14293,14314,14338,14358,14383,14407,14429,14457,14480,14503,14532,14550,14571,14590,14609,14636,14664,14689,14714,14741,14765,14798,14823,14848,14866,14885,14912,14935,14956,14980,15005,15028,15051,15079,15098,15121,15142,15157,15174,15208,15226,15248,15266,15288,15315,15338,15370,15402,15422,15446,15467,15490,15512,15532,15556,15580,15614,15635,15656,15679,15706,15732,15756,15777,15802,15834,15855,15879,15906,15930,15954,15978,16007,16037,16061,16081,16100,16118,16145,16167,16204,16225,16255,16283,16308,16340,16363,16388,16416,16441,16464,16487,16516,16541,16562,16584,16606,16651,16672,16696,16717,16744,16772,16790,16813,16832,16854,16878,16902,16919,16946,16966,16990,17016,17043,17061,17082,17106,17127,17145,17171,17188,17213,17239,17259,17279,17302,17321,17344,17372,17396,17423,17442,17461,17482,17514,17538,17590,17614,17642,17664,17687,17719,17740,17767,17789,17812,17831,17851,17880,17910,17935,17959,17982,18009,18039,18059,18075,18095,18121,18145,18166,18190,18207,18230,18250,18277,18304,18332,18355,18373,18395,18434,18458,18482,18505,18531,18555,18582,18601,18621,18651,18672,18692,18709,18761,18788,18811,18837,18856,18875,18909,18936,18958,18981,19000,19027,19046,19069,19090,19117,19140,19160,19177,19210,19235,19262,19292,19319,19336],{"id":124,"slug":8498,"dossier":91,"summary":8499,"aliases":8500,"sourceIds":8503,"published":8504,"modified":8505,"checkedAt":7,"severity":8506,"references":8510,"versionKeys":8524,"packageCount":32,"repositoryCount":8535},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[8501,8502],"BIT-pillow-2026-112390","CVE-2026-112390",[124],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[8507],{"type":8508,"score":8509},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8511,8514,8517,8519,8522],{"type":8512,"url":8513},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":8515,"url":8516},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":8512,"url":8518},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":8520,"url":8521},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":8512,"url":8523},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",19,{"id":125,"slug":8537,"dossier":47,"summary":8538,"aliases":8539,"sourceIds":8542,"published":8543,"modified":8544,"checkedAt":7,"severity":8545,"references":8551,"versionKeys":8569,"packageCount":32,"repositoryCount":34},"ghsa-239g-whfq-7xj9-ede3fcd6","GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution",[8540,8541],"CVE-2026-87817","PYSEC-2026-3982",[125,8541],"2026-09-09T12:17:16.830Z","2026-09-30T23:45:04.022111787Z",[8546,8549],{"type":8547,"score":8548},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8508,"score":8550},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8552,8555,8557,8559,8561,8563,8565,8567],{"type":8553,"url":8554},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-239g-whfq-7xj9",{"type":8515,"url":8556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87817",{"type":8512,"url":8558},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2218",{"type":8512,"url":8560},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fc7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b",{"type":8520,"url":8562},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":8512,"url":8564},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.60",{"type":8512,"url":8566},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3982.yaml",{"type":8515,"url":8568},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation",[8570,8571,8572],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":126,"slug":8574,"dossier":47,"summary":8575,"aliases":8576,"sourceIds":8578,"published":8579,"modified":8580,"checkedAt":7,"severity":8581,"references":8584,"versionKeys":8593,"packageCount":32,"repositoryCount":578},"ghsa-23c5-xmqv-rm74-946f15d0","minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",[8577],"CVE-2026-27904",[126],"2026-02-26T22:07:15Z","2026-09-10T03:50:59.274637421Z",[8582],{"type":8547,"score":8583},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[8585,8587,8589,8591],{"type":8512,"url":8586},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-23c5-xmqv-rm74",{"type":8515,"url":8588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27904",{"type":8512,"url":8590},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F11d0df6165d15a955462316b26d52e5efae06fce",{"type":8520,"url":8592},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch",[8594,8595,8596,8597],"npm:minimatch@10.0.3","npm:minimatch@10.1.1","npm:minimatch@3.1.2","npm:minimatch@9.0.5",{"id":127,"slug":8599,"dossier":47,"summary":8600,"aliases":8601,"sourceIds":8603,"published":8604,"modified":8605,"checkedAt":7,"severity":8606,"references":8609,"versionKeys":8619,"packageCount":32,"repositoryCount":34},"ghsa-23mf-xhv8-69c2-0feffb42","GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)",[8602],"CVE-2026-110859",[127],"2026-10-27T15:28:03Z","2026-10-27T15:47:08.812491596Z",[8607],{"type":8508,"score":8608},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8610,8612,8614,8616,8617],{"type":8512,"url":8611},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-23mf-xhv8-69c2",{"type":8512,"url":8613},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2233",{"type":8512,"url":8615},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8da65080849a56a2fc9f3e7817bbf0524e8397d5",{"type":8520,"url":8562},{"type":8512,"url":8618},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.2.0",[8570,8571,8572],{"id":128,"slug":8621,"dossier":47,"summary":8622,"aliases":8623,"sourceIds":8626,"published":8627,"modified":8628,"checkedAt":7,"severity":8629,"references":8632,"versionKeys":8653,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[8624,8625],"CVE-2024-39689","PYSEC-2024-230",[128,8625],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[8630],{"type":8547,"score":8631},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[8633,8635,8637,8640,8642,8644,8647,8649,8651],{"type":8515,"url":8634},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":8515,"url":8636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":8638,"url":8639},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":8520,"url":8641},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":8512,"url":8643},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":8645,"url":8646},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":8512,"url":8648},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":8515,"url":8650},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":8515,"url":8652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[8654],"pypi:certifi@2024.6.2",{"id":129,"slug":8656,"dossier":91,"summary":8657,"aliases":8658,"sourceIds":8661,"published":8662,"modified":8663,"checkedAt":7,"severity":8664,"references":8667,"versionKeys":8678,"packageCount":32,"repositoryCount":8535},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[8659,8660],"BIT-pillow-2026-96638","CVE-2026-96638",[129],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[8665],{"type":8547,"score":8666},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[8668,8670,8672,8674,8676,8677],{"type":8512,"url":8669},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":8515,"url":8671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":8512,"url":8673},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":8512,"url":8675},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":130,"slug":8680,"dossier":91,"summary":8681,"aliases":8682,"sourceIds":8685,"published":8686,"modified":8687,"checkedAt":7,"severity":8688,"references":8691,"versionKeys":8700,"packageCount":32,"repositoryCount":8535},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[8683,8684],"BIT-pillow-2026-112391","CVE-2026-112391",[130],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[8689],{"type":8508,"score":8690},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8692,8694,8696,8698,8699],{"type":8512,"url":8693},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":8515,"url":8695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":8512,"url":8697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":131,"slug":8702,"dossier":47,"summary":8703,"aliases":8704,"sourceIds":8706,"published":8707,"modified":8708,"checkedAt":7,"severity":8709,"references":8711,"versionKeys":8722,"packageCount":32,"repositoryCount":578},"ghsa-25h7-pfq9-p65f-1f62933a","flatted vulnerable to unbounded recursion DoS in parse() revive phase",[8705],"CVE-2026-32141",[131],"2026-03-13T15:40:42Z","2026-09-10T03:50:36.276174418Z",[8710],{"type":8547,"score":8583},[8712,8714,8716,8718,8720],{"type":8512,"url":8713},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fsecurity\u002Fadvisories\u002FGHSA-25h7-pfq9-p65f",{"type":8515,"url":8715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32141",{"type":8512,"url":8717},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fpull\u002F88",{"type":8512,"url":8719},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fcommit\u002F7eb65d857e1a40de11c47461cdbc8541449f0606",{"type":8520,"url":8721},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted",[8723],"npm:flatted@3.3.3",{"id":132,"slug":8725,"dossier":91,"summary":8726,"aliases":8727,"sourceIds":8731,"published":8732,"modified":8733,"checkedAt":7,"severity":8734,"references":8737,"versionKeys":8746,"packageCount":32,"repositoryCount":8535},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[8728,8729,8730],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[132,8730],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[8735,8736],{"type":8508,"score":8509},{"type":8547,"score":8583},[8738,8740,8742,8744,8745],{"type":8638,"url":8739},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":8515,"url":8741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":8638,"url":8743},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":133,"slug":8748,"dossier":47,"summary":8749,"aliases":8750,"sourceIds":8752,"published":8753,"modified":8754,"checkedAt":7,"severity":8755,"references":8757,"versionKeys":8774,"packageCount":32,"repositoryCount":578},"ghsa-27r3-jxmh-p828-539d4c66","body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body",[8751],"CVE-2026-111181",[133],"2026-10-23T20:53:11Z","2026-10-23T21:00:06.131613693Z",[8756],{"type":8547,"score":8583},[8758,8760,8762,8764,8766,8768,8770,8772],{"type":8512,"url":8759},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fsecurity\u002Fadvisories\u002FGHSA-27r3-jxmh-p828",{"type":8515,"url":8761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111181",{"type":8512,"url":8763},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F1260c3845f54502a05a87594f09a334786bb34d7",{"type":8512,"url":8765},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002Ff7075eae3a84c3473ab4bf0a777da28db208e916",{"type":8512,"url":8767},"https:\u002F\u002Fcna.openjsf.org\u002Fsecurity-advisories.html",{"type":8520,"url":8769},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser",{"type":8512,"url":8771},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002F1.20.9",{"type":8512,"url":8773},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002Fv2.4.0",[8775,8776,8777],"npm:body-parser@1.20.3","npm:body-parser@1.20.4","npm:body-parser@2.3.0",{"id":134,"slug":8779,"dossier":47,"summary":8780,"aliases":8781,"sourceIds":8784,"published":8785,"modified":8786,"checkedAt":7,"severity":8787,"references":8794,"versionKeys":8804,"packageCount":32,"repositoryCount":34},"ghsa-284h-m62q-gf8w-da9acb0c","GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE",[8782,8783],"CVE-2026-78676","PYSEC-2026-3786",[134,8783],"2026-08-25T02:16:52.030Z","2026-09-08T19:00:06.885837775Z",[8788,8790,8792],{"type":8547,"score":8789},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8508,"score":8791},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8508,"score":8793},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8795,8797,8799,8800,8802],{"type":8553,"url":8796},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-284h-m62q-gf8w",{"type":8515,"url":8798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78676",{"type":8520,"url":8562},{"type":8512,"url":8801},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3786.yaml",{"type":8515,"url":8803},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-config-injection",[8570,8571,8572],{"id":135,"slug":8806,"dossier":47,"summary":8807,"aliases":8808,"sourceIds":8810,"published":8811,"modified":8812,"checkedAt":7,"severity":8813,"references":8815,"versionKeys":8834,"packageCount":32,"repositoryCount":831},"ghsa-2883-xcg3-v3hh-763c5083","js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources",[8809],"CVE-2026-84375",[135],"2026-09-08T21:24:51Z","2026-09-08T21:30:05.575808098Z",[8814],{"type":8547,"score":8583},[8816,8818,8820,8822,8824,8826,8828,8830,8832],{"type":8512,"url":8817},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-2883-xcg3-v3hh",{"type":8515,"url":8819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84375",{"type":8512,"url":8821},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fpull\u002F797",{"type":8512,"url":8823},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F3485bc06ff8a0251505f44a00414d90df2466639",{"type":8512,"url":8825},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F6a8e05f9a485188ed730ac81e81ae221352ef480",{"type":8512,"url":8827},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002Fd90b6612a5a84385bdcb556c44578eac76dc0f6b",{"type":8520,"url":8829},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml",{"type":8512,"url":8831},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F3.15.2",{"type":8512,"url":8833},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F4.3.2",[8835,8836,8837,8838,8839],"npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1","npm:js-yaml@4.3.0",{"id":136,"slug":8841,"dossier":47,"summary":8842,"aliases":8843,"sourceIds":8845,"published":8846,"modified":8847,"checkedAt":7,"severity":8848,"references":8852,"versionKeys":8869,"packageCount":32,"repositoryCount":831},"ghsa-28wg-ghj8-5hjv-10215c04","nanoid: non-secure generators can loop indefinitely with negative size",[8844],"CVE-2026-67214",[136],"2026-07-29T15:31:12Z","2026-09-10T03:50:51.191256883Z",[8849,8851],{"type":8547,"score":8850},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":8508,"score":8509},[8853,8855,8857,8859,8861,8863,8865,8867],{"type":8515,"url":8854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67214",{"type":8512,"url":8856},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F600",{"type":8512,"url":8858},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F601",{"type":8512,"url":8860},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F6ccc67bbaba71d3d77a21d9b636f4171a268ce49",{"type":8512,"url":8862},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fe835c9b71eab832bc6106944bdd26ea96cf2c66d",{"type":8520,"url":8864},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid",{"type":8512,"url":8866},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.16",{"type":8512,"url":8868},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-negative-size-in-non-secure-module",[8870],"npm:nanoid@3.3.11",{"id":137,"slug":8872,"dossier":47,"summary":8873,"aliases":8874,"sourceIds":8877,"published":8878,"modified":8879,"checkedAt":7,"severity":8880,"references":8883,"versionKeys":8900,"packageCount":32,"repositoryCount":782},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[8875,8876],"CVE-2025-54121","PYSEC-2026-1941",[137,8876],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[8881],{"type":8547,"score":8882},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[8884,8886,8888,8890,8892,8894,8896,8898],{"type":8512,"url":8885},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":8515,"url":8887},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":8638,"url":8889},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":8520,"url":8891},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":8512,"url":8893},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":8512,"url":8895},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":8520,"url":8897},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":8515,"url":8899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[8901,8902,8903],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":138,"slug":8905,"dossier":47,"summary":8906,"aliases":8907,"sourceIds":8910,"published":8911,"modified":8912,"checkedAt":7,"severity":8913,"references":8916,"versionKeys":8934,"packageCount":32,"repositoryCount":34},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[8908,8909],"CVE-2026-67325","PYSEC-2026-3836",[138,8909],"2026-07-21T19:43:43Z","2026-09-23T05:15:05.950374846Z",[8914],{"type":8547,"score":8915},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8917,8919,8921,8923,8925,8926,8928,8930,8932],{"type":8512,"url":8918},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":8515,"url":8920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67325",{"type":8512,"url":8922},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":8512,"url":8924},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":8520,"url":8562},{"type":8512,"url":8927},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",{"type":8512,"url":8929},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-option-prefix-abbreviation",{"type":8520,"url":8931},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fgitpython",{"type":8515,"url":8933},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",[8570,8571,8572],{"id":139,"slug":8936,"dossier":47,"summary":8937,"aliases":8938,"sourceIds":8941,"published":8942,"modified":8943,"checkedAt":7,"severity":8944,"references":8948,"versionKeys":8959,"packageCount":32,"repositoryCount":66},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[8939,8940],"CVE-2026-54279","PYSEC-2026-2112",[139,8940],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[8945,8946],{"type":8547,"score":8583},{"type":8508,"score":8947},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[8949,8951,8953,8955,8957],{"type":8515,"url":8950},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":8515,"url":8952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":8638,"url":8954},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":8520,"url":8956},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":8512,"url":8958},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[8960,8961,8962,8963,8964,8965,8966,8967,8968],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":140,"slug":8970,"dossier":47,"summary":8971,"aliases":8972,"sourceIds":8974,"published":8975,"modified":8976,"checkedAt":7,"severity":8977,"references":8980,"versionKeys":9003,"packageCount":32,"repositoryCount":578},"ghsa-2g4f-4pwh-qvx6-26ecd362","ajv has ReDoS when using `$data` option",[8973],"CVE-2025-69873",[140],"2026-02-11T21:30:39Z","2026-09-10T03:50:33.716487588Z",[8978],{"type":8508,"score":8979},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8981,8983,8985,8987,8989,8991,8993,8995,8997,8999,9001],{"type":8515,"url":8982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69873",{"type":8512,"url":8984},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2586",{"type":8512,"url":8986},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2588",{"type":8512,"url":8988},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2590",{"type":8512,"url":8990},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F6991",{"type":8512,"url":8992},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fcommit\u002F720a23fa453ffae8340e92c9b0fe886c54cfe0d5",{"type":8512,"url":8994},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69873-ajv-ReDoS.md",{"type":8515,"url":8996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g4f-4pwh-qvx6",{"type":8520,"url":8998},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv",{"type":8512,"url":9000},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Freleases\u002Ftag\u002Fv6.14.0",{"type":8512,"url":9002},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Freleases\u002Ftag\u002Fv8.18.0",[9004],"npm:ajv@6.12.6",{"id":141,"slug":9006,"dossier":47,"summary":9007,"aliases":9008,"sourceIds":9010,"published":9011,"modified":9012,"checkedAt":7,"severity":9013,"references":9016,"versionKeys":9044,"packageCount":32,"repositoryCount":9047},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[9009],"CVE-2026-123817",[141],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[9014],{"type":8508,"score":9015},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9017,9019,9021,9023,9025,9027,9029,9031,9033,9035,9037,9039,9041,9042],{"type":8512,"url":9018},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":8512,"url":9020},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":8512,"url":9022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":8512,"url":9024},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":8512,"url":9026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":8512,"url":9028},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":8512,"url":9030},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":8512,"url":9032},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":8512,"url":9034},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":8512,"url":9036},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":8512,"url":9038},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":8512,"url":9040},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":8520,"url":8956},{"type":8512,"url":9043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":142,"slug":9049,"dossier":47,"summary":9050,"aliases":9051,"sourceIds":9053,"published":9054,"modified":9055,"checkedAt":7,"severity":9056,"references":9059,"versionKeys":9075,"packageCount":32,"repositoryCount":32},"ghsa-2gqq-gqf2-x968-3100bf54","undici vulnerable to response truncation via oversized chunked responses in the dump interceptor",[9052],"CVE-2026-84947",[142],"2026-09-29T18:18:51Z","2026-09-29T18:28:11.302166457Z",[9057],{"type":8547,"score":9058},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[9060,9062,9064,9066,9068,9069,9071,9073],{"type":8512,"url":9061},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2gqq-gqf2-x968",{"type":8515,"url":9063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84947",{"type":8512,"url":9065},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F21693f406f0142f3504192e9f9b022dcf84782ae",{"type":8512,"url":9067},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6d583124e7cf60b640097d64144ed633cc450584",{"type":8512,"url":8767},{"type":8520,"url":9070},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici",{"type":8512,"url":9072},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.29.1",{"type":8512,"url":9074},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.10.2",[9076,9077],"npm:undici@7.13.0","npm:undici@7.18.2",{"id":143,"slug":9079,"dossier":47,"summary":9080,"aliases":9081,"sourceIds":9084,"published":9085,"modified":9086,"checkedAt":7,"severity":9087,"references":9089,"versionKeys":9104,"packageCount":32,"repositoryCount":782},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[9082,9083],"CVE-2026-101917","PYSEC-2026-4140",[143,9083],"2026-09-29T23:11:51Z","2026-10-01T17:56:20.150726241Z",[9088],{"type":8547,"score":8882},[9090,9092,9094,9096,9098,9100,9102],{"type":8512,"url":9091},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":8515,"url":9093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":8512,"url":9095},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":8520,"url":9097},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":8512,"url":9099},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",{"type":8520,"url":9101},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyjwt",{"type":8515,"url":9103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",[9105,9106,9107],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":144,"slug":9109,"dossier":47,"summary":9110,"aliases":9111,"sourceIds":9114,"published":9115,"modified":9116,"checkedAt":7,"severity":9117,"references":9120,"versionKeys":9137,"packageCount":32,"repositoryCount":745},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[9112,9113],"CVE-2026-44307","PYSEC-2026-2617",[144,9113],"2026-05-06T21:45:16Z","2026-09-10T03:50:45.452547864Z",[9118],{"type":8508,"score":9119},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9121,9123,9125,9127,9129,9131,9133,9135],{"type":8512,"url":9122},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":8515,"url":9124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":8512,"url":9126},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":8512,"url":9128},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":8520,"url":9130},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":8512,"url":9132},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":8520,"url":9134},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":8515,"url":9136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[9138,9139],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":145,"slug":9141,"dossier":47,"summary":9142,"aliases":9143,"sourceIds":9145,"published":9146,"modified":9147,"checkedAt":7,"severity":9148,"references":9151,"versionKeys":9164,"packageCount":32,"repositoryCount":32},"ghsa-2jfj-6hjv-fm6j-6286571a","undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches",[9144],"CVE-2026-84933",[145],"2026-09-29T18:19:58Z","2026-09-29T18:30:41.174435110Z",[9149],{"type":8547,"score":9150},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[9152,9154,9156,9158,9160,9161,9162,9163],{"type":8512,"url":9153},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2jfj-6hjv-fm6j",{"type":8515,"url":9155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84933",{"type":8512,"url":9157},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb6c5a00252c37da9dd2db9bead053bb843e1f988",{"type":8512,"url":9159},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcb75bbb34224a968b4ad80cab8b7aba5e0b3b28a",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":146,"slug":9166,"dossier":47,"summary":9167,"aliases":9168,"sourceIds":9170,"published":9171,"modified":9172,"checkedAt":7,"severity":9173,"references":9176,"versionKeys":9195,"packageCount":32,"repositoryCount":578},"ghsa-2m5v-pch6-74hx-9bc28a85","undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent",[9169],"CVE-2026-109383",[146],"2026-10-27T19:02:26Z","2026-10-27T19:15:22.407771210Z",[9174],{"type":8547,"score":9175},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9177,9179,9181,9183,9185,9187,9188,9189,9191,9193],{"type":8512,"url":9178},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2m5v-pch6-74hx",{"type":8515,"url":9180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109383",{"type":8512,"url":9182},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F04cb74b1db131ff8f5b4557dce811cbf5f4664b4",{"type":8512,"url":9184},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F8c59f6b302898cb2e9b0f7962cd7212b6e597c9f",{"type":8512,"url":9186},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Ff75eac00ac177f7b2e6c8bfbd52d4113164286e6",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9190},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.29.1",{"type":8512,"url":9192},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.30.1",{"type":8512,"url":9194},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.12.2",[9076,9077,9196],"npm:undici@7.29.1",{"id":147,"slug":9198,"dossier":47,"summary":9199,"aliases":9200,"sourceIds":9202,"published":9203,"modified":9204,"checkedAt":7,"severity":9205,"references":9208,"versionKeys":9221,"packageCount":32,"repositoryCount":32},"ghsa-2mjp-6q6p-2qxm-7fbfca50","Undici has an HTTP Request\u002FResponse Smuggling issue",[9201],"CVE-2026-1525",[147],"2026-03-13T20:07:03Z","2026-09-10T03:50:36.493109202Z",[9206],{"type":8547,"score":9207},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[9209,9211,9213,9215,9216,9218,9219],{"type":8512,"url":9210},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2mjp-6q6p-2qxm",{"type":8515,"url":9212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1525",{"type":8512,"url":9214},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3556037",{"type":8512,"url":8767},{"type":8512,"url":9217},"https:\u002F\u002Fcwe.mitre.org\u002Fdata\u002Fdefinitions\u002F444.html",{"type":8520,"url":9070},{"type":8512,"url":9220},"https:\u002F\u002Fwww.rfc-editor.org\u002Frfc\u002Frfc9110.html#section-8.6",[9076,9077],{"id":148,"slug":9223,"dossier":47,"summary":9224,"aliases":9225,"sourceIds":9229,"published":9230,"modified":9231,"checkedAt":7,"severity":9232,"references":9235,"versionKeys":9260,"packageCount":32,"repositoryCount":32},"ghsa-2qfp-q593-8484-b683fc2e","Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation",[9226,9227,9228],"CVE-2025-6176","PYSEC-2026-1906","PYSEC-2026-2401",[148,9228],"2025-10-31T00:30:35Z","2026-09-10T03:50:29.153413546Z",[9233],{"type":8547,"score":9234},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[9236,9238,9240,9242,9244,9246,9248,9250,9252,9254,9256,9258],{"type":8515,"url":9237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6176",{"type":8512,"url":9239},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1327",{"type":8512,"url":9241},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1375",{"type":8512,"url":9243},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fpull\u002F1234",{"type":8512,"url":9245},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fpull\u002F7134",{"type":8512,"url":9247},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F67d78bc41db1a0d03f2e763497748f2f69946627",{"type":8512,"url":9249},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fcommit\u002F14737e91edc513967f516fc839cc9c8a4f8d91da",{"type":8520,"url":9251},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli",{"type":8512,"url":9253},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Freleases\u002Ftag\u002Fv1.2.0",{"type":8512,"url":9255},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2c26a886-5984-47ee-a421-0d5fe1344eb0",{"type":8520,"url":9257},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotli",{"type":8515,"url":9259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2qfp-q593-8484",[9261],"pypi:brotli@1.1.0",{"id":149,"slug":9263,"dossier":47,"summary":9264,"aliases":9265,"sourceIds":9267,"published":8846,"modified":9268,"checkedAt":7,"severity":9269,"references":9272,"versionKeys":9290,"packageCount":32,"repositoryCount":782},"ghsa-2v37-7h3g-55p8-563431fd","nanoid: custom generators can loop indefinitely when size is zero",[9266],"CVE-2026-67213",[149],"2026-09-10T03:50:51.243328986Z",[9270,9271],{"type":8547,"score":8850},{"type":8508,"score":8509},[9273,9275,9277,9279,9281,9282,9284,9286,9288],{"type":8515,"url":9274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67213",{"type":8512,"url":9276},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fcb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",{"type":8512,"url":9278},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fe10f8d40ce9d1ab47f66d65a16b48086432730d0",{"type":8512,"url":9280},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Ff9d13f150847d117877adee3460a46eceb0cf49b",{"type":8520,"url":8864},{"type":8512,"url":9283},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.17",{"type":8512,"url":9285},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.18",{"type":8512,"url":9287},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.6",{"type":8512,"url":9289},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",[8870,9291],"npm:nanoid@3.3.16",{"id":150,"slug":9293,"dossier":47,"summary":9294,"aliases":9295,"sourceIds":9298,"published":9299,"modified":9300,"checkedAt":7,"severity":9301,"references":9306,"versionKeys":9316,"packageCount":32,"repositoryCount":677},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[9296,9297],"CVE-2026-34514","PYSEC-2026-2096",[150,9297],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[9302,9304],{"type":8508,"score":9303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":9305},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[9307,9309,9311,9313,9314],{"type":8638,"url":9308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":8515,"url":9310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":8638,"url":9312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":8520,"url":8956},{"type":8515,"url":9315},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[8960,8961,8962,8963,8964,8965,8966,8967],{"id":151,"slug":9318,"dossier":47,"summary":9319,"aliases":9320,"sourceIds":9323,"published":9324,"modified":9325,"checkedAt":7,"severity":9326,"references":9328,"versionKeys":9339,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[9321,9322],"CVE-2026-49476","PYSEC-2026-3071",[151,9322],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[9327],{"type":8547,"score":8583},[9329,9331,9333,9335,9337],{"type":8512,"url":9330},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":8520,"url":9332},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":8520,"url":9334},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":8515,"url":9336},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":8515,"url":9338},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[9340,9341,9342],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":152,"slug":9344,"dossier":47,"summary":9345,"aliases":9346,"sourceIds":9349,"published":9350,"modified":9351,"checkedAt":7,"severity":9352,"references":9355,"versionKeys":9372,"packageCount":32,"repositoryCount":9378},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[9347,9348],"CVE-2025-66471","PYSEC-2026-1994",[152,9348],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[9353],{"type":8508,"score":9354},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[9356,9358,9360,9362,9364,9366,9368,9370],{"type":8512,"url":9357},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":8515,"url":9359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":8638,"url":9361},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":8512,"url":9363},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":8515,"url":9365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":8512,"url":9367},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":8520,"url":9369},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":8520,"url":9371},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[9373,9374,9375,9376,9377],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":153,"slug":9380,"dossier":91,"summary":9381,"aliases":9382,"sourceIds":9385,"published":9386,"modified":9387,"checkedAt":7,"severity":9388,"references":9391,"versionKeys":9400,"packageCount":32,"repositoryCount":8535},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[9383,9384],"BIT-pillow-2026-112393","CVE-2026-112393",[153],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[9389],{"type":8508,"score":9390},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9392,9394,9396,9398,9399],{"type":8512,"url":9393},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":8515,"url":9395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":8512,"url":9397},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":154,"slug":9402,"dossier":47,"summary":9403,"aliases":9404,"sourceIds":9406,"published":9407,"modified":9408,"checkedAt":7,"severity":9409,"references":9411,"versionKeys":9429,"packageCount":32,"repositoryCount":32},"ghsa-333x-w4r6-6crp-edd42481","fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references",[9405],"CVE-2026-110725",[154],"2026-10-23T21:36:40Z","2026-10-23T21:45:04.900311356Z",[9410],{"type":8547,"score":9058},[9412,9414,9416,9418,9420,9421,9423,9425,9427],{"type":8512,"url":9413},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-333x-w4r6-6crp",{"type":8515,"url":9415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110725",{"type":8512,"url":9417},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F39e6493c1356f30a0084171627eb266786e1620e",{"type":8512,"url":9419},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fa9b8d67353630aab053cd727cf629023dd018d2b",{"type":8512,"url":8767},{"type":8520,"url":9422},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri",{"type":8512,"url":9424},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv2.4.8",{"type":8512,"url":9426},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv3.1.9",{"type":8512,"url":9428},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv4.2.3",[9430],"npm:fast-uri@3.1.8",{"id":155,"slug":9432,"dossier":47,"summary":9433,"aliases":9434,"sourceIds":9436,"published":9437,"modified":9438,"checkedAt":7,"severity":9439,"references":9442,"versionKeys":9451,"packageCount":32,"repositoryCount":32},"ghsa-35jp-ww65-95wh-20697265","axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`",[9435],"CVE-2026-44494",[155],"2026-05-29T16:04:00Z","2026-09-10T03:51:04.268287831Z",[9440],{"type":8547,"score":9441},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N",[9443,9445,9447,9449],{"type":8512,"url":9444},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-35jp-ww65-95wh",{"type":8515,"url":9446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44494",{"type":8515,"url":9448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fvcv-3m26-pcqx",{"type":8520,"url":9450},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios",[9452,9453],"npm:axios@1.11.0","npm:axios@1.13.2",{"id":156,"slug":9455,"dossier":47,"summary":9456,"aliases":9457,"sourceIds":9459,"published":9460,"modified":9461,"checkedAt":7,"severity":9462,"references":9464,"versionKeys":9481,"packageCount":32,"repositoryCount":32},"ghsa-35p6-xmwp-9g52-9ca8b935","undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse",[9458],"CVE-2026-6733",[156],"2026-06-19T14:19:13Z","2026-09-10T03:51:07.666603424Z",[9463],{"type":8547,"score":9058},[9465,9467,9469,9471,9473,9474,9475,9477,9479],{"type":8512,"url":9466},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-35p6-xmwp-9g52",{"type":8515,"url":9468},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6733",{"type":8512,"url":9470},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6ea54ef8c4051e95bb68c89d4a5c9274fe6fbb4b",{"type":8512,"url":9472},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3582376",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9476},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.27.0",{"type":8512,"url":9478},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.28.0",{"type":8512,"url":9480},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.5.0",[9076,9077],{"id":157,"slug":9483,"dossier":47,"summary":9484,"aliases":9485,"sourceIds":9489,"published":9490,"modified":9491,"checkedAt":7,"severity":9492,"references":9494,"versionKeys":9508,"packageCount":32,"repositoryCount":32},"ghsa-37ch-88jc-xwx2-2809a0d1","path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",[9486,9487,9488],"CVE-2024-45296","CVE-2026-4867","GHSA-9wv6-86v2-598j",[157],"2026-03-27T20:04:53Z","2026-09-10T03:50:36.768786245Z",[9493],{"type":8547,"score":8583},[9495,9497,9499,9501,9502,9504,9506],{"type":8512,"url":9496},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp\u002Fsecurity\u002Fadvisories\u002FGHSA-37ch-88jc-xwx2",{"type":8515,"url":9498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4867",{"type":8512,"url":9500},"https:\u002F\u002Fblakeembrey.com\u002Fposts\u002F2024-09-web-redos",{"type":8512,"url":8767},{"type":8515,"url":9503},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wv6-86v2-598j",{"type":8520,"url":9505},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp",{"type":8512,"url":9507},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp\u002Freleases\u002Ftag\u002Fv.0.1.13",[9509],"npm:path-to-regexp@0.1.12",{"id":158,"slug":9511,"dossier":47,"summary":9512,"aliases":9513,"sourceIds":9516,"published":9517,"modified":9518,"checkedAt":7,"severity":9519,"references":9522,"versionKeys":9535,"packageCount":32,"repositoryCount":9378},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[9514,9515],"CVE-2026-21441","PYSEC-2026-1996",[158,9515],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[9520,9521],{"type":8547,"score":8583},{"type":8508,"score":9354},[9523,9525,9527,9529,9530,9532,9533],{"type":8512,"url":9524},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":8515,"url":9526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":8638,"url":9528},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":8520,"url":9369},{"type":8512,"url":9531},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":8520,"url":9371},{"type":8515,"url":9534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[9373,9374,9375,9376,9377],{"id":159,"slug":9537,"dossier":47,"summary":9538,"aliases":9539,"sourceIds":9542,"published":9543,"modified":9544,"checkedAt":7,"severity":9545,"references":9548,"versionKeys":9561,"packageCount":32,"repositoryCount":698},"ghsa-394h-qwmc-48pf-2e9bb5ce","virtualenv: Xonsh activation literals depend on the script decoding codec",[9540,9541],"BIT-virtualenv-2026-113718","CVE-2026-113718",[159],"2026-10-23T22:24:43Z","2026-10-29T10:55:57.228294866Z",[9546],{"type":8508,"score":9547},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9549,9551,9553,9555,9557,9559],{"type":8512,"url":9550},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-394h-qwmc-48pf",{"type":8515,"url":9552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113718",{"type":8512,"url":9554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3432",{"type":8512,"url":9556},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe5fc2e6e189a877ff559af288919e3525d13e5e0",{"type":8520,"url":9558},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":8512,"url":9560},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.9",[9562,9563,9564,9565,9566],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.32.0","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":160,"slug":9568,"dossier":47,"summary":9569,"aliases":9570,"sourceIds":9573,"published":9574,"modified":9575,"checkedAt":7,"severity":9576,"references":9581,"versionKeys":9593,"packageCount":32,"repositoryCount":34},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[9571,9572],"CVE-2026-73620","PYSEC-2026-3949",[160,9572],"2026-08-03T20:09:56Z","2026-09-10T13:10:44.075529324Z",[9577,9579],{"type":8547,"score":9578},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8508,"score":9580},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9582,9584,9586,9588,9589,9591],{"type":8553,"url":9583},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":8512,"url":9585},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":8512,"url":9587},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":8520,"url":8562},{"type":8512,"url":9590},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",{"type":8515,"url":9592},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-and-read",[8570,8571,8572],{"id":161,"slug":9595,"dossier":47,"summary":9596,"aliases":9597,"sourceIds":9599,"published":9600,"modified":9601,"checkedAt":7,"severity":9602,"references":9605,"versionKeys":9611,"packageCount":32,"repositoryCount":32},"ghsa-3g43-6gmg-66jw-7dc8cdbd","axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge",[9598],"CVE-2026-44495",[161],"2026-05-29T16:07:31Z","2026-09-10T03:51:04.440180855Z",[9603],{"type":8547,"score":9604},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[9606,9608,9610],{"type":8512,"url":9607},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3g43-6gmg-66jw",{"type":8515,"url":9609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44495",{"type":8520,"url":9450},[9452,9453],{"id":162,"slug":9613,"dossier":47,"summary":9614,"aliases":9615,"sourceIds":9617,"published":9618,"modified":9619,"checkedAt":7,"severity":9620,"references":9623,"versionKeys":9632,"packageCount":32,"repositoryCount":32},"ghsa-3gg2-335m-rxc6-7e9ef45b","Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection",[9616],"CVE-2026-126359",[162],"2026-11-12T23:22:36Z","2026-11-12T23:30:03.858972167Z",[9621],{"type":8547,"score":9622},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:N\u002FA:N",[9624,9626,9628,9630],{"type":8512,"url":9625},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fsecurity\u002Fadvisories\u002FGHSA-3gg2-335m-rxc6",{"type":8512,"url":9627},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fcommit\u002F15bbd96ad1b62a0b189db4fd8dc7bf8ef280c513",{"type":8520,"url":9629},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono",{"type":8512,"url":9631},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Freleases\u002Ftag\u002Fv4.13.16",[9633],"npm:hono@4.13.13",{"id":163,"slug":9635,"dossier":91,"summary":9636,"aliases":9637,"sourceIds":9641,"published":9642,"modified":9643,"checkedAt":7,"severity":9644,"references":9648,"versionKeys":9660,"packageCount":32,"repositoryCount":8535},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[9638,9639,9640],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[163,9640],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[9645,9647],{"type":8508,"score":9646},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":8666},[9649,9651,9653,9656,9658,9659],{"type":8515,"url":9650},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":8515,"url":9652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":9654,"url":9655},"REPORT","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":8638,"url":9657},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":164,"slug":9662,"dossier":47,"summary":9663,"aliases":9664,"sourceIds":9666,"published":9667,"modified":9668,"checkedAt":7,"severity":9669,"references":9673,"versionKeys":9698,"packageCount":32,"repositoryCount":578},"ghsa-3jxr-9vmj-r5cp-a4f3a60d","brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",[9665],"CVE-2026-13149",[164],"2026-07-20T20:51:09Z","2026-09-10T03:51:10.092354944Z",[9670,9671],{"type":8547,"score":8882},{"type":8508,"score":9672},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FS:N\u002FAU:Y\u002FR:U\u002FV:D\u002FRE:M\u002FU:Amber",[9674,9676,9678,9680,9682,9684,9686,9688,9690,9692,9694,9696],{"type":8512,"url":9675},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-3jxr-9vmj-r5cp",{"type":8515,"url":9677},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13149",{"type":8512,"url":9679},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F122",{"type":8512,"url":9681},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F123",{"type":8512,"url":9683},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F835d6be91201122d9adffb0c0c8c094189ace265",{"type":8512,"url":9685},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fc7e33ec13ac1a684c116720843ce24e208611754",{"type":8512,"url":9687},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fd74e63030c012e3b7ae81657b8d665619cd51b95",{"type":8520,"url":9689},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion",{"type":8512,"url":9691},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv1.1.16",{"type":8512,"url":9693},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv2.1.2",{"type":8512,"url":9695},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv5.0.7",{"type":8512,"url":9697},"https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fbrace-expansion",[9699,9700],"npm:brace-expansion@1.1.12","npm:brace-expansion@2.0.2",{"id":165,"slug":9702,"dossier":47,"summary":9703,"aliases":9704,"sourceIds":9706,"published":9707,"modified":9708,"checkedAt":7,"severity":9709,"references":9714,"versionKeys":9736,"packageCount":32,"repositoryCount":32},"ghsa-3p68-rc4w-qgx5-b9fd4cd5","Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",[9705],"CVE-2025-62718",[165],"2026-04-09T17:32:19Z","2026-09-10T03:50:42.452672741Z",[9710,9712],{"type":8547,"score":9711},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":8508,"score":9713},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[9715,9717,9719,9721,9723,9725,9727,9729,9731,9732,9734],{"type":8512,"url":9716},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3p68-rc4w-qgx5",{"type":8515,"url":9718},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62718",{"type":8512,"url":9720},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10661",{"type":8512,"url":9722},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10688",{"type":8512,"url":9724},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F03cdfc99e8db32a390e12128208b6778492cee9c",{"type":8512,"url":9726},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Ffb3befb6daac6cad26b2e54094d0f2d9e47f24df",{"type":8512,"url":9728},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc1034#section-3.1",{"type":8512,"url":9730},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc3986#section-3.2.2",{"type":8520,"url":9450},{"type":8512,"url":9733},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.31.0",{"type":8512,"url":9735},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.0",[9452,9453],{"id":166,"slug":9738,"dossier":47,"summary":9739,"aliases":9740,"sourceIds":9742,"published":9743,"modified":9744,"checkedAt":7,"severity":9745,"references":9747,"versionKeys":9755,"packageCount":32,"repositoryCount":578},"ghsa-3ppc-4f35-3m26-03892396","minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",[9741],"CVE-2026-26996",[166],"2026-02-18T22:38:11Z","2026-09-10T03:50:33.812431744Z",[9746],{"type":8508,"score":9015},[9748,9750,9752,9754],{"type":8512,"url":9749},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-3ppc-4f35-3m26",{"type":8515,"url":9751},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26996",{"type":8512,"url":9753},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F2e111f3a79abc00fa73110195de2c0f2351904f5",{"type":8520,"url":8592},[8594,8595,8596,8597],{"id":167,"slug":9757,"dossier":47,"summary":9758,"aliases":9759,"sourceIds":9761,"published":9762,"modified":9763,"checkedAt":7,"severity":9764,"references":9767,"versionKeys":9779,"packageCount":32,"repositoryCount":32},"ghsa-3pq3-5fj3-cg6v-602045f2","Axios: HTTP\u002F2 adapter bypasses configured DNS lookup and proxy controls",[9760],"CVE-2026-101898",[167],"2026-09-30T15:02:14Z","2026-09-30T15:15:04.067807024Z",[9765],{"type":8508,"score":9766},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[9768,9770,9772,9774,9776,9777],{"type":8512,"url":9769},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3pq3-5fj3-cg6v",{"type":8515,"url":9771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101898",{"type":8512,"url":9773},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11141",{"type":8512,"url":9775},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fd19040bda7a8be2f82c3c6e1a5bc03917daee39a",{"type":8520,"url":9450},{"type":8512,"url":9778},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.20.0",[9453],{"id":168,"slug":9781,"dossier":47,"summary":9782,"aliases":9783,"sourceIds":9786,"published":9787,"modified":9788,"checkedAt":7,"severity":9789,"references":9794,"versionKeys":9808,"packageCount":32,"repositoryCount":34},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[9784,9785],"CVE-2026-69097","PYSEC-2026-3981",[168,9785],"2026-07-24T16:22:02Z","2026-10-23T21:47:05Z",[9790,9792],{"type":8547,"score":9791},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8547,"score":9793},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[9795,9797,9799,9801,9802,9804,9806],{"type":8553,"url":9796},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":8512,"url":9798},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2176",{"type":8512,"url":9800},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":8520,"url":8562},{"type":8512,"url":9803},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",{"type":8512,"url":9805},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3981.yaml",{"type":8515,"url":9807},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-submodule-names",[8570,8571,8572],{"id":169,"slug":9810,"dossier":47,"summary":9811,"aliases":9812,"sourceIds":9814,"published":9815,"modified":9816,"checkedAt":7,"severity":9817,"references":9819,"versionKeys":9828,"packageCount":32,"repositoryCount":831},"ghsa-3v7f-55p6-f55p-cfa06046","Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",[9813],"CVE-2026-33672",[169],"2026-03-25T21:13:39Z","2026-09-10T03:50:36.949634538Z",[9818],{"type":8547,"score":9305},[9820,9822,9824,9826],{"type":8512,"url":9821},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-3v7f-55p6-f55p",{"type":8515,"url":9823},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33672",{"type":8512,"url":9825},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903",{"type":8520,"url":9827},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch",[9829,9830],"npm:picomatch@2.3.1","npm:picomatch@4.0.3",{"id":170,"slug":9832,"dossier":47,"summary":9833,"aliases":9834,"sourceIds":9836,"published":9837,"modified":9838,"checkedAt":7,"severity":9839,"references":9842,"versionKeys":9848,"packageCount":32,"repositoryCount":32},"ghsa-3w6x-2g7m-8v23-acc11428","Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`",[9835],"CVE-2026-42044",[170],"2026-05-05T00:19:33Z","2026-09-10T03:50:45.398396828Z",[9840],{"type":8547,"score":9841},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[9843,9845,9847],{"type":8512,"url":9844},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3w6x-2g7m-8v23",{"type":8515,"url":9846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42044",{"type":8520,"url":9450},[9452,9453],{"id":171,"slug":9850,"dossier":47,"summary":9851,"aliases":9852,"sourceIds":9855,"published":9856,"modified":9857,"checkedAt":7,"severity":9858,"references":9862,"versionKeys":9871,"packageCount":32,"repositoryCount":677},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[9853,9854],"CVE-2026-34517","PYSEC-2026-2099",[171,9854],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[9859,9861],{"type":8508,"score":9860},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":8882},[9863,9865,9867,9869,9870],{"type":8638,"url":9864},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":8515,"url":9866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":8638,"url":9868},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":172,"slug":9873,"dossier":47,"summary":9874,"aliases":9875,"sourceIds":9878,"published":9879,"modified":9880,"checkedAt":7,"severity":9881,"references":9884,"versionKeys":9901,"packageCount":32,"repositoryCount":34},"ghsa-3wxw-xv34-2frg-c013ae2d","GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)",[9876,9877],"CVE-2026-78679","PYSEC-2026-3837",[172,9877],"2026-09-08T19:42:22Z","2026-09-23T05:15:05.925079070Z",[9882],{"type":8547,"score":9883},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[9885,9887,9889,9891,9893,9894,9896,9898,9899],{"type":8512,"url":9886},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",{"type":8515,"url":9888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78679",{"type":8512,"url":9890},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2208",{"type":8512,"url":9892},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6",{"type":8520,"url":8562},{"type":8512,"url":9895},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.59",{"type":8512,"url":9897},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-tagreference-create",{"type":8520,"url":8931},{"type":8515,"url":9900},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",[8570,8571,8572],{"id":173,"slug":9903,"dossier":47,"summary":9904,"aliases":9905,"sourceIds":9907,"published":9908,"modified":9909,"checkedAt":7,"severity":9910,"references":9912,"versionKeys":9925,"packageCount":32,"repositoryCount":32},"ghsa-3xpg-4rpp-hhhm-9f4d35c1","undici vulnerable to Denial of Service via unbounded decompression of compressed responses",[9906],"CVE-2026-84890",[173],"2026-09-29T18:20:37Z","2026-09-29T18:30:41.143057118Z",[9911],{"type":8547,"score":8850},[9913,9915,9917,9919,9921,9922,9923,9924],{"type":8512,"url":9914},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-3xpg-4rpp-hhhm",{"type":8515,"url":9916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84890",{"type":8512,"url":9918},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2c7d7e1227043c644c4c32cfd1e276f4fd4fcb11",{"type":8512,"url":9920},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F7aac7f12f757844763c8b8f1ab6e305e80d55838",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9072},{"type":8512,"url":9074},[9077],{"id":174,"slug":9927,"dossier":47,"summary":9928,"aliases":9929,"sourceIds":9931,"published":9932,"modified":9933,"checkedAt":7,"severity":9934,"references":9936,"versionKeys":9958,"packageCount":32,"repositoryCount":32},"ghsa-42h9-826w-cgv3-ec079418","Axios: Excessive recursion in formDataToJSON can cause denial of service",[9930],"CVE-2026-67313",[174],"2026-07-20T17:58:59Z","2026-09-10T03:51:10.187294734Z",[9935],{"type":8508,"score":8690},[9937,9939,9941,9943,9945,9947,9949,9951,9952,9954,9956],{"type":8512,"url":9938},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-42h9-826w-cgv3",{"type":8515,"url":9940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67313",{"type":8515,"url":9942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68942",{"type":8512,"url":9944},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11000",{"type":8512,"url":9946},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11001",{"type":8512,"url":9948},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F1417285c69344bbcc6420a021f67dee0c6fedb2d",{"type":8512,"url":9950},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F32fc489632377d214db55bfa4e2c48486a7d7ce2",{"type":8520,"url":9450},{"type":8512,"url":9953},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.33.0",{"type":8512,"url":9955},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.18.0",{"type":8512,"url":9957},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-denial-of-service-via-formdatatojson",[9452,9453],{"id":175,"slug":9960,"dossier":47,"summary":9961,"aliases":9962,"sourceIds":9965,"published":9966,"modified":9967,"checkedAt":7,"severity":9968,"references":9970,"versionKeys":9983,"packageCount":32,"repositoryCount":782},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[9963,9964],"CVE-2026-101918","PYSEC-2026-4141",[175,9964],"2026-09-30T15:41:05Z","2026-10-01T17:56:09.538835697Z",[9969],{"type":8547,"score":8882},[9971,9973,9975,9977,9978,9980,9981],{"type":8512,"url":9972},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":8515,"url":9974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":8512,"url":9976},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":8520,"url":9097},{"type":8512,"url":9979},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",{"type":8520,"url":9101},{"type":8515,"url":9982},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",[9105,9106,9107],{"id":176,"slug":9985,"dossier":47,"summary":9986,"aliases":9987,"sourceIds":9989,"published":9990,"modified":9991,"checkedAt":7,"severity":9992,"references":9994,"versionKeys":10012,"packageCount":32,"repositoryCount":32},"ghsa-43fc-jf86-j433-2bd62bad","Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig",[9988],"CVE-2026-25639",[176],"2026-02-09T17:46:14Z","2026-09-10T03:50:34.100599628Z",[9993],{"type":8547,"score":8583},[9995,9997,9999,10001,10003,10005,10007,10008,10010],{"type":8512,"url":9996},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-43fc-jf86-j433",{"type":8515,"url":9998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25639",{"type":8512,"url":10000},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7369",{"type":8512,"url":10002},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7388",{"type":8512,"url":10004},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F28c721588c7a77e7503d0a434e016f852c597b57",{"type":8512,"url":10006},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fd7ff1409c68168d3057fc3891f911b2b92616f9e",{"type":8520,"url":9450},{"type":8512,"url":10009},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.30.3",{"type":8512,"url":10011},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.13.5",[9452,9453],{"id":177,"slug":10014,"dossier":47,"summary":10015,"aliases":10016,"sourceIds":10019,"published":10020,"modified":10021,"checkedAt":7,"severity":10022,"references":10025,"versionKeys":10036,"packageCount":32,"repositoryCount":698},"ghsa-43mp-35q3-x3fq-895b1d20","virtualenv: Deletion recovery can change a symlink target's mode",[10017,10018],"BIT-virtualenv-2026-113724","CVE-2026-113724",[177],"2026-10-21T21:31:34Z","2026-10-29T10:55:47.691444554Z",[10023],{"type":8547,"score":10024},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[10026,10028,10030,10032,10034,10035],{"type":8512,"url":10027},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-43mp-35q3-x3fq",{"type":8515,"url":10029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113724",{"type":8512,"url":10031},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3427",{"type":8512,"url":10033},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":178,"slug":10038,"dossier":47,"summary":10039,"aliases":10040,"sourceIds":10042,"published":10043,"modified":10044,"checkedAt":7,"severity":10045,"references":10047,"versionKeys":10053,"packageCount":32,"repositoryCount":32},"ghsa-445q-vr5w-6q77-193bc3c3","Axios: CRLF Injection in multipart\u002Fform-data body via unsanitized blob.type in formDataToStream",[10041],"CVE-2026-42037",[178],"2026-05-05T00:40:45Z","2026-09-10T03:50:45.396631689Z",[10046],{"type":8547,"score":9305},[10048,10050,10052],{"type":8512,"url":10049},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-445q-vr5w-6q77",{"type":8515,"url":10051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42037",{"type":8520,"url":9450},[9452,9453],{"id":179,"slug":10055,"dossier":91,"summary":10056,"aliases":10057,"sourceIds":10061,"published":10062,"modified":10063,"checkedAt":7,"severity":10064,"references":10069,"versionKeys":10080,"packageCount":32,"repositoryCount":8535},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[10058,10059,10060],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[179,10060],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[10065,10067],{"type":8508,"score":10066},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":10068},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[10070,10072,10074,10076,10078,10079],{"type":8553,"url":10071},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":8515,"url":10073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":8512,"url":10075},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":8638,"url":10077},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":180,"slug":10082,"dossier":47,"summary":10083,"aliases":10084,"sourceIds":10088,"published":10089,"modified":10090,"checkedAt":7,"severity":10091,"references":10093,"versionKeys":10105,"packageCount":32,"repositoryCount":10106},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[10085,10086,10087],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[180,10087],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[10092],{"type":8547,"score":8583},[10094,10096,10098,10100,10102,10103],{"type":8553,"url":10095},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":8515,"url":10097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":8638,"url":10099},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":8512,"url":10101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":8520,"url":8521},{"type":8515,"url":10104},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[8525,8526,8527,8528,8529,8530,8531,8532,8533],18,{"id":181,"slug":10108,"dossier":91,"summary":10109,"aliases":10110,"sourceIds":10113,"published":10114,"modified":10115,"checkedAt":7,"severity":10116,"references":10119,"versionKeys":10128,"packageCount":32,"repositoryCount":8535},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[10111,10112],"BIT-pillow-2026-112395","CVE-2026-112395",[181],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[10117],{"type":8547,"score":10118},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[10120,10122,10124,10126,10127],{"type":8512,"url":10121},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":8515,"url":10123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":8512,"url":10125},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":182,"slug":10130,"dossier":47,"summary":10131,"aliases":10132,"sourceIds":10134,"published":10135,"modified":10136,"checkedAt":7,"severity":10137,"references":10140,"versionKeys":10147,"packageCount":32,"repositoryCount":32},"ghsa-46wx-v44x-9hh2-a6c4bd3e","Hono: `csrf()` does not check requests sent by hyperlink auditing (`text\u002Fping`)",[10133],"CVE-2026-126355",[182],"2026-11-12T23:31:25Z","2026-11-12T23:45:03.241008967Z",[10138],{"type":8547,"score":10139},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[10141,10143,10145,10146],{"type":8512,"url":10142},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fsecurity\u002Fadvisories\u002FGHSA-46wx-v44x-9hh2",{"type":8512,"url":10144},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fcommit\u002Fbf16471913b5199212dac33f5d170f94745dd26a",{"type":8520,"url":9629},{"type":8512,"url":9631},[9633],{"id":183,"slug":10149,"dossier":47,"summary":10150,"aliases":10151,"sourceIds":10154,"published":10155,"modified":10156,"checkedAt":7,"severity":10157,"references":10160,"versionKeys":10173,"packageCount":32,"repositoryCount":698},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[10152,10153],"CVE-2025-50182","PYSEC-2026-1997",[183,10153],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[10158],{"type":8547,"score":10159},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[10161,10163,10165,10167,10168,10170,10171],{"type":8512,"url":10162},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":8515,"url":10164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":8638,"url":10166},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":8520,"url":9369},{"type":8512,"url":10169},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":8520,"url":9371},{"type":8515,"url":10172},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[9373,9374,9375,9376],{"id":184,"slug":10175,"dossier":47,"summary":10176,"aliases":10177,"sourceIds":10179,"published":10180,"modified":10181,"checkedAt":7,"severity":10182,"references":10185,"versionKeys":10194,"packageCount":32,"repositoryCount":9047},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[10178],"CVE-2026-111063",[184],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[10183],{"type":8508,"score":10184},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10186,10188,10190,10192,10193],{"type":8512,"url":10187},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":8515,"url":10189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":8512,"url":10191},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":185,"slug":10196,"dossier":47,"summary":10197,"aliases":10198,"sourceIds":10201,"published":10202,"modified":10203,"checkedAt":7,"severity":10204,"references":10207,"versionKeys":10218,"packageCount":32,"repositoryCount":698},"ghsa-494p-63j8-28p3-74531279","virtualenv: Downloaded wheel selection and caching precede verification",[10199,10200],"BIT-virtualenv-2026-113714","CVE-2026-113714",[185],"2026-10-23T22:25:22Z","2026-10-29T10:55:43.999222952Z",[10205],{"type":8508,"score":10206},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[10208,10210,10212,10214,10216,10217],{"type":8512,"url":10209},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-494p-63j8-28p3",{"type":8515,"url":10211},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113714",{"type":8512,"url":10213},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3430",{"type":8512,"url":10215},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F7babec66e043e1cc8bc66869a063653898719d96",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":186,"slug":10220,"dossier":47,"summary":10221,"aliases":10222,"sourceIds":10224,"published":10225,"modified":10226,"checkedAt":7,"severity":10227,"references":10230,"versionKeys":10239,"packageCount":32,"repositoryCount":32},"ghsa-4992-7rv2-5pvq-12913d15","Undici has CRLF Injection in undici via `upgrade` option",[10223],"CVE-2026-1527",[186],"2026-03-13T20:41:26Z","2026-09-10T03:50:37.246920699Z",[10228],{"type":8547,"score":10229},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[10231,10233,10235,10237,10238],{"type":8512,"url":10232},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4992-7rv2-5pvq",{"type":8515,"url":10234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1527",{"type":8512,"url":10236},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3487198",{"type":8512,"url":8767},{"type":8520,"url":9070},[9076,9077],{"id":187,"slug":10241,"dossier":47,"summary":10242,"aliases":10243,"sourceIds":10245,"published":10246,"modified":10247,"checkedAt":7,"severity":10248,"references":10251,"versionKeys":10264,"packageCount":32,"repositoryCount":32},"ghsa-4cwx-7wf7-3272-2a4cbb99","undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives",[10244],"CVE-2026-13697",[187],"2026-08-03T19:19:47Z","2026-09-10T03:51:13.021707572Z",[10249],{"type":8547,"score":10250},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[10252,10254,10256,10258,10259,10260,10262],{"type":8512,"url":10253},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4cwx-7wf7-3272",{"type":8515,"url":10255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13697",{"type":8512,"url":10257},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4fe5bc5fefe5ac81a200fc8e1cf84b8bf8464451",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":10261},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.29.0",{"type":8512,"url":10263},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.9.0",[9076,9077],{"id":188,"slug":10266,"dossier":47,"summary":10267,"aliases":10268,"sourceIds":10270,"published":10271,"modified":10272,"checkedAt":7,"severity":10273,"references":10277,"versionKeys":10288,"packageCount":32,"repositoryCount":32},"ghsa-4fh9-h7wg-q85m-f401ee5c","mdast-util-to-hast has unsanitized class attribute",[10269],"CVE-2025-66400",[188],"2025-12-02T01:25:46Z","2026-09-10T03:50:31.288154267Z",[10274,10275],{"type":8547,"score":9305},{"type":8508,"score":10276},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10278,10280,10282,10284,10286],{"type":8512,"url":10279},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fsecurity\u002Fadvisories\u002FGHSA-4fh9-h7wg-q85m",{"type":8515,"url":10281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66400",{"type":8512,"url":10283},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fcommit\u002F6fc783ae6abdeb798fd5a68e7f3f21411dde7403",{"type":8512,"url":10285},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fcommit\u002Fab3a79570a1afbfa7efef5d4a0cd9b5caafbc5d7",{"type":8520,"url":10287},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast",[10289],"npm:mdast-util-to-hast@13.2.0",{"id":189,"slug":10291,"dossier":47,"summary":10292,"aliases":10293,"sourceIds":10296,"published":10297,"modified":10298,"checkedAt":7,"severity":10299,"references":10303,"versionKeys":10309,"packageCount":32,"repositoryCount":66},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[10294,10295],"CVE-2026-54273","PYSEC-2026-2107",[189,10295],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[10300,10302],{"type":8508,"score":10301},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":8583},[10304,10306,10308],{"type":8515,"url":10305},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":8638,"url":10307},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":190,"slug":10311,"dossier":47,"summary":10312,"aliases":10313,"sourceIds":10316,"published":10317,"modified":10318,"checkedAt":7,"severity":10319,"references":10321,"versionKeys":10338,"packageCount":32,"repositoryCount":34},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[10314,10315],"CVE-2026-76219","PYSEC-2026-3838",[190,10315],"2026-08-07T15:33:57Z","2026-09-10T12:25:42.767166279Z",[10320],{"type":8547,"score":9578},[10322,10324,10326,10328,10330,10331,10333,10335,10336],{"type":8512,"url":10323},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":8515,"url":10325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76219",{"type":8512,"url":10327},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":8512,"url":10329},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":8520,"url":8562},{"type":8512,"url":10332},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",{"type":8512,"url":10334},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-read-tree",{"type":8520,"url":8931},{"type":8515,"url":10337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",[8570,8571,8572],{"id":191,"slug":10340,"dossier":47,"summary":10341,"aliases":10342,"sourceIds":10344,"published":10345,"modified":10346,"checkedAt":7,"severity":10347,"references":10349,"versionKeys":10356,"packageCount":32,"repositoryCount":32},"ghsa-4h7h-rv7c-7m2v-c167b987","Hono: `validator('form')` skips validation for `multipart\u002Fform-data` requests with extra parameters",[10343],"CVE-2026-126356",[191],"2026-11-12T23:30:45Z","2026-11-12T23:45:03.255833027Z",[10348],{"type":8547,"score":9305},[10350,10352,10354,10355],{"type":8512,"url":10351},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fsecurity\u002Fadvisories\u002FGHSA-4h7h-rv7c-7m2v",{"type":8512,"url":10353},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fcommit\u002Fd88fab372415277a9e540e895650943dd08eef4a",{"type":8520,"url":9629},{"type":8512,"url":9631},[9633],{"id":192,"slug":10358,"dossier":47,"summary":10359,"aliases":10360,"sourceIds":10362,"published":10363,"modified":10364,"checkedAt":7,"severity":10365,"references":10367,"versionKeys":10387,"packageCount":32,"repositoryCount":32},"ghsa-4hjh-wcwx-xvwj-0390ef58","Axios is vulnerable to DoS attack through lack of data size check",[10361],"CVE-2025-58754",[192],"2025-09-11T21:07:55Z","2026-09-10T03:50:27.860875468Z",[10366],{"type":8547,"score":8583},[10368,10370,10372,10374,10376,10378,10380,10382,10383,10385],{"type":8512,"url":10369},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-4hjh-wcwx-xvwj",{"type":8515,"url":10371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58754",{"type":8512,"url":10373},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7011",{"type":8512,"url":10375},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7034",{"type":8512,"url":10377},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F945435fc51467303768202250debb8d4ae892593",{"type":8512,"url":10379},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fa1b1d3f073a988601583a604f5f9f5d05a3d0b67",{"type":8512,"url":10381},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fc30252f685e8f4326722de84923fcbc8cf557f06",{"type":8520,"url":9450},{"type":8512,"url":10384},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.30.2",{"type":8512,"url":10386},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.12.0",[9452],{"id":193,"slug":10389,"dossier":47,"summary":10390,"aliases":10391,"sourceIds":10393,"published":10394,"modified":10395,"checkedAt":7,"severity":10396,"references":10399,"versionKeys":10408,"packageCount":32,"repositoryCount":32},"ghsa-4hqw-qxg8-jxx2-6e84c6d9","Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders",[10392],"CVE-2026-101900",[193],"2026-09-30T15:34:46Z","2026-09-30T15:46:17.701967512Z",[10397],{"type":8508,"score":10398},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:H\u002FSA:N",[10400,10402,10404,10405,10406,10407],{"type":8512,"url":10401},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-4hqw-qxg8-jxx2",{"type":8515,"url":10403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101900",{"type":8512,"url":9773},{"type":8512,"url":9775},{"type":8520,"url":9450},{"type":8512,"url":9778},[9453],{"id":194,"slug":10410,"dossier":47,"summary":10411,"aliases":10412,"sourceIds":10414,"published":10415,"modified":10416,"checkedAt":7,"severity":10417,"references":10419,"versionKeys":10431,"packageCount":32,"repositoryCount":698},"ghsa-4j63-6c4x-wfg4-adb542fd","Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time",[10413],"CVE-2026-126192",[194],"2026-11-13T00:45:18Z","2026-11-13T01:00:06.040402597Z",[10418],{"type":8508,"score":8690},[10420,10422,10424,10426,10428,10429],{"type":8512,"url":10421},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-4j63-6c4x-wfg4",{"type":8515,"url":10423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126192",{"type":8512,"url":10425},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F304",{"type":8512,"url":10427},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fffb88cca745c591224f74a8e86414a85e8f35fc0",{"type":8520,"url":9332},{"type":8512,"url":10430},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.10",[9340,9341,9342,10432,10433],"pypi:soupsieve@2.8.4","pypi:soupsieve@2.9.1",{"id":195,"slug":10435,"dossier":47,"summary":10436,"aliases":10437,"sourceIds":10439,"published":10440,"modified":10441,"checkedAt":7,"severity":10442,"references":10445,"versionKeys":10452,"packageCount":32,"repositoryCount":32},"ghsa-4m76-xfj5-7975-0c430ce5","Hono: `mount()` and `app.mount()` can forward a path that bypasses middleware scoped inside the mount prefix",[10438],"CVE-2026-126357",[195],"2026-11-12T23:24:11Z","2026-11-12T23:30:03.867783771Z",[10443],{"type":8547,"score":10444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[10446,10448,10450,10451],{"type":8512,"url":10447},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fsecurity\u002Fadvisories\u002FGHSA-4m76-xfj5-7975",{"type":8512,"url":10449},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fcommit\u002F34f90432a1794b28e52802670efcd01963f716d6",{"type":8520,"url":9629},{"type":8512,"url":9631},[9633],{"id":196,"slug":10454,"dossier":47,"summary":10455,"aliases":10456,"sourceIds":10459,"published":10460,"modified":10461,"checkedAt":7,"severity":10462,"references":10466,"versionKeys":10470,"packageCount":32,"repositoryCount":66},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[10457,10458],"CVE-2026-54275","PYSEC-2026-237",[196,10458],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[10463,10465],{"type":8508,"score":10464},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":8583},[10467,10469],{"type":8515,"url":10468},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":197,"slug":10472,"dossier":47,"summary":10473,"aliases":10474,"sourceIds":10476,"published":10477,"modified":10478,"checkedAt":7,"severity":10479,"references":10482,"versionKeys":10491,"packageCount":32,"repositoryCount":32},"ghsa-4mjr-xmp4-gh2g-3eea625c","qs: Denial of Service via Attacker Controlled isBuffer",[10475],"CVE-2026-82417",[197],"2026-09-02T14:45:13Z","2026-09-10T03:51:14.991984096Z",[10480,10481],{"type":8547,"score":8882},{"type":8508,"score":8690},[10483,10485,10487,10489],{"type":8512,"url":10484},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-4mjr-xmp4-gh2g",{"type":8515,"url":10486},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82417",{"type":8512,"url":10488},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Fe83d321ffafb38cf210683ac31714fce6ce1c6c6",{"type":8520,"url":10490},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs",[10492,10493],"npm:qs@6.13.0","npm:qs@6.14.1",{"id":198,"slug":10495,"dossier":47,"summary":10496,"aliases":10497,"sourceIds":10499,"published":10500,"modified":10501,"checkedAt":7,"severity":10502,"references":10504,"versionKeys":10520,"packageCount":32,"repositoryCount":578},"ghsa-4qv8-2p9j-2685-48c36546","undici vulnerable to Denial of Service via unbounded memory in the EventSource parser",[10498],"CVE-2026-109924",[198],"2026-10-23T22:13:29Z","2026-10-23T22:30:04.104974737Z",[10503],{"type":8547,"score":8850},[10505,10507,10509,10511,10513,10515,10516,10517,10518,10519],{"type":8512,"url":10506},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4qv8-2p9j-2685",{"type":8515,"url":10508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109924",{"type":8512,"url":10510},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F299162740d5f39120092277e70efacb4d151c1c6",{"type":8512,"url":10512},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F789ef26461c648480433846607154f52d74ec9ab",{"type":8512,"url":10514},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fc43b23fdc6b37e1283d4347408bb16800f867d9e",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9190},{"type":8512,"url":9192},{"type":8512,"url":9194},[9076,9077,9196],{"id":199,"slug":10522,"dossier":91,"summary":10523,"aliases":10524,"sourceIds":10528,"published":10529,"modified":10530,"checkedAt":7,"severity":10531,"references":10533,"versionKeys":10544,"packageCount":32,"repositoryCount":8535},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[10525,10526,10527],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[199,10527],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[10532],{"type":8547,"score":8666},[10534,10536,10538,10540,10542,10543],{"type":8515,"url":10535},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":8515,"url":10537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":9654,"url":10539},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":8638,"url":10541},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":200,"slug":10546,"dossier":47,"summary":10547,"aliases":10548,"sourceIds":10552,"published":10553,"modified":10554,"checkedAt":7,"severity":10555,"references":10558,"versionKeys":10567,"packageCount":32,"repositoryCount":66},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[10549,10550,10551],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[200,10551],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[10556,10557],{"type":8547,"score":8850},{"type":8547,"score":8583},[10559,10561,10563,10565,10566],{"type":8553,"url":10560},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":8515,"url":10562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":8638,"url":10564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":8520,"url":8521},{"type":8515,"url":8523},[8529,8530,8531,8532,8533,8534],{"id":201,"slug":10569,"dossier":47,"summary":10570,"aliases":10571,"sourceIds":10573,"published":10574,"modified":10575,"checkedAt":7,"severity":10576,"references":10578,"versionKeys":10591,"packageCount":32,"repositoryCount":578},"ghsa-4w7w-5xrc-9h26-97337653","undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects",[10572],"CVE-2026-109829",[201],"2026-10-27T19:02:31Z","2026-10-27T19:15:22.403656345Z",[10577],{"type":8547,"score":9175},[10579,10581,10583,10585,10587,10588,10589,10590],{"type":8512,"url":10580},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4w7w-5xrc-9h26",{"type":8515,"url":10582},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109829",{"type":8512,"url":10584},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F26c2bfb3def0b67241ce878e80657ed5d6c3efa8",{"type":8512,"url":10586},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb20b82ad80a405a12b6ce1f341bcd418de390aa0",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9192},{"type":8512,"url":9194},[9076,9077,9196],{"id":202,"slug":10593,"dossier":47,"summary":10594,"aliases":10595,"sourceIds":10597,"published":10598,"modified":10599,"checkedAt":7,"severity":10600,"references":10602,"versionKeys":10619,"packageCount":32,"repositoryCount":831},"ghsa-4w7w-66w2-5vf9-1ec64746","Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",[10596],"CVE-2026-39365",[202],"2026-04-06T18:03:46Z","2026-09-10T03:50:42.779400319Z",[10601],{"type":8508,"score":10184},[10603,10605,10607,10609,10611,10613,10615,10617],{"type":8512,"url":10604},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-4w7w-66w2-5vf9",{"type":8515,"url":10606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39365",{"type":8512,"url":10608},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22161",{"type":8512,"url":10610},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F79f002f2286c03c88c7b74c511c7f9fc6dc46694",{"type":8520,"url":10612},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite",{"type":8512,"url":10614},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv6.4.2",{"type":8512,"url":10616},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv7.3.2",{"type":8512,"url":10618},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv8.0.5",[10620,10621,10622],"npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1",{"id":203,"slug":10624,"dossier":47,"summary":10625,"aliases":10626,"sourceIds":10630,"published":10631,"modified":10632,"checkedAt":7,"severity":10633,"references":10636,"versionKeys":10651,"packageCount":32,"repositoryCount":10106},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[10627,10628,10629],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[203,10629],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[10634],{"type":8547,"score":10635},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[10637,10639,10641,10643,10645,10647,10649,10650],{"type":8553,"url":10638},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":8515,"url":10640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":8638,"url":10642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":8638,"url":10644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":8638,"url":10646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":8512,"url":10648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":8520,"url":8521},{"type":8515,"url":10104},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":204,"slug":10653,"dossier":47,"summary":10654,"aliases":10655,"sourceIds":10657,"published":10658,"modified":10659,"checkedAt":7,"severity":10660,"references":10663,"versionKeys":10672,"packageCount":32,"repositoryCount":32},"ghsa-4x5r-pxfx-6jf8-59419f35","@babel\u002Fcore: Arbitrary File Read via sourceMappingURL Comment",[10656],"CVE-2026-49356",[204],"2026-06-15T17:14:14Z","2026-09-10T03:50:48.280629201Z",[10661],{"type":8547,"score":10662},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:N",[10664,10666,10668,10670],{"type":8512,"url":10665},"https:\u002F\u002Fgithub.com\u002Fbabel\u002Fbabel\u002Fsecurity\u002Fadvisories\u002FGHSA-4x5r-pxfx-6jf8",{"type":8515,"url":10667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49356",{"type":8512,"url":10669},"https:\u002F\u002Fbabeljs.io\u002Fdocs\u002Foptions#inputsourcemap",{"type":8520,"url":10671},"https:\u002F\u002Fgithub.com\u002Fbabel\u002Fbabel",[10673],"npm:@babel\u002Fcore@7.26.10",{"id":205,"slug":10675,"dossier":47,"summary":10676,"aliases":10677,"sourceIds":10679,"published":10680,"modified":10681,"checkedAt":7,"severity":10682,"references":10685,"versionKeys":10690,"packageCount":32,"repositoryCount":578},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[10678],"CVE-2026-58203",[205],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[10683],{"type":8547,"score":10684},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[10686,10688],{"type":8512,"url":10687},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":8520,"url":10689},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[10691],"pypi:pydantic-settings@2.12.0",{"id":206,"slug":10693,"dossier":47,"summary":10694,"aliases":10695,"sourceIds":10698,"published":10699,"modified":10700,"checkedAt":7,"severity":10701,"references":10706,"versionKeys":10729,"packageCount":32,"repositoryCount":10732},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[10696,10697],"CVE-2026-4539","PYSEC-2026-2987",[206,10697],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[10702,10704],{"type":8547,"score":10703},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":8508,"score":10705},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[10707,10709,10711,10713,10715,10717,10719,10721,10723,10725,10727],{"type":8515,"url":10708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":8512,"url":10710},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":8512,"url":10712},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":8512,"url":10714},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":8520,"url":10716},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":8512,"url":10718},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":8512,"url":10720},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":8512,"url":10722},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":8512,"url":10724},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":8520,"url":10726},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":8515,"url":10728},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[10730,10731],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":207,"slug":10734,"dossier":47,"summary":10735,"aliases":10736,"sourceIds":10738,"published":10739,"modified":10740,"checkedAt":7,"severity":10741,"references":10743,"versionKeys":10757,"packageCount":32,"repositoryCount":578},"ghsa-52cp-r559-cp3m-8cf6b3f8","js-yaml: YAML merge-key chains can force quadratic CPU consumption",[10737],"CVE-2026-59869",[207],"2026-07-20T21:19:09Z","2026-09-10T03:50:12.263307536Z",[10742],{"type":8547,"score":8583},[10744,10746,10748,10750,10752,10753,10755],{"type":8512,"url":10745},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-52cp-r559-cp3m",{"type":8515,"url":10747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59869",{"type":8512,"url":10749},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",{"type":8512,"url":10751},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F59423c6f8cdc78742ac00e25a4dd39ef16b702e4",{"type":8520,"url":8829},{"type":8512,"url":10754},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F3.15.0",{"type":8512,"url":10756},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F4.3.0",[8835,8836,8837,8838],{"id":208,"slug":10759,"dossier":47,"summary":10760,"aliases":10761,"sourceIds":10762,"published":10763,"modified":10764,"checkedAt":7,"severity":10765,"references":10767,"versionKeys":10774,"packageCount":32,"repositoryCount":726},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[208],"2026-06-15T20:12:27Z","2026-09-10T03:50:48.298936410Z",[10766],{"type":8547,"score":8583},[10768,10770,10772],{"type":8512,"url":10769},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":8520,"url":10771},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":8512,"url":10773},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[10775,10776,10777,10778,10779,10780],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":209,"slug":10782,"dossier":47,"summary":10783,"aliases":10784,"sourceIds":10787,"published":10788,"modified":10789,"checkedAt":7,"severity":10790,"references":10794,"versionKeys":10804,"packageCount":32,"repositoryCount":34},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[10785,10786],"CVE-2026-73619","PYSEC-2026-3948",[209,10786],"2026-08-03T20:14:28Z","2026-09-10T13:11:01.695990206Z",[10791,10792],{"type":8547,"score":9883},{"type":8508,"score":10793},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[10795,10797,10798,10800,10801,10802],{"type":8553,"url":10796},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":8512,"url":9585},{"type":8512,"url":10799},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":8520,"url":8562},{"type":8512,"url":9590},{"type":8515,"url":10803},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-archive",[8570,8571,8572],{"id":210,"slug":10806,"dossier":47,"summary":10807,"aliases":10808,"sourceIds":10810,"published":10811,"modified":10812,"checkedAt":7,"severity":10813,"references":10815,"versionKeys":10824,"packageCount":32,"repositoryCount":32},"ghsa-542g-h47m-68v8-ba3bccdd","Axios: Denial of Service via Unhandled 'error' Event in HTTP\u002F2 ClientHttp2Session Initialization",[10809],"CVE-2026-101901",[210],"2026-09-30T15:01:07Z","2026-09-30T15:15:04.061469672Z",[10814],{"type":8508,"score":8509},[10816,10818,10820,10821,10822,10823],{"type":8512,"url":10817},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-542g-h47m-68v8",{"type":8515,"url":10819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101901",{"type":8512,"url":9773},{"type":8512,"url":9775},{"type":8520,"url":9450},{"type":8512,"url":9778},[9453],{"id":211,"slug":10826,"dossier":47,"summary":10827,"aliases":10828,"sourceIds":10831,"published":10832,"modified":10833,"checkedAt":7,"severity":10834,"references":10837,"versionKeys":10849,"packageCount":32,"repositoryCount":698},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[10829,10830],"CVE-2025-69226","PYSEC-2026-1097",[211,10830],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[10835],{"type":8508,"score":10836},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[10838,10840,10842,10844,10845,10847],{"type":8512,"url":10839},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":8515,"url":10841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":8638,"url":10843},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":8520,"url":8956},{"type":8520,"url":10846},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":8515,"url":10848},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[8960,8961,8962,8963,8964,8965,8966],{"id":212,"slug":10851,"dossier":47,"summary":10852,"aliases":10853,"sourceIds":10856,"published":10857,"modified":10858,"checkedAt":7,"severity":10859,"references":10861,"versionKeys":10876,"packageCount":32,"repositoryCount":698},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[10854,10855],"CVE-2026-104874","PYSEC-2026-4244",[212,10855],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[10860],{"type":8547,"score":8882},[10862,10864,10866,10868,10870,10872,10874],{"type":8512,"url":10863},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":8515,"url":10865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":8512,"url":10867},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":8520,"url":10869},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":8512,"url":10871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":8520,"url":10873},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":8515,"url":10875},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[10877,10878],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":213,"slug":10880,"dossier":47,"summary":10881,"aliases":10882,"sourceIds":10885,"published":10886,"modified":10887,"checkedAt":7,"severity":10888,"references":10890,"versionKeys":10901,"packageCount":32,"repositoryCount":698},"ghsa-558c-9hv2-4prj-1ba67416","virtualenv: Generated files can follow existing destination links",[10883,10884],"BIT-virtualenv-2026-113721","CVE-2026-113721",[213],"2026-10-22T17:03:12Z","2026-10-29T10:55:51.822936662Z",[10889],{"type":8547,"score":10024},[10891,10893,10895,10897,10899,10900],{"type":8512,"url":10892},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-558c-9hv2-4prj",{"type":8515,"url":10894},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113721",{"type":8512,"url":10896},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3431",{"type":8512,"url":10898},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd25f28699eefb1fc34a251e5adf2b5de844c36cd",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":214,"slug":10903,"dossier":47,"summary":10904,"aliases":10905,"sourceIds":10907,"published":10908,"modified":10909,"checkedAt":7,"severity":10910,"references":10912,"versionKeys":10925,"packageCount":32,"repositoryCount":578},"ghsa-55wc-3pg8-jfw6-7a30c525","undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor",[10906],"CVE-2026-87029",[214],"2026-10-27T19:02:10Z","2026-10-27T19:15:22.392692308Z",[10911],{"type":8547,"score":8850},[10913,10915,10917,10919,10921,10922,10923,10924],{"type":8512,"url":10914},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-55wc-3pg8-jfw6",{"type":8515,"url":10916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87029",{"type":8512,"url":10918},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F63cba7712ca012b2603c6aeeb4c72d8692332cd0",{"type":8512,"url":10920},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Ff851f315db1f2acce0ea668f88d9d0fa61c8420c",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9192},{"type":8512,"url":9194},[9077,9196],{"id":215,"slug":10927,"dossier":47,"summary":10928,"aliases":10929,"sourceIds":10932,"published":10933,"modified":10934,"checkedAt":7,"severity":10935,"references":10937,"versionKeys":10952,"packageCount":32,"repositoryCount":34},"ghsa-5639-2j2p-m4mx-3aefc2b3","Mako: Path traversal via drive-letter URI on Windows in TemplateLookup",[10930,10931],"CVE-2026-102991","PYSEC-2026-4243",[215,10931],"2026-10-05T23:42:02Z","2026-10-15T14:55:45.473045835Z",[10936],{"type":8547,"score":9150},[10938,10940,10942,10944,10946,10947,10949,10950],{"type":8512,"url":10939},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",{"type":8515,"url":10941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102991",{"type":8512,"url":10943},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F441",{"type":8512,"url":10945},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F000ed85e4e48771eff460bf4fc721fb43de80e08",{"type":8520,"url":9130},{"type":8512,"url":10948},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_4_2",{"type":8520,"url":9134},{"type":8515,"url":10951},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",[9138,10953,9139],"pypi:mako@1.3.12",{"id":216,"slug":10955,"dossier":47,"summary":10956,"aliases":10957,"sourceIds":10959,"published":10960,"modified":10961,"checkedAt":7,"severity":10962,"references":10965,"versionKeys":10976,"packageCount":32,"repositoryCount":745},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[10958],"CVE-2026-112907",[216],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[10963],{"type":8547,"score":10964},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[10966,10968,10970,10972,10974],{"type":8512,"url":10967},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":8512,"url":10969},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":8512,"url":10971},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":8520,"url":10973},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":8512,"url":10975},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[10977,10978,10979,10980],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":217,"slug":10982,"dossier":47,"summary":10983,"aliases":10984,"sourceIds":10986,"published":10987,"modified":10988,"checkedAt":7,"severity":10989,"references":10992,"versionKeys":11003,"packageCount":32,"repositoryCount":831},"ghsa-587h-7wmj-h5pm-d91659cb","launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",[10985],"CVE-2026-112942",[217],"2026-10-20T19:48:25Z","2026-10-20T20:00:04.608979840Z",[10990],{"type":8508,"score":10991},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[10993,10995,10997,10999,11001],{"type":8512,"url":10994},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-587h-7wmj-h5pm",{"type":8515,"url":10996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112942",{"type":8512,"url":10998},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002Ff13cd835d4b8e860b1d4d080ad8a490cc2463679",{"type":8520,"url":11000},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor",{"type":8512,"url":11002},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Freleases\u002Ftag\u002Fv2.14.2",[10620,10621,10622],{"id":218,"slug":11005,"dossier":91,"summary":11006,"aliases":11007,"sourceIds":11011,"published":11012,"modified":11013,"checkedAt":7,"severity":11014,"references":11017,"versionKeys":11026,"packageCount":32,"repositoryCount":8535},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[11008,11009,11010],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[218,11010],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[11015,11016],{"type":8508,"score":9015},{"type":8547,"score":8583},[11018,11020,11022,11024,11025],{"type":8553,"url":11019},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":8515,"url":11021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":8638,"url":11023},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":219,"slug":11028,"dossier":47,"summary":11029,"aliases":11030,"sourceIds":11034,"published":11035,"modified":11036,"checkedAt":7,"severity":11037,"references":11039,"versionKeys":11053,"packageCount":32,"repositoryCount":698},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[11031,11032,11033],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[219,11033],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[11038],{"type":8547,"score":10024},[11040,11042,11044,11046,11048,11049,11051],{"type":8512,"url":11041},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":8515,"url":11043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":8512,"url":11045},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":8638,"url":11047},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":8520,"url":9558},{"type":8520,"url":11050},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":8515,"url":11052},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[9562,9563,9564,9565,9566],{"id":220,"slug":11055,"dossier":47,"summary":11056,"aliases":11057,"sourceIds":11059,"published":11060,"modified":11061,"checkedAt":7,"severity":11062,"references":11065,"versionKeys":11075,"packageCount":32,"repositoryCount":34},"ghsa-59cr-6r3x-644w-a8ec12fb","GitPython submodule update path traversal can write outside the repository",[11058],"CVE-2026-100689",[220],"2026-09-30T23:47:12Z","2026-10-01T00:00:05.754996881Z",[11063],{"type":8508,"score":11064},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11066,11068,11070,11072,11073],{"type":8512,"url":11067},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-59cr-6r3x-644w",{"type":8512,"url":11069},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2225",{"type":8512,"url":11071},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed0ebc2f2e74d979cdc367a4864a7731fdcc093",{"type":8520,"url":8562},{"type":8512,"url":11074},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.62",[8570,8571,8572],{"id":221,"slug":11077,"dossier":47,"summary":11078,"aliases":11079,"sourceIds":11082,"published":11083,"modified":11084,"checkedAt":7,"severity":11085,"references":11088,"versionKeys":11101,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[11080,11081],"CVE-2024-53981","PYSEC-2026-1851",[221,11081],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[11086,11087],{"type":8547,"score":8583},{"type":8508,"score":9015},[11089,11091,11093,11095,11097,11099],{"type":8512,"url":11090},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":8515,"url":11092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":8512,"url":11094},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":8520,"url":11096},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":8520,"url":11098},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":8515,"url":11100},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[11102],"pypi:python-multipart@0.0.9",{"id":222,"slug":11104,"dossier":47,"summary":11105,"aliases":11106,"sourceIds":11108,"published":11109,"modified":11110,"checkedAt":7,"severity":11111,"references":11113,"versionKeys":11119,"packageCount":32,"repositoryCount":32},"ghsa-5c9x-8gcm-mpgx-c911a679","Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0",[11107],"CVE-2026-42034",[222],"2026-05-05T00:33:25Z","2026-09-10T03:50:45.707956373Z",[11112],{"type":8547,"score":8882},[11114,11116,11118],{"type":8512,"url":11115},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-5c9x-8gcm-mpgx",{"type":8515,"url":11117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42034",{"type":8520,"url":9450},[9452,9453],{"id":223,"slug":11121,"dossier":47,"summary":11122,"aliases":11123,"sourceIds":11125,"published":11126,"modified":11127,"checkedAt":7,"severity":11128,"references":11131,"versionKeys":11148,"packageCount":32,"repositoryCount":782},"ghsa-5h93-6whr-6q8j-24a4ef90","Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies",[11124],"CVE-2026-116685",[223],"2026-10-27T21:05:34Z","2026-10-27T21:15:03.819223133Z",[11129],{"type":8547,"score":11130},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11132,11134,11136,11138,11140,11142,11144,11146],{"type":8512,"url":11133},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-5h93-6whr-6q8j",{"type":8512,"url":11135},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3397",{"type":8512,"url":11137},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3448",{"type":8512,"url":11139},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F2106335745563b2321b8c73fef2c12903d00aa6e",{"type":8512,"url":11141},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fc6762e821c527925f0b617db216d00fbd1d0bf99",{"type":8520,"url":11143},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":8512,"url":11145},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.30.0",{"type":8512,"url":11147},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv2.2.0",[11149,11150,11151,11152],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0","pypi:mcp@1.28.1",{"id":224,"slug":11154,"dossier":47,"summary":11155,"aliases":11156,"sourceIds":11159,"published":11160,"modified":11161,"checkedAt":7,"severity":11162,"references":11165,"versionKeys":11182,"packageCount":32,"repositoryCount":10732},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[11157,11158],"CVE-2026-64847","PYSEC-2026-4024",[224,11158],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[11163],{"type":8508,"score":11164},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[11166,11168,11170,11172,11174,11176,11178,11180],{"type":8512,"url":11167},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":8512,"url":11169},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":8512,"url":11171},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":8520,"url":11173},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":8512,"url":11175},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":8520,"url":11177},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":8515,"url":11179},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":8515,"url":11181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[11183,11184,11185,11186,11187,11188,11189,11190],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":225,"slug":11192,"dossier":47,"summary":11193,"aliases":11194,"sourceIds":11195,"published":11196,"modified":11197,"checkedAt":7,"severity":11198,"references":11200,"versionKeys":11204,"packageCount":32,"repositoryCount":831},"ghsa-5p4m-2wfm-xmqj-cf9a2800","JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported",[],[225],"2026-08-06T20:27:32Z","2026-09-10T03:50:53.407436483Z",[11199],{"type":8547,"score":8583},[11201,11203],{"type":8512,"url":11202},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-5p4m-2wfm-xmqj",{"type":8520,"url":8829},[8835,8836,8837,8838,8839],{"id":226,"slug":11206,"dossier":47,"summary":11207,"aliases":11208,"sourceIds":11211,"published":11212,"modified":11213,"checkedAt":7,"severity":11214,"references":11216,"versionKeys":11225,"packageCount":32,"repositoryCount":726},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[11209,11210],"CVE-2026-53539","PYSEC-2026-3036",[226,11210],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[11215],{"type":8547,"score":8583},[11217,11219,11220,11221,11223],{"type":8512,"url":11218},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":8520,"url":11096},{"type":8520,"url":11098},{"type":8515,"url":11222},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":8515,"url":11224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[11226,11227,11228,11102],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":227,"slug":11230,"dossier":47,"summary":11231,"aliases":11232,"sourceIds":11235,"published":11236,"modified":11237,"checkedAt":7,"severity":11238,"references":11241,"versionKeys":11251,"packageCount":32,"repositoryCount":698},"ghsa-5vjq-rrrf-7h2q-86d7b4a3","virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST",[11233,11234],"BIT-virtualenv-2026-113726","CVE-2026-113726",[227],"2026-10-21T16:46:23Z","2026-10-29T10:55:33.825448161Z",[11239],{"type":8547,"score":11240},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[11242,11244,11246,11248,11249],{"type":8512,"url":11243},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-5vjq-rrrf-7h2q",{"type":8515,"url":11245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113726",{"type":8512,"url":11247},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5b915367da82bd024b2a0d28d2f98007034b4aa2",{"type":8520,"url":9558},{"type":8512,"url":11250},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.4",[9562,9563,9564,9565,9566],{"id":228,"slug":11253,"dossier":47,"summary":11254,"aliases":11255,"sourceIds":11258,"published":11259,"modified":11260,"checkedAt":7,"severity":11261,"references":11264,"versionKeys":11279,"packageCount":32,"repositoryCount":578},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[11256,11257],"CVE-2025-69534","PYSEC-2026-89",[228,11257],"2026-03-05T15:16:11.243Z","2026-09-10T03:50:37.537940778Z",[11262,11263],{"type":8547,"score":8583},{"type":8508,"score":8979},[11265,11267,11269,11271,11273,11275,11277],{"type":8515,"url":11266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":9654,"url":11268},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":8512,"url":11270},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":8520,"url":11272},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":8512,"url":11274},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":8512,"url":11276},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":8515,"url":11278},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[11280],"pypi:markdown@3.8",{"id":229,"slug":11282,"dossier":47,"summary":11283,"aliases":11284,"sourceIds":11286,"published":11287,"modified":11288,"checkedAt":7,"severity":11289,"references":11291,"versionKeys":11298,"packageCount":32,"repositoryCount":9047},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[11285],"CVE-2026-111064",[229],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[11290],{"type":8508,"score":8509},[11292,11294,11296,11297],{"type":8512,"url":11293},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":8512,"url":11295},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":230,"slug":11300,"dossier":91,"summary":11301,"aliases":11302,"sourceIds":11306,"published":11307,"modified":11308,"checkedAt":7,"severity":11309,"references":11313,"versionKeys":11322,"packageCount":32,"repositoryCount":8535},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[11303,11304,11305],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[230,11305],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[11310,11312],{"type":8508,"score":11311},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":8789},[11314,11316,11318,11320,11321],{"type":8553,"url":11315},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":8515,"url":11317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":8638,"url":11319},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":231,"slug":11324,"dossier":47,"summary":11325,"aliases":11326,"sourceIds":11330,"published":11331,"modified":11332,"checkedAt":7,"severity":11333,"references":11335,"versionKeys":11345,"packageCount":32,"repositoryCount":10106},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[11327,11328,11329],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[231,11329],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[11334],{"type":8547,"score":8583},[11336,11338,11340,11341,11343,11344],{"type":8553,"url":11337},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":8515,"url":11339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":8638,"url":10099},{"type":8512,"url":11342},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":8520,"url":8521},{"type":8515,"url":10104},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":232,"slug":11347,"dossier":91,"summary":11348,"aliases":11349,"sourceIds":11352,"published":11353,"modified":11354,"checkedAt":7,"severity":11355,"references":11357,"versionKeys":11366,"packageCount":32,"repositoryCount":8535},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[11350,11351],"BIT-pillow-2026-112399","CVE-2026-112399",[232],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[11356],{"type":8508,"score":9015},[11358,11360,11362,11364,11365],{"type":8512,"url":11359},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":8515,"url":11361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":8512,"url":11363},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":233,"slug":11368,"dossier":47,"summary":11369,"aliases":11370,"sourceIds":11374,"published":11375,"modified":11376,"checkedAt":7,"severity":11377,"references":11382,"versionKeys":11396,"packageCount":32,"repositoryCount":9047},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[11371,11372,11373],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[233,11373],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[11378,11380],{"type":8547,"score":11379},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":8508,"score":11381},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11383,11385,11387,11389,11391,11393,11394],{"type":8515,"url":11384},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":8515,"url":11386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":8512,"url":11388},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":8512,"url":11390},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":8512,"url":11392},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":8520,"url":8521},{"type":8515,"url":11395},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[8528,8529,8530,8531,8532],{"id":234,"slug":11398,"dossier":47,"summary":11399,"aliases":11400,"sourceIds":11403,"published":11404,"modified":11405,"checkedAt":7,"severity":11406,"references":11409,"versionKeys":11419,"packageCount":32,"repositoryCount":34},"ghsa-5xxx-qhh7-9287-87d91b3e","GitPython: Incomplete unsafe_git_revision_options denylist omits --contents\u002F-S, enabling arbitrary file read via Repo.blame()",[11401,11402],"CVE-2026-78678","PYSEC-2026-3788",[234,11402],"2026-08-25T02:16:52.313Z","2026-09-08T19:00:06.904435463Z",[11407,11408],{"type":8547,"score":9883},{"type":8508,"score":10793},[11410,11412,11414,11415,11417],{"type":8553,"url":11411},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-5xxx-qhh7-9287",{"type":8515,"url":11413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78678",{"type":8520,"url":8562},{"type":8512,"url":11416},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3788.yaml",{"type":8515,"url":11418},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-blame",[8570,8571,8572],{"id":235,"slug":11421,"dossier":47,"summary":11422,"aliases":11423,"sourceIds":11425,"published":11426,"modified":11427,"checkedAt":7,"severity":11428,"references":11432,"versionKeys":11442,"packageCount":32,"repositoryCount":32},"ghsa-62hf-57xw-28j9-99ff537b","Axios: unbounded recursion in toFormData causes DoS via deeply nested request data",[11424],"CVE-2026-42039",[235],"2026-05-05T00:34:32Z","2026-09-10T03:50:45.703789635Z",[11429,11430],{"type":8547,"score":8583},{"type":8508,"score":11431},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11433,11435,11437,11439,11440],{"type":8512,"url":11434},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-62hf-57xw-28j9",{"type":8515,"url":11436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42039",{"type":8512,"url":11438},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F85132ffba1a77609ea5d101c8a413dea7174932f",{"type":8520,"url":9450},{"type":8512,"url":11441},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.1",[9452,9453],{"id":236,"slug":11444,"dossier":47,"summary":11445,"aliases":11446,"sourceIds":11450,"published":11451,"modified":11452,"checkedAt":7,"severity":11453,"references":11456,"versionKeys":11472,"packageCount":32,"repositoryCount":10106},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[11447,11448,11449],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[236,11449],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[11454],{"type":8508,"score":11455},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[11457,11459,11461,11463,11465,11466,11468,11470],{"type":8512,"url":11458},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":8515,"url":11460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":8512,"url":11462},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":8512,"url":11464},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":8520,"url":8521},{"type":8512,"url":11467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":8520,"url":11469},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":8515,"url":11471},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":237,"slug":11474,"dossier":47,"summary":11475,"aliases":11476,"sourceIds":11479,"published":11480,"modified":11481,"checkedAt":7,"severity":11482,"references":11485,"versionKeys":11498,"packageCount":32,"repositoryCount":32},"ghsa-62q4-447f-wv8h-ddd02de0","Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path",[11477,11478],"CVE-2026-46338","PYSEC-2026-2999",[237,11478],"2026-05-19T20:00:29Z","2026-09-10T03:50:45.703936995Z",[11483],{"type":8547,"score":11484},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11486,11488,11490,11492,11494,11496],{"type":8512,"url":11487},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":8512,"url":11489},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fpull\u002F2039",{"type":8520,"url":11491},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions",{"type":8520,"url":11493},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpymdown-extensions",{"type":8515,"url":11495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":8515,"url":11497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-46338",[11499],"pypi:pymdown-extensions@10.21.2",{"id":238,"slug":11501,"dossier":47,"summary":11502,"aliases":11503,"sourceIds":11506,"published":11507,"modified":11508,"checkedAt":7,"severity":11509,"references":11515,"versionKeys":11526,"packageCount":32,"repositoryCount":677},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[11504,11505],"CVE-2026-34520","PYSEC-2026-2102",[238,11505],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[11510,11512,11513],{"type":8547,"score":11511},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8508,"score":9303},{"type":8508,"score":11514},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11516,11518,11520,11522,11523,11524],{"type":8638,"url":11517},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":8515,"url":11519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":8638,"url":11521},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":8520,"url":8956},{"type":8515,"url":9315},{"type":8512,"url":11525},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[8960,8961,8962,8963,8964,8965,8966,8967],{"id":239,"slug":11528,"dossier":47,"summary":11529,"aliases":11530,"sourceIds":11533,"published":11534,"modified":11535,"checkedAt":7,"severity":11536,"references":11539,"versionKeys":11545,"packageCount":32,"repositoryCount":66},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[11531,11532],"CVE-2026-54277","PYSEC-2026-2110",[239,11532],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[11537,11538],{"type":8508,"score":10301},{"type":8547,"score":8583},[11540,11542,11544],{"type":8515,"url":11541},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":8638,"url":11543},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":240,"slug":11547,"dossier":47,"summary":11548,"aliases":11549,"sourceIds":11553,"published":11554,"modified":11555,"checkedAt":7,"severity":11556,"references":11559,"versionKeys":11570,"packageCount":32,"repositoryCount":11571},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[11550,11551,11552],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[240,11552],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[11557,11558],{"type":8508,"score":10184},{"type":8547,"score":10444},[11560,11562,11564,11566,11568,11569],{"type":8515,"url":11561},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":8515,"url":11563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":9654,"url":11565},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":8638,"url":11567},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":8520,"url":8521},{"type":8515,"url":8523},[8528,8529,8530,8531,8532,8533,8534],15,{"id":241,"slug":11573,"dossier":91,"summary":11574,"aliases":11575,"sourceIds":11578,"published":11579,"modified":11580,"checkedAt":7,"severity":11581,"references":11584,"versionKeys":11593,"packageCount":32,"repositoryCount":638},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[11576,11577],"CVE-2026-45409","PYSEC-2026-215",[241,11577],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[11582,11583],{"type":8547,"score":8882},{"type":8508,"score":11431},[11585,11587,11589,11591],{"type":8515,"url":11586},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":8515,"url":11588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":8520,"url":11590},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":8512,"url":11592},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[11594,11595,11596,11597],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",{"id":242,"slug":11599,"dossier":91,"summary":11600,"aliases":11601,"sourceIds":11604,"published":11605,"modified":11606,"checkedAt":7,"severity":11607,"references":11609,"versionKeys":11618,"packageCount":32,"repositoryCount":8535},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[11602,11603],"BIT-pillow-2026-112400","CVE-2026-112400",[242],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[11608],{"type":8508,"score":9015},[11610,11612,11614,11616,11617],{"type":8512,"url":11611},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":8515,"url":11613},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":8512,"url":11615},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":243,"slug":11620,"dossier":47,"summary":11621,"aliases":11622,"sourceIds":11624,"published":11625,"modified":11626,"checkedAt":7,"severity":11627,"references":11629,"versionKeys":11641,"packageCount":32,"repositoryCount":698},"ghsa-6655-6qjp-jx7x-ff241ef7","Soup Sieve: Exponential ReDoS in selector compilation via \\9-run in CSS_ESCAPES\u002FIDENTIFIER",[11623],"CVE-2026-126191",[243],"2026-11-13T16:39:43Z","2026-11-13T16:45:03.387641194Z",[11628],{"type":8547,"score":8583},[11630,11632,11634,11636,11638,11639],{"type":8512,"url":11631},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-6655-6qjp-jx7x",{"type":8515,"url":11633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126191",{"type":8512,"url":11635},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F300",{"type":8512,"url":11637},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fdbfa2854ff31a863326bd6660d4e55c6f068db9e",{"type":8520,"url":9332},{"type":8512,"url":11640},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F3.0",[9340,9341,9342,10432,10433],{"id":244,"slug":11643,"dossier":47,"summary":11644,"aliases":11645,"sourceIds":11647,"published":11648,"modified":11649,"checkedAt":7,"severity":11650,"references":11653,"versionKeys":11670,"packageCount":32,"repositoryCount":782},"ghsa-68fv-2mgg-jv7q-a588da43","source-map-js allows event-loop denial of service through indexed source-map section offsets",[11646],"CVE-2026-93749",[244],"2026-09-18T18:31:44Z","2026-10-05T23:45:07.974936711Z",[11651,11652],{"type":8547,"score":8583},{"type":8508,"score":9015},[11654,11656,11658,11660,11662,11664,11666,11668],{"type":8515,"url":11655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-93749",{"type":8512,"url":11657},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fissues\u002F76",{"type":8512,"url":11659},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fpull\u002F79",{"type":8512,"url":11661},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fcommit\u002Fcf7658058ceeaa8619d5ae0ec90be6905209d016",{"type":8520,"url":11663},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js",{"type":8512,"url":11665},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fblob\u002Fc1cd8904bb7bd0c7fb5879fcda48134d82a27934\u002Flib\u002Fsource-node.js#L115-L118",{"type":8512,"url":11667},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Freleases\u002Ftag\u002Fv1.2.2",{"type":8512,"url":11669},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fsource-map-js-through-1.2.1-event-loop-denial-of-service",[11671],"npm:source-map-js@1.2.1",{"id":245,"slug":11673,"dossier":47,"summary":11674,"aliases":11675,"sourceIds":11677,"published":11678,"modified":11679,"checkedAt":7,"severity":11680,"references":11683,"versionKeys":11694,"packageCount":32,"repositoryCount":831},"ghsa-698v-4r3x-3vcv-1bca3b44","launch-editor: escapeCmdArgs() omits % escaping on Windows",[11676],"CVE-2026-112943",[245],"2026-10-20T18:30:24Z","2026-10-20T18:45:09.467993691Z",[11681],{"type":8508,"score":11682},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11684,11686,11688,11690,11692,11693],{"type":8512,"url":11685},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-698v-4r3x-3vcv",{"type":8515,"url":11687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112943",{"type":8512,"url":11689},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fpull\u002F155",{"type":8512,"url":11691},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002F3c2f9bf2ff8fe63d056a8f9cc52d825b66ca79fc",{"type":8520,"url":11000},{"type":8512,"url":11002},[10620,10621,10622],{"id":246,"slug":11696,"dossier":47,"summary":11697,"aliases":11698,"sourceIds":11701,"published":11702,"modified":11703,"checkedAt":7,"severity":11704,"references":11706,"versionKeys":11717,"packageCount":32,"repositoryCount":698},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[11699,11700],"CVE-2025-69224","PYSEC-2026-1099",[246,11700],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[11705],{"type":8508,"score":9303},[11707,11709,11711,11713,11714,11715],{"type":8512,"url":11708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":8515,"url":11710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":8638,"url":11712},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":11716},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[8960,8961,8962,8963,8964,8965,8966],{"id":247,"slug":11719,"dossier":91,"summary":11720,"aliases":11721,"sourceIds":11723,"published":11724,"modified":11725,"checkedAt":7,"severity":11726,"references":11729,"versionKeys":11738,"packageCount":32,"repositoryCount":8535},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[11722],"CVE-2026-112909",[247],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[11727],{"type":8547,"score":11728},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[11730,11732,11734,11735,11736,11737],{"type":8512,"url":11731},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":8515,"url":11733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":8512,"url":10969},{"type":8512,"url":10971},{"type":8520,"url":10973},{"type":8512,"url":10975},[11739,11740,11741,11742,11743,10977,10978,10979,10980],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":248,"slug":11745,"dossier":47,"summary":11746,"aliases":11747,"sourceIds":11749,"published":11750,"modified":11751,"checkedAt":7,"severity":11752,"references":11754,"versionKeys":11760,"packageCount":32,"repositoryCount":32},"ghsa-6chq-wfr3-2hj9-cc9a2a5e","Axios: Header Injection via Prototype Pollution",[11748],"CVE-2026-42035",[248],"2026-05-05T00:25:47Z","2026-09-10T03:51:04.772235088Z",[11753],{"type":8547,"score":9175},[11755,11757,11759],{"type":8512,"url":11756},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-6chq-wfr3-2hj9",{"type":8515,"url":11758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42035",{"type":8520,"url":9450},[9452,9453],{"id":249,"slug":11762,"dossier":47,"summary":11763,"aliases":11764,"sourceIds":11766,"published":11767,"modified":11768,"checkedAt":7,"severity":11769,"references":11771,"versionKeys":11780,"packageCount":32,"repositoryCount":9047},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[11765],"CVE-2026-111065",[249],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[11770],{"type":8508,"score":11431},[11772,11774,11776,11778,11779],{"type":8512,"url":11773},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":8515,"url":11775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":8512,"url":11777},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":250,"slug":11782,"dossier":47,"summary":11783,"aliases":11784,"sourceIds":11786,"published":11787,"modified":11788,"checkedAt":7,"severity":11789,"references":11792,"versionKeys":11803,"packageCount":32,"repositoryCount":831},"ghsa-6g55-p6wh-862q-12f1aeab","PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",[11785],"CVE-2026-45623",[250],"2026-07-23T15:06:16Z","2026-09-10T03:51:10.752909750Z",[11790],{"type":8547,"score":11791},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11793,11795,11797,11799,11801],{"type":8512,"url":11794},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-6g55-p6wh-862q",{"type":8512,"url":11796},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Faaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad",{"type":8512,"url":11798},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Fc64b7488d2731dfa16213739b42c34faf5a9eba3",{"type":8520,"url":11800},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss",{"type":8512,"url":11802},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.12",[11804,11805,11806],"npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6",{"id":251,"slug":11808,"dossier":47,"summary":11809,"aliases":11810,"sourceIds":11813,"published":11814,"modified":11815,"checkedAt":7,"severity":11816,"references":11818,"versionKeys":11831,"packageCount":32,"repositoryCount":32},"ghsa-6hr6-w5qg-qmwg-135c855f","h2: Duplicate Host header could facilitate request smuggling",[11811,11812],"CVE-2026-71554","PYSEC-2026-3628",[251,11812],"2026-08-06T21:53:41Z","2026-09-10T03:51:13.136510577Z",[11817],{"type":8547,"score":8882},[11819,11821,11823,11825,11827,11829],{"type":8512,"url":11820},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":8512,"url":11822},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F292a40829feefda98c8509dcdbbb4a57af9bd6a6",{"type":8520,"url":11824},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2",{"type":8520,"url":11826},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh2",{"type":8515,"url":11828},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":8515,"url":11830},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71554",[11832],"pypi:h2@4.1.0",{"id":252,"slug":11834,"dossier":47,"summary":11835,"aliases":11836,"sourceIds":11838,"published":11839,"modified":11840,"checkedAt":7,"severity":11841,"references":11843,"versionKeys":11857,"packageCount":32,"repositoryCount":831},"ghsa-6j4f-fj2g-mc7p-48b1368d","brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",[11837],"CVE-2026-102276",[252],"2026-09-29T23:44:58Z","2026-09-30T00:00:03.836613572Z",[11842],{"type":8547,"score":8583},[11844,11846,11848,11850,11852,11854,11856],{"type":8512,"url":11845},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-6j4f-fj2g-mc7p",{"type":8515,"url":11847},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102276",{"type":8512,"url":11849},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",{"type":8512,"url":11851},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F316359e6019c39b3254c8ba8e25dc586a480652c",{"type":8512,"url":11853},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F5171e681c0922b7ae8bfaf9a331e309107be6edc",{"type":8512,"url":11855},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F6735c94873ca570bcdd6a0690033bdd3126379d3",{"type":8520,"url":9689},[9699,11858,9700,11859],"npm:brace-expansion@1.1.16","npm:brace-expansion@5.0.8",{"id":253,"slug":11861,"dossier":47,"summary":11862,"aliases":11863,"sourceIds":11866,"published":11867,"modified":11868,"checkedAt":7,"severity":11869,"references":11871,"versionKeys":11882,"packageCount":32,"repositoryCount":698},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[11864,11865],"CVE-2025-69228","PYSEC-2026-1100",[253,11865],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[11870],{"type":8508,"score":10301},[11872,11874,11876,11878,11879,11880],{"type":8512,"url":11873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":8515,"url":11875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":8638,"url":11877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":11881},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[8960,8961,8962,8963,8964,8965,8966],{"id":254,"slug":11884,"dossier":47,"summary":11885,"aliases":11886,"sourceIds":11889,"published":11890,"modified":11891,"checkedAt":7,"severity":11892,"references":11894,"versionKeys":11903,"packageCount":32,"repositoryCount":726},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[11887,11888],"CVE-2026-53538","PYSEC-2026-3037",[254,11888],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[11893],{"type":8547,"score":9058},[11895,11897,11898,11899,11901],{"type":8512,"url":11896},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":8520,"url":11096},{"type":8520,"url":11098},{"type":8515,"url":11900},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":8515,"url":11902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[11226,11227,11228,11102],{"id":255,"slug":11905,"dossier":47,"summary":11906,"aliases":11907,"sourceIds":11910,"published":11911,"modified":11912,"checkedAt":7,"severity":11913,"references":11915,"versionKeys":11926,"packageCount":32,"repositoryCount":698},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[11908,11909],"CVE-2025-69223","PYSEC-2026-1101",[255,11909],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[11914],{"type":8547,"score":8583},[11916,11918,11920,11922,11923,11924],{"type":8512,"url":11917},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":8515,"url":11919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":8638,"url":11921},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":11925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[8960,8961,8962,8963,8964,8965,8966],{"id":256,"slug":11928,"dossier":47,"summary":11929,"aliases":11930,"sourceIds":11933,"published":11934,"modified":11935,"checkedAt":7,"severity":11936,"references":11940,"versionKeys":11952,"packageCount":32,"repositoryCount":34},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[11931,11932],"CVE-2026-73623","PYSEC-2026-3952",[256,11932],"2026-07-24T16:42:09Z","2026-09-10T13:11:03.995690741Z",[11937,11939],{"type":8547,"score":11938},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8547,"score":8915},[11941,11943,11945,11947,11948,11950],{"type":8553,"url":11942},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":8512,"url":11944},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":8512,"url":11946},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":8520,"url":8562},{"type":8512,"url":11949},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",{"type":8515,"url":11951},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-template",[8570,8571,8572],{"id":257,"slug":11954,"dossier":47,"summary":11955,"aliases":11956,"sourceIds":11958,"published":11959,"modified":11960,"checkedAt":7,"severity":11961,"references":11964,"versionKeys":11974,"packageCount":32,"repositoryCount":578},"ghsa-6pq8-jhm2-2vcw-7a7bd087","qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)",[11957],"CVE-2026-110816",[257],"2026-10-27T16:10:55Z","2026-10-27T16:15:05.324423680Z",[11962,11963],{"type":8547,"score":8882},{"type":8508,"score":8690},[11965,11967,11969,11971,11972],{"type":8512,"url":11966},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-6pq8-jhm2-2vcw",{"type":8515,"url":11968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110816",{"type":8512,"url":11970},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Fa952e7519338ef0cfb25694a2988848f93333727",{"type":8520,"url":10490},{"type":8512,"url":11973},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Freleases\u002Ftag\u002Fv6.16.1",[10492,10493,11975],"npm:qs@6.16.0",{"id":258,"slug":11977,"dossier":91,"summary":11978,"aliases":11979,"sourceIds":11981,"published":11982,"modified":11983,"checkedAt":7,"severity":11984,"references":11987,"versionKeys":11999,"packageCount":32,"repositoryCount":12011},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[11980],"PYSEC-2026-4320",[258,11980],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[11985],{"type":8508,"score":11986},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[11988,11990,11992,11994,11995,11997],{"type":8512,"url":11989},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":8512,"url":11991},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":8512,"url":11993},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":8520,"url":8641},{"type":8520,"url":11996},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":8515,"url":11998},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[12000,8654,12001,12002,12003,12004,12005,12006,12007,12008,12009,12010],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":259,"slug":12013,"dossier":47,"summary":12014,"aliases":12015,"sourceIds":12019,"published":12020,"modified":12021,"checkedAt":7,"severity":12022,"references":12024,"versionKeys":12037,"packageCount":32,"repositoryCount":10106},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[12016,12017,12018],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[259,12018],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[12023],{"type":8547,"score":8583},[12025,12027,12029,12031,12033,12035,12036],{"type":8553,"url":12026},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":8515,"url":12028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":8638,"url":12030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":8638,"url":12032},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":8512,"url":12034},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":8520,"url":8521},{"type":8515,"url":11467},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":260,"slug":12039,"dossier":47,"summary":12040,"aliases":12041,"sourceIds":12043,"published":12044,"modified":12045,"checkedAt":7,"severity":12046,"references":12051,"versionKeys":12059,"packageCount":32,"repositoryCount":32},"ghsa-6rw7-vpxm-498p-92461380","qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",[12042],"CVE-2025-15284",[260],"2025-12-30T21:02:54Z","2026-09-10T03:50:31.670581449Z",[12047,12049],{"type":8547,"score":12048},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":8508,"score":12050},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:L",[12052,12054,12056,12058],{"type":8512,"url":12053},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-6rw7-vpxm-498p",{"type":8515,"url":12055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15284",{"type":8512,"url":12057},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002F3086902ecf7f088d0d1803887643ac6c03d415b9",{"type":8520,"url":10490},[10492],{"id":261,"slug":12061,"dossier":47,"summary":12062,"aliases":12063,"sourceIds":12066,"published":12067,"modified":12068,"checkedAt":7,"severity":12069,"references":12071,"versionKeys":12082,"packageCount":32,"repositoryCount":698},"ghsa-6w3r-xr62-4xcp-69d1732a","virtualenv: Bash prompt values can change meaning under older compatibility modes",[12064,12065],"BIT-virtualenv-2026-113723","CVE-2026-113723",[261],"2026-10-23T22:21:57Z","2026-10-29T10:55:32.039209236Z",[12070],{"type":8508,"score":9547},[12072,12074,12076,12078,12080,12081],{"type":8512,"url":12073},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-6w3r-xr62-4xcp",{"type":8515,"url":12075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113723",{"type":8512,"url":12077},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3418",{"type":8512,"url":12079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5f48d711731311428aebfae61d46957762155b22",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":262,"slug":12084,"dossier":47,"summary":12085,"aliases":12086,"sourceIds":12089,"published":12090,"modified":12091,"checkedAt":7,"severity":12092,"references":12095,"versionKeys":12114,"packageCount":32,"repositoryCount":698},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[12087,12088],"CVE-2025-71176","PYSEC-2026-1845",[262,12088],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[12093],{"type":8547,"score":12094},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[12096,12098,12100,12102,12104,12106,12108,12110,12112],{"type":8515,"url":12097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":8512,"url":12099},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":8512,"url":12101},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":8512,"url":12103},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":8520,"url":12105},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":8512,"url":12107},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":8512,"url":12109},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":8520,"url":12111},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":8515,"url":12113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[12115,12116,12117,12118,12119],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":263,"slug":12121,"dossier":47,"summary":12122,"aliases":12123,"sourceIds":12125,"published":12126,"modified":12127,"checkedAt":7,"severity":12128,"references":12130,"versionKeys":12143,"packageCount":32,"repositoryCount":32},"ghsa-73rr-hh4g-fpgx-9d9e2d44","jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",[12124],"CVE-2026-24001",[263],"2026-01-14T21:34:12Z","2026-09-10T03:50:32.703687207Z",[12129],{"type":8508,"score":9860},[12131,12133,12135,12137,12139,12141],{"type":8512,"url":12132},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fsecurity\u002Fadvisories\u002FGHSA-73rr-hh4g-fpgx",{"type":8515,"url":12134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24001",{"type":8512,"url":12136},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fissues\u002F653",{"type":8512,"url":12138},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fpull\u002F649",{"type":8512,"url":12140},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fcommit\u002F15a1585230748c8ae6f8274c202e0c87309142f5",{"type":8520,"url":12142},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff",[12144],"npm:diff@5.2.0",{"id":264,"slug":12146,"dossier":47,"summary":12147,"aliases":12148,"sourceIds":12150,"published":12151,"modified":12152,"checkedAt":7,"severity":12153,"references":12155,"versionKeys":12166,"packageCount":32,"repositoryCount":32},"ghsa-73wf-gq98-2v4g-759c3c89","Browserslist: Uncaught crash \u002F prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)",[12149],"CVE-2026-73088",[264],"2026-09-01T16:41:54Z","2026-09-10T03:51:15.295037659Z",[12154],{"type":8547,"score":8583},[12156,12158,12160,12162,12164],{"type":8512,"url":12157},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fsecurity\u002Fadvisories\u002FGHSA-73wf-gq98-2v4g",{"type":8515,"url":12159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73088",{"type":8512,"url":12161},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fcommit\u002Ff9914ad9effc865ccc27d816255625890b31ca51",{"type":8520,"url":12163},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist",{"type":8512,"url":12165},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Freleases\u002Ftag\u002F4.28.7",[12167],"npm:browserslist@4.24.4",{"id":265,"slug":12169,"dossier":91,"summary":12170,"aliases":12171,"sourceIds":12174,"published":12175,"modified":12176,"checkedAt":7,"severity":12177,"references":12179,"versionKeys":12188,"packageCount":32,"repositoryCount":8535},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[12172,12173],"BIT-pillow-2026-112401","CVE-2026-112401",[265],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[12178],{"type":8508,"score":11431},[12180,12182,12184,12186,12187],{"type":8512,"url":12181},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":8515,"url":12183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":8512,"url":12185},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":266,"slug":12190,"dossier":47,"summary":12191,"aliases":12192,"sourceIds":12195,"published":12196,"modified":12197,"checkedAt":7,"severity":12198,"references":12200,"versionKeys":12210,"packageCount":32,"repositoryCount":831},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[12193,12194],"CVE-2026-32597","PYSEC-2026-120",[266,12194],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[12199],{"type":8547,"score":8631},[12201,12203,12205,12206,12208],{"type":8553,"url":12202},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":8515,"url":12204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":8520,"url":9097},{"type":8512,"url":12207},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":8512,"url":12209},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[9105,9107],{"id":267,"slug":12212,"dossier":47,"summary":12213,"aliases":12214,"sourceIds":12217,"published":12218,"modified":12219,"checkedAt":7,"severity":12220,"references":12225,"versionKeys":12233,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[12215,12216],"CVE-2026-44243","PYSEC-2026-2162",[267,12216],"2026-05-06T19:38:48Z","2026-09-10T03:50:45.903378498Z",[12221,12223],{"type":8547,"score":12222},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8508,"score":12224},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[12226,12228,12230,12231],{"type":8553,"url":12227},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":8515,"url":12229},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":8520,"url":8562},{"type":8638,"url":12232},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[8570,8571,8572],{"id":268,"slug":12235,"dossier":47,"summary":12236,"aliases":12237,"sourceIds":12240,"published":12241,"modified":12242,"checkedAt":7,"severity":12243,"references":12246,"versionKeys":12259,"packageCount":32,"repositoryCount":698},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[12238,12239],"CVE-2025-66034","PYSEC-2026-1389",[268,12239],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[12244],{"type":8547,"score":12245},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[12247,12249,12251,12253,12255,12257],{"type":8512,"url":12248},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":8515,"url":12250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":8512,"url":12252},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":8520,"url":12254},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":8520,"url":12256},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":8515,"url":12258},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[12260,12261,12262,12263,12264,12265],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":269,"slug":12267,"dossier":47,"summary":12268,"aliases":12269,"sourceIds":12271,"published":12272,"modified":12273,"checkedAt":7,"severity":12274,"references":12276,"versionKeys":12288,"packageCount":32,"repositoryCount":32},"ghsa-777c-7fjr-54vf-79940191","Allocation of Resources Without Limits or Throttling in Axios",[12270],"CVE-2026-44488",[269],"2026-06-04T14:21:37Z","2026-09-10T03:50:48.738717543Z",[12275],{"type":8547,"score":8583},[12277,12279,12281,12283,12285,12286],{"type":8512,"url":12278},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-777c-7fjr-54vf",{"type":8515,"url":12280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44488",{"type":8512,"url":12282},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10795",{"type":8512,"url":12284},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10796",{"type":8520,"url":9450},{"type":8512,"url":12287},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.16.0",[9452,9453],{"id":270,"slug":12290,"dossier":47,"summary":12291,"aliases":12292,"sourceIds":12295,"published":12296,"modified":12297,"checkedAt":7,"severity":12298,"references":12305,"versionKeys":12320,"packageCount":32,"repositoryCount":34},"ghsa-7833-fr7j-v32q-fd003872","GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)",[12293,12294],"CVE-2026-78675","PYSEC-2026-3785",[270,12294],"2026-08-25T02:16:51.887Z","2026-09-23T05:15:05.931147061Z",[12299,12301,12303],{"type":8547,"score":12300},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8508,"score":12302},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":12304},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12306,12308,12310,12312,12314,12315,12316,12318],{"type":8553,"url":12307},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7833-fr7j-v32q",{"type":8515,"url":12309},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78675",{"type":8512,"url":12311},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2211",{"type":8512,"url":12313},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fef7568e3b317ce617eacda39b8b54dcdff8c3b5c",{"type":8520,"url":8562},{"type":8512,"url":9895},{"type":8512,"url":12317},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3785.yaml",{"type":8515,"url":12319},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-local-file-content-disclosure-via-gitmodules",[8570,8571,8572],{"id":271,"slug":12322,"dossier":47,"summary":12323,"aliases":12324,"sourceIds":12325,"published":12326,"modified":12327,"checkedAt":7,"severity":12328,"references":12331,"versionKeys":12344,"packageCount":32,"repositoryCount":9378},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[271],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[12329],{"type":8547,"score":12330},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12332,12334,12336,12338,12340,12341,12342],{"type":8512,"url":12333},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":8512,"url":12335},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":8512,"url":12337},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":8512,"url":12339},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":8520,"url":8521},{"type":8512,"url":8523},{"type":8512,"url":12343},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[8527,8528,8529,8530,8531,8532,8533,8534],{"id":272,"slug":12346,"dossier":47,"summary":10760,"aliases":12347,"sourceIds":12350,"published":12351,"modified":12352,"checkedAt":7,"severity":12353,"references":12354,"versionKeys":12372,"packageCount":32,"repositoryCount":831},"ghsa-79v4-65xg-pq4g-b911b371",[12348,12349],"CVE-2024-12797","PYSEC-2026-1284",[272,12349],"2025-02-11T18:06:42Z","2026-09-10T03:50:22.501671988Z",[],[12355,12357,12359,12361,12363,12365,12366,12368,12370],{"type":8512,"url":12356},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":8515,"url":12358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":8512,"url":12360},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":8512,"url":12362},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":8512,"url":12364},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":8520,"url":10771},{"type":8512,"url":12367},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":8520,"url":12369},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":8515,"url":12371},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[10775,10776,10777],{"id":273,"slug":12374,"dossier":47,"summary":12375,"aliases":12376,"sourceIds":12379,"published":12380,"modified":12381,"checkedAt":7,"severity":12382,"references":12384,"versionKeys":12401,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[12377,12378],"CVE-2025-62727","PYSEC-2026-1942",[273,12378],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[12383],{"type":8547,"score":8583},[12385,12387,12389,12391,12394,12396,12398,12399],{"type":8512,"url":12386},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":8515,"url":12388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":8638,"url":12390},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":12392,"url":12393},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":8520,"url":12395},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":8512,"url":12397},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":8520,"url":8897},{"type":8515,"url":12400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[8902,8903,12402,12403,12404],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":274,"slug":12406,"dossier":47,"summary":12407,"aliases":12408,"sourceIds":12410,"published":12411,"modified":12412,"checkedAt":7,"severity":12413,"references":12415,"versionKeys":12426,"packageCount":32,"repositoryCount":698},"ghsa-7g44-g9rc-x53w-58fa7733","Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack",[12409],"CVE-2026-126193",[274],"2026-11-13T16:34:59Z","2026-11-13T16:45:03.468864320Z",[12414],{"type":8547,"score":8882},[12416,12418,12420,12422,12424,12425],{"type":8512,"url":12417},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-7g44-g9rc-x53w",{"type":8515,"url":12419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126193",{"type":8512,"url":12421},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F306",{"type":8512,"url":12423},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002F52de12f157a373614ad0f486d434551c5a4378ee",{"type":8520,"url":9332},{"type":8512,"url":11640},[9340,9341,9342,10432,10433],{"id":275,"slug":12428,"dossier":47,"summary":12429,"aliases":12430,"sourceIds":12433,"published":12434,"modified":12435,"checkedAt":7,"severity":12436,"references":12439,"versionKeys":12456,"packageCount":32,"repositoryCount":9047},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[12431,12432],"CVE-2026-0994","PYSEC-2026-1805",[275,12432],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[12437],{"type":8508,"score":12438},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[12440,12442,12444,12446,12448,12450,12452,12454],{"type":8515,"url":12441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":8512,"url":12443},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":8512,"url":12445},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":8512,"url":12447},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":8512,"url":12449},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":8520,"url":12451},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":8520,"url":12453},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":8515,"url":12455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[12457,12458,12459,12460,12461,12462,12463,12464,12465,12466],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":276,"slug":12468,"dossier":91,"summary":12469,"aliases":12470,"sourceIds":12474,"published":12475,"modified":12476,"checkedAt":7,"severity":12477,"references":12480,"versionKeys":12489,"packageCount":32,"repositoryCount":8535},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[12471,12472,12473],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[276,12473],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[12478,12479],{"type":8508,"score":9015},{"type":8547,"score":8583},[12481,12483,12485,12487,12488],{"type":8638,"url":12482},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":8515,"url":12484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":8638,"url":12486},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":277,"slug":12491,"dossier":47,"summary":12492,"aliases":12493,"sourceIds":12495,"published":12496,"modified":12497,"checkedAt":7,"severity":12498,"references":12501,"versionKeys":12517,"packageCount":32,"repositoryCount":32},"ghsa-7q8q-rj6j-mhjq-b9d31f9e","Axios: Nested axios option objects can consume polluted prototype values",[12494],"CVE-2026-67319",[277],"2026-07-20T22:37:31Z","2026-09-10T03:51:10.872027953Z",[12499],{"type":8508,"score":12500},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12502,12504,12506,12508,12509,12510,12511,12512,12513,12514,12515],{"type":8512,"url":12503},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-7q8q-rj6j-mhjq",{"type":8515,"url":12505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67319",{"type":8515,"url":12507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69123",{"type":8512,"url":9944},{"type":8512,"url":9946},{"type":8512,"url":9948},{"type":8512,"url":9950},{"type":8520,"url":9450},{"type":8512,"url":9953},{"type":8512,"url":9955},{"type":8512,"url":12516},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-prototype-pollution-via-nested-option-objects",[9452,9453],{"id":278,"slug":12519,"dossier":47,"summary":12520,"aliases":12521,"sourceIds":12523,"published":12524,"modified":12525,"checkedAt":7,"severity":12526,"references":12528,"versionKeys":12536,"packageCount":32,"repositoryCount":578},"ghsa-7r86-cg39-jmmj-b67be21b","minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",[12522],"CVE-2026-27903",[278],"2026-02-26T22:10:18Z","2026-09-10T03:50:34.376990726Z",[12527],{"type":8547,"score":8583},[12529,12531,12533,12535],{"type":8512,"url":12530},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-7r86-cg39-jmmj",{"type":8515,"url":12532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27903",{"type":8512,"url":12534},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F0bf499aa45f5059b56809cc3b75ff3eafeb8d748",{"type":8520,"url":8592},[8594,8595,8596,8597],{"id":279,"slug":12538,"dossier":47,"summary":12539,"aliases":12540,"sourceIds":12542,"published":12543,"modified":12544,"checkedAt":7,"severity":12545,"references":12548,"versionKeys":12561,"packageCount":32,"repositoryCount":32},"ghsa-7rv5-mrxv-xcr9-8fcf3ecf","Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check",[12541],"CVE-2026-116580",[279],"2026-10-28T21:17:15Z","2026-10-28T21:30:03.899348358Z",[12546],{"type":8547,"score":12547},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[12549,12551,12553,12555,12557,12559],{"type":8512,"url":12550},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-7rv5-mrxv-xcr9",{"type":8515,"url":12552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116580",{"type":8512,"url":12554},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F3edc78b495ea0d6bd498143e5b3e56996607c5f2",{"type":8512,"url":12556},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F50926b3ee198fb757e6ce3aa70efeed38d931c8d",{"type":8520,"url":12558},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval",{"type":8512,"url":12560},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.8",[12562],"npm:seroval@1.6.7",{"id":280,"slug":12564,"dossier":47,"summary":12565,"aliases":12566,"sourceIds":12569,"published":12570,"modified":12571,"checkedAt":7,"severity":12572,"references":12575,"versionKeys":12589,"packageCount":32,"repositoryCount":10732},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[12567,12568],"CVE-2026-63374","PYSEC-2026-4025",[280,12568],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[12573],{"type":8508,"score":12574},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12576,12578,12580,12582,12583,12584,12585,12587],{"type":8512,"url":12577},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":8512,"url":12579},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":8512,"url":12581},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":8520,"url":11173},{"type":8512,"url":11175},{"type":8520,"url":11177},{"type":8515,"url":12586},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":8515,"url":12588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[11183,11184,11185,11186,11187,11188,11189,11190],{"id":281,"slug":12591,"dossier":47,"summary":12592,"aliases":12593,"sourceIds":12596,"published":12597,"modified":12598,"checkedAt":7,"severity":12599,"references":12601,"versionKeys":12605,"packageCount":32,"repositoryCount":677},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[12594,12595],"CVE-2026-54283","PYSEC-2026-249",[281,12595],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[12600],{"type":8547,"score":8583},[12602,12604],{"type":8515,"url":12603},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":8520,"url":12395},[8901,8902,8903,12402,12403,12404,12606,12607,12608],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":282,"slug":12610,"dossier":47,"summary":12611,"aliases":12612,"sourceIds":12615,"published":12616,"modified":12617,"checkedAt":7,"severity":12618,"references":12620,"versionKeys":12629,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[12613,12614],"CVE-2026-49477","PYSEC-2026-3072",[282,12614],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[12619],{"type":8547,"score":8583},[12621,12623,12624,12625,12627],{"type":8512,"url":12622},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":8520,"url":9332},{"type":8520,"url":9334},{"type":8515,"url":12626},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":8515,"url":12628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[9340,9341,9342],{"id":283,"slug":12631,"dossier":47,"summary":12632,"aliases":12633,"sourceIds":12635,"published":12636,"modified":12637,"checkedAt":7,"severity":12638,"references":12641,"versionKeys":12653,"packageCount":32,"repositoryCount":34},"ghsa-83vg-56qc-22m7-6ad99a7a","GitPython validates a submodule's \".git\" path only after cloning into it (RCE)",[12634],"CVE-2026-114145",[283],"2026-10-22T16:41:14Z","2026-10-22T16:45:04.297463159Z",[12639],{"type":8547,"score":12640},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12642,12644,12646,12648,12650,12651],{"type":8512,"url":12643},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-83vg-56qc-22m7",{"type":8515,"url":12645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114145",{"type":8512,"url":12647},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2264",{"type":8512,"url":12649},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F97eadb888d2f99567e3113f4e455be4ca128f697",{"type":8520,"url":8562},{"type":8512,"url":12652},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.2.1",[8570,8571,8572],{"id":284,"slug":12655,"dossier":47,"summary":12656,"aliases":12657,"sourceIds":12659,"published":12660,"modified":12661,"checkedAt":7,"severity":12662,"references":12664,"versionKeys":12677,"packageCount":32,"repositoryCount":32},"ghsa-8436-99hf-9mmv-7d937725","undici vulnerable to caching and replay of unsafe HTTP method responses",[12658],"CVE-2026-85008",[284],"2026-09-29T18:16:28Z","2026-09-29T18:28:12.530229215Z",[12663],{"type":8547,"score":9058},[12665,12667,12669,12671,12673,12674,12675,12676],{"type":8512,"url":12666},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-8436-99hf-9mmv",{"type":8515,"url":12668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85008",{"type":8512,"url":12670},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2be07bf97b3022e0324142d31f99f6e019d815e3",{"type":8512,"url":12672},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb61d9432bac7caac51273ad209862e4c0bf935ae",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":285,"slug":12679,"dossier":47,"summary":12680,"aliases":12681,"sourceIds":12684,"published":12685,"modified":12686,"checkedAt":7,"severity":12687,"references":12690,"versionKeys":12703,"packageCount":32,"repositoryCount":32},"ghsa-847f-9342-265h-4ea27b92","h2 allows HTTP Request Smuggling due to illegal characters in headers",[12682,12683],"CVE-2025-57804","PYSEC-2026-1435",[285,12683],"2025-08-25T20:44:43Z","2026-09-10T03:50:26.965133425Z",[12688],{"type":8508,"score":12689},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12691,12693,12695,12697,12698,12700,12701],{"type":8512,"url":12692},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-847f-9342-265h",{"type":8515,"url":12694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57804",{"type":8512,"url":12696},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F035e9899f95e3709af098f578bfc3cd302298e3a",{"type":8520,"url":11824},{"type":8512,"url":12699},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F09\u002Fmsg00004.html",{"type":8520,"url":11826},{"type":8515,"url":12702},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-847f-9342-265h",[11832],{"id":286,"slug":12705,"dossier":47,"summary":12706,"aliases":12707,"sourceIds":12709,"published":12710,"modified":12711,"checkedAt":7,"severity":12712,"references":12715,"versionKeys":12731,"packageCount":32,"repositoryCount":782},"ghsa-84m7-p3x7-pcfv-fb980c8b","MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion",[12708],"CVE-2026-59951",[286],"2026-10-15T20:13:13Z","2026-10-15T20:30:08.565001293Z",[12713,12714],{"type":8547,"score":8583},{"type":8508,"score":11431},[12716,12718,12720,12722,12724,12726,12728,12729,12730],{"type":8512,"url":12717},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-84m7-p3x7-pcfv",{"type":8515,"url":12719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59951",{"type":8512,"url":12721},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3395",{"type":8512,"url":12723},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3426",{"type":8512,"url":12725},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F92120b4b0f50385af096592d7cee932fc1d994e7",{"type":8512,"url":12727},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd2290ca3434731b68ea3e2270bc06a6e6575931b",{"type":8520,"url":11143},{"type":8512,"url":11145},{"type":8512,"url":11147},[11149,11150,11151,11152],{"id":287,"slug":12733,"dossier":47,"summary":12734,"aliases":12735,"sourceIds":12739,"published":12740,"modified":12741,"checkedAt":7,"severity":12742,"references":12745,"versionKeys":12782,"packageCount":32,"repositoryCount":677},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[12736,12737,12738],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[287,12737],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[12743],{"type":8547,"score":12744},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[12746,12748,12750,12752,12754,12756,12758,12760,12762,12764,12765,12767,12770,12772,12774,12776,12778,12780],{"type":8515,"url":12747},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":8515,"url":12749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":8638,"url":12751},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":8512,"url":12753},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":8645,"url":12755},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":8512,"url":12757},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":8512,"url":12759},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":8512,"url":12761},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":8512,"url":12763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":8520,"url":12395},{"type":8512,"url":12766},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":12768,"url":12769},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":8512,"url":12771},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":8512,"url":12773},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":8512,"url":12775},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":8512,"url":12777},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":8645,"url":12779},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":8515,"url":12781},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[8901,8902,8903,12402,12403,12404,12606,12607,12608],{"id":288,"slug":12784,"dossier":91,"summary":12785,"aliases":12786,"sourceIds":12789,"published":12790,"modified":12791,"checkedAt":7,"severity":12792,"references":12795,"versionKeys":12812,"packageCount":32,"repositoryCount":638},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[12787,12788],"CVE-2026-97687","PYSEC-2026-4175",[288,12788],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[12793],{"type":8508,"score":12794},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12796,12798,12800,12802,12804,12806,12807,12809,12810],{"type":8512,"url":12797},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":8515,"url":12799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":8512,"url":12801},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":8512,"url":12803},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":8512,"url":12805},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":8520,"url":9369},{"type":8512,"url":12808},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":8520,"url":9371},{"type":8515,"url":12811},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[9373,9374,9375,9376,9377,12813,12814],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":289,"slug":12816,"dossier":47,"summary":12817,"aliases":12818,"sourceIds":12820,"published":12821,"modified":12822,"checkedAt":7,"severity":12823,"references":12826,"versionKeys":12834,"packageCount":32,"repositoryCount":32},"ghsa-898c-q2cr-xwhg-6a541ace","axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions",[12819],"CVE-2026-44490",[289],"2026-05-29T15:54:57Z","2026-09-10T03:51:04.811379218Z",[12824],{"type":8547,"score":12825},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[12827,12829,12831,12833],{"type":8512,"url":12828},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-898c-q2cr-xwhg",{"type":8515,"url":12830},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-16487",{"type":8515,"url":12832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44490",{"type":8520,"url":9450},[9452,9453],{"id":290,"slug":12836,"dossier":47,"summary":12837,"aliases":12838,"sourceIds":12842,"published":12843,"modified":12844,"checkedAt":7,"severity":12845,"references":12848,"versionKeys":12856,"packageCount":32,"repositoryCount":8535},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[12839,12840,12841],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[290,12841],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[12846,12847],{"type":8508,"score":11311},{"type":8547,"score":8789},[12849,12851,12853,12854,12855],{"type":8553,"url":12850},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":8515,"url":12852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":8638,"url":11319},{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":291,"slug":12858,"dossier":47,"summary":12859,"aliases":12860,"sourceIds":12863,"published":12864,"modified":12865,"checkedAt":7,"severity":12866,"references":12871,"versionKeys":12886,"packageCount":32,"repositoryCount":34},"ghsa-8mcc-hrx5-hvxc-9da62a9f","GitPython: clone_from()\u002Fclone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination",[12861,12862],"CVE-2026-78677","PYSEC-2026-3787",[291,12862],"2026-08-25T02:16:52.173Z","2026-09-08T19:00:06.914140693Z",[12867,12868,12869],{"type":8547,"score":11791},{"type":8508,"score":9119},{"type":8508,"score":12870},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[12872,12874,12876,12878,12880,12881,12882,12884],{"type":8553,"url":12873},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-8mcc-hrx5-hvxc",{"type":8515,"url":12875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78677",{"type":8512,"url":12877},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2210",{"type":8512,"url":12879},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fb68afff45af0f49e79a3e2d2162018986b37ad5d",{"type":8520,"url":8562},{"type":8512,"url":9895},{"type":8512,"url":12883},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3787.yaml",{"type":8515,"url":12885},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-separate-git-dir",[8570,8571,8572],{"id":292,"slug":12888,"dossier":47,"summary":12889,"aliases":12890,"sourceIds":12892,"published":12893,"modified":12894,"checkedAt":7,"severity":12895,"references":12897,"versionKeys":12904,"packageCount":32,"repositoryCount":8535},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[12891],"CVE-2026-112910",[292],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[12896],{"type":8547,"score":10684},[12898,12900,12901,12902,12903],{"type":8512,"url":12899},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":8512,"url":10969},{"type":8512,"url":10971},{"type":8520,"url":10973},{"type":8512,"url":10975},[11739,11740,11741,11742,11743,10977,10978,10979,10980],{"id":293,"slug":12906,"dossier":47,"summary":12907,"aliases":12908,"sourceIds":12911,"published":12912,"modified":12913,"checkedAt":7,"severity":12914,"references":12916,"versionKeys":12935,"packageCount":32,"repositoryCount":831},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[12909,12910],"CVE-2025-4565","PYSEC-2026-1806",[293,12910],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[12915],{"type":8508,"score":8509},[12917,12919,12921,12923,12925,12926,12928,12930,12932,12933],{"type":8512,"url":12918},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":8512,"url":12920},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":8515,"url":12922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":8512,"url":12924},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":8520,"url":12451},{"type":8512,"url":12927},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":8512,"url":12929},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":8512,"url":12931},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":8520,"url":12453},{"type":8515,"url":12934},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[12457,12459,12460],{"id":294,"slug":12937,"dossier":47,"summary":12938,"aliases":12939,"sourceIds":12942,"published":12943,"modified":12944,"checkedAt":7,"severity":12945,"references":12947,"versionKeys":12957,"packageCount":32,"repositoryCount":698},"ghsa-8rjx-v5ww-45pp-d32996f1","virtualenv activation scripts run code from a path that contains a placeholder name",[12940,12941],"BIT-virtualenv-2026-113776","CVE-2026-113776",[294],"2026-10-21T16:39:38Z","2026-10-29T10:55:59.336337258Z",[12946],{"type":8547,"score":11240},[12948,12950,12952,12954,12955],{"type":8512,"url":12949},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-8rjx-v5ww-45pp",{"type":8515,"url":12951},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113776",{"type":8512,"url":12953},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F602b26623a724827ff171bf11fef4ad186d01f74",{"type":8520,"url":9558},{"type":8512,"url":12956},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.2",[9562,9563,9564,9565,9566],{"id":295,"slug":12959,"dossier":47,"summary":12960,"aliases":12961,"sourceIds":12965,"published":12966,"modified":12967,"checkedAt":7,"severity":12968,"references":12970,"versionKeys":12980,"packageCount":32,"repositoryCount":10106},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[12962,12963,12964],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[295,12964],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[12969],{"type":8547,"score":8583},[12971,12973,12975,12976,12978,12979],{"type":8553,"url":12972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":8515,"url":12974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":8638,"url":10099},{"type":8512,"url":12977},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":8520,"url":8521},{"type":8515,"url":10104},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":296,"slug":12982,"dossier":47,"summary":12983,"aliases":12984,"sourceIds":12987,"published":12988,"modified":12989,"checkedAt":7,"severity":12990,"references":12992,"versionKeys":13011,"packageCount":32,"repositoryCount":32},"ghsa-8v8h-hg4w-mvq2-aca160b2","hpack: Unbounded variable integer decoding can cause run-away computation on malformed input",[12985,12986],"CVE-2026-59980","PYSEC-2026-4053",[296,12986],"2026-09-24T19:43:26Z","2026-10-01T17:55:38.238084125Z",[12991],{"type":8508,"score":8690},[12993,12995,12997,12999,13001,13003,13005,13007,13009],{"type":8512,"url":12994},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Fsecurity\u002Fadvisories\u002FGHSA-8v8h-hg4w-mvq2",{"type":8515,"url":12996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59980",{"type":8512,"url":12998},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Fcommit\u002F8cfb02c547740e16dbfe7aba77bad84b297cec2c",{"type":8512,"url":13000},"https:\u002F\u002Fcs.opensource.google\u002Fgo\u002Fx\u002Fnet\u002F+\u002Fmaster:http2\u002Fhpack\u002Fhpack.go;l=468;drc=8e2b117aee74f6b86c207a808b0255de45c0a18a",{"type":8512,"url":13002},"https:\u002F\u002Fdocs.rs\u002Fhttp2\u002F0.5.19\u002Fsrc\u002Fhttp2\u002Fhpack\u002Fdecoder.rs.html#403",{"type":8520,"url":13004},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack",{"type":8512,"url":13006},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Freleases\u002Ftag\u002Fv4.2.0",{"type":8520,"url":13008},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fhpack",{"type":8515,"url":13010},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8v8h-hg4w-mvq2",[13012],"pypi:hpack@4.0.0",{"id":297,"slug":13014,"dossier":47,"summary":13015,"aliases":13016,"sourceIds":13019,"published":13020,"modified":13021,"checkedAt":7,"severity":13022,"references":13024,"versionKeys":13036,"packageCount":32,"repositoryCount":32},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[13017,13018],"CVE-2026-102265","PYSEC-2026-4142",[297,13018],"2026-09-29T23:43:06Z","2026-10-01T17:55:45.157085612Z",[13023],{"type":8547,"score":8882},[13025,13027,13029,13031,13032,13033,13034],{"type":8512,"url":13026},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":8515,"url":13028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":8512,"url":13030},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":13035},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",[9106],{"id":298,"slug":13038,"dossier":47,"summary":13039,"aliases":13040,"sourceIds":13042,"published":13043,"modified":13044,"checkedAt":7,"severity":13045,"references":13047,"versionKeys":13072,"packageCount":32,"repositoryCount":32},"ghsa-8xcm-r25x-g524-9e9c51a0","undici vulnerable to downstream response desynchronization via retry interceptor",[13041],"CVE-2026-16728",[298],"2026-08-03T19:24:33Z","2026-09-10T03:51:13.567076059Z",[13046],{"type":8547,"score":9711},[13048,13050,13052,13054,13056,13058,13060,13062,13064,13066,13067,13068,13070,13071],{"type":8512,"url":13049},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-8xcm-r25x-g524",{"type":8515,"url":13051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-16728",{"type":8512,"url":13053},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1b5a5312c3a7d7a30c31bf0d000b39a8a2531e1c",{"type":8512,"url":13055},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2b3f749336d356bbbc50192f87f6cf7bc714721a",{"type":8512,"url":13057},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4a9dafb16ff43880cf590e6d9c2aeee25fbff6d7",{"type":8512,"url":13059},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4fd5a0c61e627f928b7003adc4ffe1e55ec63420",{"type":8512,"url":13061},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcba3a52ac2e7abcc4e656d82af8579ea82c2bb9e",{"type":8512,"url":13063},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe11a68ed4ff345c79402476f7a00d473443e318d",{"type":8512,"url":13065},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3828685",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":13069},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.28.0",{"type":8512,"url":10261},{"type":8512,"url":10263},[9076,9077],{"id":299,"slug":13074,"dossier":47,"summary":13075,"aliases":13076,"sourceIds":13078,"published":13079,"modified":13080,"checkedAt":7,"severity":13081,"references":13084,"versionKeys":13092,"packageCount":32,"repositoryCount":32},"ghsa-93m4-6634-74q7-557bfeeb","vite allows server.fs.deny bypass via backslash on Windows",[13077],"CVE-2025-62522",[299],"2025-10-20T19:54:28Z","2026-09-10T03:50:29.574857832Z",[13082],{"type":8508,"score":13083},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13085,13087,13089,13091],{"type":8512,"url":13086},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-93m4-6634-74q7",{"type":8515,"url":13088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62522",{"type":8512,"url":13090},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff479cc57c425ed41ceb434fecebd63931b1ed4ed",{"type":8520,"url":10612},[10621],{"id":300,"slug":13094,"dossier":47,"summary":13095,"aliases":13096,"sourceIds":13099,"published":13100,"modified":13101,"checkedAt":7,"severity":13102,"references":13105,"versionKeys":13119,"packageCount":32,"repositoryCount":34},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[13097,13098],"CVE-2026-73622","PYSEC-2026-3951",[300,13098],"2026-07-24T21:45:16Z","2026-09-24T14:45:07.411775302Z",[13103,13104],{"type":8547,"score":11791},{"type":8508,"score":12870},[13106,13108,13110,13112,13113,13115,13117],{"type":8553,"url":13107},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":8512,"url":13109},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":8638,"url":13111},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":8520,"url":8562},{"type":8512,"url":13114},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",{"type":8512,"url":13116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3951.yaml",{"type":8515,"url":13118},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-remote-add",[8570,8571,8572],{"id":301,"slug":13121,"dossier":47,"summary":13122,"aliases":13123,"sourceIds":13127,"published":13128,"modified":13129,"checkedAt":7,"severity":13130,"references":13133,"versionKeys":13148,"packageCount":32,"repositoryCount":698},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[13124,13125,13126],"BIT-virtualenv-2026-102930","CVE-2026-102930","PYSEC-2026-4011",[301,13126],"2026-09-18T01:41:45Z","2026-10-06T15:26:06.490658879Z",[13131],{"type":8508,"score":13132},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13134,13136,13138,13140,13142,13144,13145,13147],{"type":8512,"url":13135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":8515,"url":13137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":8512,"url":13139},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":8638,"url":13141},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":8512,"url":13143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":8520,"url":9558},{"type":8512,"url":13146},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":8520,"url":11050},[9562,9563,9564,9565,9566],{"id":302,"slug":13150,"dossier":47,"summary":13151,"aliases":13152,"sourceIds":13155,"published":13156,"modified":13157,"checkedAt":7,"severity":13158,"references":13161,"versionKeys":13172,"packageCount":32,"repositoryCount":782},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[13153,13154],"CVE-2025-53643","PYSEC-2026-1104",[302,13154],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[13159],{"type":8508,"score":13160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[13162,13164,13166,13168,13169,13170],{"type":8512,"url":13163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":8515,"url":13165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":8638,"url":13167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":13171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[8960,8961,8962,8963],{"id":303,"slug":13174,"dossier":47,"summary":13175,"aliases":13176,"sourceIds":13179,"published":13180,"modified":13181,"checkedAt":7,"severity":13182,"references":13184,"versionKeys":13200,"packageCount":32,"repositoryCount":34},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[13177,13178],"CVE-2026-67323","PYSEC-2026-3839",[303,13178],"2026-07-21T20:10:06Z","2026-09-10T12:25:39.217544351Z",[13183],{"type":8547,"score":12300},[13185,13187,13189,13191,13193,13194,13195,13197,13198],{"type":8512,"url":13186},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":8515,"url":13188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67323",{"type":8512,"url":13190},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":8512,"url":13192},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":8520,"url":8562},{"type":8512,"url":8927},{"type":8512,"url":13196},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-unguarded-git-options",{"type":8520,"url":8931},{"type":8515,"url":13199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",[8570,8571,8572],{"id":304,"slug":13202,"dossier":47,"summary":13203,"aliases":13204,"sourceIds":13207,"published":13208,"modified":13209,"checkedAt":7,"severity":13210,"references":13213,"versionKeys":13222,"packageCount":32,"repositoryCount":677},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[13205,13206],"CVE-2026-34518","PYSEC-2026-2100",[304,13206],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[13211,13212],{"type":8547,"score":10444},{"type":8508,"score":10836},[13214,13216,13218,13220,13221],{"type":8638,"url":13215},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":8515,"url":13217},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":8638,"url":13219},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":305,"slug":13224,"dossier":47,"summary":13225,"aliases":13226,"sourceIds":13228,"published":13229,"modified":13230,"checkedAt":7,"severity":13231,"references":13233,"versionKeys":13244,"packageCount":32,"repositoryCount":32},"ghsa-97r2-qh9m-474h-644e1396","Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)",[13227],"CVE-2026-116581",[305],"2026-10-28T21:17:27Z","2026-10-28T21:30:06.799577215Z",[13232],{"type":8547,"score":8583},[13234,13236,13238,13240,13242,13243],{"type":8512,"url":13235},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-97r2-qh9m-474h",{"type":8515,"url":13237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116581",{"type":8512,"url":13239},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Fcdcee3e3bc384ee844360844f8ea98fd2b275d69",{"type":8512,"url":13241},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Fe176f9267e59ddd6c9de89cc9fe85c5b37a5b728",{"type":8520,"url":12558},{"type":8512,"url":12560},[12562],{"id":306,"slug":13246,"dossier":47,"summary":13247,"aliases":13248,"sourceIds":13251,"published":13252,"modified":13253,"checkedAt":7,"severity":13254,"references":13256,"versionKeys":13275,"packageCount":32,"repositoryCount":32},"ghsa-983w-rhvv-gwmv-c6b60e52","WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect",[13249,13250],"CVE-2025-68616","PYSEC-2026-2034",[306,13250],"2026-01-20T16:29:53Z","2026-07-07T17:57:32.367800639Z",[13255],{"type":8547,"score":11791},[13257,13259,13261,13263,13265,13267,13269,13271,13273],{"type":8512,"url":13258},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",{"type":8515,"url":13260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68616",{"type":8512,"url":13262},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fcommit\u002Fb6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565",{"type":8512,"url":13264},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-68616",{"type":8512,"url":13266},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2430858",{"type":8520,"url":13268},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint",{"type":8512,"url":13270},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2025\u002Fcve-2025-68616.json",{"type":8520,"url":13272},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fweasyprint",{"type":8515,"url":13274},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",[13276],"pypi:weasyprint@64.1",{"id":307,"slug":13278,"dossier":47,"summary":13279,"aliases":13280,"sourceIds":13283,"published":13284,"modified":13285,"checkedAt":7,"severity":13286,"references":13289,"versionKeys":13299,"packageCount":32,"repositoryCount":831},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[13281,13282],"CVE-2026-48522","PYSEC-2026-175",[307,13282],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[13287],{"type":8547,"score":13288},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[13290,13292,13294,13296,13297],{"type":8553,"url":13291},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":8515,"url":13293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":8512,"url":13295},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":8520,"url":9097},{"type":8512,"url":13298},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[9105,9107],{"id":308,"slug":13301,"dossier":47,"summary":13302,"aliases":13303,"sourceIds":13305,"published":13306,"modified":13307,"checkedAt":7,"severity":13308,"references":13310,"versionKeys":13326,"packageCount":32,"repositoryCount":578},"ghsa-9fm3-97px-rjf6-8587a763","undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering",[13304],"CVE-2026-109932",[308],"2026-10-27T19:02:15Z","2026-10-27T19:15:22.400702743Z",[13309],{"type":8547,"score":8850},[13311,13313,13315,13317,13319,13321,13322,13323,13324,13325],{"type":8512,"url":13312},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-9fm3-97px-rjf6",{"type":8515,"url":13314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109932",{"type":8512,"url":13316},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F39f93e142df03e559fe7c3d1fc7fba9beee2c185",{"type":8512,"url":13318},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F53944624462b6797560288c55dbd8c66857bb495",{"type":8512,"url":13320},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb217373bb024cd93f85eb5b3ffd25684855f60f8",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9190},{"type":8512,"url":9192},{"type":8512,"url":9194},[9076,9077,9196],{"id":309,"slug":13328,"dossier":47,"summary":13329,"aliases":13330,"sourceIds":13332,"published":13333,"modified":13334,"checkedAt":7,"severity":13335,"references":13338,"versionKeys":13349,"packageCount":32,"repositoryCount":32},"ghsa-9fr6-4gfg-395g-dd20f37d","Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method",[13331],"CVE-2026-101902",[309],"2026-09-30T15:12:49Z","2026-09-30T15:30:03.718390401Z",[13336],{"type":8508,"score":13337},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:H\u002FSA:N",[13339,13341,13343,13344,13345,13346,13348],{"type":8512,"url":13340},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-9fr6-4gfg-395g",{"type":8515,"url":13342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101902",{"type":8512,"url":9773},{"type":8512,"url":9775},{"type":8520,"url":9450},{"type":8512,"url":13347},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.34.0",{"type":8512,"url":9778},[9452,9453],{"id":310,"slug":13351,"dossier":47,"summary":13352,"aliases":13353,"sourceIds":13356,"published":13357,"modified":13358,"checkedAt":7,"severity":13359,"references":13361,"versionKeys":13375,"packageCount":32,"repositoryCount":831},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[13354,13355],"CVE-2025-66416","PYSEC-2026-1617",[310,13355],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[13360],{"type":8508,"score":12794},[13362,13364,13366,13368,13370,13371,13373],{"type":8512,"url":13363},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":8515,"url":13365},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":8512,"url":13367},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":8515,"url":13369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":8520,"url":11143},{"type":8512,"url":13372},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":8520,"url":13374},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[11149,11150,11151],{"id":311,"slug":13377,"dossier":47,"summary":13378,"aliases":13379,"sourceIds":13383,"published":13384,"modified":13385,"checkedAt":7,"severity":13386,"references":13389,"versionKeys":13404,"packageCount":32,"repositoryCount":698},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[13380,13381,13382],"BIT-virtualenv-2026-102938","CVE-2026-102938","PYSEC-2026-4012",[311,13382],"2026-09-17T16:42:47Z","2026-10-06T15:25:56.172772842Z",[13387],{"type":8508,"score":13388},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[13390,13392,13394,13396,13398,13400,13401,13403],{"type":8512,"url":13391},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":8515,"url":13393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":8512,"url":13395},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":8638,"url":13397},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":8512,"url":13399},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":8520,"url":9558},{"type":8512,"url":13402},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":8520,"url":11050},[9562,9563,9564,9565,9566],{"id":312,"slug":13406,"dossier":47,"summary":13407,"aliases":13408,"sourceIds":13411,"published":13412,"modified":13413,"checkedAt":7,"severity":13414,"references":13417,"versionKeys":13440,"packageCount":32,"repositoryCount":698},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[13409,13410],"CVE-2024-47081","PYSEC-2026-1872",[312,13410],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[13415],{"type":8547,"score":13416},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[13418,13420,13422,13424,13426,13428,13430,13432,13434,13436,13438],{"type":8512,"url":13419},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":8515,"url":13421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":8512,"url":13423},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":8638,"url":13425},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":8515,"url":13427},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":8520,"url":13429},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":8512,"url":13431},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":8512,"url":13433},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":8520,"url":13435},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":8512,"url":13437},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":8512,"url":13439},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[13441,13442],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":313,"slug":13444,"dossier":47,"summary":13445,"aliases":13446,"sourceIds":13450,"published":13451,"modified":13452,"checkedAt":7,"severity":13453,"references":13455,"versionKeys":13468,"packageCount":32,"repositoryCount":10106},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[13447,13448,13449],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[313,13449],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[13454],{"type":8547,"score":8583},[13456,13458,13460,13462,13464,13466,13467],{"type":8553,"url":13457},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":8515,"url":13459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":8638,"url":13461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":8638,"url":13463},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":8512,"url":13465},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":8520,"url":8521},{"type":8515,"url":11467},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":314,"slug":13470,"dossier":47,"summary":13471,"aliases":13472,"sourceIds":13475,"published":13476,"modified":13477,"checkedAt":7,"severity":13478,"references":13480,"versionKeys":13492,"packageCount":32,"repositoryCount":32},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[13473,13474],"CVE-2026-102266","PYSEC-2026-4143",[314,13474],"2026-09-29T23:43:19Z","2026-10-01T17:56:01.035847258Z",[13479],{"type":8547,"score":9175},[13481,13483,13485,13487,13488,13489,13490],{"type":8512,"url":13482},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":8515,"url":13484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":8512,"url":13486},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":13491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",[9106],{"id":315,"slug":13494,"dossier":47,"summary":13495,"aliases":13496,"sourceIds":13498,"published":13499,"modified":13500,"checkedAt":7,"severity":13501,"references":13504,"versionKeys":13514,"packageCount":32,"repositoryCount":831},"ghsa-9jrq-w75r-8gcw-21865588","Vite: Cross origin script execution through Vite custom middleware",[13497],"CVE-2026-112945",[315],"2026-10-21T16:48:14Z","2026-10-21T17:00:26.569382874Z",[13502],{"type":8508,"score":13503},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13505,13507,13509,13511,13513],{"type":8512,"url":13506},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-9jrq-w75r-8gcw",{"type":8515,"url":13508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112945",{"type":8512,"url":13510},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F23653",{"type":8512,"url":13512},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F7dafd8e56f152403a3230608fa4005273c2e9e17",{"type":8520,"url":10612},[10620,10621,10622],{"id":316,"slug":13516,"dossier":47,"summary":13517,"aliases":13518,"sourceIds":13521,"published":13522,"modified":13523,"checkedAt":7,"severity":13524,"references":13526,"versionKeys":13541,"packageCount":32,"repositoryCount":34},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[13519,13520],"CVE-2026-76218","PYSEC-2026-3840",[316,13520],"2026-08-07T15:36:43Z","2026-09-10T12:25:55.324487522Z",[13525],{"type":8547,"score":11938},[13527,13529,13531,13532,13534,13535,13536,13538,13539],{"type":8512,"url":13528},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":8515,"url":13530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76218",{"type":8512,"url":10327},{"type":8512,"url":13533},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":8520,"url":8562},{"type":8512,"url":10332},{"type":8512,"url":13537},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-repo-init",{"type":8520,"url":8931},{"type":8515,"url":13540},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",[8570,8571,8572],{"id":317,"slug":13543,"dossier":47,"summary":13544,"aliases":13545,"sourceIds":13548,"published":13549,"modified":13550,"checkedAt":7,"severity":13551,"references":13553,"versionKeys":13565,"packageCount":32,"repositoryCount":782},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[13546,13547],"CVE-2026-102267","PYSEC-2026-4144",[317,13547],"2026-09-29T23:15:00Z","2026-10-01T17:56:19.395032954Z",[13552],{"type":8547,"score":9175},[13554,13556,13558,13560,13561,13562,13563],{"type":8512,"url":13555},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":8515,"url":13557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":8512,"url":13559},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":13564},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",[9105,9106,9107],{"id":318,"slug":13567,"dossier":47,"summary":13568,"aliases":13569,"sourceIds":13581,"published":13582,"modified":13583,"checkedAt":7,"severity":13584,"references":13588,"versionKeys":13629,"packageCount":578,"repositoryCount":32},"ghsa-9v8h-qqgm-4m35-781aec0d","Brotli: Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package",[13570,13571,13572,13573,13574,13575,13576,13577,13578,13579,13580],"BIT-brotli-2026-111497","BIT-dotnet-2026-111497","BIT-dotnet-sdk-2026-111497","BIT-node-2026-111497","BIT-node-min-2026-111497","BIT-powershell-2026-111497","CVE-2026-111497","GHSA-c9gr-gmg4-2vqv","GO-2026-6888","PYSEC-2026-4322","PYSEC-2026-4323",[318,13579,13580],"2026-10-22T15:32:49Z","2026-11-05T23:25:49.434824566Z",[13585,13586],{"type":8547,"score":8789},{"type":8508,"score":13587},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13589,13591,13593,13595,13597,13599,13601,13603,13605,13607,13609,13611,13613,13615,13617,13619,13621,13623,13625,13627],{"type":8515,"url":13590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111497",{"type":8512,"url":13592},"https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fannouncements\u002Fissues\u002F494",{"type":8512,"url":13594},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002Fda9806362874b9bd4b552a3af360b5d6347beb12",{"type":8512,"url":13596},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002Fb418fa81c48262a86a95332b0bc6d62c30aa78b6",{"type":8512,"url":13598},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F50a9b70a4d5e1443fc40927952276b68fffa83a0",{"type":8638,"url":13600},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F0ed4268a4401abcb4472096340477cf4af7d1a2b",{"type":8512,"url":13602},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fbrotlicffi\u002FPYSEC-2026-4323.yaml",{"type":8512,"url":13604},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F10\u002Fmsg00049.html",{"type":8512,"url":13606},"https:\u002F\u002Fnodejs.org\u002Fen\u002Fblog\u002Fvulnerability\u002Foctober-2026-security-releases",{"type":8512,"url":13608},"https:\u002F\u002Fnodejs.org\u002Fen\u002Fblog\u002Fvulnerability\u002Foctober-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high",{"type":8512,"url":13610},"https:\u002F\u002Fopensourcemalware.com\u002Fblog\u002Fnode2shell-affects-python",{"type":8512,"url":13612},"https:\u002F\u002Fpatchtheplanet.org\u002Fbrotli",{"type":8512,"url":13614},"https:\u002F\u002Fpypi.org\u002Fproject\u002FBrotli",{"type":8512,"url":13616},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotlicffi",{"type":8512,"url":13618},"https:\u002F\u002Fwww.aikido.dev\u002Fblog\u002Fnode2shell-nodejs-brotli-rce-cve-2026-111497",{"type":8512,"url":13620},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497",{"type":8515,"url":13622},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-111497",{"type":8512,"url":13624},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Freleases\u002Ftag\u002Fv1.2.1",{"type":8520,"url":13626},"https:\u002F\u002Fpypi.org\u002Fproject\u002FBrotli\u002F",{"type":8520,"url":13628},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotlicffi\u002F",[9261,13630],"pypi:brotlicffi@1.1.0.0",{"id":319,"slug":13632,"dossier":47,"summary":13633,"aliases":13634,"sourceIds":13638,"published":13639,"modified":13640,"checkedAt":7,"severity":13641,"references":13646,"versionKeys":13657,"packageCount":32,"repositoryCount":8535},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[13635,13636,13637],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[319,13637],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[13642,13644],{"type":8508,"score":13643},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":13645},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[13647,13649,13651,13653,13655,13656],{"type":8515,"url":13648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":8515,"url":13650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":9654,"url":13652},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":8638,"url":13654},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":320,"slug":13659,"dossier":47,"summary":13660,"aliases":13661,"sourceIds":13663,"published":13664,"modified":13665,"checkedAt":7,"severity":13666,"references":13668,"versionKeys":13677,"packageCount":32,"repositoryCount":745},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[13662],"CVE-2026-112913",[320],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[13667],{"type":8547,"score":10703},[13669,13671,13673,13675,13676],{"type":8512,"url":13670},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":8512,"url":13672},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":8512,"url":13674},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":8520,"url":10973},{"type":8512,"url":10975},[10977,10978,10979,10980],{"id":321,"slug":13679,"dossier":47,"summary":13680,"aliases":13681,"sourceIds":13684,"published":13685,"modified":13686,"checkedAt":7,"severity":13687,"references":13690,"versionKeys":13707,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[13682,13683],"CVE-2024-35195","PYSEC-2026-1873",[321,13683],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[13688],{"type":8547,"score":13689},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[13691,13693,13695,13697,13699,13700,13702,13704,13705],{"type":8512,"url":13692},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":8515,"url":13694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":8512,"url":13696},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":8638,"url":13698},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":8520,"url":13429},{"type":8512,"url":13701},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":8512,"url":13703},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":8520,"url":13435},{"type":8515,"url":13706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[13441],{"id":322,"slug":13709,"dossier":47,"summary":13710,"aliases":13711,"sourceIds":13713,"published":13714,"modified":13715,"checkedAt":7,"severity":13716,"references":13719,"versionKeys":13729,"packageCount":32,"repositoryCount":32},"ghsa-9wx9-5pv9-3349-f9ad6b42","Seroval: Script injection through RegExp sources in serialized output",[13712],"CVE-2026-116582",[322],"2026-10-28T21:17:31Z","2026-10-28T21:30:04.992414732Z",[13717],{"type":8547,"score":13718},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[13720,13722,13724,13726,13727],{"type":8512,"url":13721},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx9-5pv9-3349",{"type":8515,"url":13723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116582",{"type":8512,"url":13725},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Ff94ee0b63936dae954ff50d5b5e8ea7cb9b284e6",{"type":8520,"url":12558},{"type":8512,"url":13728},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.10",[12562],{"id":323,"slug":13731,"dossier":47,"summary":13732,"aliases":13733,"sourceIds":13736,"published":13737,"modified":13738,"checkedAt":7,"severity":13739,"references":13743,"versionKeys":13749,"packageCount":32,"repositoryCount":66},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[13734,13735],"CVE-2026-54280","PYSEC-2026-2113",[323,13735],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[13740,13742],{"type":8508,"score":13741},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":8583},[13744,13746,13748],{"type":8515,"url":13745},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":8638,"url":13747},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":324,"slug":13751,"dossier":47,"summary":13752,"aliases":13753,"sourceIds":13755,"published":13756,"modified":13757,"checkedAt":7,"severity":13758,"references":13760,"versionKeys":13769,"packageCount":32,"repositoryCount":9047},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[13754],"CVE-2026-111066",[324],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[13759],{"type":8508,"score":8509},[13761,13763,13765,13767,13768],{"type":8512,"url":13762},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":8515,"url":13764},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":8512,"url":13766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":325,"slug":13771,"dossier":47,"summary":13772,"aliases":13773,"sourceIds":13776,"published":13777,"modified":13778,"checkedAt":7,"severity":13779,"references":13781,"versionKeys":13794,"packageCount":32,"repositoryCount":32},"ghsa-9xwg-3r6f-jcx2-8434e377","PyMdown Extensions: Path traversal in the b64 extension lets \u003Cimg src> read files outside base_path",[13774,13775],"CVE-2026-61632","PYSEC-2026-3609",[325,13775],"2026-07-24T16:18:33Z","2026-09-10T03:51:11.365684709Z",[13780],{"type":8547,"score":10444},[13782,13784,13786,13787,13789,13790,13792],{"type":8512,"url":13783},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":8512,"url":13785},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fedce35586d11a1ef78bb187bc60497fe6dbf3b64",{"type":8520,"url":11491},{"type":8512,"url":13788},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Freleases\u002Ftag\u002F11.0",{"type":8520,"url":11493},{"type":8515,"url":13791},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":8515,"url":13793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-61632",[11499],{"id":326,"slug":13796,"dossier":47,"summary":13797,"aliases":13798,"sourceIds":13800,"published":13801,"modified":13802,"checkedAt":7,"severity":13803,"references":13805,"versionKeys":13813,"packageCount":32,"repositoryCount":831},"ghsa-c2c7-rcm5-vvqj-6ccdec4e","Picomatch has a ReDoS vulnerability via extglob quantifiers",[13799],"CVE-2026-33671",[326],"2026-03-25T21:12:07Z","2026-09-10T03:51:00.292614896Z",[13804],{"type":8547,"score":8583},[13806,13808,13810,13812],{"type":8512,"url":13807},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-c2c7-rcm5-vvqj",{"type":8515,"url":13809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33671",{"type":8512,"url":13811},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F5eceecd27543b8e056b9307d69e105ea03618a7d",{"type":8520,"url":9827},[9829,9830],{"id":327,"slug":13815,"dossier":47,"summary":13816,"aliases":13817,"sourceIds":13820,"published":13821,"modified":13822,"checkedAt":7,"severity":13823,"references":13827,"versionKeys":13838,"packageCount":32,"repositoryCount":677},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[13818,13819],"CVE-2026-34525","PYSEC-2026-2103",[327,13819],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[13824,13826],{"type":8508,"score":13825},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":8547,"score":9305},[13828,13830,13832,13834,13836,13837],{"type":8638,"url":13829},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":8515,"url":13831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":8638,"url":13833},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":8638,"url":13835},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":328,"slug":13840,"dossier":47,"summary":13841,"aliases":13842,"sourceIds":13845,"published":13846,"modified":13847,"checkedAt":7,"severity":13848,"references":13851,"versionKeys":13860,"packageCount":32,"repositoryCount":8535},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[13843,13844],"BIT-pillow-2026-112404","CVE-2026-112404",[328],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[13849],{"type":8508,"score":13850},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13852,13854,13856,13858,13859],{"type":8512,"url":13853},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":8515,"url":13855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":8512,"url":13857},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":329,"slug":13862,"dossier":47,"summary":13863,"aliases":13864,"sourceIds":13866,"published":13867,"modified":13868,"checkedAt":7,"severity":13869,"references":13871,"versionKeys":13880,"packageCount":32,"repositoryCount":32},"ghsa-c83g-rgw3-j3cx-c08d66e8","Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM",[13865],"CVE-2026-73089",[329],"2026-09-01T16:42:13Z","2026-09-10T03:50:54.622936829Z",[13870],{"type":8547,"score":8583},[13872,13874,13876,13878,13879],{"type":8512,"url":13873},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fsecurity\u002Fadvisories\u002FGHSA-c83g-rgw3-j3cx",{"type":8515,"url":13875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73089",{"type":8512,"url":13877},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fcommit\u002Ff2931a3ff2a3a31abf84ef01a7400b270aad6405",{"type":8520,"url":12163},{"type":8512,"url":12165},[12167],{"id":330,"slug":13882,"dossier":47,"summary":13883,"aliases":13884,"sourceIds":13887,"published":13888,"modified":13889,"checkedAt":7,"severity":13890,"references":13892,"versionKeys":13901,"packageCount":32,"repositoryCount":698},"ghsa-c947-3pg5-gm8q-45da7664","virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote",[13885,13886],"BIT-virtualenv-2026-113732","CVE-2026-113732",[330],"2026-10-21T16:39:58Z","2026-10-29T10:55:30.348006947Z",[13891],{"type":8547,"score":11240},[13893,13895,13897,13899,13900],{"type":8512,"url":13894},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c947-3pg5-gm8q",{"type":8515,"url":13896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113732",{"type":8512,"url":13898},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F3bddeaf8d02c3ee7f576503efb082f8f494cfcab",{"type":8520,"url":9558},{"type":8512,"url":12956},[9562,9563,9564,9565,9566],{"id":331,"slug":13903,"dossier":47,"summary":13904,"aliases":13905,"sourceIds":13908,"published":13909,"modified":13910,"checkedAt":7,"severity":13911,"references":13913,"versionKeys":13924,"packageCount":32,"repositoryCount":698},"ghsa-c978-59m8-c77v-420aeea3","virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax",[13906,13907],"BIT-virtualenv-2026-113722","CVE-2026-113722",[331],"2026-10-21T21:30:12Z","2026-10-29T10:55:46.719521464Z",[13912],{"type":8547,"score":11240},[13914,13916,13918,13920,13922,13923],{"type":8512,"url":13915},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c978-59m8-c77v",{"type":8515,"url":13917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113722",{"type":8512,"url":13919},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3417",{"type":8512,"url":13921},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2519941bed33ee0d3ac99277f67913e439e476a9",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":332,"slug":13926,"dossier":47,"summary":13927,"aliases":13928,"sourceIds":13932,"published":13933,"modified":13934,"checkedAt":7,"severity":13935,"references":13938,"versionKeys":13978,"packageCount":32,"repositoryCount":10732},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[13929,13930,13931],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[332,13931],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[13936,13937],{"type":8508,"score":12302},{"type":8547,"score":8583},[13939,13941,13943,13945,13947,13949,13950,13952,13954,13956,13958,13960,13962,13964,13966,13968,13970,13972,13974,13976],{"type":8512,"url":13940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":8515,"url":13942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":8512,"url":13944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":8512,"url":13946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":8512,"url":13948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":8520,"url":8521},{"type":8512,"url":13951},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":8512,"url":13953},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":8512,"url":13955},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":8515,"url":13957},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":8515,"url":13959},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":8515,"url":13961},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":8515,"url":13963},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":8515,"url":13965},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":8515,"url":13967},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":8515,"url":13969},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":8515,"url":13971},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":8515,"url":13973},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":8515,"url":13975},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":8515,"url":13977},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[8525,8526,8527,8528,8529,8530,8531],{"id":333,"slug":13980,"dossier":47,"summary":13981,"aliases":13982,"sourceIds":13986,"published":13987,"modified":13988,"checkedAt":7,"severity":13989,"references":13992,"versionKeys":14001,"packageCount":32,"repositoryCount":726},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[13983,13984,13985],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[333,13985],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[13990,13991],{"type":8508,"score":9015},{"type":8547,"score":8583},[13993,13995,13997,13999,14000],{"type":8553,"url":13994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":8515,"url":13996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":8638,"url":13998},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":8520,"url":8521},{"type":8515,"url":8523},[8530,8531,8532,8533,8534],{"id":334,"slug":14003,"dossier":47,"summary":14004,"aliases":14005,"sourceIds":14008,"published":14009,"modified":14010,"checkedAt":7,"severity":14011,"references":14014,"versionKeys":14031,"packageCount":32,"repositoryCount":578},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[14006,14007],"CVE-2025-27516","PYSEC-2026-1471",[334,14007],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[14012],{"type":8508,"score":14013},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[14015,14017,14019,14021,14023,14025,14027,14029],{"type":8512,"url":14016},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":8515,"url":14018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":8638,"url":14020},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":8520,"url":14022},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":8512,"url":14024},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":8512,"url":14026},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":8520,"url":14028},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":8515,"url":14030},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[14032,14033],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":335,"slug":14035,"dossier":47,"summary":14036,"aliases":14037,"sourceIds":14040,"published":14041,"modified":14042,"checkedAt":7,"severity":14043,"references":14045,"versionKeys":14060,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[14038,14039],"CVE-2026-69244","PYSEC-2026-3545",[335,14039],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[14044],{"type":8508,"score":9646},[14046,14048,14050,14052,14053,14055,14056,14058],{"type":8512,"url":14047},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":8512,"url":14049},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":8512,"url":14051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":8520,"url":8956},{"type":8512,"url":14054},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":8520,"url":10846},{"type":8515,"url":14057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":8515,"url":14059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045],{"id":336,"slug":14062,"dossier":47,"summary":14063,"aliases":14064,"sourceIds":14067,"published":14068,"modified":14069,"checkedAt":7,"severity":14070,"references":14072,"versionKeys":14083,"packageCount":32,"repositoryCount":698},"ghsa-cw65-gx24-rc82-d2d30a51","virtualenv: Builtin creation follows linked environment directories",[14065,14066],"BIT-virtualenv-2026-113716","CVE-2026-113716",[336],"2026-10-21T21:35:56Z","2026-10-29T10:55:59.838026441Z",[14071],{"type":8547,"score":10024},[14073,14075,14077,14079,14081,14082],{"type":8512,"url":14074},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cw65-gx24-rc82",{"type":8515,"url":14076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113716",{"type":8512,"url":14078},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3429",{"type":8512,"url":14080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F554d9f9d4f7758f5cf53f993031e29787f1f74c5",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":337,"slug":14085,"dossier":47,"summary":14086,"aliases":14087,"sourceIds":14089,"published":14090,"modified":14091,"checkedAt":7,"severity":14092,"references":14094,"versionKeys":14103,"packageCount":32,"repositoryCount":745},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[14088],"CVE-2026-112915",[337],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[14093],{"type":8547,"score":11379},[14095,14097,14099,14100,14101,14102],{"type":8512,"url":14096},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":8515,"url":14098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":8512,"url":13672},{"type":8512,"url":13674},{"type":8520,"url":10973},{"type":8512,"url":10975},[10977,10978,10979,10980],{"id":338,"slug":14105,"dossier":47,"summary":14106,"aliases":14107,"sourceIds":14110,"published":14111,"modified":14112,"checkedAt":7,"severity":14113,"references":14115,"versionKeys":14124,"packageCount":32,"repositoryCount":698},"ghsa-cx28-75q4-x26q-bb017595","virtualenv: Pip seeding with download omits wheel digest verification",[14108,14109],"BIT-virtualenv-2026-113717","CVE-2026-113717",[338],"2026-10-23T22:26:04Z","2026-10-29T10:55:56.839709622Z",[14114],{"type":8508,"score":10206},[14116,14118,14120,14121,14122,14123],{"type":8512,"url":14117},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cx28-75q4-x26q",{"type":8515,"url":14119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113717",{"type":8512,"url":10213},{"type":8512,"url":10215},{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":339,"slug":14126,"dossier":47,"summary":14127,"aliases":14128,"sourceIds":14130,"published":14131,"modified":14132,"checkedAt":7,"severity":14133,"references":14135,"versionKeys":14144,"packageCount":32,"repositoryCount":32},"ghsa-f269-vfmq-vjvj-ae91eae7","Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client",[14129],"CVE-2026-1528",[339],"2026-03-13T20:07:26Z","2026-09-10T03:50:38.848760381Z",[14134],{"type":8547,"score":8583},[14136,14138,14140,14142,14143],{"type":8512,"url":14137},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-f269-vfmq-vjvj",{"type":8515,"url":14139},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1528",{"type":8512,"url":14141},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3537648",{"type":8512,"url":8767},{"type":8520,"url":9070},[9076,9077],{"id":340,"slug":14146,"dossier":47,"summary":14147,"aliases":14148,"sourceIds":14151,"published":14152,"modified":14153,"checkedAt":7,"severity":14154,"references":14156,"versionKeys":14165,"packageCount":32,"repositoryCount":8535},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[14149,14150],"BIT-pillow-2026-112406","CVE-2026-112406",[340],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[14155],{"type":8508,"score":9015},[14157,14159,14161,14163,14164],{"type":8512,"url":14158},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":8515,"url":14160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":8512,"url":14162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":341,"slug":14167,"dossier":47,"summary":14168,"aliases":14169,"sourceIds":14171,"published":14172,"modified":14173,"checkedAt":7,"severity":14174,"references":14177,"versionKeys":14190,"packageCount":32,"repositoryCount":578},"ghsa-f72v-6w45-q472-bdbac4d6","undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens",[14170],"CVE-2026-109841",[341],"2026-10-23T22:12:57Z","2026-10-23T22:30:04.094314933Z",[14175],{"type":8547,"score":14176},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14178,14180,14182,14184,14186,14187,14188,14189],{"type":8512,"url":14179},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-f72v-6w45-q472",{"type":8515,"url":14181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109841",{"type":8512,"url":14183},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F18bc8a1e09d15bc45815154a289dcf6fd5254d00",{"type":8512,"url":14185},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4f7ef6806e532ab9e29ccd6229b1b9d241e1b1f0",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9192},{"type":8512,"url":9194},[9077,9196],{"id":342,"slug":14192,"dossier":47,"summary":14193,"aliases":14194,"sourceIds":14196,"published":14197,"modified":14198,"checkedAt":7,"severity":14199,"references":14202,"versionKeys":14212,"packageCount":32,"repositoryCount":32},"ghsa-f86p-h4j2-7qgj-9355f720","Seroval: Code injection through a typed array's own constructor property",[14195],"CVE-2026-116583",[342],"2026-10-28T21:17:36Z","2026-10-28T21:30:05.897308225Z",[14200],{"type":8508,"score":14201},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[14203,14205,14207,14209,14210],{"type":8512,"url":14204},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-f86p-h4j2-7qgj",{"type":8515,"url":14206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116583",{"type":8512,"url":14208},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F1313ebbad9687bc0245e08bfd576376e57e0e5c1",{"type":8520,"url":12558},{"type":8512,"url":14211},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.11",[12562],{"id":343,"slug":14214,"dossier":47,"summary":14215,"aliases":14216,"sourceIds":14218,"published":14219,"modified":14220,"checkedAt":7,"severity":14221,"references":14223,"versionKeys":14247,"packageCount":32,"repositoryCount":578},"ghsa-f886-m6hf-6m8v-159d3b25","brace-expansion: Zero-step sequence causes process hang and memory exhaustion",[14217],"CVE-2026-33750",[343],"2026-03-26T18:29:42Z","2026-09-10T03:51:00.342356761Z",[14222],{"type":8547,"score":8666},[14224,14226,14228,14230,14232,14234,14236,14238,14240,14242,14243,14245],{"type":8512,"url":14225},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-f886-m6hf-6m8v",{"type":8515,"url":14227},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33750",{"type":8512,"url":14229},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fissues\u002F98",{"type":8512,"url":14231},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F95",{"type":8512,"url":14233},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F96",{"type":8512,"url":14235},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F97",{"type":8512,"url":14237},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F311ac0d54994158c0a384e286a7d6cbb17ee8ed5",{"type":8512,"url":14239},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F7fd684f89fdde3549563d0a6522226a9189472a2",{"type":8512,"url":14241},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fb9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a",{"type":8520,"url":9689},{"type":8512,"url":14244},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fblob\u002Fdaa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a\u002Fsrc\u002Findex.ts#L107-L113",{"type":8512,"url":14246},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fblob\u002Fdaa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a\u002Fsrc\u002Findex.ts#L184",[9699,9700],{"id":344,"slug":14249,"dossier":47,"summary":14250,"aliases":14251,"sourceIds":14254,"published":14255,"modified":14256,"checkedAt":7,"severity":14257,"references":14261,"versionKeys":14272,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[14252,14253],"CVE-2024-47874","PYSEC-2026-1943",[344,14253],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[14258,14260],{"type":8547,"score":14259},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":8508,"score":9015},[14262,14264,14266,14268,14269,14270],{"type":8512,"url":14263},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":8515,"url":14265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":8638,"url":14267},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":8520,"url":8891},{"type":8520,"url":8897},{"type":8515,"url":14271},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[8901],{"id":345,"slug":14274,"dossier":47,"summary":14275,"aliases":14276,"sourceIds":14278,"published":14279,"modified":14280,"checkedAt":7,"severity":14281,"references":14283,"versionKeys":14292,"packageCount":32,"repositoryCount":34},"ghsa-f9j4-qggq-h239-968ed9a4","GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution",[14277],"CVE-2026-110858",[345],"2026-10-27T15:26:50Z","2026-10-27T15:47:24.258288646Z",[14282],{"type":8547,"score":12330},[14284,14286,14288,14290,14291],{"type":8512,"url":14285},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-f9j4-qggq-h239",{"type":8512,"url":14287},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2247",{"type":8512,"url":14289},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F790bb3164948625ffb043d2a162425d55923fe9a",{"type":8520,"url":8562},{"type":8512,"url":8618},[8570,8571,8572],{"id":346,"slug":14294,"dossier":47,"summary":14295,"aliases":14296,"sourceIds":14298,"published":14299,"modified":14300,"checkedAt":7,"severity":14301,"references":14304,"versionKeys":14313,"packageCount":32,"repositoryCount":9047},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[14297],"CVE-2026-111748",[346],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[14302],{"type":8508,"score":14303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14305,14307,14309,14311,14312],{"type":8512,"url":14306},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":8515,"url":14308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":8512,"url":14310},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":347,"slug":14315,"dossier":47,"summary":14316,"aliases":14317,"sourceIds":14320,"published":14321,"modified":14322,"checkedAt":7,"severity":14323,"references":14326,"versionKeys":14337,"packageCount":32,"repositoryCount":698},"ghsa-fc2g-4w5p-6whm-f875e0d2","virtualenv: Seeded files retain permissions from an older cache",[14318,14319],"BIT-virtualenv-2026-113720","CVE-2026-113720",[347],"2026-10-23T22:23:11Z","2026-10-29T10:55:56.743073990Z",[14324],{"type":8508,"score":14325},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[14327,14329,14331,14333,14335,14336],{"type":8512,"url":14328},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-fc2g-4w5p-6whm",{"type":8515,"url":14330},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113720",{"type":8512,"url":14332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3425",{"type":8512,"url":14334},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F35f0b33562790176dd186d0a3c517af3acc7a0e1",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":348,"slug":14339,"dossier":47,"summary":14340,"aliases":14341,"sourceIds":14344,"published":14345,"modified":14346,"checkedAt":7,"severity":14347,"references":14349,"versionKeys":14357,"packageCount":32,"repositoryCount":8535},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[14342,14343],"BIT-pillow-2026-112891","CVE-2026-112891",[348],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[14348],{"type":8508,"score":11431},[14350,14352,14354,14355,14356],{"type":8512,"url":14351},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":8515,"url":14353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":8512,"url":12185},{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":349,"slug":14359,"dossier":47,"summary":14360,"aliases":14361,"sourceIds":14364,"published":14365,"modified":14366,"checkedAt":7,"severity":14367,"references":14370,"versionKeys":14382,"packageCount":32,"repositoryCount":782},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[14362,14363],"CVE-2026-102268","PYSEC-2026-4145",[349,14363],"2026-09-29T23:17:33Z","2026-10-01T17:55:42.096970476Z",[14368],{"type":8547,"score":14369},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[14371,14373,14375,14377,14378,14379,14380],{"type":8512,"url":14372},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":8515,"url":14374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":8512,"url":14376},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":14381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",[9105,9106,9107],{"id":350,"slug":14384,"dossier":47,"summary":14385,"aliases":14386,"sourceIds":14389,"published":14390,"modified":14391,"checkedAt":7,"severity":14392,"references":14395,"versionKeys":14406,"packageCount":32,"repositoryCount":698},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[14387,14388],"CVE-2025-69230","PYSEC-2026-1105",[350,14388],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[14393],{"type":8508,"score":14394},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[14396,14398,14400,14402,14403,14404],{"type":8512,"url":14397},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":8515,"url":14399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":8638,"url":14401},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":14405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[8960,8961,8962,8963,8964,8965,8966],{"id":351,"slug":14408,"dossier":47,"summary":14409,"aliases":14410,"sourceIds":14413,"published":14414,"modified":14415,"checkedAt":7,"severity":14416,"references":14418,"versionKeys":14428,"packageCount":32,"repositoryCount":831},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[14411,14412],"CVE-2026-48524","PYSEC-2026-177",[351,14412],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[14417],{"type":8547,"score":12048},[14419,14421,14423,14425,14426],{"type":8515,"url":14420},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":8515,"url":14422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":8512,"url":14424},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":8520,"url":9097},{"type":8512,"url":14427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[9105,9107],{"id":352,"slug":14430,"dossier":47,"summary":14431,"aliases":14432,"sourceIds":14436,"published":14437,"modified":14438,"checkedAt":7,"severity":14439,"references":14442,"versionKeys":14456,"packageCount":32,"repositoryCount":10106},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[14433,14434,14435],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[352,14435],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[14440],{"type":8547,"score":14441},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[14443,14445,14447,14449,14451,14452,14453,14454],{"type":8512,"url":14444},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":8515,"url":14446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":8512,"url":14448},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":8512,"url":14450},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":8520,"url":8521},{"type":8512,"url":11467},{"type":8520,"url":11469},{"type":8515,"url":14455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":353,"slug":14458,"dossier":47,"summary":14459,"aliases":14460,"sourceIds":14463,"published":14464,"modified":14465,"checkedAt":7,"severity":14466,"references":14469,"versionKeys":14479,"packageCount":32,"repositoryCount":34},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[14461,14462],"CVE-2026-73624","PYSEC-2026-3995",[353,14462],"2026-07-24T16:41:20Z","2026-09-29T09:10:55.738617943Z",[14467,14468],{"type":8547,"score":9578},{"type":8508,"score":9580},[14470,14472,14473,14475,14476,14477],{"type":8553,"url":14471},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":8512,"url":11944},{"type":8512,"url":14474},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":8520,"url":8562},{"type":8512,"url":11949},{"type":8515,"url":14478},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-diff",[8570,8571,8572],{"id":354,"slug":14481,"dossier":47,"summary":14482,"aliases":14483,"sourceIds":14485,"published":14486,"modified":14487,"checkedAt":7,"severity":14488,"references":14491,"versionKeys":14502,"packageCount":32,"repositoryCount":745},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[14484],"CVE-2026-112935",[354],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[14489],{"type":8547,"score":14490},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14492,14494,14496,14498,14500,14501],{"type":8512,"url":14493},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":8515,"url":14495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":8512,"url":14497},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":8512,"url":14499},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":8520,"url":10973},{"type":8512,"url":10975},[10977,10978,10979,10980],{"id":355,"slug":14504,"dossier":47,"summary":14505,"aliases":14506,"sourceIds":14508,"published":14509,"modified":14510,"checkedAt":7,"severity":14511,"references":14513,"versionKeys":14531,"packageCount":32,"repositoryCount":32},"ghsa-fvcv-3m26-pcqx-aa71c009","Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain",[14507],"CVE-2026-40175",[355],"2026-04-10T19:47:16Z","2026-09-10T03:50:44.273401032Z",[14512],{"type":8547,"score":9711},[14514,14516,14518,14520,14522,14523,14524,14526,14528,14529,14530],{"type":8512,"url":14515},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-fvcv-3m26-pcqx",{"type":8515,"url":14517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40175",{"type":8512,"url":14519},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10660",{"type":8512,"url":14521},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10660#issuecomment-4224168081",{"type":8512,"url":9722},{"type":8512,"url":9724},{"type":8512,"url":14525},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F363185461b90b1b78845dc8a99a1f103d9b122a1",{"type":8512,"url":14527},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-876049.html",{"type":8520,"url":9450},{"type":8512,"url":9733},{"type":8512,"url":9735},[9452,9453],{"id":356,"slug":14533,"dossier":47,"summary":14534,"aliases":14535,"sourceIds":14537,"published":14538,"modified":14539,"checkedAt":7,"severity":14540,"references":14543,"versionKeys":14549,"packageCount":32,"repositoryCount":831},"ghsa-fx2h-pf6j-xcff-156ab351","vite: `server.fs.deny` bypass on Windows alternate paths",[14536],"CVE-2026-53571",[356],"2026-06-15T17:17:45Z","2026-10-27T15:15:07.885624041Z",[14541],{"type":8508,"score":14542},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[14544,14546,14548],{"type":8512,"url":14545},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-fx2h-pf6j-xcff",{"type":8515,"url":14547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53571",{"type":8520,"url":10612},[10620,10621,10622],{"id":357,"slug":14551,"dossier":47,"summary":14552,"aliases":14553,"sourceIds":14555,"published":14556,"modified":14557,"checkedAt":7,"severity":14558,"references":14561,"versionKeys":14570,"packageCount":32,"repositoryCount":34},"ghsa-fx3j-rwgx-fr94-14d75c26","GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name",[14554],"CVE-2026-110855",[357],"2026-10-27T15:26:32Z","2026-10-27T15:47:24.291028301Z",[14559],{"type":8547,"score":14560},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[14562,14564,14566,14568,14569],{"type":8512,"url":14563},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fx3j-rwgx-fr94",{"type":8512,"url":14565},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2255",{"type":8512,"url":14567},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9349ff58ee00c9fb14d515c8e693f33b2144b238",{"type":8520,"url":8562},{"type":8512,"url":8618},[8570,8571,8572],{"id":358,"slug":14572,"dossier":47,"summary":14573,"aliases":14574,"sourceIds":14576,"published":14577,"modified":14578,"checkedAt":7,"severity":14579,"references":14581,"versionKeys":14589,"packageCount":32,"repositoryCount":831},"ghsa-fxqj-rqcc-2cmp-34c312ef","PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",[14575],"CVE-2026-69153",[358],"2026-08-03T17:11:39Z","2026-09-10T03:50:53.572374167Z",[14580],{"type":8508,"score":10184},[14582,14584,14586,14587],{"type":8512,"url":14583},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-fxqj-rqcc-2cmp",{"type":8512,"url":14585},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F7beca139e70f9075c6b19700fcb00dd8033e5da8",{"type":8520,"url":11800},{"type":8512,"url":14588},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.19",[11804,11805,11806],{"id":359,"slug":14591,"dossier":47,"summary":14592,"aliases":14593,"sourceIds":14596,"published":14597,"modified":14598,"checkedAt":7,"severity":14599,"references":14602,"versionKeys":14608,"packageCount":32,"repositoryCount":66},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[14594,14595],"CVE-2026-54278","PYSEC-2026-2111",[359,14595],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[14600,14601],{"type":8508,"score":10301},{"type":8547,"score":8583},[14603,14605,14606],{"type":8515,"url":14604},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":8520,"url":8956},{"type":8638,"url":14607},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":360,"slug":14610,"dossier":47,"summary":14611,"aliases":14612,"sourceIds":14614,"published":14615,"modified":14616,"checkedAt":7,"severity":14617,"references":14619,"versionKeys":14633,"packageCount":32,"repositoryCount":745},"ghsa-g3hv-75wg-m249-8b521a59","minimatch has potential denial of service via globparts amplification",[14613],"CVE-2026-118764",[360],"2026-10-30T23:09:55Z","2026-11-04T17:01:25.850114200Z",[14618],{"type":8508,"score":11431},[14620,14622,14624,14626,14628,14630,14631],{"type":8512,"url":14621},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-g3hv-75wg-m249",{"type":8515,"url":14623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-118764",{"type":8512,"url":14625},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F297b6c1a01f2410b3ba1ebed14ba222d0c3c1033",{"type":8512,"url":14627},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F77a0f5c4b80bdc641c3c930a1d9edf5ad2db57f8",{"type":8512,"url":14629},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002Ffd0b3ab9cbc5bf1aff1c99f1f46e413c2b3340da",{"type":8520,"url":8592},{"type":8512,"url":14632},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Freleases\u002Ftag\u002Fv11.0.1",[8594,8595,14634,14635,8597],"npm:minimatch@10.2.5","npm:minimatch@10.2.6",{"id":361,"slug":14637,"dossier":47,"summary":14638,"aliases":14639,"sourceIds":14641,"published":14642,"modified":14643,"checkedAt":7,"severity":14644,"references":14647,"versionKeys":14663,"packageCount":32,"repositoryCount":32},"ghsa-g4jq-h2w9-997c-b5be310c","Vite middleware may serve files starting with the same name with the public directory",[14640],"CVE-2025-58751",[361],"2025-09-09T20:55:56Z","2026-09-10T03:50:28.405024248Z",[14645],{"type":8508,"score":14646},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14648,14650,14652,14654,14656,14658,14660,14662],{"type":8512,"url":14649},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-g4jq-h2w9-997c",{"type":8515,"url":14651},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58751",{"type":8512,"url":14653},"https:\u002F\u002Fgithub.com\u002Flukeed\u002Fsirv\u002Fcommit\u002Ff0113f3f8266328d804ee808f763a3c11f8997eb",{"type":8512,"url":14655},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F09f2b52e8d5907f26602653caf41b3a56692600d",{"type":8512,"url":14657},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F4f1c35bcbb5830290c694aa14b6789e07450f069",{"type":8512,"url":14659},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F63e2a5d232218f3f8d852056751e609a5367aaec",{"type":8512,"url":14661},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fe11d24008b97d4ca731ecc1a3b95260a6d12e7e0",{"type":8520,"url":10612},[10621],{"id":362,"slug":14665,"dossier":47,"summary":14666,"aliases":14667,"sourceIds":14671,"published":14672,"modified":14673,"checkedAt":7,"severity":14674,"references":14677,"versionKeys":14688,"packageCount":32,"repositoryCount":9378},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[14668,14669,14670],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[362,14670],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[14675,14676],{"type":8508,"score":9646},{"type":8547,"score":8666},[14678,14680,14682,14684,14686,14687],{"type":8515,"url":14679},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":8515,"url":14681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":9654,"url":14683},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":8638,"url":14685},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":8520,"url":8521},{"type":8515,"url":8523},[8527,8528,8529,8530,8531,8532,8533,8534],{"id":363,"slug":14690,"dossier":47,"summary":14691,"aliases":14692,"sourceIds":14695,"published":14696,"modified":14697,"checkedAt":7,"severity":14698,"references":14700,"versionKeys":14713,"packageCount":32,"repositoryCount":34},"ghsa-g5vv-9gxw-82hx-203070a6","GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author\u002Fcommitter field parsing",[14693,14694],"CVE-2026-87819","PYSEC-2026-3984",[363,14694],"2026-09-09T12:17:17.120Z","2026-09-30T23:45:04.037560336Z",[14699],{"type":8547,"score":8583},[14701,14703,14705,14707,14708,14709,14711],{"type":8553,"url":14702},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-g5vv-9gxw-82hx",{"type":8512,"url":14704},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2215",{"type":8512,"url":14706},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F751473a5f3221d6f989291cbebcc404353fd3ba8",{"type":8520,"url":8562},{"type":8512,"url":8564},{"type":8512,"url":14710},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3984.yaml",{"type":8515,"url":14712},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-denial-of-service-via-redos",[8570,8571,8572],{"id":364,"slug":14715,"dossier":47,"summary":14716,"aliases":14717,"sourceIds":14720,"published":14721,"modified":14722,"checkedAt":7,"severity":14723,"references":14726,"versionKeys":14739,"packageCount":32,"repositoryCount":34},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[14718,14719],"CVE-2026-69247","PYSEC-2026-3552",[364,14719],"2026-08-03T21:17:00Z","2026-09-10T03:50:53.610446769Z",[14724],{"type":8508,"score":14725},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14727,14729,14731,14733,14734,14735,14737],{"type":8512,"url":14728},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":8512,"url":14730},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":8512,"url":14732},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":8520,"url":10771},{"type":8520,"url":12369},{"type":8515,"url":14736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":8515,"url":14738},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[10777,10778,10779,10780,14740],"pypi:cryptography@49.0.0",{"id":365,"slug":14742,"dossier":47,"summary":14743,"aliases":14744,"sourceIds":14747,"published":14748,"modified":14749,"checkedAt":7,"severity":14750,"references":14753,"versionKeys":14764,"packageCount":32,"repositoryCount":8535},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[14745,14746],"BIT-pillow-2026-96778","CVE-2026-96778",[365],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[14751],{"type":8508,"score":14752},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[14754,14756,14758,14760,14762,14763],{"type":8512,"url":14755},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":8515,"url":14757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":8512,"url":14759},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":8512,"url":14761},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":366,"slug":14766,"dossier":47,"summary":14767,"aliases":14768,"sourceIds":14771,"published":14772,"modified":14773,"checkedAt":7,"severity":14774,"references":14777,"versionKeys":14796,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[14769,14770],"CVE-2024-34062","PYSEC-2026-1976",[366,14770],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[14775],{"type":8547,"score":14776},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[14778,14780,14782,14784,14786,14788,14790,14792,14794],{"type":8512,"url":14779},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":8515,"url":14781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":8512,"url":14783},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":8520,"url":14785},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":8512,"url":14787},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":8512,"url":14789},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":8512,"url":14791},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":8520,"url":14793},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":8515,"url":14795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[14797],"pypi:tqdm@4.66.2",{"id":367,"slug":14799,"dossier":47,"summary":14800,"aliases":14801,"sourceIds":14805,"published":14806,"modified":14807,"checkedAt":7,"severity":14808,"references":14811,"versionKeys":14822,"packageCount":32,"repositoryCount":8535},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[14802,14803,14804],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[367,14804],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[14809,14810],{"type":8508,"score":9646},{"type":8547,"score":8666},[14812,14814,14816,14818,14820,14821],{"type":8515,"url":14813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":8515,"url":14815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":9654,"url":14817},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":8638,"url":14819},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":368,"slug":14824,"dossier":47,"summary":14825,"aliases":14826,"sourceIds":14829,"published":14830,"modified":14831,"checkedAt":7,"severity":14832,"references":14834,"versionKeys":14847,"packageCount":32,"repositoryCount":698},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[14827,14828],"CVE-2025-69229","PYSEC-2026-1106",[368,14828],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[14833],{"type":8508,"score":10301},[14835,14837,14839,14841,14843,14844,14845],{"type":8512,"url":14836},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":8515,"url":14838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":8512,"url":14840},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":8512,"url":14842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":14846},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[8960,8961,8962,8963,8964,8965,8966],{"id":369,"slug":14849,"dossier":47,"summary":14850,"aliases":14851,"sourceIds":14853,"published":14854,"modified":14855,"checkedAt":7,"severity":14856,"references":14858,"versionKeys":14865,"packageCount":32,"repositoryCount":32},"ghsa-g8m3-5g58-fq7m-ea928b69","undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching",[14852],"CVE-2026-11525",[369],"2026-06-19T14:34:46Z","2026-09-10T03:51:08.663204806Z",[14857],{"type":8547,"score":9058},[14859,14861,14863,14864],{"type":8512,"url":14860},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-g8m3-5g58-fq7m",{"type":8515,"url":14862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-11525",{"type":8512,"url":8767},{"type":8520,"url":9070},[9076,9077],{"id":370,"slug":14867,"dossier":47,"summary":14868,"aliases":14869,"sourceIds":14871,"published":14872,"modified":14873,"checkedAt":7,"severity":14874,"references":14876,"versionKeys":14884,"packageCount":32,"repositoryCount":32},"ghsa-g9mf-h72j-4rw9-2ea01f94","Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",[14870],"CVE-2026-22036",[370],"2026-01-14T21:06:08Z","2026-09-10T03:50:33.216915457Z",[14875],{"type":8547,"score":8850},[14877,14879,14881,14883],{"type":8512,"url":14878},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-g9mf-h72j-4rw9",{"type":8515,"url":14880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22036",{"type":8512,"url":14882},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb04e3cbb569c1596f86c108e9b52c79d8475dcb3",{"type":8520,"url":9070},[9076],{"id":371,"slug":14886,"dossier":47,"summary":14887,"aliases":14888,"sourceIds":14891,"published":14892,"modified":14893,"checkedAt":7,"severity":14894,"references":14899,"versionKeys":14909,"packageCount":32,"repositoryCount":8535},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[14889,14890],"CVE-2026-25645","PYSEC-2026-2275",[371,14890],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[14895,14897],{"type":8547,"score":14896},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":8547,"score":14898},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14900,14902,14904,14906,14907],{"type":8515,"url":14901},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":8515,"url":14903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":8638,"url":14905},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":8520,"url":13429},{"type":8515,"url":14908},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[13441,13442,14910,14911],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":372,"slug":14913,"dossier":47,"summary":14914,"aliases":14915,"sourceIds":14917,"published":11648,"modified":14918,"checkedAt":7,"severity":14919,"references":14922,"versionKeys":14933,"packageCount":32,"repositoryCount":578},"ghsa-gcqx-w48m-w2h4-1fcaae43","deepmerge mergeObject() allows prototype poisoning of returned objects",[14916],"CVE-2026-93753",[372],"2026-10-27T21:45:04.256048049Z",[14920,14921],{"type":8547,"score":9305},{"type":8508,"score":9303},[14923,14925,14927,14929,14931],{"type":8515,"url":14924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-93753",{"type":8512,"url":14926},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge\u002Fissues\u002F273",{"type":8520,"url":14928},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge",{"type":8512,"url":14930},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge\u002Fblob\u002F5b87756a5671635679001cbac72aa42f23472c81\u002Findex.js#L39-L60",{"type":8512,"url":14932},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdeepmerge-through-4.3.1-prototype-poisoning-via-mergeobject",[14934],"npm:deepmerge@4.3.1",{"id":373,"slug":14936,"dossier":47,"summary":14937,"aliases":14938,"sourceIds":14941,"published":14942,"modified":14943,"checkedAt":7,"severity":14944,"references":14946,"versionKeys":14955,"packageCount":32,"repositoryCount":8535},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[14939,14940],"BIT-pillow-2026-112892","CVE-2026-112892",[373],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[14945],{"type":8508,"score":9015},[14947,14949,14951,14953,14954],{"type":8512,"url":14948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":8515,"url":14950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":8512,"url":14952},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":374,"slug":14957,"dossier":47,"summary":14958,"aliases":14959,"sourceIds":14962,"published":14963,"modified":14964,"checkedAt":7,"severity":14965,"references":14967,"versionKeys":14979,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[14960,14961],"CVE-2026-97688","PYSEC-2026-4176",[374,14961],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[14966],{"type":8508,"score":11431},[14968,14970,14972,14974,14975,14976,14977],{"type":8512,"url":14969},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":8515,"url":14971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":8512,"url":14973},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":8520,"url":9369},{"type":8512,"url":12808},{"type":8520,"url":9371},{"type":8515,"url":14978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[12813,12814],{"id":375,"slug":14981,"dossier":47,"summary":14982,"aliases":14983,"sourceIds":14986,"published":14987,"modified":14988,"checkedAt":7,"severity":14989,"references":14991,"versionKeys":15004,"packageCount":32,"repositoryCount":726},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[14984,14985],"CVE-2026-86000","PYSEC-2026-4170",[375,14985],"2026-09-17T20:32:58Z","2026-10-01T17:56:08.291385035Z",[14990],{"type":8547,"score":8882},[14992,14994,14996,14998,14999,15001,15002],{"type":8512,"url":14993},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":8515,"url":14995},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":8512,"url":14997},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":8520,"url":9332},{"type":8512,"url":15000},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",{"type":8520,"url":9334},{"type":8515,"url":15003},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",[9340,9341,9342,10432],{"id":376,"slug":15006,"dossier":47,"summary":15007,"aliases":15008,"sourceIds":15011,"published":15012,"modified":15013,"checkedAt":7,"severity":15014,"references":15016,"versionKeys":15027,"packageCount":32,"repositoryCount":32},"ghsa-gm37-52c6-37mw-5e0593eb","pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors",[15009,15010],"CVE-2026-67422","PYSEC-2026-3654",[376,15010],"2026-08-07T18:26:07Z","2026-09-10T03:51:14.089911270Z",[15015],{"type":8547,"score":8583},[15017,15019,15021,15023,15024,15025],{"type":8512,"url":15018},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",{"type":8515,"url":15020},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67422",{"type":8512,"url":15022},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fc68498598d7b13011bb4571350b6e3612a4ce44b",{"type":8520,"url":11491},{"type":8520,"url":11493},{"type":8515,"url":15026},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",[11499],{"id":377,"slug":15029,"dossier":47,"summary":15030,"aliases":15031,"sourceIds":15034,"published":15035,"modified":15036,"checkedAt":7,"severity":15037,"references":15039,"versionKeys":15050,"packageCount":32,"repositoryCount":9378},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[15032,15033],"CVE-2025-66418","PYSEC-2026-1998",[377,15033],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[15038],{"type":8508,"score":9354},[15040,15042,15044,15046,15047,15048],{"type":8512,"url":15041},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":8515,"url":15043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":8638,"url":15045},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":8520,"url":9369},{"type":8520,"url":9371},{"type":8515,"url":15049},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[9373,9374,9375,9376,9377],{"id":378,"slug":15052,"dossier":47,"summary":15053,"aliases":15054,"sourceIds":15057,"published":15058,"modified":15059,"checkedAt":7,"severity":15060,"references":15063,"versionKeys":15078,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[15055,15056],"CVE-2024-56201","PYSEC-2026-1472",[378,15056],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[15061,15062],{"type":8547,"score":8915},{"type":8508,"score":14013},[15064,15066,15068,15070,15072,15073,15075,15076],{"type":8512,"url":15065},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":8515,"url":15067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":8512,"url":15069},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":8638,"url":15071},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":8520,"url":14022},{"type":8512,"url":15074},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":8520,"url":14028},{"type":8515,"url":15077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[14032],{"id":379,"slug":15080,"dossier":47,"summary":15081,"aliases":15082,"sourceIds":15084,"published":15085,"modified":15086,"checkedAt":7,"severity":15087,"references":15088,"versionKeys":15097,"packageCount":32,"repositoryCount":34},"ghsa-gq48-pqfc-9p58-0aa8d93f","GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree",[15083],"CVE-2026-110860",[379],"2026-10-27T15:26:57Z","2026-10-27T15:47:24.379897252Z",[],[15089,15091,15093,15095,15096],{"type":8512,"url":15090},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-gq48-pqfc-9p58",{"type":8512,"url":15092},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2232",{"type":8512,"url":15094},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F24b6f95d4b90ab1483fb601c736ac6e7c059cd61",{"type":8520,"url":8562},{"type":8512,"url":8618},[8570,8571,8572],{"id":380,"slug":15099,"dossier":47,"summary":15100,"aliases":15101,"sourceIds":15104,"published":15105,"modified":15106,"checkedAt":7,"severity":15107,"references":15109,"versionKeys":15120,"packageCount":32,"repositoryCount":32},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[15102,15103],"CVE-2026-103001","PYSEC-2026-4146",[380,15103],"2026-09-30T23:53:17Z","2026-10-01T17:55:53.001409325Z",[15108],{"type":8547,"score":9841},[15110,15112,15114,15115,15116,15118],{"type":8512,"url":15111},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":8512,"url":15113},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":8520,"url":9097},{"type":8520,"url":9101},{"type":8515,"url":15117},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":8515,"url":15119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103001",[9106],{"id":381,"slug":15122,"dossier":47,"summary":15123,"aliases":15124,"sourceIds":15126,"published":15127,"modified":15128,"checkedAt":7,"severity":15129,"references":15132,"versionKeys":15141,"packageCount":32,"repositoryCount":9047},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[15125],"CVE-2026-111749",[381],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[15130],{"type":8508,"score":15131},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[15133,15135,15137,15139,15140],{"type":8512,"url":15134},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":8515,"url":15136},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":8512,"url":15138},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":382,"slug":15143,"dossier":47,"summary":15144,"aliases":15145,"sourceIds":15146,"published":15147,"modified":15148,"checkedAt":7,"severity":15149,"references":15150,"versionKeys":15156,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[382],"2024-09-03T21:59:48Z","2026-09-10T03:50:18.241644273Z",[],[15151,15153,15154],{"type":8512,"url":15152},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":8520,"url":10771},{"type":8512,"url":15155},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[10775],{"id":383,"slug":15158,"dossier":47,"summary":15159,"aliases":15160,"sourceIds":15162,"published":15163,"modified":15164,"checkedAt":7,"severity":15165,"references":15167,"versionKeys":15173,"packageCount":32,"repositoryCount":578},"ghsa-h67p-54hq-rp68-7c13d245","JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",[15161],"CVE-2026-53550",[383],"2026-06-15T17:15:07Z","2026-09-10T03:50:49.729923880Z",[15166],{"type":8547,"score":8882},[15168,15170,15172],{"type":8512,"url":15169},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-h67p-54hq-rp68",{"type":8515,"url":15171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53550",{"type":8520,"url":8829},[8835,8836,8837,8838],{"id":384,"slug":15175,"dossier":47,"summary":15176,"aliases":15177,"sourceIds":15180,"published":15181,"modified":15182,"checkedAt":7,"severity":15183,"references":15186,"versionKeys":15207,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[15178,15179],"CVE-2024-34064","PYSEC-2026-1474",[384,15179],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[15184],{"type":8547,"score":15185},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[15187,15189,15191,15193,15194,15196,15198,15200,15202,15204,15205],{"type":8512,"url":15188},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":8515,"url":15190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":8638,"url":15192},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":8520,"url":14022},{"type":8512,"url":15195},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":8512,"url":15197},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":8512,"url":15199},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":8512,"url":15201},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":8512,"url":15203},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":8520,"url":14028},{"type":8515,"url":15206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[14032],{"id":385,"slug":15209,"dossier":47,"summary":15210,"aliases":15211,"sourceIds":15213,"published":15214,"modified":15215,"checkedAt":7,"severity":15216,"references":15218,"versionKeys":15225,"packageCount":32,"repositoryCount":32},"ghsa-h7mg-cq63-vhpq-be731094","Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminator",[15212],"CVE-2026-126358",[385],"2026-11-12T23:23:30Z","2026-11-12T23:30:03.867508007Z",[15217],{"type":8547,"score":10444},[15219,15221,15223,15224],{"type":8512,"url":15220},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fsecurity\u002Fadvisories\u002FGHSA-h7mg-cq63-vhpq",{"type":8512,"url":15222},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fhono\u002Fcommit\u002F8a103aa59bcfbffd5396b1548a0dff3688777c36",{"type":8520,"url":9629},{"type":8512,"url":9631},[9633],{"id":386,"slug":15227,"dossier":47,"summary":15228,"aliases":15229,"sourceIds":15232,"published":15233,"modified":15234,"checkedAt":7,"severity":15235,"references":15238,"versionKeys":15247,"packageCount":32,"repositoryCount":677},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[15230,15231],"CVE-2026-34513","PYSEC-2026-2095",[386,15231],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[15236,15237],{"type":8508,"score":9860},{"type":8547,"score":8583},[15239,15241,15243,15245,15246],{"type":8638,"url":15240},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":8515,"url":15242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":8638,"url":15244},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":387,"slug":15249,"dossier":47,"summary":15250,"aliases":15251,"sourceIds":15253,"published":15254,"modified":15255,"checkedAt":7,"severity":15256,"references":15258,"versionKeys":15265,"packageCount":32,"repositoryCount":32},"ghsa-hfxv-24rg-xrqf-abdaa203","Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection",[15252],"CVE-2026-44496",[387],"2026-06-04T14:24:06Z","2026-09-10T03:50:49.732285826Z",[15257],{"type":8547,"score":8583},[15259,15261,15262,15264],{"type":8512,"url":15260},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-hfxv-24rg-xrqf",{"type":8520,"url":9450},{"type":8512,"url":15263},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.32.0",{"type":8512,"url":12287},[9452,9453],{"id":388,"slug":15267,"dossier":47,"summary":15268,"aliases":15269,"sourceIds":15272,"published":15273,"modified":15274,"checkedAt":7,"severity":15275,"references":15279,"versionKeys":15287,"packageCount":32,"repositoryCount":66},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[15270,15271],"CVE-2026-47265","PYSEC-2026-2105",[388,15271],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[15276,15278],{"type":8508,"score":15277},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8547,"score":11791},[15280,15282,15284,15286],{"type":8638,"url":15281},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":8515,"url":15283},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":8638,"url":15285},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":389,"slug":15289,"dossier":47,"summary":15290,"aliases":15291,"sourceIds":15294,"published":15295,"modified":15296,"checkedAt":7,"severity":15297,"references":15299,"versionKeys":15314,"packageCount":32,"repositoryCount":34},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[15292,15293],"CVE-2026-76217","PYSEC-2026-3841",[389,15293],"2026-08-07T15:43:56Z","2026-09-10T12:26:07.095223621Z",[15298],{"type":8547,"score":9883},[15300,15302,15304,15305,15307,15308,15309,15311,15312],{"type":8512,"url":15301},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":8515,"url":15303},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76217",{"type":8512,"url":10327},{"type":8512,"url":15306},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":8520,"url":8562},{"type":8512,"url":10332},{"type":8512,"url":15310},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-pathspec-from-file",{"type":8520,"url":8931},{"type":8515,"url":15313},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",[8570,8571,8572],{"id":390,"slug":15316,"dossier":47,"summary":15317,"aliases":15318,"sourceIds":15321,"published":15322,"modified":15323,"checkedAt":7,"severity":15324,"references":15326,"versionKeys":15337,"packageCount":32,"repositoryCount":698},"ghsa-hhxq-47xx-j5xx-b7469e94","virtualenv: Seed replacement does not contain metadata deletion paths",[15319,15320],"BIT-virtualenv-2026-113719","CVE-2026-113719",[390],"2026-10-23T22:19:15Z","2026-10-29T10:56:02.747342068Z",[15325],{"type":8547,"score":10024},[15327,15329,15331,15333,15335,15336],{"type":8512,"url":15328},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-hhxq-47xx-j5xx",{"type":8515,"url":15330},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113719",{"type":8512,"url":15332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3428",{"type":8512,"url":15334},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe3cea6fa10a50fa29cf1fdddd772458fba076d5f",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":391,"slug":15339,"dossier":47,"summary":15340,"aliases":15341,"sourceIds":15344,"published":15345,"modified":15346,"checkedAt":7,"severity":15347,"references":15352,"versionKeys":15369,"packageCount":32,"repositoryCount":34},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[15342,15343],"CVE-2026-76222","PYSEC-2026-3784",[391,15343],"2026-08-07T15:45:39Z","2026-09-08T21:00:05.149418166Z",[15348,15350],{"type":8547,"score":15349},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",{"type":8508,"score":15351},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:H\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[15353,15355,15357,15359,15361,15363,15364,15365,15367],{"type":8553,"url":15354},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":8515,"url":15356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76222",{"type":8512,"url":15358},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":8512,"url":15360},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":8512,"url":15362},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":8520,"url":8562},{"type":8512,"url":10332},{"type":8512,"url":15366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3784.yaml",{"type":8515,"url":15368},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-gitmodules-submodule-name",[8570,8571,8572],{"id":392,"slug":15371,"dossier":47,"summary":15372,"aliases":15373,"sourceIds":15375,"published":15376,"modified":15377,"checkedAt":7,"severity":15378,"references":15382,"versionKeys":15399,"packageCount":32,"repositoryCount":32},"ghsa-hmw2-7cc7-3qxx-52e715a7","form-data: CRLF injection in form-data via unescaped multipart field names and filenames",[15374],"CVE-2026-12143",[392],"2026-06-15T17:26:26Z","2026-09-10T03:50:49.785679067Z",[15379,15380],{"type":8547,"score":8631},{"type":8508,"score":15381},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[15383,15385,15387,15389,15391,15393,15395,15397],{"type":8512,"url":15384},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fsecurity\u002Fadvisories\u002FGHSA-hmw2-7cc7-3qxx",{"type":8515,"url":15386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12143",{"type":8512,"url":15388},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002F64190db548c0179e37206858e39f27cf513e9435",{"type":8512,"url":15390},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002Fbe3f3cf553978bac15a5182f1f3c3d2d38ccf229",{"type":8512,"url":15392},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002Fc7133499c2ee1b80c678e411244f4442bf902045",{"type":8520,"url":15394},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data",{"type":8512,"url":15396},"https:\u002F\u002Fhtml.spec.whatwg.org\u002Fmultipage\u002Fform-control-infrastructure.html#multipart-form-data",{"type":8512,"url":15398},"https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fform-data",[15400,15401],"npm:form-data@4.0.4","npm:form-data@4.0.5",{"id":393,"slug":15403,"dossier":47,"summary":15404,"aliases":15405,"sourceIds":15408,"published":15409,"modified":15410,"checkedAt":7,"severity":15411,"references":15415,"versionKeys":15421,"packageCount":32,"repositoryCount":66},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[15406,15407],"CVE-2026-54276","PYSEC-2026-2109",[393,15407],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[15412,15413],{"type":8508,"score":10184},{"type":8547,"score":15414},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[15416,15418,15420],{"type":8515,"url":15417},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":8638,"url":15419},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":394,"slug":15423,"dossier":47,"summary":15424,"aliases":15425,"sourceIds":15428,"published":15429,"modified":15430,"checkedAt":7,"severity":15431,"references":15433,"versionKeys":15445,"packageCount":32,"repositoryCount":782},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[15426,15427],"CVE-2026-102269","PYSEC-2026-4147",[394,15427],"2026-09-29T23:17:55Z","2026-10-01T17:55:59.204638768Z",[15432],{"type":8547,"score":9711},[15434,15436,15438,15440,15441,15442,15443],{"type":8512,"url":15435},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":8515,"url":15437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":8512,"url":15439},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":15444},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",[9105,9106,9107],{"id":395,"slug":15447,"dossier":47,"summary":15448,"aliases":15449,"sourceIds":15452,"published":15453,"modified":15454,"checkedAt":7,"severity":15455,"references":15457,"versionKeys":15466,"packageCount":32,"repositoryCount":8535},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[15450,15451],"BIT-pillow-2026-112893","CVE-2026-112893",[395],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[15456],{"type":8508,"score":8509},[15458,15460,15462,15464,15465],{"type":8512,"url":15459},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":8515,"url":15461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":8512,"url":15463},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":396,"slug":15468,"dossier":47,"summary":15469,"aliases":15470,"sourceIds":15472,"published":15473,"modified":15474,"checkedAt":7,"severity":15475,"references":15477,"versionKeys":15489,"packageCount":32,"repositoryCount":32},"ghsa-j5f8-grm9-p9fc-10eaf767","Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection",[15471],"CVE-2026-44486",[396],"2026-06-04T14:15:01Z","2026-09-10T03:50:50.017253448Z",[15476],{"type":8547,"score":11791},[15478,15480,15482,15484,15486,15487,15488],{"type":8512,"url":15479},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-j5f8-grm9-p9fc",{"type":8515,"url":15481},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44486",{"type":8512,"url":15483},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10794",{"type":8512,"url":15485},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fafca61a070728e717203c2bc21e7b589b59b858b",{"type":8520,"url":9450},{"type":8512,"url":15263},{"type":8512,"url":12287},[9452,9453],{"id":397,"slug":15491,"dossier":47,"summary":15492,"aliases":15493,"sourceIds":15495,"published":15496,"modified":15497,"checkedAt":7,"severity":15498,"references":15501,"versionKeys":15511,"packageCount":32,"repositoryCount":745},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[15494],"CVE-2026-112936",[397],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[15499],{"type":8547,"score":15500},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[15502,15504,15506,15508,15509],{"type":8512,"url":15503},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":8515,"url":15505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":8512,"url":15507},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":8520,"url":10973},{"type":8512,"url":15510},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[10977,10978,10979,10980],{"id":398,"slug":15513,"dossier":47,"summary":15514,"aliases":15515,"sourceIds":15517,"published":15518,"modified":15519,"checkedAt":7,"severity":15520,"references":15522,"versionKeys":15531,"packageCount":32,"repositoryCount":32},"ghsa-j8rh-479h-cp32-7ee21635","Axios: Header Injection via Inherited headers After Minimal Interceptor",[15516],"CVE-2026-101904",[398],"2026-09-30T15:35:14Z","2026-09-30T15:46:18.108444439Z",[15521],{"type":8508,"score":10398},[15523,15525,15527,15528,15529,15530],{"type":8512,"url":15524},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-j8rh-479h-cp32",{"type":8515,"url":15526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101904",{"type":8512,"url":9773},{"type":8512,"url":9775},{"type":8520,"url":9450},{"type":8512,"url":9778},[9452,9453],{"id":399,"slug":15533,"dossier":47,"summary":15534,"aliases":15535,"sourceIds":15538,"published":15539,"modified":15540,"checkedAt":7,"severity":15541,"references":15543,"versionKeys":15555,"packageCount":32,"repositoryCount":726},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[15536,15537],"CVE-2026-85999","PYSEC-2026-4171",[399,15537],"2026-09-17T20:32:53Z","2026-10-01T17:56:03.541286563Z",[15542],{"type":8547,"score":8882},[15544,15546,15548,15550,15551,15552,15553],{"type":8512,"url":15545},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":8515,"url":15547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":8512,"url":15549},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":8520,"url":9332},{"type":8512,"url":15000},{"type":8520,"url":9334},{"type":8515,"url":15554},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",[9340,9341,9342,10432],{"id":400,"slug":15557,"dossier":47,"summary":15558,"aliases":15559,"sourceIds":15562,"published":15563,"modified":15564,"checkedAt":7,"severity":15565,"references":15568,"versionKeys":15579,"packageCount":32,"repositoryCount":32},"ghsa-jf6q-chmf-3h3v-4ec82825","weasyprint Has Server-Side Request Forgery (SSRF)",[15560,15561],"CVE-2026-55073","PYSEC-2026-3940",[400,15561],"2026-09-09T18:06:38Z","2026-09-10T12:26:05.802944622Z",[15566],{"type":8547,"score":15567},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[15569,15571,15572,15574,15575,15577],{"type":8512,"url":15570},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-jf6q-chmf-3h3v",{"type":8520,"url":13268},{"type":8512,"url":15573},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Freleases\u002Ftag\u002Fv70.0",{"type":8520,"url":13272},{"type":8515,"url":15576},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jf6q-chmf-3h3v",{"type":8515,"url":15578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55073",[13276],{"id":401,"slug":15581,"dossier":47,"summary":15582,"aliases":15583,"sourceIds":15586,"published":15587,"modified":15588,"checkedAt":7,"severity":15589,"references":15593,"versionKeys":15613,"packageCount":32,"repositoryCount":66},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[15584,15585],"CVE-2026-34993","PYSEC-2026-2104",[401,15585],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[15590,15592],{"type":8547,"score":15591},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":8547,"score":9793},[15594,15596,15598,15600,15601,15603,15605,15607,15609,15611],{"type":8638,"url":15595},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":8515,"url":15597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":8638,"url":15599},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":8520,"url":8956},{"type":8512,"url":15602},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":8512,"url":15604},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":8515,"url":15606},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":8515,"url":15608},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":8515,"url":15610},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":9654,"url":15612},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":402,"slug":15615,"dossier":47,"summary":15616,"aliases":15617,"sourceIds":15620,"published":15621,"modified":15622,"checkedAt":7,"severity":15623,"references":15625,"versionKeys":15634,"packageCount":32,"repositoryCount":8535},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[15618,15619],"BIT-pillow-2026-112894","CVE-2026-112894",[402],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[15624],{"type":8508,"score":9015},[15626,15628,15630,15632,15633],{"type":8512,"url":15627},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":8515,"url":15629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":8512,"url":15631},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":403,"slug":15636,"dossier":47,"summary":15637,"aliases":15638,"sourceIds":15641,"published":15642,"modified":15643,"checkedAt":7,"severity":15644,"references":15646,"versionKeys":15655,"packageCount":32,"repositoryCount":32},"ghsa-jhhc-3hcp-qhm5-310e06ea","WeasyPrint has CSS Injection via Presentational Hints",[15639,15640],"CVE-2026-49452","PYSEC-2026-3412",[403,15640],"2026-07-06T17:29:53Z","2026-07-13T16:42:26.449768536Z",[15645],{"type":8547,"score":12744},[15647,15649,15650,15651,15653],{"type":8512,"url":15648},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":8520,"url":13268},{"type":8520,"url":13272},{"type":8515,"url":15652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":8515,"url":15654},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49452",[13276],{"id":404,"slug":15657,"dossier":47,"summary":15658,"aliases":15659,"sourceIds":15662,"published":15663,"modified":15664,"checkedAt":7,"severity":15665,"references":15667,"versionKeys":15678,"packageCount":32,"repositoryCount":698},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[15660,15661],"CVE-2025-69227","PYSEC-2026-1107",[404,15661],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[15666],{"type":8508,"score":10301},[15668,15670,15672,15674,15675,15676],{"type":8512,"url":15669},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":8515,"url":15671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":8512,"url":15673},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":15677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[8960,8961,8962,8963,8964,8965,8966],{"id":405,"slug":15680,"dossier":47,"summary":15681,"aliases":15682,"sourceIds":15686,"published":15687,"modified":15688,"checkedAt":7,"severity":15689,"references":15691,"versionKeys":15705,"packageCount":32,"repositoryCount":10106},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[15683,15684,15685],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[405,15685],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[15690],{"type":8547,"score":8583},[15692,15694,15696,15698,15700,15701,15702,15703],{"type":8512,"url":15693},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":8515,"url":15695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":8512,"url":15697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":8512,"url":15699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":8520,"url":8521},{"type":8512,"url":11467},{"type":8520,"url":11469},{"type":8515,"url":15704},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":406,"slug":15707,"dossier":47,"summary":15708,"aliases":15709,"sourceIds":15712,"published":15713,"modified":15714,"checkedAt":7,"severity":15715,"references":15717,"versionKeys":15730,"packageCount":32,"repositoryCount":32},"ghsa-jm66-cg57-jjv5-ddb86d58","Azure Core is vulnerable to deserialization of untrusted data",[15710,15711],"CVE-2026-21226","PYSEC-2026-1208",[406,15711],"2026-01-13T21:31:44Z","2026-09-10T03:50:33.330380695Z",[15716],{"type":8547,"score":11938},[15718,15720,15722,15724,15726,15728],{"type":8515,"url":15719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21226",{"type":8520,"url":15721},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python",{"type":8512,"url":15723},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python\u002Fblob\u002F6d2e6431ea0991861640e449e51e894247a7771a\u002Fsdk\u002Fcore\u002Fazure-core\u002FCHANGELOG.md#1380-2026-01-12",{"type":8512,"url":15725},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-21226",{"type":8520,"url":15727},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fazure-core",{"type":8515,"url":15729},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jm66-cg57-jjv5",[15731],"pypi:azure-core@1.33.0",{"id":407,"slug":15733,"dossier":47,"summary":15734,"aliases":15735,"sourceIds":15738,"published":15739,"modified":15740,"checkedAt":7,"severity":15741,"references":15745,"versionKeys":15755,"packageCount":32,"repositoryCount":34},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[15736,15737],"CVE-2026-76221","PYSEC-2026-3783",[407,15737],"2026-08-07T15:46:35Z","2026-09-10T03:51:14.296736368Z",[15742,15743],{"type":8547,"score":8915},{"type":8508,"score":15744},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[15746,15748,15749,15751,15752,15753],{"type":8553,"url":15747},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":8512,"url":10327},{"type":8512,"url":15750},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":8520,"url":8562},{"type":8512,"url":10332},{"type":8515,"url":15754},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-option-name",[8570,8571,8572],{"id":408,"slug":15757,"dossier":47,"summary":15758,"aliases":15759,"sourceIds":15762,"published":15763,"modified":15764,"checkedAt":7,"severity":15765,"references":15768,"versionKeys":15776,"packageCount":32,"repositoryCount":677},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[15760,15761],"CVE-2026-54282","PYSEC-2026-248",[408,15761],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[15766,15767],{"type":8547,"score":9058},{"type":8547,"score":9305},[15769,15771,15773,15774],{"type":8515,"url":15770},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":8515,"url":15772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":8520,"url":12395},{"type":8512,"url":15775},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[8901,8902,8903,12402,12403,12404,12606,12607,12608],{"id":409,"slug":15778,"dossier":47,"summary":15779,"aliases":15780,"sourceIds":15782,"published":15783,"modified":15784,"checkedAt":7,"severity":15785,"references":15787,"versionKeys":15800,"packageCount":32,"repositoryCount":32},"ghsa-jpvv-r467-5p4w-88d7e834","@hono\u002Fnode-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy",[15781],"CVE-2026-126210",[409],"2026-11-12T21:28:02Z","2026-11-12T21:45:03.417268669Z",[15786],{"type":8547,"score":10444},[15788,15790,15792,15794,15796,15798],{"type":8512,"url":15789},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fsecurity\u002Fadvisories\u002FGHSA-jpvv-r467-5p4w",{"type":8512,"url":15791},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fcommit\u002F3868998a805ae79216535ad3986c1e7228dee313",{"type":8512,"url":15793},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fcommit\u002Ffb97395ec36af66567c76976e741110b02804d1c",{"type":8520,"url":15795},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server",{"type":8512,"url":15797},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Freleases\u002Ftag\u002Fv1.19.18",{"type":8512,"url":15799},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Freleases\u002Ftag\u002Fv2.1.6",[15801],"npm:@hono\u002Fnode-server@1.19.17",{"id":410,"slug":15803,"dossier":47,"summary":15804,"aliases":15805,"sourceIds":15808,"published":15809,"modified":15810,"checkedAt":7,"severity":15811,"references":15814,"versionKeys":15833,"packageCount":32,"repositoryCount":831},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[15806,15807],"CVE-2026-52869","PYSEC-2026-3482",[410,15807],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[15812],{"type":8547,"score":15813},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[15815,15817,15819,15821,15823,15825,15827,15828,15830,15831],{"type":8512,"url":15816},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":8515,"url":15818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":8512,"url":15820},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":8512,"url":15822},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":8512,"url":15824},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":8512,"url":15826},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":8520,"url":11143},{"type":8512,"url":15829},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":8520,"url":13374},{"type":8515,"url":15832},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[11149,11150,11151],{"id":411,"slug":15835,"dossier":47,"summary":15836,"aliases":15837,"sourceIds":15840,"published":15841,"modified":15842,"checkedAt":7,"severity":15843,"references":15846,"versionKeys":15854,"packageCount":32,"repositoryCount":831},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[15838,15839],"CVE-2026-48523","PYSEC-2026-176",[411,15839],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[15844],{"type":8547,"score":15845},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[15847,15849,15851,15852],{"type":8553,"url":15848},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":8515,"url":15850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":8520,"url":9097},{"type":8512,"url":15853},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[9105,9107],{"id":412,"slug":15856,"dossier":47,"summary":15857,"aliases":15858,"sourceIds":15860,"published":15861,"modified":15862,"checkedAt":7,"severity":15863,"references":15865,"versionKeys":15877,"packageCount":32,"repositoryCount":32},"ghsa-jqcg-44mw-7w3h-470fbe53","proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",[15859],"CVE-2026-90711",[412],"2026-10-05T23:30:26Z","2026-10-05T23:45:07.322157228Z",[15864],{"type":8547,"score":14369},[15866,15868,15870,15872,15873,15875],{"type":8512,"url":15867},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Fsecurity\u002Fadvisories\u002FGHSA-jqcg-44mw-7w3h",{"type":8515,"url":15869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-90711",{"type":8512,"url":15871},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Fcommit\u002F780911d84d18e2c5fa008ed0c0d387631ec11965",{"type":8512,"url":8767},{"type":8520,"url":15874},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr",{"type":8512,"url":15876},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Freleases\u002Ftag\u002Fv2.0.8",[15878],"npm:proxy-addr@2.0.7",{"id":413,"slug":15880,"dossier":47,"summary":15881,"aliases":15882,"sourceIds":15884,"published":15885,"modified":15886,"checkedAt":7,"severity":15887,"references":15889,"versionKeys":15905,"packageCount":32,"repositoryCount":32},"ghsa-jqfw-vq24-v9c3-2de51aa4","Vite's `server.fs` settings were not applied to HTML files",[15883],"CVE-2025-58752",[413],"2025-09-09T20:54:42Z","2026-09-10T03:50:28.597734404Z",[15888],{"type":8508,"score":14646},[15890,15892,15894,15896,15898,15900,15902,15903],{"type":8512,"url":15891},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-jqfw-vq24-v9c3",{"type":8515,"url":15893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58752",{"type":8512,"url":15895},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F0ab19ea9fcb66f544328f442cf6e70f7c0528d5f",{"type":8512,"url":15897},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F14015d794f69accba68798bd0e15135bc51c9c1e",{"type":8512,"url":15899},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F482000f57f56fe6ff2e905305100cfe03043ddea",{"type":8512,"url":15901},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F6f01ff4fe072bcfcd4e2a84811772b818cd51fe6",{"type":8520,"url":10612},{"type":8512,"url":15904},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fblob\u002Fv7.1.5\u002Fpackages\u002Fvite\u002FCHANGELOG.md",[10621],{"id":414,"slug":15907,"dossier":47,"summary":15908,"aliases":15909,"sourceIds":15911,"published":15912,"modified":15913,"checkedAt":7,"severity":15914,"references":15916,"versionKeys":15929,"packageCount":32,"repositoryCount":32},"ghsa-jqh4-m9w3-8hp9-bdf7a3b1","Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`",[15910],"CVE-2026-67317",[414],"2026-07-20T22:27:12Z","2026-09-10T03:50:52.448472902Z",[15915],{"type":8508,"score":12050},[15917,15919,15921,15923,15924,15925,15926,15927],{"type":8512,"url":15918},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-jqh4-m9w3-8hp9",{"type":8515,"url":15920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67317",{"type":8515,"url":15922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68947",{"type":8512,"url":9944},{"type":8512,"url":9950},{"type":8520,"url":9450},{"type":8512,"url":9955},{"type":8512,"url":15928},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-maxbodylength-bypass-via-readablestream",[9452,9453],{"id":415,"slug":15931,"dossier":47,"summary":15932,"aliases":15933,"sourceIds":15935,"published":15936,"modified":15937,"checkedAt":7,"severity":15938,"references":15940,"versionKeys":15953,"packageCount":32,"repositoryCount":32},"ghsa-jr45-8vmc-qm54-bee699ea","undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives",[15934],"CVE-2026-14643",[415],"2026-08-03T19:32:12Z","2026-09-10T03:51:14.245060345Z",[15939],{"type":8547,"score":11130},[15941,15943,15945,15947,15949,15950,15951,15952],{"type":8512,"url":15942},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-jr45-8vmc-qm54",{"type":8515,"url":15944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-14643",{"type":8512,"url":15946},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F85a240551c9feb8b8a0ecc56c84b2b3015add8a9",{"type":8512,"url":15948},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcb105d7c79069150982fa11acada0dd94a60dbbc",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":10261},{"type":8512,"url":10263},[9076,9077],{"id":416,"slug":15955,"dossier":47,"summary":15956,"aliases":15957,"sourceIds":15960,"published":15961,"modified":15962,"checkedAt":7,"severity":15963,"references":15966,"versionKeys":15977,"packageCount":32,"repositoryCount":782},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[15958,15959],"CVE-2026-102270","PYSEC-2026-4148",[416,15959],"2026-09-30T14:40:25Z","2026-10-01T17:55:44.209063147Z",[15964],{"type":8547,"score":15965},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[15967,15969,15971,15972,15973,15974,15975],{"type":8512,"url":15968},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":8515,"url":15970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":8512,"url":14376},{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":15976},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",[9105,9106,9107],{"id":417,"slug":15979,"dossier":47,"summary":15980,"aliases":15981,"sourceIds":15984,"published":15985,"modified":15986,"checkedAt":7,"severity":15987,"references":15989,"versionKeys":16006,"packageCount":32,"repositoryCount":726},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[15982,15983],"CVE-2026-69249","PYSEC-2026-3553",[417,15983],"2026-08-03T21:26:50Z","2026-09-24T14:45:10.238420831Z",[15988],{"type":8508,"score":9015},[15990,15992,15994,15996,15998,16000,16001,16003,16004],{"type":8512,"url":15991},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":8515,"url":15993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",{"type":8512,"url":15995},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":8512,"url":15997},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F3763aa79b",{"type":8512,"url":15999},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":8520,"url":10771},{"type":8512,"url":16002},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3553.yaml",{"type":8520,"url":12369},{"type":8515,"url":16005},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",[10775,10776,10777,10778,10779,10780],{"id":418,"slug":16008,"dossier":47,"summary":16009,"aliases":16010,"sourceIds":16013,"published":16014,"modified":16015,"checkedAt":7,"severity":16016,"references":16019,"versionKeys":16036,"packageCount":32,"repositoryCount":726},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[16011,16012],"CVE-2026-69248","PYSEC-2026-3554",[418,16012],"2026-08-03T21:26:57Z","2026-09-24T15:00:04.719975807Z",[16017],{"type":8508,"score":16018},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[16020,16022,16024,16026,16028,16030,16031,16033,16034],{"type":8512,"url":16021},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":8515,"url":16023},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",{"type":8512,"url":16025},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":8512,"url":16027},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F286c89128",{"type":8512,"url":16029},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":8520,"url":10771},{"type":8512,"url":16032},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3554.yaml",{"type":8520,"url":12369},{"type":8515,"url":16035},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",[10775,10776,10777,10778,10779,10780],{"id":419,"slug":16038,"dossier":47,"summary":16039,"aliases":16040,"sourceIds":16043,"published":16044,"modified":16045,"checkedAt":7,"severity":16046,"references":16051,"versionKeys":16060,"packageCount":32,"repositoryCount":677},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[16041,16042],"CVE-2026-34516","PYSEC-2026-2098",[419,16042],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[16047,16048,16049],{"type":8547,"score":8583},{"type":8508,"score":10301},{"type":8508,"score":16050},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[16052,16054,16056,16058,16059],{"type":8638,"url":16053},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":8515,"url":16055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":8638,"url":16057},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":420,"slug":16062,"dossier":47,"summary":16063,"aliases":16064,"sourceIds":16066,"published":16067,"modified":16068,"checkedAt":7,"severity":16069,"references":16071,"versionKeys":16080,"packageCount":32,"repositoryCount":34},"ghsa-m64x-33q8-m5h7-491ad59c","GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines",[16065],"CVE-2026-110856",[420],"2026-10-27T15:26:24Z","2026-10-27T15:47:24.576766638Z",[16070],{"type":8508,"score":9015},[16072,16074,16076,16078,16079],{"type":8512,"url":16073},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-m64x-33q8-m5h7",{"type":8512,"url":16075},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2253",{"type":8512,"url":16077},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8290c98d35465a38090cdcc1b17be69967092a15",{"type":8520,"url":8562},{"type":8512,"url":8618},[8570,8571,8572],{"id":421,"slug":16082,"dossier":47,"summary":16083,"aliases":16084,"sourceIds":16087,"published":16088,"modified":16089,"checkedAt":7,"severity":16090,"references":16093,"versionKeys":16099,"packageCount":32,"repositoryCount":66},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[16085,16086],"CVE-2026-50269","PYSEC-2026-2106",[421,16086],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[16091,16092],{"type":8508,"score":9303},{"type":8547,"score":8583},[16094,16096,16098],{"type":8515,"url":16095},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":8638,"url":16097},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":8520,"url":8956},[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":422,"slug":16101,"dossier":47,"summary":16102,"aliases":16103,"sourceIds":16105,"published":16106,"modified":16107,"checkedAt":7,"severity":16108,"references":16111,"versionKeys":16117,"packageCount":32,"repositoryCount":32},"ghsa-m7pr-hjqh-92cm-bddd7aa6","Axios: no_proxy bypass via IP alias allows SSRF",[16104],"CVE-2026-42038",[422],"2026-05-05T00:40:17Z","2026-09-10T03:51:06.293033204Z",[16109],{"type":8547,"score":16110},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[16112,16114,16116],{"type":8512,"url":16113},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-m7pr-hjqh-92cm",{"type":8515,"url":16115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42038",{"type":8520,"url":9450},[9452,9453],{"id":423,"slug":16119,"dossier":47,"summary":16120,"aliases":16121,"sourceIds":16123,"published":16124,"modified":16125,"checkedAt":7,"severity":16126,"references":16128,"versionKeys":16144,"packageCount":32,"repositoryCount":32},"ghsa-m8rv-5g2x-5cg5-5c5846d7","undici vulnerable to CRLF Injection via blob-like body 'type' property",[16122],"CVE-2026-15157",[423],"2026-08-03T19:33:53Z","2026-09-10T03:51:14.281925419Z",[16127],{"type":8547,"score":13288},[16129,16131,16133,16135,16137,16139,16140,16141,16142,16143],{"type":8512,"url":16130},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-m8rv-5g2x-5cg5",{"type":8515,"url":16132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-15157",{"type":8512,"url":16134},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F33928bc24f742ea8422ed90d17f2e0cc83e4d09d",{"type":8512,"url":16136},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F740a0b7c173cb4a83a5b693e96e8f3a116cfc400",{"type":8512,"url":16138},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F7d3cf924c262c486bc77f951348f4e5c847b7b42",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":13069},{"type":8512,"url":10261},{"type":8512,"url":10263},[9076,9077],{"id":424,"slug":16146,"dossier":47,"summary":16147,"aliases":16148,"sourceIds":16151,"published":16152,"modified":16153,"checkedAt":7,"severity":16154,"references":16158,"versionKeys":16166,"packageCount":32,"repositoryCount":726},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[16149,16150],"CVE-2026-34073","PYSEC-2026-35",[424,16150],"2026-03-27T19:56:21Z","2026-09-10T03:51:00.592317622Z",[16155,16156],{"type":8547,"score":9305},{"type":8508,"score":16157},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[16159,16161,16163,16164],{"type":8515,"url":16160},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":8515,"url":16162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":8520,"url":10771},{"type":8512,"url":16165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[10775,10776,10777,10778,10779,10780],{"id":425,"slug":16168,"dossier":47,"summary":16169,"aliases":16170,"sourceIds":16172,"published":16173,"modified":16174,"checkedAt":7,"severity":16175,"references":16177,"versionKeys":16194,"packageCount":32,"repositoryCount":677},"ghsa-mf5v-w3w3-f6cg-b8bbc3e6","OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing",[16171],"CVE-2026-126360",[425],"2026-11-13T16:43:18Z","2026-11-13T17:00:03.925479166Z",[16176],{"type":8547,"score":8882},[16178,16180,16182,16184,16186,16188,16190,16192],{"type":8512,"url":16179},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-mf5v-w3w3-f6cg",{"type":8515,"url":16181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126360",{"type":8512,"url":16183},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5818",{"type":8512,"url":16185},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5856",{"type":8512,"url":16187},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002F78123a2755c907c602e02352aebed4be86aa5350",{"type":8512,"url":16189},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Ffaa72dae511ae64a7bf8ca63eff9ad4387d0b939",{"type":8520,"url":16191},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":8512,"url":16193},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.2",[16195,16196,16197,16198,16199,16200,16201,16202,16203],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0","pypi:opentelemetry-api@1.45.1",{"id":426,"slug":16205,"dossier":47,"summary":16206,"aliases":16207,"sourceIds":16210,"published":16211,"modified":16212,"checkedAt":7,"severity":16213,"references":16216,"versionKeys":16224,"packageCount":32,"repositoryCount":831},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[16208,16209],"CVE-2026-44432","PYSEC-2026-142",[426,16209],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[16214,16215],{"type":8547,"score":8583},{"type":8508,"score":9354},[16217,16219,16221,16223],{"type":8515,"url":16218},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":8515,"url":16220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":8512,"url":16222},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":8520,"url":9369},[12813],{"id":427,"slug":16226,"dossier":47,"summary":16227,"aliases":16228,"sourceIds":16231,"published":16232,"modified":16233,"checkedAt":7,"severity":16234,"references":16237,"versionKeys":16250,"packageCount":32,"repositoryCount":9047},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[16229,16230],"CVE-2026-28684","PYSEC-2026-2270",[427,16230],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[16235],{"type":8547,"score":16236},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[16238,16240,16242,16244,16246,16248],{"type":8638,"url":16239},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":8515,"url":16241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":8638,"url":16243},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":8512,"url":16245},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":8520,"url":16247},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":8515,"url":16249},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[16251,16252,16253,16254],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":428,"slug":16256,"dossier":47,"summary":16257,"aliases":16258,"sourceIds":16261,"published":16262,"modified":16263,"checkedAt":7,"severity":16264,"references":16267,"versionKeys":16282,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[16259,16260],"CVE-2026-69243","PYSEC-2026-3546",[428,16260],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[16265],{"type":8508,"score":16266},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16268,16270,16272,16274,16275,16277,16278,16280],{"type":8512,"url":16269},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":8512,"url":16271},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":8512,"url":16273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":8520,"url":8956},{"type":8512,"url":16276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":8520,"url":10846},{"type":8515,"url":16279},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":8515,"url":16281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045],{"id":429,"slug":16284,"dossier":47,"summary":16285,"aliases":16286,"sourceIds":16288,"published":16289,"modified":16290,"checkedAt":7,"severity":16291,"references":16293,"versionKeys":16307,"packageCount":32,"repositoryCount":578},"ghsa-mh29-5h37-fv8m-16304e4f","js-yaml has prototype pollution in merge (\u003C\u003C)",[16287],"CVE-2025-64718",[429],"2025-11-14T14:29:48Z","2026-09-10T03:50:58.469126910Z",[16292],{"type":8547,"score":9305},[16294,16296,16298,16300,16302,16304,16306],{"type":8512,"url":16295},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-mh29-5h37-fv8m",{"type":8515,"url":16297},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64718",{"type":8512,"url":16299},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fissues\u002F730#issuecomment-3549635876",{"type":8512,"url":16301},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F383665ff4248ec2192d1274e934462bb30426879",{"type":8512,"url":16303},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F5278870a17454fe8621dbd8c445c412529525266",{"type":8515,"url":16305},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mh29-5h37-fv8m",{"type":8520,"url":8829},[8835,8837],{"id":430,"slug":16309,"dossier":47,"summary":16310,"aliases":16311,"sourceIds":16313,"published":16314,"modified":16315,"checkedAt":7,"severity":16316,"references":16318,"versionKeys":16339,"packageCount":32,"repositoryCount":831},"ghsa-mh99-v99m-4gvg-c377fa63","brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",[16312],"CVE-2026-14257",[430],"2026-07-24T21:53:14Z","2026-09-10T03:50:12.282849322Z",[16317],{"type":8547,"score":8583},[16319,16321,16323,16325,16327,16329,16331,16333,16335,16337,16338],{"type":8512,"url":16320},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-mh99-v99m-4gvg",{"type":8515,"url":16322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-14257",{"type":8512,"url":16324},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F129",{"type":8512,"url":16326},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F130",{"type":8512,"url":16328},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F136",{"type":8512,"url":16330},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F139d015104e71433ad52a41d19467c48ecbb2c7d",{"type":8512,"url":16332},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fa1bd33999ea75262c4749fff3bbb0d1372bd07b5",{"type":8512,"url":16334},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fcb4b9e47cc2ec777c14b2b4492fb431a56f6a031",{"type":8512,"url":16336},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fd13ff455a58b0d56704f0111e3c2a0b16ceb06eb",{"type":8520,"url":9689},{"type":8512,"url":9697},[9699,11858,9700],{"id":431,"slug":16341,"dossier":47,"summary":16342,"aliases":16343,"sourceIds":16346,"published":16347,"modified":16348,"checkedAt":7,"severity":16349,"references":16351,"versionKeys":16362,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[16344,16345],"CVE-2026-40347","PYSEC-2026-3038",[431,16345],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[16350],{"type":8547,"score":8882},[16352,16354,16356,16357,16359,16360],{"type":8512,"url":16353},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":8515,"url":16355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":8520,"url":11096},{"type":8512,"url":16358},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":8520,"url":11098},{"type":8515,"url":16361},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[11226,11227,11102],{"id":432,"slug":16364,"dossier":47,"summary":16365,"aliases":16366,"sourceIds":16368,"published":16369,"modified":16370,"checkedAt":7,"severity":16371,"references":16373,"versionKeys":16385,"packageCount":32,"repositoryCount":677},"ghsa-mmhr-3c5m-f64f-7eb4b3d2","Soup Sieve: Polynomial-time denial of service in the descendant combinator",[16367],"CVE-2026-126190",[432],"2026-11-13T00:49:46Z","2026-11-13T01:00:06.052455117Z",[16372],{"type":8547,"score":8583},[16374,16376,16378,16380,16382,16383],{"type":8512,"url":16375},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-mmhr-3c5m-f64f",{"type":8515,"url":16377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126190",{"type":8512,"url":16379},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F351",{"type":8512,"url":16381},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fff1a5ce7e5addc31626d7b6053511fecdb4f6320",{"type":8520,"url":9332},{"type":8512,"url":16384},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F4.0",[9340,9341,9342,10432,10433,16386,16387],"pypi:soupsieve@3.0.3","pypi:soupsieve@3.0.4",{"id":433,"slug":16389,"dossier":47,"summary":16390,"aliases":16391,"sourceIds":16393,"published":16394,"modified":16395,"checkedAt":7,"severity":16396,"references":16399,"versionKeys":16415,"packageCount":32,"repositoryCount":32},"ghsa-mmx7-hfxf-jppx-5a5fa72c","Axios: Prototype pollution gadgets can alter axios request construction",[16392],"CVE-2026-67316",[433],"2026-07-20T22:25:07Z","2026-09-10T03:50:52.753640421Z",[16397],{"type":8508,"score":16398},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16400,16402,16404,16406,16407,16408,16409,16410,16411,16412,16413],{"type":8512,"url":16401},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-mmx7-hfxf-jppx",{"type":8515,"url":16403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67316",{"type":8515,"url":16405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68944",{"type":8512,"url":9944},{"type":8512,"url":9946},{"type":8512,"url":9948},{"type":8512,"url":9950},{"type":8520,"url":9450},{"type":8512,"url":9953},{"type":8512,"url":9955},{"type":8512,"url":16414},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-prototype-pollution-via-bodyless-methods",[9452,9453],{"id":434,"slug":16417,"dossier":47,"summary":16418,"aliases":16419,"sourceIds":16422,"published":16423,"modified":16424,"checkedAt":7,"severity":16425,"references":16427,"versionKeys":16440,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[16420,16421],"CVE-2026-59881","PYSEC-2026-3547",[434,16421],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[16426],{"type":8508,"score":11431},[16428,16430,16432,16434,16436,16437,16438],{"type":8512,"url":16429},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":8515,"url":16431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":8512,"url":16433},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":8512,"url":16435},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":16439},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045],{"id":435,"slug":16442,"dossier":47,"summary":16443,"aliases":16444,"sourceIds":16447,"published":16448,"modified":16449,"checkedAt":7,"severity":16450,"references":16452,"versionKeys":16463,"packageCount":32,"repositoryCount":698},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[16445,16446],"CVE-2025-69225","PYSEC-2026-1109",[435,16446],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[16451],{"type":8508,"score":9303},[16453,16455,16457,16459,16460,16461],{"type":8512,"url":16454},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":8515,"url":16456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":8638,"url":16458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":8520,"url":8956},{"type":8520,"url":10846},{"type":8515,"url":16462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[8960,8961,8962,8963,8964,8965,8966],{"id":436,"slug":16465,"dossier":47,"summary":16466,"aliases":16467,"sourceIds":16470,"published":16471,"modified":16472,"checkedAt":7,"severity":16473,"references":16475,"versionKeys":16486,"packageCount":32,"repositoryCount":8535},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[16468,16469],"BIT-pillow-2026-96640","CVE-2026-96640",[436],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[16474],{"type":8508,"score":8509},[16476,16478,16480,16482,16484,16485],{"type":8512,"url":16477},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":8515,"url":16479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":8512,"url":16481},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":8512,"url":16483},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":437,"slug":16488,"dossier":47,"summary":16489,"aliases":16490,"sourceIds":16492,"published":16493,"modified":16494,"checkedAt":7,"severity":16495,"references":16498,"versionKeys":16513,"packageCount":32,"repositoryCount":578},"ghsa-mrhx-c7xc-m3w5-08924c2f","Zod can exhaust memory while validating oversized constrained collections",[16491],"CVE-2023-54404",[437],"2026-10-01T18:32:46Z","2026-10-23T18:30:09.376405885Z",[16496,16497],{"type":8547,"score":8583},{"type":8508,"score":8509},[16499,16501,16503,16505,16507,16509,16511],{"type":8515,"url":16500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-54404",{"type":8512,"url":16502},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fissues\u002F1872",{"type":8512,"url":16504},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fpull\u002F6475",{"type":8512,"url":16506},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fpull\u002F6652",{"type":8512,"url":16508},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fcommit\u002Fa0ebf970f2d752e5f58527cd2942ff48be4f46bd",{"type":8520,"url":16510},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod",{"type":8512,"url":16512},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fzod-uncontrolled-resource-consumption-via-array-validation",[16514,16515],"npm:zod@3.25.76","npm:zod@4.6.5",{"id":438,"slug":16517,"dossier":47,"summary":16518,"aliases":16519,"sourceIds":16521,"published":16522,"modified":16523,"checkedAt":7,"severity":16524,"references":16528,"versionKeys":16539,"packageCount":32,"repositoryCount":32},"ghsa-mrwp-f3q8-3g9p-0e2f9363","follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects",[16520],"CVE-2026-116689",[438],"2026-10-30T22:59:33Z","2026-10-30T23:15:06.315251750Z",[16525,16526],{"type":8547,"score":11130},{"type":8508,"score":16527},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16529,16531,16533,16535,16537],{"type":8512,"url":16530},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fsecurity\u002Fadvisories\u002FGHSA-mrwp-f3q8-3g9p",{"type":8515,"url":16532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116689",{"type":8512,"url":16534},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fcommit\u002Fb0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8",{"type":8520,"url":16536},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects",{"type":8512,"url":16538},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Freleases\u002Ftag\u002Fv1.16.2",[16540],"npm:follow-redirects@1.16.1",{"id":439,"slug":16542,"dossier":47,"summary":16543,"aliases":16544,"sourceIds":16547,"published":16548,"modified":16549,"checkedAt":7,"severity":16550,"references":16553,"versionKeys":16561,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[16545,16546],"CVE-2026-67326","PYSEC-2026-3980",[439,16546],"2026-05-08T23:19:02Z","2026-09-17T09:10:55.928803360Z",[16551,16552],{"type":8547,"score":9791},{"type":8547,"score":12304},[16554,16556,16558,16559],{"type":8553,"url":16555},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":8515,"url":16557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":8520,"url":8562},{"type":8515,"url":16560},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-newline-injection-via-config-writer-section",[8570,8571,8572],{"id":440,"slug":16563,"dossier":47,"summary":16564,"aliases":16565,"sourceIds":16567,"published":16568,"modified":16569,"checkedAt":7,"severity":16570,"references":16572,"versionKeys":16583,"packageCount":32,"repositoryCount":32},"ghsa-mwf2-3pr3-8698-6b8bfc0a","Axios: HTTP\u002F2 streamed uploads bypass `maxBodyLength`",[16566],"CVE-2026-67318",[440],"2026-07-20T22:37:03Z","2026-09-10T03:50:12.260991190Z",[16571],{"type":8508,"score":12050},[16573,16575,16577,16579,16580,16581,16582],{"type":8512,"url":16574},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-mwf2-3pr3-8698",{"type":8515,"url":16576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67318",{"type":8515,"url":16578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68948",{"type":8512,"url":9944},{"type":8512,"url":9950},{"type":8520,"url":9450},{"type":8512,"url":9955},[9453],{"id":441,"slug":16585,"dossier":47,"summary":16586,"aliases":16587,"sourceIds":16590,"published":16591,"modified":16592,"checkedAt":7,"severity":16593,"references":16596,"versionKeys":16605,"packageCount":32,"repositoryCount":677},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[16588,16589],"CVE-2026-34519","PYSEC-2026-2101",[441,16589],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[16594,16595],{"type":8508,"score":9303},{"type":8547,"score":9305},[16597,16599,16601,16603,16604],{"type":8638,"url":16598},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":8515,"url":16600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":8638,"url":16602},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":442,"slug":16607,"dossier":47,"summary":16608,"aliases":16609,"sourceIds":16612,"published":16613,"modified":16614,"checkedAt":7,"severity":16615,"references":16618,"versionKeys":16650,"packageCount":32,"repositoryCount":831},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[16610,16611],"CVE-2026-39892","PYSEC-2026-36",[442,16611],"2026-04-08T19:23:08Z","2026-11-04T03:30:50.401534783Z",[16616,16617],{"type":8547,"score":8789},{"type":8508,"score":11431},[16619,16621,16623,16625,16627,16629,16631,16633,16635,16637,16639,16641,16643,16645,16647,16648],{"type":8515,"url":16620},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":8515,"url":16622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":8512,"url":16624},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002Fc09d38ae52de7d95fe683b7a7c496f5751616f27",{"type":8512,"url":16626},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F622d672e429a7cff836a23c5903683dbec1901f5",{"type":8512,"url":16628},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43651",{"type":8512,"url":16630},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43670",{"type":8512,"url":16632},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43851",{"type":8512,"url":16634},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43853",{"type":8512,"url":16636},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43854",{"type":8512,"url":16638},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43855",{"type":8512,"url":16640},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:46956",{"type":8512,"url":16642},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:7295",{"type":8512,"url":16644},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-39892",{"type":8512,"url":16646},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2456735",{"type":8520,"url":10771},{"type":8512,"url":16649},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[10779,10780],{"id":443,"slug":16652,"dossier":47,"summary":16653,"aliases":16654,"sourceIds":16655,"published":16656,"modified":16657,"checkedAt":7,"severity":16658,"references":16661,"versionKeys":16670,"packageCount":32,"repositoryCount":32},"ghsa-p498-v437-472g-007a67ac","humanfs: Recursive copy follows symlinked files and copies data from outside the source tree",[],[443],"2026-09-02T14:27:16Z","2026-09-10T03:50:54.516902811Z",[16659],{"type":8508,"score":16660},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16662,16664,16666,16668],{"type":8512,"url":16663},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Fsecurity\u002Fadvisories\u002FGHSA-p498-v437-472g",{"type":8512,"url":16665},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Fcommit\u002F22bbaa4487a3e6c1197ca619840de4615d0c3404",{"type":8520,"url":16667},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs",{"type":8512,"url":16669},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Freleases\u002Ftag\u002Fnode-v0.16.8",[16671],"npm:@humanfs\u002Fnode@0.16.6",{"id":444,"slug":16673,"dossier":47,"summary":16674,"aliases":16675,"sourceIds":16678,"published":16679,"modified":16680,"checkedAt":7,"severity":16681,"references":16683,"versionKeys":16695,"packageCount":32,"repositoryCount":782},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[16676,16677],"CVE-2026-102271","PYSEC-2026-4149",[444,16677],"2026-09-29T23:14:33Z","2026-10-01T17:55:49.051187883Z",[16682],{"type":8547,"score":9175},[16684,16686,16688,16690,16691,16692,16693],{"type":8512,"url":16685},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":8515,"url":16687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":8512,"url":16689},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":16694},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",[9105,9106,9107],{"id":445,"slug":16697,"dossier":47,"summary":16698,"aliases":16699,"sourceIds":16702,"published":16703,"modified":16704,"checkedAt":7,"severity":16705,"references":16707,"versionKeys":16716,"packageCount":32,"repositoryCount":8535},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[16700,16701],"BIT-pillow-2026-112895","CVE-2026-112895",[445],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[16706],{"type":8508,"score":9015},[16708,16710,16712,16714,16715],{"type":8512,"url":16709},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":8515,"url":16711},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":8512,"url":16713},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":446,"slug":16718,"dossier":47,"summary":16719,"aliases":16720,"sourceIds":16723,"published":16724,"modified":16725,"checkedAt":7,"severity":16726,"references":16731,"versionKeys":16743,"packageCount":32,"repositoryCount":34},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[16721,16722],"CVE-2026-73621","PYSEC-2026-3950",[446,16722],"2026-08-03T20:23:17Z","2026-09-10T13:10:55.177009469Z",[16727,16729],{"type":8547,"score":16728},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":8508,"score":16730},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[16732,16734,16736,16738,16739,16741],{"type":8553,"url":16733},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":8512,"url":16735},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":8512,"url":16737},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":8520,"url":8562},{"type":8512,"url":16740},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",{"type":8515,"url":16742},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-truncation-via-commit-count",[8570,8571,8572],{"id":447,"slug":16745,"dossier":47,"summary":16746,"aliases":16747,"sourceIds":16751,"published":16752,"modified":16753,"checkedAt":7,"severity":16754,"references":16756,"versionKeys":16771,"packageCount":32,"repositoryCount":698},"ghsa-p58f-9548-mpm2-3c2c8280","virtualenv bash and fish activation scripts execute commands embedded in paths",[16748,16749,16750],"BIT-virtualenv-2026-102925","CVE-2026-102925","PYSEC-2026-4013",[447,16750],"2026-09-18T04:37:14Z","2026-10-06T15:25:40.633713827Z",[16755],{"type":8547,"score":11240},[16757,16759,16761,16763,16765,16767,16768,16770],{"type":8512,"url":16758},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":8515,"url":16760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102925",{"type":8512,"url":16762},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":8638,"url":16764},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":8512,"url":16766},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4013.yaml",{"type":8520,"url":9558},{"type":8512,"url":16769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":8520,"url":11050},[9562,9563,9564,9565,9566],{"id":448,"slug":16773,"dossier":47,"summary":16774,"aliases":16775,"sourceIds":16777,"published":16778,"modified":16779,"checkedAt":7,"severity":16780,"references":16782,"versionKeys":16789,"packageCount":32,"repositoryCount":32},"ghsa-p88m-4jfj-68fv-1bddddbb","undici vulnerable to HTTP header injection via Set-Cookie percent-decoding",[16776],"CVE-2026-9679",[448],"2026-06-19T14:21:30Z","2026-09-10T03:51:09.228344843Z",[16781],{"type":8547,"score":14176},[16783,16785,16787,16788],{"type":8512,"url":16784},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-p88m-4jfj-68fv",{"type":8515,"url":16786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9679",{"type":8512,"url":8767},{"type":8520,"url":9070},[9076,9077],{"id":449,"slug":16791,"dossier":47,"summary":16792,"aliases":16793,"sourceIds":16797,"published":16798,"modified":16799,"checkedAt":7,"severity":16800,"references":16802,"versionKeys":16812,"packageCount":32,"repositoryCount":8535},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[16794,16795,16796],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[449,16796],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[16801],{"type":8547,"score":8666},[16803,16805,16807,16809,16810,16811],{"type":8515,"url":16804},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":8515,"url":16806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":9654,"url":16808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":8638,"url":11363},{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":450,"slug":16814,"dossier":47,"summary":16815,"aliases":16816,"sourceIds":16818,"published":16819,"modified":16820,"checkedAt":7,"severity":16821,"references":16823,"versionKeys":16831,"packageCount":32,"repositoryCount":32},"ghsa-p92q-9vqr-4j8v-02bcef7f","Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter",[16817],"CVE-2026-44487",[450],"2026-06-04T14:19:53Z","2026-09-10T03:51:09.218790313Z",[16822],{"type":8508,"score":16527},[16824,16826,16828,16829,16830],{"type":8512,"url":16825},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-p92q-9vqr-4j8v",{"type":8515,"url":16827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44487",{"type":8520,"url":9450},{"type":8512,"url":15263},{"type":8512,"url":12287},[9452,9453],{"id":451,"slug":16833,"dossier":47,"summary":16834,"aliases":16835,"sourceIds":16838,"published":16839,"modified":16840,"checkedAt":7,"severity":16841,"references":16844,"versionKeys":16853,"packageCount":32,"repositoryCount":677},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[16836,16837],"CVE-2026-34515","PYSEC-2026-2097",[451,16837],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[16842,16843],{"type":8508,"score":15277},{"type":8547,"score":11791},[16845,16847,16849,16851,16852],{"type":8638,"url":16846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":8515,"url":16848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":8638,"url":16850},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":452,"slug":16855,"dossier":47,"summary":16856,"aliases":16857,"sourceIds":16859,"published":16860,"modified":16861,"checkedAt":7,"severity":16862,"references":16864,"versionKeys":16877,"packageCount":32,"repositoryCount":578},"ghsa-p9ff-h696-f583-155b7820","Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket",[16858],"CVE-2026-39363",[452],"2026-04-06T18:03:24Z","2026-09-10T03:51:02.521776335Z",[16863],{"type":8508,"score":16527},[16865,16867,16869,16871,16873,16874,16875,16876],{"type":8512,"url":16866},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-p9ff-h696-f583",{"type":8515,"url":16868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39363",{"type":8512,"url":16870},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22159",{"type":8512,"url":16872},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff02d9fde0b195afe3ea2944414186962fbbe41e0",{"type":8520,"url":10612},{"type":8512,"url":10614},{"type":8512,"url":10616},{"type":8512,"url":10618},[10621,10622],{"id":453,"slug":16879,"dossier":47,"summary":16880,"aliases":16881,"sourceIds":16885,"published":16886,"modified":16887,"checkedAt":7,"severity":16888,"references":16892,"versionKeys":16901,"packageCount":32,"repositoryCount":8535},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[16882,16883,16884],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[453,16884],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[16889,16890],{"type":8508,"score":13850},{"type":8547,"score":16891},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[16893,16895,16897,16899,16900],{"type":8553,"url":16894},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":8515,"url":16896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":8638,"url":16898},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":454,"slug":16903,"dossier":47,"summary":16904,"aliases":16905,"sourceIds":16907,"published":16908,"modified":16909,"checkedAt":7,"severity":16910,"references":16912,"versionKeys":16918,"packageCount":32,"repositoryCount":32},"ghsa-pf86-5x62-jrwf-32e5be84","Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking",[16906],"CVE-2026-42033",[454],"2026-05-05T00:26:29Z","2026-09-10T03:51:06.658921258Z",[16911],{"type":8547,"score":9175},[16913,16915,16917],{"type":8512,"url":16914},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pf86-5x62-jrwf",{"type":8515,"url":16916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42033",{"type":8520,"url":9450},[9452,9453],{"id":455,"slug":16920,"dossier":47,"summary":16921,"aliases":16922,"sourceIds":16926,"published":16927,"modified":16928,"checkedAt":7,"severity":16929,"references":16932,"versionKeys":16945,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[16923,16924,16925],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[455,16925],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[16930,16931],{"type":8547,"score":8882},{"type":8547,"score":8583},[16933,16935,16937,16939,16941,16943,16944],{"type":8553,"url":16934},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":8515,"url":16936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":8638,"url":16938},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":8638,"url":16940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":8512,"url":16942},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":8520,"url":8521},{"type":8515,"url":11467},[8530,8531,8532,8533],{"id":456,"slug":16947,"dossier":47,"summary":16948,"aliases":16949,"sourceIds":16951,"published":16952,"modified":16953,"checkedAt":7,"severity":16954,"references":16956,"versionKeys":16965,"packageCount":32,"repositoryCount":32},"ghsa-phc3-fgpg-7m6h-96f66464","Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS",[16950],"CVE-2026-2581",[456],"2026-03-13T20:37:58Z","2026-09-10T03:50:40.209102192Z",[16955],{"type":8547,"score":8850},[16957,16959,16961,16963,16964],{"type":8512,"url":16958},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-phc3-fgpg-7m6h",{"type":8515,"url":16960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2581",{"type":8512,"url":16962},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3513473",{"type":8512,"url":8767},{"type":8520,"url":9070},[9077],{"id":457,"slug":16967,"dossier":47,"summary":16968,"aliases":16969,"sourceIds":16973,"published":16974,"modified":16975,"checkedAt":7,"severity":16976,"references":16978,"versionKeys":16989,"packageCount":32,"repositoryCount":10106},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[16970,16971,16972],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[457,16972],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[16977],{"type":8547,"score":8583},[16979,16981,16983,16985,16987,16988],{"type":8553,"url":16980},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":8515,"url":16982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":8638,"url":16984},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":8512,"url":16986},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":8520,"url":8521},{"type":8515,"url":10104},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":458,"slug":16991,"dossier":47,"summary":16992,"aliases":16993,"sourceIds":16995,"published":16996,"modified":16997,"checkedAt":7,"severity":16998,"references":17000,"versionKeys":17015,"packageCount":32,"repositoryCount":32},"ghsa-pmjh-fq2x-6v4x-39901fe8","undici vulnerable to Denial of Service via orphaned RetryHandler response body",[16994],"CVE-2026-18149",[458],"2026-09-29T18:22:34Z","2026-09-29T18:30:41.164240105Z",[16999],{"type":8547,"score":8850},[17001,17003,17005,17007,17009,17011,17012,17013,17014],{"type":8512,"url":17002},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-pmjh-fq2x-6v4x",{"type":8515,"url":17004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-18149",{"type":8512,"url":17006},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F3c6726599cea8646384dde846c97d630da472a74",{"type":8512,"url":17008},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe905b5b87e6953bcc542af90557b2fee5b7b5974",{"type":8512,"url":17010},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3892751",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":459,"slug":17017,"dossier":47,"summary":17018,"aliases":17019,"sourceIds":17021,"published":17022,"modified":17023,"checkedAt":7,"severity":17024,"references":17026,"versionKeys":17042,"packageCount":32,"repositoryCount":32},"ghsa-pmv8-rq9r-6j72-24188f6f","Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",[17020],"CVE-2026-67312",[459],"2026-07-20T17:48:18Z","2026-09-10T03:51:11.689184227Z",[17025],{"type":8508,"score":8690},[17027,17029,17031,17033,17034,17035,17036,17037,17038,17039,17040],{"type":8512,"url":17028},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pmv8-rq9r-6j72",{"type":8515,"url":17030},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67312",{"type":8515,"url":17032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68941",{"type":8512,"url":9944},{"type":8512,"url":9946},{"type":8512,"url":9948},{"type":8512,"url":9950},{"type":8520,"url":9450},{"type":8512,"url":9953},{"type":8512,"url":9955},{"type":8512,"url":17041},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-denial-of-service-via-formtojson",[9452,9453],{"id":460,"slug":17044,"dossier":47,"summary":17045,"aliases":17046,"sourceIds":17048,"published":17049,"modified":17050,"checkedAt":7,"severity":17051,"references":17054,"versionKeys":17060,"packageCount":32,"repositoryCount":32},"ghsa-pmwg-cvhr-8vh7-f0462413","Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0\u002F8) in Axios 1.15.0",[17047],"CVE-2026-42043",[460],"2026-05-05T00:20:58Z","2026-09-10T03:51:06.691311805Z",[17052],{"type":8547,"score":17053},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[17055,17057,17059],{"type":8512,"url":17056},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pmwg-cvhr-8vh7",{"type":8515,"url":17058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42043",{"type":8520,"url":9450},[9452,9453],{"id":461,"slug":17062,"dossier":47,"summary":17063,"aliases":17064,"sourceIds":17067,"published":17068,"modified":17069,"checkedAt":7,"severity":17070,"references":17072,"versionKeys":17081,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[17065,17066],"CVE-2026-42561","PYSEC-2026-3039",[461,17066],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[17071],{"type":8547,"score":8583},[17073,17075,17077,17078,17079],{"type":8512,"url":17074},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":8515,"url":17076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":8520,"url":11096},{"type":8520,"url":11098},{"type":8515,"url":17080},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[11226,11227,11102],{"id":462,"slug":17083,"dossier":47,"summary":17084,"aliases":17085,"sourceIds":17088,"published":17089,"modified":17090,"checkedAt":7,"severity":17091,"references":17093,"versionKeys":17105,"packageCount":32,"repositoryCount":698},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[17086,17087],"CVE-2025-50181","PYSEC-2026-1999",[462,17087],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[17092],{"type":8547,"score":10159},[17094,17096,17098,17100,17101,17102,17103],{"type":8512,"url":17095},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":8515,"url":17097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":8638,"url":17099},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":8520,"url":9369},{"type":8512,"url":10169},{"type":8520,"url":9371},{"type":8515,"url":17104},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[9373,9374,9375,9376],{"id":463,"slug":17107,"dossier":47,"summary":17108,"aliases":17109,"sourceIds":17111,"published":17112,"modified":17113,"checkedAt":7,"severity":17114,"references":17117,"versionKeys":17126,"packageCount":32,"repositoryCount":9047},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[17110],"CVE-2026-111750",[463],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[17115],{"type":8508,"score":17116},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[17118,17120,17122,17124,17125],{"type":8512,"url":17119},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":8515,"url":17121},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":8512,"url":17123},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":8520,"url":8956},{"type":8512,"url":9043},[8960,8961,8962,8963,8964,8965,8966,8967,8968,9045,9046],{"id":464,"slug":17128,"dossier":47,"summary":17129,"aliases":17130,"sourceIds":17132,"published":17133,"modified":17134,"checkedAt":7,"severity":17135,"references":17137,"versionKeys":17144,"packageCount":32,"repositoryCount":32},"ghsa-pr7r-676h-xcf6-7103c229","undici vulnerable to cross-user information disclosure via shared cache whitespace bypass",[17131],"CVE-2026-9678",[464],"2026-06-18T14:28:13Z","2026-09-10T03:51:09.340567236Z",[17136],{"type":8547,"score":11130},[17138,17140,17142,17143],{"type":8512,"url":17139},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-pr7r-676h-xcf6",{"type":8515,"url":17141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9678",{"type":8512,"url":8767},{"type":8520,"url":9070},[9076,9077],{"id":465,"slug":17146,"dossier":47,"summary":17147,"aliases":17148,"sourceIds":17152,"published":17153,"modified":17154,"checkedAt":7,"severity":17155,"references":17158,"versionKeys":17170,"packageCount":32,"repositoryCount":9378},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[17149,17150,17151],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[465,17151],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[17156,17157],{"type":8508,"score":12302},{"type":8547,"score":11240},[17159,17160,17162,17164,17166,17168,17169],{"type":8512,"url":13940},{"type":8638,"url":17161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":8515,"url":17163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":8638,"url":17165},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":8638,"url":17167},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":8520,"url":8521},{"type":8515,"url":11395},[8525,8526,8527,8528,8529,8530,8531,8532],{"id":466,"slug":17172,"dossier":47,"summary":17173,"aliases":17174,"sourceIds":17175,"published":17176,"modified":17177,"checkedAt":7,"severity":17178,"references":17180,"versionKeys":17187,"packageCount":32,"repositoryCount":782},"ghsa-pxh4-856f-4h89-682cbd7f","PyJWT: HS256\u002F384\u002F512 verify accepts empty HMAC key via oct JWK (PyJWK\u002FPyJWKClient) enabling token forgery",[],[466],"2026-10-22T15:48:04Z","2026-10-22T16:00:09.127222029Z",[17179],{"type":8547,"score":9175},[17181,17183,17185,17186],{"type":8512,"url":17182},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-pxh4-856f-4h89",{"type":8512,"url":17184},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Faf8181ca0bec5e6b372fbba9afbe23702b787ceb",{"type":8520,"url":9097},{"type":8512,"url":9099},[9105,9106,9107],{"id":467,"slug":17189,"dossier":47,"summary":17190,"aliases":17191,"sourceIds":17193,"published":17194,"modified":17195,"checkedAt":7,"severity":17196,"references":17198,"versionKeys":17212,"packageCount":32,"repositoryCount":831},"ghsa-q2hr-2g5m-vwhr-67a18b1f","brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",[17192],"CVE-2026-102277",[467],"2026-09-29T23:45:39Z","2026-09-30T00:00:03.849541183Z",[17197],{"type":8547,"score":8882},[17199,17201,17203,17205,17207,17209,17211],{"type":8512,"url":17200},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-q2hr-2g5m-vwhr",{"type":8515,"url":17202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102277",{"type":8512,"url":17204},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F33a5ef17b8d800bbfa8c52b14c39043b6aac1a96",{"type":8512,"url":17206},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fbdff773f98e5988616b7039cc9b508df5d640b22",{"type":8512,"url":17208},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fc55e67d8d8b1c56a2474afff15c2891166b2d364",{"type":8512,"url":17210},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fffdfa3e3806bed17c0874b8f1439b084de354a7e",{"type":8520,"url":9689},[9699,11858,9700,11859],{"id":468,"slug":17214,"dossier":47,"summary":17215,"aliases":17216,"sourceIds":17219,"published":17220,"modified":17221,"checkedAt":7,"severity":17222,"references":17225,"versionKeys":17238,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[17217,17218],"CVE-2024-56326","PYSEC-2026-1475",[468,17218],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[17223,17224],{"type":8547,"score":12304},{"type":8508,"score":14013},[17226,17228,17230,17232,17233,17234,17235,17236],{"type":8512,"url":17227},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":8515,"url":17229},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":8638,"url":17231},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":8520,"url":14022},{"type":8512,"url":15074},{"type":8512,"url":14024},{"type":8520,"url":14028},{"type":8515,"url":17237},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[14032],{"id":469,"slug":17240,"dossier":47,"summary":17241,"aliases":17242,"sourceIds":17245,"published":17246,"modified":17247,"checkedAt":7,"severity":17248,"references":17250,"versionKeys":17258,"packageCount":32,"repositoryCount":8535},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[17243,17244],"BIT-pillow-2026-112897","CVE-2026-112897",[469],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[17249],{"type":8508,"score":9119},[17251,17253,17255,17256,17257],{"type":8512,"url":17252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":8515,"url":17254},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":8512,"url":13857},{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":470,"slug":17260,"dossier":47,"summary":17261,"aliases":17262,"sourceIds":17264,"published":17265,"modified":17266,"checkedAt":7,"severity":17267,"references":17270,"versionKeys":17278,"packageCount":32,"repositoryCount":32},"ghsa-q8mj-m7cp-5q26-f97ac731","qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null\u002Fundefined entries in comma-format arrays when encodeValuesOnly is set",[17263],"CVE-2026-8723",[470],"2026-05-22T17:27:19Z","2026-09-10T03:50:55.285123128Z",[17268,17269],{"type":8547,"score":8882},{"type":8508,"score":8690},[17271,17273,17275,17277],{"type":8512,"url":17272},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-q8mj-m7cp-5q26",{"type":8515,"url":17274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8723",{"type":8512,"url":17276},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002F21f80b33e5c8b3f7eba1034fff0da4a4a37a1d41",{"type":8520,"url":10490},[10492,10493],{"id":471,"slug":17280,"dossier":47,"summary":17281,"aliases":17282,"sourceIds":17284,"published":17285,"modified":17286,"checkedAt":7,"severity":17287,"references":17289,"versionKeys":17301,"packageCount":32,"repositoryCount":32},"ghsa-q8qp-cvcw-x6jj-6d29e5dc","Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking",[17283],"CVE-2026-42264",[471],"2026-05-05T00:18:38Z","2026-09-10T03:50:55.280623838Z",[17288],{"type":8547,"score":9175},[17290,17292,17294,17296,17298,17299],{"type":8512,"url":17291},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-q8qp-cvcw-x6jj",{"type":8515,"url":17293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42264",{"type":8512,"url":17295},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10779",{"type":8512,"url":17297},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F47915144662f2733e6c051bdcb895a8c8f0586aa",{"type":8520,"url":9450},{"type":8512,"url":17300},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.2",[9452,9453],{"id":472,"slug":17303,"dossier":47,"summary":17304,"aliases":17305,"sourceIds":17308,"published":17309,"modified":17310,"checkedAt":7,"severity":17311,"references":17314,"versionKeys":17320,"packageCount":32,"repositoryCount":8535},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[17306,17307],"CVE-2026-44431","PYSEC-2026-141",[472,17307],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[17312,17313],{"type":8547,"score":10444},{"type":8508,"score":14725},[17315,17317,17319],{"type":8515,"url":17316},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":8515,"url":17318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":8520,"url":9369},[9373,9374,9375,9376,9377,12813],{"id":473,"slug":17322,"dossier":47,"summary":17323,"aliases":17324,"sourceIds":17326,"published":17327,"modified":17328,"checkedAt":7,"severity":17329,"references":17331,"versionKeys":17343,"packageCount":32,"repositoryCount":831},"ghsa-qhr7-859c-m2p7-bdea2658","brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",[17325],"CVE-2026-102278",[473],"2026-09-29T23:45:17Z","2026-09-30T00:00:04.402763332Z",[17330],{"type":8547,"score":8583},[17332,17334,17336,17338,17340,17342],{"type":8512,"url":17333},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-qhr7-859c-m2p7",{"type":8515,"url":17335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102278",{"type":8512,"url":17337},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F1efee7c397c191da6287a78ec19512476a966a7b",{"type":8512,"url":17339},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F935d78f32f335b2ff76578e5c5e877d31ae9888c",{"type":8512,"url":17341},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fde84f144e9816f30e25fc8179e2e1249ab6df0db",{"type":8520,"url":9689},[9699,11858,9700,11859],{"id":474,"slug":17345,"dossier":47,"summary":17346,"aliases":17347,"sourceIds":17350,"published":17351,"modified":17352,"checkedAt":7,"severity":17353,"references":17356,"versionKeys":17370,"packageCount":32,"repositoryCount":17371},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[17348,17349],"CVE-2026-22701","PYSEC-2026-1374",[474,17349],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[17354],{"type":8547,"score":17355},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[17357,17359,17361,17363,17365,17366,17368],{"type":8512,"url":17358},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":8515,"url":17360},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":8512,"url":17362},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":8512,"url":17364},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":8520,"url":10973},{"type":8520,"url":17367},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":8515,"url":17369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[11739,11740,11741,11742],14,{"id":475,"slug":17373,"dossier":47,"summary":17374,"aliases":17375,"sourceIds":17378,"published":17379,"modified":17380,"checkedAt":7,"severity":17381,"references":17384,"versionKeys":17395,"packageCount":32,"repositoryCount":698},"ghsa-qmx5-4p3x-wvqf-aef88856","virtualenv: Venv configuration readback can reinterpret path boundaries",[17376,17377],"BIT-virtualenv-2026-113715","CVE-2026-113715",[475],"2026-10-23T22:20:43Z","2026-10-29T10:55:39.718166145Z",[17382],{"type":8508,"score":17383},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[17385,17387,17389,17391,17393,17394],{"type":8512,"url":17386},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-qmx5-4p3x-wvqf",{"type":8515,"url":17388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113715",{"type":8512,"url":17390},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3426",{"type":8512,"url":17392},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fb0008a58885ded9227faf8f910c6c402712c750a",{"type":8520,"url":9558},{"type":8512,"url":9560},[9562,9563,9564,9565,9566],{"id":476,"slug":17397,"dossier":47,"summary":17398,"aliases":17399,"sourceIds":17401,"published":17402,"modified":17403,"checkedAt":7,"severity":17404,"references":17406,"versionKeys":17422,"packageCount":32,"repositoryCount":578},"ghsa-qrxm-fqhp-jwvm-ac20ce75","undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation",[17400],"CVE-2026-87018",[476],"2026-10-27T19:02:21Z","2026-10-27T19:15:22.403573595Z",[17405],{"type":8547,"score":8583},[17407,17409,17411,17413,17415,17417,17418,17419,17420,17421],{"type":8512,"url":17408},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-qrxm-fqhp-jwvm",{"type":8515,"url":17410},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87018",{"type":8512,"url":17412},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F12cfd96c3f430897656e3edc1c5e02be8c1cd309",{"type":8512,"url":17414},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb40fbfc0651703cf9fa9f6ced68b679f28d8bb28",{"type":8512,"url":17416},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe257e9f8fb42eedd50727b9cf65e548c8925e4a8",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9190},{"type":8512,"url":9192},{"type":8512,"url":9194},[9076,9077,9196],{"id":477,"slug":17424,"dossier":47,"summary":17425,"aliases":17426,"sourceIds":17428,"published":17429,"modified":17430,"checkedAt":7,"severity":17431,"references":17433,"versionKeys":17441,"packageCount":32,"repositoryCount":831},"ghsa-qx2v-qp2m-jg93-0a55e142","PostCSS has XSS via Unescaped \u003C\u002Fstyle> in its CSS Stringify Output",[17427],"CVE-2026-41305",[477],"2026-04-24T15:31:42Z","2026-09-10T03:51:02.916463871Z",[17432],{"type":8547,"score":15414},[17434,17436,17438,17439],{"type":8512,"url":17435},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-qx2v-qp2m-jg93",{"type":8515,"url":17437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41305",{"type":8520,"url":11800},{"type":8512,"url":17440},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.10",[11804,11805,11806],{"id":478,"slug":17443,"dossier":47,"summary":17444,"aliases":17445,"sourceIds":17447,"published":17448,"modified":17449,"checkedAt":7,"severity":17450,"references":17452,"versionKeys":17460,"packageCount":32,"repositoryCount":831},"ghsa-r28c-9q8g-f849-c8b68fa5","PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",[17446],"CVE-2026-73646",[478],"2026-07-24T16:24:55Z","2026-09-10T03:50:52.854537677Z",[17451],{"type":8547,"score":11791},[17453,17455,17457,17458],{"type":8512,"url":17454},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-r28c-9q8g-f849",{"type":8512,"url":17456},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F95663d3eb7ba26f4854dd19d3b4f4425760cf56c",{"type":8520,"url":11800},{"type":8512,"url":17459},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.18",[11804,11805,11806],{"id":479,"slug":17462,"dossier":47,"summary":17463,"aliases":17464,"sourceIds":17466,"published":17467,"modified":17468,"checkedAt":7,"severity":17469,"references":17472,"versionKeys":17480,"packageCount":32,"repositoryCount":32},"ghsa-r4q5-vmmm-2653-87ff1faa","follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",[17465],"CVE-2026-40895",[479],"2026-04-14T01:11:11Z","2026-11-02T23:30:04.262099247Z",[17470],{"type":8508,"score":17471},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[17473,17475,17477,17479],{"type":8512,"url":17474},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fsecurity\u002Fadvisories\u002FGHSA-r4q5-vmmm-2653",{"type":8515,"url":17476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40895",{"type":8512,"url":17478},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fcommit\u002F844c4d302ac963d29bdb5dc1754ec7df3d70d7f9",{"type":8520,"url":16536},[17481],"npm:follow-redirects@1.15.11",{"id":480,"slug":17483,"dossier":47,"summary":17484,"aliases":17485,"sourceIds":17487,"published":17488,"modified":17489,"checkedAt":7,"severity":17490,"references":17492,"versionKeys":17513,"packageCount":32,"repositoryCount":32},"ghsa-r53p-7pc4-xj5r-a9aaae9b","undici vulnerable to downstream response splitting via retry interceptor",[17486],"CVE-2026-18540",[480],"2026-09-29T18:22:07Z","2026-09-29T18:30:41.154532067Z",[17491],{"type":8547,"score":9058},[17493,17495,17497,17499,17501,17503,17505,17507,17508,17509,17511,17512],{"type":8512,"url":17494},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-r53p-7pc4-xj5r",{"type":8515,"url":17496},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-18540",{"type":8512,"url":17498},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F0160a719063fb0a77f4fdf9500b9166b91e14329",{"type":8512,"url":17500},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcd8af90b38ae33c2838d54a2d629774122effe95",{"type":8512,"url":17502},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fce31bc824b578008faae5d3350da66c1b5f71548",{"type":8512,"url":17504},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3900104",{"type":8512,"url":17506},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3900615",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":17510},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.28.1",{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":481,"slug":17515,"dossier":47,"summary":17516,"aliases":17517,"sourceIds":17520,"published":17521,"modified":17522,"checkedAt":7,"severity":17523,"references":17525,"versionKeys":17537,"packageCount":32,"repositoryCount":32},"ghsa-r543-q48m-4c9j-6471b319","WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE",[17518,17519],"CVE-2026-106443","PYSEC-2026-4311",[481,17519],"2026-10-07T18:05:49Z","2026-10-15T14:56:08.607638818Z",[17524],{"type":8547,"score":8915},[17526,17528,17530,17532,17533,17534,17535],{"type":8512,"url":17527},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-r543-q48m-4c9j",{"type":8515,"url":17529},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-106443",{"type":8512,"url":17531},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fcommit\u002F39cd37ce1610bd890388e26591c569db1cbab542",{"type":8520,"url":13268},{"type":8512,"url":15573},{"type":8520,"url":13272},{"type":8515,"url":17536},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r543-q48m-4c9j",[13276],{"id":482,"slug":17539,"dossier":47,"summary":17540,"aliases":17541,"sourceIds":17544,"published":17545,"modified":17546,"checkedAt":7,"severity":17547,"references":17551,"versionKeys":17589,"packageCount":32,"repositoryCount":726},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[17542,17543],"CVE-2026-26007","PYSEC-2026-2141",[482,17543],"2026-02-10T21:27:06Z","2026-09-10T03:50:59.750965345Z",[17548,17550],{"type":8508,"score":17549},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":8547,"score":14560},[17552,17554,17556,17558,17559,17561,17563,17565,17566,17568,17570,17572,17574,17576,17578,17580,17582,17584,17586,17588],{"type":8512,"url":17553},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":8515,"url":17555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":8512,"url":17557},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":8520,"url":10771},{"type":8512,"url":17560},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":8512,"url":17562},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":8512,"url":17564},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":8515,"url":13957},{"type":8515,"url":17567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":8515,"url":17569},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":8515,"url":17571},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":8515,"url":17573},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":8515,"url":17575},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":8515,"url":17577},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":8515,"url":17579},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":8515,"url":17581},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":8515,"url":17583},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":8515,"url":17585},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":8515,"url":17587},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":8515,"url":13977},[10775,10776,10777,10778,10779,10780],{"id":483,"slug":17591,"dossier":47,"summary":17592,"aliases":17593,"sourceIds":17596,"published":17597,"modified":17598,"checkedAt":7,"severity":17599,"references":17601,"versionKeys":17613,"packageCount":32,"repositoryCount":32},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[17594,17595],"CVE-2026-102272","PYSEC-2026-4150",[483,17595],"2026-09-29T23:14:00Z","2026-10-01T17:56:05.452379838Z",[17600],{"type":8547,"score":9175},[17602,17604,17606,17608,17609,17610,17611],{"type":8512,"url":17603},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":8515,"url":17605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":8512,"url":17607},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":17612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r6x4-923q-g947",[9106],{"id":484,"slug":17615,"dossier":47,"summary":17616,"aliases":17617,"sourceIds":17621,"published":17622,"modified":17623,"checkedAt":7,"severity":17624,"references":17627,"versionKeys":17641,"packageCount":32,"repositoryCount":9378},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[17618,17619,17620],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[484,17620],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[17625,17626],{"type":8547,"score":11379},{"type":8508,"score":11381},[17628,17630,17632,17634,17636,17637,17638,17639],{"type":8512,"url":17629},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":8515,"url":17631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":8512,"url":17633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":8512,"url":17635},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":8520,"url":8521},{"type":8512,"url":11395},{"type":8520,"url":11469},{"type":8515,"url":17640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[8525,8526,8527,8528,8529,8530,8531,8532],{"id":485,"slug":17643,"dossier":47,"summary":17644,"aliases":17645,"sourceIds":17647,"published":17648,"modified":17649,"checkedAt":7,"severity":17650,"references":17652,"versionKeys":17663,"packageCount":32,"repositoryCount":831},"ghsa-r825-w8mm-5pxw-2a8236ea","launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",[17646],"CVE-2026-112944",[485],"2026-10-20T19:51:52Z","2026-10-20T20:00:04.608907013Z",[17651],{"type":8508,"score":11682},[17653,17655,17657,17659,17661,17662],{"type":8512,"url":17654},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-r825-w8mm-5pxw",{"type":8515,"url":17656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112944",{"type":8512,"url":17658},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fpull\u002F156",{"type":8512,"url":17660},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002Ff6e6701bb1f16f2dd242b321374f1b6cca6eb6d4",{"type":8520,"url":11000},{"type":8512,"url":11002},[10620,10621,10622],{"id":486,"slug":17665,"dossier":47,"summary":17666,"aliases":17667,"sourceIds":17670,"published":17671,"modified":17672,"checkedAt":7,"severity":17673,"references":17676,"versionKeys":17686,"packageCount":32,"repositoryCount":34},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[17668,17669],"CVE-2026-73625","PYSEC-2026-3953",[486,17669],"2026-07-24T16:42:57Z","2026-09-10T13:10:47.448946391Z",[17674,17675],{"type":8547,"score":8915},{"type":8508,"score":15744},[17677,17679,17680,17682,17683,17684],{"type":8553,"url":17678},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":8512,"url":11944},{"type":8512,"url":17681},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":8520,"url":8562},{"type":8512,"url":11949},{"type":8515,"url":17685},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-kwarg-value-smuggling",[8570,8571,8572],{"id":487,"slug":17688,"dossier":47,"summary":17689,"aliases":17690,"sourceIds":17692,"published":17693,"modified":17694,"checkedAt":7,"severity":17695,"references":17698,"versionKeys":17718,"packageCount":32,"repositoryCount":578},"ghsa-rf6f-7fwh-wjgh-21853d08","Prototype Pollution via parse() in NodeJS flatted",[17691],"CVE-2026-33228",[487],"2026-03-19T17:43:54Z","2026-10-05T16:00:04.586755982Z",[17696],{"type":8508,"score":17697},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[17699,17701,17703,17705,17707,17709,17711,17713,17715,17716],{"type":8512,"url":17700},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fsecurity\u002Fadvisories\u002FGHSA-rf6f-7fwh-wjgh",{"type":8515,"url":17702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33228",{"type":8512,"url":17704},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fcommit\u002F885ddcc33cf9657caf38c57c7be45ae1c5272802",{"type":8512,"url":17706},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13826",{"type":8512,"url":17708},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34342",{"type":8512,"url":17710},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:9742",{"type":8512,"url":17712},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33228",{"type":8512,"url":17714},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449872",{"type":8520,"url":8721},{"type":8512,"url":17717},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Freleases\u002Ftag\u002Fv3.4.2",[8723],{"id":488,"slug":17720,"dossier":47,"summary":17721,"aliases":17722,"sourceIds":17725,"published":17726,"modified":17727,"checkedAt":7,"severity":17728,"references":17730,"versionKeys":17739,"packageCount":32,"repositoryCount":8535},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[17723,17724],"BIT-pillow-2026-112898","CVE-2026-112898",[488],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[17729],{"type":8508,"score":17471},[17731,17733,17735,17737,17738],{"type":8512,"url":17732},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":8515,"url":17734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":8512,"url":17736},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":489,"slug":17741,"dossier":47,"summary":17742,"aliases":17743,"sourceIds":17745,"published":17746,"modified":17747,"checkedAt":7,"severity":17748,"references":17750,"versionKeys":17766,"packageCount":32,"repositoryCount":32},"ghsa-rfgv-xxqx-mfg5-2b1e2f6b","undici vulnerable to Denial of Service via unrequested WebSocket subprotocol",[17744],"CVE-2026-19534",[489],"2026-09-29T18:21:33Z","2026-09-29T18:30:41.167602268Z",[17749],{"type":8547,"score":8583},[17751,17753,17755,17757,17759,17761,17762,17763,17764,17765],{"type":8512,"url":17752},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgv-xxqx-mfg5",{"type":8515,"url":17754},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-19534",{"type":8512,"url":17756},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2af0faf88b906d3127a360c3ac75164c0f95e5a5",{"type":8512,"url":17758},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6615e0175e9b635bcd2e3e87a47daa82f6f5b728",{"type":8512,"url":17760},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F66e12816064cf3068f63bd134748b7fc4e779bad",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":17510},{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":490,"slug":17768,"dossier":47,"summary":17769,"aliases":17770,"sourceIds":17772,"published":17773,"modified":17774,"checkedAt":7,"severity":17775,"references":17777,"versionKeys":17788,"packageCount":32,"repositoryCount":745},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[17771],"CVE-2026-112939",[490],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[17776],{"type":8547,"score":14490},[17778,17780,17782,17784,17786,17787],{"type":8512,"url":17779},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":8515,"url":17781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":8512,"url":17783},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":8512,"url":17785},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":8520,"url":10973},{"type":8512,"url":10975},[10977,10978,10979,10980],{"id":491,"slug":17790,"dossier":47,"summary":17791,"aliases":17792,"sourceIds":17794,"published":17795,"modified":17796,"checkedAt":7,"severity":17797,"references":17799,"versionKeys":17811,"packageCount":32,"repositoryCount":831},"ghsa-rgw5-rvv9-x895-7800c7f2","brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",[17793],"CVE-2026-69152",[491],"2026-08-03T16:35:32Z","2026-09-10T03:51:14.535270857Z",[17798],{"type":8547,"score":8583},[17800,17802,17804,17805,17807,17809,17810],{"type":8512,"url":17801},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-rgw5-rvv9-x895",{"type":8515,"url":17803},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69152",{"type":8512,"url":16330},{"type":8512,"url":17806},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F1e30c930238d7162802d88a94189182def178dac",{"type":8512,"url":17808},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F688a99eeaab02627c2b89ba8ba4821fecfa659cf",{"type":8512,"url":16334},{"type":8520,"url":9689},[9699,11858,9700,11859],{"id":492,"slug":17813,"dossier":47,"summary":17814,"aliases":17815,"sourceIds":17817,"published":17818,"modified":17819,"checkedAt":7,"severity":17820,"references":17822,"versionKeys":17830,"packageCount":32,"repositoryCount":32},"ghsa-rmxm-3fg6-px4f-eb1ad711","@hono\u002Fnode-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths",[17816],"CVE-2026-118663",[492],"2026-10-28T21:05:00Z","2026-10-28T21:15:04.153052864Z",[17821],{"type":8547,"score":10444},[17823,17825,17827,17828],{"type":8512,"url":17824},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fsecurity\u002Fadvisories\u002FGHSA-rmxm-3fg6-px4f",{"type":8512,"url":17826},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fcommit\u002F982179278529d5673812116b042829f27794966f",{"type":8520,"url":15795},{"type":8512,"url":17829},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Freleases\u002Ftag\u002Fv2.1.3",[15801],{"id":493,"slug":17832,"dossier":47,"summary":17833,"aliases":17834,"sourceIds":17837,"published":17838,"modified":17839,"checkedAt":7,"severity":17840,"references":17842,"versionKeys":17850,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[17835,17836],"CVE-2026-42215","PYSEC-2026-2160",[493,17836],"2026-04-25T23:42:16Z","2026-09-10T03:51:03.167884784Z",[17841],{"type":8547,"score":8915},[17843,17845,17847,17848],{"type":8553,"url":17844},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":8515,"url":17846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":8520,"url":8562},{"type":8638,"url":17849},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[8570,8571,8572],{"id":494,"slug":17852,"dossier":47,"summary":17853,"aliases":17854,"sourceIds":17856,"published":17857,"modified":17858,"checkedAt":7,"severity":17859,"references":17861,"versionKeys":17879,"packageCount":32,"repositoryCount":831},"ghsa-rq7h-c2jc-7f22-e139dfcc","Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",[17855],"CVE-2026-112946",[494],"2026-10-21T16:47:42Z","2026-10-21T17:00:06.336868869Z",[17860],{"type":8508,"score":10184},[17862,17864,17866,17868,17870,17872,17874,17876,17878],{"type":8512,"url":17863},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-rq7h-c2jc-7f22",{"type":8515,"url":17865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112946",{"type":8512,"url":17867},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F23656",{"type":8512,"url":17869},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F170b92791421bcd484f7325936d989a82d6bd4aa",{"type":8512,"url":17871},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F45c0e3392a298626955a0ab93a8e51232daac721",{"type":8512,"url":17873},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fc3e06f92e969952466b4e2f5801e85e1e00cd905",{"type":8512,"url":17875},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fe570d8d016096b5f8f6f09808376ca6cf73f27d0",{"type":8512,"url":17877},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff0d76c7da13d5e794807b82f0b86c1931a8438e3",{"type":8520,"url":10612},[10620,10621,10622],{"id":495,"slug":17881,"dossier":47,"summary":17882,"aliases":17883,"sourceIds":17886,"published":17887,"modified":17888,"checkedAt":7,"severity":17889,"references":17891,"versionKeys":17909,"packageCount":32,"repositoryCount":34},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[17884,17885],"CVE-2026-67322","PYSEC-2026-3842",[495,17885],"2026-07-21T22:06:09Z","2026-09-24T18:28:17.149390188Z",[17890],{"type":8547,"score":11791},[17892,17894,17896,17898,17899,17901,17902,17904,17906,17907],{"type":8512,"url":17893},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":8515,"url":17895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67322",{"type":8512,"url":17897},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":8512,"url":13111},{"type":8515,"url":17900},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":8520,"url":8562},{"type":8512,"url":17903},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",{"type":8512,"url":17905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3842.yaml",{"type":8520,"url":8931},{"type":8512,"url":17908},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-clone-from",[8570,8571,8572],{"id":496,"slug":17911,"dossier":47,"summary":17912,"aliases":17913,"sourceIds":17915,"published":17916,"modified":17917,"checkedAt":7,"severity":17918,"references":17920,"versionKeys":17934,"packageCount":32,"repositoryCount":782},"ghsa-rwrf-2pqf-9j8j-e3036e5e","Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas",[17914],"CVE-2026-116686",[496],"2026-10-27T21:05:29Z","2026-10-27T21:15:03.830660129Z",[17919],{"type":8547,"score":8666},[17921,17923,17925,17927,17929,17931,17932,17933],{"type":8512,"url":17922},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rwrf-2pqf-9j8j",{"type":8512,"url":17924},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3394",{"type":8512,"url":17926},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3396",{"type":8512,"url":17928},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F5ebdfed4060d8e5b11b8e2348f86bad4d1fb8836",{"type":8512,"url":17930},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F6705402e246dc4eb1fcdf4d9902b78d3c9c36e1b",{"type":8520,"url":11143},{"type":8512,"url":11145},{"type":8512,"url":11147},[11149,11150,11151,11152],{"id":497,"slug":17936,"dossier":47,"summary":17937,"aliases":17938,"sourceIds":17940,"published":17941,"modified":17942,"checkedAt":7,"severity":17943,"references":17945,"versionKeys":17958,"packageCount":32,"repositoryCount":32},"ghsa-rx4f-c7p8-82vq-f334add1","undici vulnerable to Denial of Service via WebSocketStream unclean close",[17939],"CVE-2026-85014",[497],"2026-09-29T18:10:32Z","2026-09-29T18:15:04.711653428Z",[17944],{"type":8547,"score":8850},[17946,17948,17950,17952,17954,17955,17956,17957],{"type":8512,"url":17947},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-rx4f-c7p8-82vq",{"type":8515,"url":17949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85014",{"type":8512,"url":17951},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1858656ebb1e919311c1f31613dfd581b7214349",{"type":8512,"url":17953},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F662d0ea671fe64139e79533c913fce412765e1d7",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9072},{"type":8512,"url":9074},[9076,9077],{"id":498,"slug":17960,"dossier":47,"summary":17961,"aliases":17962,"sourceIds":17964,"published":17965,"modified":17966,"checkedAt":7,"severity":17967,"references":17969,"versionKeys":17980,"packageCount":32,"repositoryCount":32},"ghsa-rxp7-6hxx-x8q5-afd81b2a","ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process",[17963],"CVE-2026-111997",[498],"2026-10-22T16:19:39Z","2026-10-22T16:30:30.129356757Z",[17968],{"type":8508,"score":8690},[17970,17972,17974,17976,17978],{"type":8512,"url":17971},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Fsecurity\u002Fadvisories\u002FGHSA-rxp7-6hxx-x8q5",{"type":8515,"url":17973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111997",{"type":8512,"url":17975},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Fcommit\u002Fec80fcd5d7b97defecfd39717d782a9f9f8b89dd",{"type":8520,"url":17977},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address",{"type":8512,"url":17979},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Freleases\u002Ftag\u002Fv10.7.4",[17981],"npm:ip-address@10.7.2",{"id":499,"slug":17983,"dossier":47,"summary":17984,"aliases":17985,"sourceIds":17987,"published":17988,"modified":17989,"checkedAt":7,"severity":17990,"references":17992,"versionKeys":18008,"packageCount":32,"repositoryCount":32},"ghsa-v3r7-h72x-cjcm-ff28b499","undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields",[17986],"CVE-2026-16729",[499],"2026-08-03T19:30:52Z","2026-09-10T03:51:14.535204629Z",[17991],{"type":8547,"score":9711},[17993,17995,17997,17999,18001,18003,18004,18005,18006,18007],{"type":8512,"url":17994},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-v3r7-h72x-cjcm",{"type":8515,"url":17996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-16729",{"type":8512,"url":17998},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F10d93fc332f2c8c161982dec3833201de29891b5",{"type":8512,"url":18000},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F3bf91ddb493e853957f3a58e155326a668ab8aef",{"type":8512,"url":18002},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Faf7484043ee075a6f216da0ad77e1dac55199235",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":13069},{"type":8512,"url":10261},{"type":8512,"url":10263},[9076,9077],{"id":500,"slug":18010,"dossier":47,"summary":18011,"aliases":18012,"sourceIds":18014,"published":18015,"modified":18016,"checkedAt":7,"severity":18017,"references":18019,"versionKeys":18038,"packageCount":32,"repositoryCount":32},"ghsa-v422-hmwv-36x6-3d8c5fa3","body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",[18013],"CVE-2026-12590",[500],"2026-07-20T23:23:26Z","2026-09-10T03:50:53.014509971Z",[18018],{"type":8547,"score":12048},[18020,18022,18024,18026,18028,18030,18032,18033,18034,18036],{"type":8512,"url":18021},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fsecurity\u002Fadvisories\u002FGHSA-v422-hmwv-36x6",{"type":8515,"url":18023},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12590",{"type":8512,"url":18025},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fpull\u002F698",{"type":8512,"url":18027},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fpull\u002F741",{"type":8512,"url":18029},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F2322e111cc321413ec2b7b76d01be533d3de9d7d",{"type":8512,"url":18031},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F3492672eee593d5c158f239b6e9115498a5dbeac",{"type":8512,"url":8767},{"type":8520,"url":8769},{"type":8512,"url":18035},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002F1.20.6",{"type":8512,"url":18037},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002Fv2.3.0",[8775,8776],{"id":501,"slug":18040,"dossier":47,"summary":18041,"aliases":18042,"sourceIds":18044,"published":18045,"modified":18046,"checkedAt":7,"severity":18047,"references":18049,"versionKeys":18058,"packageCount":32,"repositoryCount":745},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[18043],"CVE-2026-112940",[501],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[18048],{"type":8547,"score":12222},[18050,18052,18054,18055,18056,18057],{"type":8512,"url":18051},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":8515,"url":18053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":8512,"url":13672},{"type":8512,"url":13674},{"type":8520,"url":10973},{"type":8512,"url":10975},[10977,10978,10979,10980],{"id":502,"slug":18060,"dossier":47,"summary":18061,"aliases":18062,"sourceIds":18064,"published":18065,"modified":18066,"checkedAt":7,"severity":18067,"references":18070,"versionKeys":18074,"packageCount":32,"repositoryCount":831},"ghsa-v6wh-96g9-6wx3-0e881d08","launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows",[18063],"CVE-2026-53632",[502],"2026-06-15T17:18:31Z","2026-09-10T03:50:50.705036566Z",[18068],{"type":8508,"score":18069},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:H",[18071,18073],{"type":8512,"url":18072},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-v6wh-96g9-6wx3",{"type":8520,"url":11000},[10620,10621,10622],{"id":503,"slug":18076,"dossier":47,"summary":18077,"aliases":18078,"sourceIds":18081,"published":18082,"modified":18083,"checkedAt":7,"severity":18084,"references":18086,"versionKeys":18094,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[18079,18080],"CVE-2026-44244","PYSEC-2026-2163",[503,18080],"2026-05-06T21:58:00Z","2026-09-10T03:50:47.691444343Z",[18085],{"type":8547,"score":12304},[18087,18089,18091,18092],{"type":8553,"url":18088},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":8515,"url":18090},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":8520,"url":8562},{"type":8638,"url":18093},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[8570,8571,8572],{"id":504,"slug":18096,"dossier":47,"summary":18097,"aliases":18098,"sourceIds":18101,"published":18102,"modified":18103,"checkedAt":7,"severity":18104,"references":18108,"versionKeys":18120,"packageCount":32,"repositoryCount":745},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[18099,18100],"CVE-2026-41205","PYSEC-2026-88",[504,18100],"2026-04-16T21:16:40Z","2026-09-10T03:51:03.377000392Z",[18105,18106],{"type":8547,"score":11791},{"type":8508,"score":18107},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[18109,18111,18113,18115,18117,18118],{"type":8515,"url":18110},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":8515,"url":18112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":8512,"url":18114},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":8512,"url":18116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":8520,"url":9130},{"type":8512,"url":18119},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[9138,9139],{"id":505,"slug":18122,"dossier":47,"summary":18123,"aliases":18124,"sourceIds":18126,"published":18127,"modified":18128,"checkedAt":7,"severity":18129,"references":18131,"versionKeys":18144,"packageCount":32,"repositoryCount":32},"ghsa-v9p9-hfj2-hcw8-f7515df3","Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation",[18125],"CVE-2026-2229",[505],"2026-03-13T20:41:41Z","2026-09-10T03:50:41.228925580Z",[18130],{"type":8547,"score":8583},[18132,18134,18136,18138,18139,18141,18142],{"type":8512,"url":18133},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-v9p9-hfj2-hcw8",{"type":8515,"url":18135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2229",{"type":8512,"url":18137},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3487486",{"type":8512,"url":8767},{"type":8512,"url":18140},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc7692",{"type":8520,"url":9070},{"type":8512,"url":18143},"https:\u002F\u002Fnodejs.org\u002Fapi\u002Fzlib.html#class-zlibinflateraw",[9076,9077],{"id":506,"slug":18146,"dossier":47,"summary":18147,"aliases":18148,"sourceIds":18151,"published":18152,"modified":18153,"checkedAt":7,"severity":18154,"references":18156,"versionKeys":18165,"packageCount":32,"repositoryCount":726},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[18149,18150],"CVE-2026-53540","PYSEC-2026-3040",[506,18150],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[18155],{"type":8547,"score":12048},[18157,18159,18160,18161,18163],{"type":8512,"url":18158},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":8520,"url":11096},{"type":8520,"url":11098},{"type":8515,"url":18162},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":8515,"url":18164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[11226,11227,11228,11102],{"id":507,"slug":18167,"dossier":47,"summary":18168,"aliases":18169,"sourceIds":18173,"published":18174,"modified":18175,"checkedAt":7,"severity":18176,"references":18178,"versionKeys":18189,"packageCount":32,"repositoryCount":9378},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[18170,18171,18172],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[507,18172],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[18177],{"type":8547,"score":8789},[18179,18181,18183,18185,18187,18188],{"type":8515,"url":18180},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":8515,"url":18182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":9654,"url":18184},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":8638,"url":18186},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":8520,"url":8521},{"type":8515,"url":8523},[8527,8528,8529,8530,8531,8532,8533,8534],{"id":508,"slug":18191,"dossier":47,"summary":18192,"aliases":18193,"sourceIds":18195,"published":18196,"modified":18197,"checkedAt":7,"severity":18198,"references":18200,"versionKeys":18206,"packageCount":32,"repositoryCount":32},"ghsa-vf2m-468p-8v99-2cc482e8","Axios: HTTP adapter streamed responses bypass maxContentLength",[18194],"CVE-2026-42036",[508],"2026-05-05T00:26:57Z","2026-09-10T03:50:47.671121168Z",[18199],{"type":8547,"score":8882},[18201,18203,18205],{"type":8512,"url":18202},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-vf2m-468p-8v99",{"type":8515,"url":18204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42036",{"type":8520,"url":9450},[9452,9453],{"id":509,"slug":18208,"dossier":47,"summary":18209,"aliases":18210,"sourceIds":18213,"published":18214,"modified":18215,"checkedAt":7,"severity":18216,"references":18218,"versionKeys":18229,"packageCount":32,"repositoryCount":726},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[18211,18212],"CVE-2026-53537","PYSEC-2026-3041",[509,18212],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[18217],{"type":8547,"score":9058},[18219,18221,18223,18224,18226,18228],{"type":8512,"url":18220},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":8515,"url":18222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":8520,"url":11096},{"type":8515,"url":18225},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":8512,"url":18227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":8520,"url":11098},[11226,11227,11228,11102],{"id":510,"slug":18231,"dossier":47,"summary":18232,"aliases":18233,"sourceIds":18235,"published":18236,"modified":18237,"checkedAt":7,"severity":18238,"references":18240,"versionKeys":18249,"packageCount":32,"repositoryCount":32},"ghsa-vh66-26gq-q6x8-7005b54d","Axios: Prototype pollution gadget in fetch adapter can alter outbound requests",[18234],"CVE-2026-101908",[510],"2026-09-30T15:13:16Z","2026-09-30T15:30:04.438497820Z",[18239],{"type":8508,"score":10398},[18241,18243,18245,18246,18247,18248],{"type":8512,"url":18242},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-vh66-26gq-q6x8",{"type":8515,"url":18244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101908",{"type":8512,"url":9773},{"type":8512,"url":9775},{"type":8520,"url":9450},{"type":8512,"url":9778},[9452,9453],{"id":511,"slug":18251,"dossier":47,"summary":18252,"aliases":18253,"sourceIds":18256,"published":18257,"modified":18258,"checkedAt":7,"severity":18259,"references":18261,"versionKeys":18276,"packageCount":32,"repositoryCount":831},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[18254,18255],"CVE-2026-59950","PYSEC-2026-3483",[511,18255],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[18260],{"type":8508,"score":12794},[18262,18264,18266,18268,18270,18271,18273,18274],{"type":8512,"url":18263},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":8515,"url":18265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":8512,"url":18267},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":8512,"url":18269},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":8520,"url":11143},{"type":8512,"url":18272},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":8520,"url":13374},{"type":8515,"url":18275},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[11149,11150,11151],{"id":512,"slug":18278,"dossier":47,"summary":18279,"aliases":18280,"sourceIds":18284,"published":18285,"modified":18286,"checkedAt":7,"severity":18287,"references":18289,"versionKeys":18303,"packageCount":32,"repositoryCount":10106},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[18281,18282,18283],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[512,18283],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[18288],{"type":8508,"score":9015},[18290,18292,18294,18296,18298,18299,18300,18301],{"type":8512,"url":18291},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":8515,"url":18293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":8512,"url":18295},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":8512,"url":18297},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":8520,"url":8521},{"type":8512,"url":11467},{"type":8520,"url":11469},{"type":8515,"url":18302},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":513,"slug":18305,"dossier":47,"summary":18306,"aliases":18307,"sourceIds":18310,"published":18311,"modified":18312,"checkedAt":7,"severity":18313,"references":18315,"versionKeys":18330,"packageCount":32,"repositoryCount":831},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[18308,18309],"CVE-2025-43859","PYSEC-2026-348",[513,18309],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[18314],{"type":8547,"score":14369},[18316,18318,18320,18322,18324,18326,18328],{"type":8512,"url":18317},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":8515,"url":18319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":8512,"url":18321},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":8512,"url":18323},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":8520,"url":18325},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":8520,"url":18327},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":8515,"url":18329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[18331],"pypi:h11@0.14.0",{"id":514,"slug":18333,"dossier":47,"summary":18334,"aliases":18335,"sourceIds":18337,"published":18338,"modified":18339,"checkedAt":7,"severity":18340,"references":18342,"versionKeys":18354,"packageCount":32,"repositoryCount":32},"ghsa-vrm6-8vpv-qv8q-6d6340eb","Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression",[18336],"CVE-2026-1526",[514],"2026-03-13T20:41:56Z","2026-09-10T03:50:41.264792574Z",[18341],{"type":8547,"score":8583},[18343,18345,18347,18349,18350,18351,18352],{"type":8512,"url":18344},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-vrm6-8vpv-qv8q",{"type":8515,"url":18346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1526",{"type":8512,"url":18348},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3481206",{"type":8512,"url":8767},{"type":8512,"url":18140},{"type":8520,"url":9070},{"type":8512,"url":18353},"https:\u002F\u002Fowasp.org\u002Fwww-community\u002Fattacks\u002FDenial_of_Service",[9076,9077],{"id":515,"slug":18356,"dossier":47,"summary":18357,"aliases":18358,"sourceIds":18360,"published":18361,"modified":18362,"checkedAt":7,"severity":18363,"references":18365,"versionKeys":18372,"packageCount":32,"repositoryCount":8535},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[18359],"CVE-2026-112899",[515],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[18364],{"type":8508,"score":11431},[18366,18368,18370,18371],{"type":8512,"url":18367},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":8512,"url":18369},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":516,"slug":18374,"dossier":47,"summary":18375,"aliases":18376,"sourceIds":18379,"published":18380,"modified":18381,"checkedAt":7,"severity":18382,"references":18384,"versionKeys":18394,"packageCount":32,"repositoryCount":698},"ghsa-vxj4-q4g9-crj7-3e25d39d","virtualenv bash activate runs commands from an environment name with a backslash before $",[18377,18378],"BIT-virtualenv-2026-113725","CVE-2026-113725",[516],"2026-10-21T16:49:01Z","2026-10-29T10:55:53.696944055Z",[18383],{"type":8547,"score":11240},[18385,18387,18389,18391,18392],{"type":8512,"url":18386},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-vxj4-q4g9-crj7",{"type":8515,"url":18388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113725",{"type":8512,"url":18390},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fc3104e02474b652832a9bbaae79f6e1696296932",{"type":8520,"url":9558},{"type":8512,"url":18393},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.7",[9562,9563,9564,9565,9566],{"id":517,"slug":18396,"dossier":47,"summary":18397,"aliases":18398,"sourceIds":18400,"published":18401,"modified":18402,"checkedAt":7,"severity":18403,"references":18405,"versionKeys":18433,"packageCount":32,"repositoryCount":32},"ghsa-vxpw-j846-p89q-aec4e427","undici WebSocket client vulnerable to denial of service via fragment count bypass",[18399],"CVE-2026-12151",[517],"2026-06-19T14:22:01Z","2026-11-04T03:45:10.197249081Z",[18404],{"type":8547,"score":8583},[18406,18408,18410,18412,18413,18415,18417,18418,18420,18422,18424,18426,18428,18430,18431,18432],{"type":8512,"url":18407},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-vxpw-j846-p89q",{"type":8515,"url":18409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12151",{"type":8512,"url":18411},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F32dbf0b3dd93daf6d87badf506d52e89f2e20e78",{"type":8512,"url":17708},{"type":8512,"url":18414},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:56431",{"type":8512,"url":18416},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:57013",{"type":8512,"url":12773},{"type":8512,"url":18419},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:62260",{"type":8512,"url":18421},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:65126",{"type":8512,"url":18423},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:66488",{"type":8512,"url":18425},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:66545",{"type":8512,"url":18427},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12151",{"type":8512,"url":18429},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489980",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9476},[9076,9077],{"id":518,"slug":18435,"dossier":91,"summary":18436,"aliases":18437,"sourceIds":18440,"published":18441,"modified":18442,"checkedAt":7,"severity":18443,"references":18445,"versionKeys":18457,"packageCount":32,"repositoryCount":638},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[18438,18439],"CVE-2026-97689","PYSEC-2026-4177",[518,18439],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[18444],{"type":8508,"score":9354},[18446,18448,18450,18452,18453,18454,18455],{"type":8512,"url":18447},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":8515,"url":18449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":8512,"url":18451},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":8520,"url":9369},{"type":8512,"url":12808},{"type":8520,"url":9371},{"type":8515,"url":18456},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[9373,9374,9375,9376,9377,12813,12814],{"id":519,"slug":18459,"dossier":47,"summary":18460,"aliases":18461,"sourceIds":18464,"published":18465,"modified":18466,"checkedAt":7,"severity":18467,"references":18469,"versionKeys":18481,"packageCount":32,"repositoryCount":32},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[18462,18463],"CVE-2026-102273","PYSEC-2026-4151",[519,18463],"2026-09-29T23:16:55Z","2026-10-01T17:56:17.439454528Z",[18468],{"type":8547,"score":9175},[18470,18472,18474,18476,18477,18478,18479],{"type":8512,"url":18471},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":8515,"url":18473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":8512,"url":18475},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":18480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",[9106],{"id":520,"slug":18483,"dossier":47,"summary":18484,"aliases":18485,"sourceIds":18488,"published":18489,"modified":18490,"checkedAt":7,"severity":18491,"references":18495,"versionKeys":18504,"packageCount":32,"repositoryCount":677},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[18486,18487],"CVE-2026-22815","PYSEC-2026-2094",[520,18487],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[18492,18493],{"type":8508,"score":11431},{"type":8508,"score":18494},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[18496,18498,18500,18502,18503],{"type":8638,"url":18497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":8515,"url":18499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":8638,"url":18501},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":8520,"url":8956},{"type":8515,"url":9315},[8960,8961,8962,8963,8964,8965,8966,8967],{"id":521,"slug":18506,"dossier":47,"summary":18507,"aliases":18508,"sourceIds":18510,"published":18511,"modified":18512,"checkedAt":7,"severity":18513,"references":18516,"versionKeys":18530,"packageCount":32,"repositoryCount":782},"ghsa-w4fh-qvv9-3v23-5d99e159","Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server",[18509],"CVE-2026-116684",[521],"2026-10-27T21:06:59Z","2026-10-27T21:15:03.825987077Z",[18514],{"type":8547,"score":18515},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[18517,18519,18521,18523,18525,18527,18528,18529],{"type":8512,"url":18518},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-w4fh-qvv9-3v23",{"type":8512,"url":18520},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3447",{"type":8512,"url":18522},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3451",{"type":8512,"url":18524},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F0c9136841ff092987a20700ff9c2c9789bda2f40",{"type":8512,"url":18526},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F8c2fa6eabacde869d75568e33b9d466b58c2f512",{"type":8520,"url":11143},{"type":8512,"url":11145},{"type":8512,"url":11147},[11149,11150,11151,11152],{"id":522,"slug":18532,"dossier":47,"summary":18533,"aliases":18534,"sourceIds":18537,"published":18538,"modified":18539,"checkedAt":7,"severity":18540,"references":18542,"versionKeys":18554,"packageCount":32,"repositoryCount":782},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[18535,18536],"CVE-2026-102274","PYSEC-2026-4152",[522,18536],"2026-09-29T18:23:01Z","2026-10-01T17:55:45.889604470Z",[18541],{"type":8547,"score":8850},[18543,18545,18547,18549,18550,18551,18552],{"type":8512,"url":18544},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":8515,"url":18546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":8512,"url":18548},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":8520,"url":9097},{"type":8512,"url":9099},{"type":8520,"url":9101},{"type":8515,"url":18553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",[9105,9106,9107],{"id":523,"slug":18556,"dossier":47,"summary":18557,"aliases":18558,"sourceIds":18560,"published":18561,"modified":18562,"checkedAt":7,"severity":18563,"references":18565,"versionKeys":18581,"packageCount":32,"repositoryCount":32},"ghsa-w74x-v6f9-j3xg-294b9b29","fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding",[18559],"CVE-2026-110306",[523],"2026-10-23T21:41:36Z","2026-10-23T21:45:04.896137439Z",[18564],{"type":8547,"score":15414},[18566,18568,18570,18572,18574,18576,18577,18578,18579,18580],{"type":8512,"url":18567},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-w74x-v6f9-j3xg",{"type":8515,"url":18569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110306",{"type":8512,"url":18571},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F39933a1f1422986f14e2d844f552238feb40f5d4",{"type":8512,"url":18573},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F597f254c86d151568511eeb9a1df761fd12520b3",{"type":8512,"url":18575},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fe60e716f41d1d73717e2d803d20b68d2c6d20a0f",{"type":8512,"url":8767},{"type":8520,"url":9422},{"type":8512,"url":9424},{"type":8512,"url":9426},{"type":8512,"url":9428},[9430],{"id":524,"slug":18583,"dossier":47,"summary":18584,"aliases":18585,"sourceIds":18587,"published":18588,"modified":18589,"checkedAt":7,"severity":18590,"references":18592,"versionKeys":18600,"packageCount":32,"repositoryCount":32},"ghsa-w7fw-mjwx-w883-ad60beb3","qs's arrayLimit bypass in comma parsing allows denial of service",[18586],"CVE-2026-2391",[524],"2026-02-12T17:04:39Z","2026-09-10T03:50:35.973235487Z",[18591],{"type":8547,"score":12048},[18593,18595,18597,18599],{"type":8512,"url":18594},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-w7fw-mjwx-w883",{"type":8515,"url":18596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2391",{"type":8512,"url":18598},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Ff6a7abff1f13d644db9b05fe4f2c98ada6bf8482",{"type":8520,"url":10490},[10492,10493],{"id":525,"slug":18602,"dossier":47,"summary":18603,"aliases":18604,"sourceIds":18607,"published":18608,"modified":18609,"checkedAt":7,"severity":18610,"references":18612,"versionKeys":18620,"packageCount":32,"repositoryCount":831},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[18605,18606],"CVE-2026-48525","PYSEC-2026-178",[525,18606],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[18611],{"type":8547,"score":8882},[18613,18615,18617,18618],{"type":8553,"url":18614},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":8515,"url":18616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":8520,"url":9097},{"type":8512,"url":18619},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[9105,9107],{"id":526,"slug":18622,"dossier":47,"summary":18623,"aliases":18624,"sourceIds":18627,"published":18628,"modified":18629,"checkedAt":7,"severity":18630,"references":18633,"versionKeys":18650,"packageCount":32,"repositoryCount":17371},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[18625,18626],"CVE-2025-68146","PYSEC-2026-1375",[526,18626],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[18631],{"type":8547,"score":18632},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[18634,18636,18638,18639,18641,18643,18645,18646,18648],{"type":8512,"url":18635},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":8512,"url":18637},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":8520,"url":10973},{"type":8512,"url":18640},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":8512,"url":18642},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":8512,"url":18644},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":8520,"url":17367},{"type":8515,"url":18647},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":8515,"url":18649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[11739,11740,11741,11742],{"id":527,"slug":18652,"dossier":47,"summary":18653,"aliases":18654,"sourceIds":18657,"published":18658,"modified":18659,"checkedAt":7,"severity":18660,"references":18662,"versionKeys":18671,"packageCount":32,"repositoryCount":8535},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[18655,18656],"BIT-pillow-2026-112900","CVE-2026-112900",[527],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[18661],{"type":8508,"score":13587},[18663,18665,18667,18669,18670],{"type":8512,"url":18664},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":8515,"url":18666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":8512,"url":18668},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":528,"slug":18673,"dossier":47,"summary":18674,"aliases":18675,"sourceIds":18677,"published":18678,"modified":18679,"checkedAt":7,"severity":18680,"references":18682,"versionKeys":18691,"packageCount":32,"repositoryCount":34},"ghsa-w8jc-g24h-crhw-5553514f","GitPython command wrappers omit unsafe protocol and option checks",[18676],"CVE-2026-110857",[528],"2026-10-27T15:26:43Z","2026-10-27T15:47:24.947223105Z",[18681],{"type":8547,"score":12640},[18683,18685,18687,18689,18690],{"type":8512,"url":18684},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-w8jc-g24h-crhw",{"type":8512,"url":18686},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2251",{"type":8512,"url":18688},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9ad28cc4c7176d22cd6181d69805058a719dd03b",{"type":8520,"url":8562},{"type":8512,"url":8618},[8570,8571,8572],{"id":529,"slug":18693,"dossier":47,"summary":18694,"aliases":18695,"sourceIds":18697,"published":18698,"modified":18699,"checkedAt":7,"severity":18700,"references":18702,"versionKeys":18708,"packageCount":32,"repositoryCount":32},"ghsa-w9j2-pvgh-6h63-6eec34b1","Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy",[18696],"CVE-2026-42041",[529],"2026-05-05T00:21:39Z","2026-09-10T03:50:47.772907977Z",[18701],{"type":8547,"score":9711},[18703,18705,18707],{"type":8512,"url":18704},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-w9j2-pvgh-6h63",{"type":8515,"url":18706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42041",{"type":8520,"url":9450},[9452,9453],{"id":530,"slug":18710,"dossier":47,"summary":18711,"aliases":18712,"sourceIds":18716,"published":18717,"modified":18718,"checkedAt":7,"severity":18719,"references":18722,"versionKeys":18760,"packageCount":32,"repositoryCount":9378},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[18713,18714,18715],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[530,18715],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[18720,18721],{"type":8547,"score":8583},{"type":8508,"score":9015},[18723,18725,18727,18729,18731,18732,18734,18736,18738,18740,18742,18744,18745,18747,18749,18751,18752,18754,18756,18758],{"type":8512,"url":18724},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":8515,"url":18726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":8512,"url":18728},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":8512,"url":18730},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":8520,"url":8521},{"type":8512,"url":18733},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":8512,"url":18735},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":8512,"url":18737},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":8515,"url":18739},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":8515,"url":18741},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":8515,"url":18743},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":8515,"url":13963},{"type":8515,"url":18746},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":8515,"url":18748},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":8515,"url":18750},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":8515,"url":13965},{"type":8515,"url":18753},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":8515,"url":18755},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":8515,"url":18757},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":8515,"url":18759},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[8525,8526,8527,8528,8529,8530,8531,8532],{"id":531,"slug":18762,"dossier":47,"summary":18763,"aliases":18764,"sourceIds":18766,"published":18767,"modified":18768,"checkedAt":7,"severity":18769,"references":18771,"versionKeys":18787,"packageCount":32,"repositoryCount":32},"ghsa-wjr9-j795-jxcr-36e44760","fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization",[18765],"CVE-2026-110180",[531],"2026-10-23T21:37:59Z","2026-10-23T21:45:04.892054666Z",[18770],{"type":8547,"score":9711},[18772,18774,18776,18778,18780,18782,18783,18784,18785,18786],{"type":8512,"url":18773},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-wjr9-j795-jxcr",{"type":8515,"url":18775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110180",{"type":8512,"url":18777},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F58c183d0b168ad87f98773266444ce1f6375803a",{"type":8512,"url":18779},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fddfc6a51122dfce0365655f04479fc3adb7f6b3c",{"type":8512,"url":18781},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Ff6d46dfeab025d0c440485f4ae29fa4f14707646",{"type":8512,"url":8767},{"type":8520,"url":9422},{"type":8512,"url":9424},{"type":8512,"url":9426},{"type":8512,"url":9428},[9430],{"id":532,"slug":18789,"dossier":47,"summary":18790,"aliases":18791,"sourceIds":18795,"published":18796,"modified":18797,"checkedAt":7,"severity":18798,"references":18801,"versionKeys":18810,"packageCount":32,"repositoryCount":9378},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[18792,18793,18794],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[532,18794],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[18799,18800],{"type":8547,"score":11379},{"type":8508,"score":11381},[18802,18804,18806,18808,18809],{"type":8515,"url":18803},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":8515,"url":18805},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":8512,"url":18807},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":8520,"url":8521},{"type":8515,"url":11395},[8525,8526,8527,8528,8529,8530,8531,8532],{"id":533,"slug":18812,"dossier":47,"summary":18813,"aliases":18814,"sourceIds":18817,"published":18818,"modified":18819,"checkedAt":7,"severity":18820,"references":18823,"versionKeys":18836,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[18815,18816],"CVE-2026-24486","PYSEC-2026-1852",[533,18816],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[18821],{"type":8547,"score":18822},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[18824,18826,18828,18830,18831,18833,18834],{"type":8512,"url":18825},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":8515,"url":18827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":8512,"url":18829},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":8520,"url":11096},{"type":8512,"url":18832},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":8520,"url":11098},{"type":8515,"url":18835},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[11226,11227,11102],{"id":534,"slug":18838,"dossier":47,"summary":18839,"aliases":18840,"sourceIds":18842,"published":18843,"modified":18844,"checkedAt":7,"severity":18845,"references":18847,"versionKeys":18855,"packageCount":32,"repositoryCount":32},"ghsa-wp97-x4hv-qvhp-4b75019d","Seroval `fromJSON`\u002F`fromCrossJSON` denial of service via unvalidated array node length",[18841],"CVE-2026-116584",[534],"2026-10-28T21:17:20Z","2026-10-28T21:30:05.906685921Z",[18846],{"type":8547,"score":8583},[18848,18850,18852,18853,18854],{"type":8512,"url":18849},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-wp97-x4hv-qvhp",{"type":8515,"url":18851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116584",{"type":8512,"url":13239},{"type":8520,"url":12558},{"type":8512,"url":12560},[12562],{"id":535,"slug":18857,"dossier":47,"summary":18858,"aliases":18859,"sourceIds":18861,"published":18862,"modified":18863,"checkedAt":7,"severity":18864,"references":18865,"versionKeys":18874,"packageCount":32,"repositoryCount":8535},"ghsa-wqgw-9xfh-qf2g-351c6680","Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data",[18860],"CVE-2026-128066",[535],"2026-11-12T23:35:39Z","2026-11-12T23:45:03.298534910Z",[],[18866,18868,18870,18872,18873],{"type":8512,"url":18867},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wqgw-9xfh-qf2g",{"type":8512,"url":18869},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4908edaf7f416616784c7c03d8c1a60153710ffb",{"type":8512,"url":18871},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4b63dffd8a6d980fa0e21b40832fa6cbf033eacf",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":536,"slug":18876,"dossier":47,"summary":18877,"aliases":18878,"sourceIds":18881,"published":18882,"modified":18883,"checkedAt":7,"severity":18884,"references":18886,"versionKeys":18908,"packageCount":32,"repositoryCount":677},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[18879,18880],"CVE-2026-48818","PYSEC-2026-2281",[536,18880],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[18885],{"type":8547,"score":11791},[18887,18889,18890,18892,18894,18896,18898,18900,18902,18904,18906],{"type":8515,"url":18888},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":8520,"url":12395},{"type":8512,"url":18891},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":8512,"url":18893},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":8515,"url":18895},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":8515,"url":18897},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":8515,"url":18899},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":8515,"url":18901},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":9654,"url":18903},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":8638,"url":18905},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":8638,"url":18907},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[8901,8902,8903,12402,12403,12404,12606,12607,12608],{"id":537,"slug":18910,"dossier":47,"summary":18911,"aliases":18912,"sourceIds":18915,"published":18916,"modified":18917,"checkedAt":7,"severity":18918,"references":18920,"versionKeys":18935,"packageCount":32,"repositoryCount":34},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[18913,18914],"CVE-2026-76220","PYSEC-2026-3843",[537,18914],"2026-08-07T15:49:07Z","2026-09-10T12:26:01.792035310Z",[18919],{"type":8547,"score":8915},[18921,18923,18925,18926,18928,18929,18930,18932,18933],{"type":8512,"url":18922},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":8515,"url":18924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76220",{"type":8512,"url":10327},{"type":8512,"url":18927},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":8520,"url":8562},{"type":8512,"url":10332},{"type":8512,"url":18931},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-execution-via-split-single-char-options",{"type":8520,"url":8931},{"type":8515,"url":18934},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",[8570,8571,8572],{"id":538,"slug":18937,"dossier":47,"summary":18938,"aliases":18939,"sourceIds":18942,"published":18943,"modified":18944,"checkedAt":7,"severity":18945,"references":18948,"versionKeys":18957,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[18940,18941],"CVE-2026-42284","PYSEC-2026-2161",[538,18941],"2026-04-25T23:41:49Z","2026-09-10T03:51:03.787491179Z",[18946,18947],{"type":8547,"score":12330},{"type":8547,"score":8789},[18949,18951,18953,18954,18955],{"type":8553,"url":18950},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":8515,"url":18952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":8520,"url":8562},{"type":8638,"url":17849},{"type":8512,"url":18956},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[8570,8571,8572],{"id":539,"slug":18959,"dossier":47,"summary":18960,"aliases":18961,"sourceIds":18964,"published":18965,"modified":18966,"checkedAt":7,"severity":18967,"references":18971,"versionKeys":18980,"packageCount":32,"repositoryCount":782},"ghsa-x33g-cr3x-6449-e42d7ec6","PyJWT accepts inconsistent OKP x\u002Fd JWKs, causing public\u002Fprivate key identity confusion",[18962,18963],"CVE-2026-102275","PYSEC-2026-4183",[539,18963],"2026-09-28T21:17:15.857Z","2026-10-07T10:11:04.862065390Z",[18968,18969],{"type":8547,"score":9841},{"type":8547,"score":18970},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[18972,18974,18976,18978,18979],{"type":8553,"url":18973},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-x33g-cr3x-6449",{"type":8515,"url":18975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102275",{"type":8638,"url":18977},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F3cd9ceec33ced359decbad75b413ad668ae6332c",{"type":8520,"url":9097},{"type":8515,"url":9979},[9105,9106,9107],{"id":540,"slug":18982,"dossier":47,"summary":18983,"aliases":18984,"sourceIds":18987,"published":18988,"modified":18989,"checkedAt":7,"severity":18990,"references":18992,"versionKeys":18999,"packageCount":32,"repositoryCount":677},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[18985,18986],"CVE-2026-48817","PYSEC-2026-2280",[540,18986],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[18991],{"type":8547,"score":9305},[18993,18995,18997,18998],{"type":8515,"url":18994},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":8515,"url":18996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":8520,"url":12395},{"type":8515,"url":18901},[8901,8902,8903,12402,12403,12404,12606,12607,12608],{"id":541,"slug":19001,"dossier":47,"summary":19002,"aliases":19003,"sourceIds":19007,"published":13128,"modified":19008,"checkedAt":7,"severity":19009,"references":19012,"versionKeys":19026,"packageCount":32,"repositoryCount":698},"ghsa-x78j-v8h9-3j2q-0741325d","virtualenv: Command injection via --prompt in activate.bat (batch activator)",[19004,19005,19006],"BIT-virtualenv-2026-102937","CVE-2026-102937","PYSEC-2026-4014",[541,19006],"2026-10-06T15:26:00.196757436Z",[19010],{"type":8508,"score":19011},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[19013,19015,19017,19019,19021,19023,19024,19025],{"type":8512,"url":19014},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":8515,"url":19016},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102937",{"type":8512,"url":19018},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":8638,"url":19020},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":8512,"url":19022},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4014.yaml",{"type":8520,"url":9558},{"type":8512,"url":13146},{"type":8520,"url":11050},[9562,9563,9564,9565,9566],{"id":542,"slug":19028,"dossier":47,"summary":19029,"aliases":19030,"sourceIds":19033,"published":19034,"modified":19035,"checkedAt":7,"severity":19036,"references":19039,"versionKeys":19045,"packageCount":32,"repositoryCount":66},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[19031,19032],"CVE-2026-54274","PYSEC-2026-2108",[542,19032],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[19037,19038],{"type":8508,"score":10301},{"type":8547,"score":8583},[19040,19042,19043],{"type":8515,"url":19041},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":8520,"url":8956},{"type":8638,"url":19044},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[8960,8961,8962,8963,8964,8965,8966,8967,8968],{"id":543,"slug":19047,"dossier":47,"summary":19048,"aliases":19049,"sourceIds":19051,"published":19052,"modified":19053,"checkedAt":7,"severity":19054,"references":19056,"versionKeys":19068,"packageCount":32,"repositoryCount":698},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[19050],"CVE-2026-114603",[543],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[19055],{"type":8547,"score":8882},[19057,19059,19061,19063,19064,19066],{"type":8512,"url":19058},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":8512,"url":19060},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":8512,"url":19062},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":8520,"url":16191},{"type":8512,"url":19065},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":8512,"url":19067},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[16195,16196,16197,16198,16199,16200,16201,16202],{"id":544,"slug":19070,"dossier":47,"summary":19071,"aliases":19072,"sourceIds":19074,"published":19075,"modified":19076,"checkedAt":7,"severity":19077,"references":19080,"versionKeys":19089,"packageCount":32,"repositoryCount":8535},"ghsa-xcvg-w56q-r89m-87c516ac","Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size",[19073],"CVE-2026-128067",[544],"2026-11-12T23:34:43Z","2026-11-12T23:45:03.322245161Z",[19078],{"type":8508,"score":19079},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[19081,19083,19085,19087,19088],{"type":8512,"url":19082},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xcvg-w56q-r89m",{"type":8512,"url":19084},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F53318b50e8e9e85a57d033d4d879e1398d97aeb1",{"type":8512,"url":19086},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fec5f1cbcf67275641abaad5c065ffb64a0a804a9",{"type":8520,"url":8521},{"type":8512,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":545,"slug":19091,"dossier":47,"summary":19092,"aliases":19093,"sourceIds":19097,"published":19098,"modified":19099,"checkedAt":7,"severity":19100,"references":19102,"versionKeys":19116,"packageCount":32,"repositoryCount":782},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[19094,19095,19096],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[545,19096],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[19101],{"type":8547,"score":12222},[19103,19105,19107,19109,19111,19113,19114],{"type":8515,"url":19104},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":8515,"url":19106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":8512,"url":19108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":8638,"url":19110},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":8512,"url":19112},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":8520,"url":8521},{"type":8512,"url":19115},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[8528],{"id":546,"slug":19118,"dossier":47,"summary":19119,"aliases":19120,"sourceIds":19124,"published":19125,"modified":19126,"checkedAt":7,"severity":19127,"references":19130,"versionKeys":19139,"packageCount":32,"repositoryCount":8535},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[19121,19122,19123],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[546,19123],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[19128,19129],{"type":8508,"score":11431},{"type":8547,"score":8583},[19131,19133,19135,19137,19138],{"type":8638,"url":19132},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":8515,"url":19134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":8638,"url":19136},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":547,"slug":19141,"dossier":47,"summary":19142,"aliases":19143,"sourceIds":19146,"published":19147,"modified":19148,"checkedAt":7,"severity":19149,"references":19151,"versionKeys":19159,"packageCount":32,"repositoryCount":831},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[19144,19145],"CVE-2026-48526","PYSEC-2026-179",[547,19145],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[19150],{"type":8547,"score":9175},[19152,19154,19156,19157],{"type":8553,"url":19153},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":8515,"url":19155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":8520,"url":9097},{"type":8512,"url":19158},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[9105,9107],{"id":548,"slug":19161,"dossier":47,"summary":19162,"aliases":19163,"sourceIds":19165,"published":19166,"modified":19167,"checkedAt":7,"severity":19168,"references":19170,"versionKeys":19176,"packageCount":32,"repositoryCount":32},"ghsa-xhjh-pmcv-23jw-575003a0","Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams",[19164],"CVE-2026-42040",[548],"2026-05-05T00:18:03Z","2026-09-10T03:50:48.032269033Z",[19169],{"type":8547,"score":9058},[19171,19173,19175],{"type":8512,"url":19172},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-xhjh-pmcv-23jw",{"type":8515,"url":19174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42040",{"type":8520,"url":9450},[9452,9453],{"id":549,"slug":19178,"dossier":47,"summary":19179,"aliases":19180,"sourceIds":19182,"published":19183,"modified":19184,"checkedAt":7,"severity":19185,"references":19187,"versionKeys":19209,"packageCount":32,"repositoryCount":32},"ghsa-xhq7-xmqj-769h-0a50f1d8","fast-uri vulnerable to improper path equivalence in relative reference normalization",[19181],"CVE-2026-110095",[549],"2026-10-23T21:39:34Z","2026-10-23T21:45:04.902389903Z",[19186],{"type":8547,"score":9058},[19188,19190,19192,19194,19196,19198,19200,19202,19204,19205,19206,19207,19208],{"type":8512,"url":19189},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-xhq7-xmqj-769h",{"type":8515,"url":19191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110095",{"type":8512,"url":19193},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F048bbd0a252971be86d6579f0dfc87f8de5b9c47",{"type":8512,"url":19195},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F52774a5c35df36b0bbe439cd4c12c3dc0e50e3b9",{"type":8512,"url":19197},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F7c19f8b97ec51f1f20b4e3d9d5820cb8d5176058",{"type":8512,"url":19199},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F9eb8759a9825c046f57f7f695f1944bc39b88abd",{"type":8512,"url":19201},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Facc5c5d60c4209571789496e1732468911c7e12a",{"type":8512,"url":19203},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fb110a3571c37dfcf9d1c72ce2e2e178c78d1a424",{"type":8512,"url":8767},{"type":8520,"url":9422},{"type":8512,"url":9424},{"type":8512,"url":9426},{"type":8512,"url":9428},[9430],{"id":550,"slug":19211,"dossier":47,"summary":19212,"aliases":19213,"sourceIds":19217,"published":19218,"modified":19219,"checkedAt":7,"severity":19220,"references":19223,"versionKeys":19234,"packageCount":32,"repositoryCount":10106},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[19214,19215,19216],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[550,19216],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[19221],{"type":8547,"score":19222},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[19224,19226,19228,19230,19232,19233],{"type":8553,"url":19225},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":8515,"url":19227},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":8638,"url":19229},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":8638,"url":19231},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":8520,"url":8521},{"type":8515,"url":11467},[8525,8526,8527,8528,8529,8530,8531,8532,8533],{"id":551,"slug":19236,"dossier":47,"summary":19237,"aliases":19238,"sourceIds":19240,"published":19241,"modified":19242,"checkedAt":7,"severity":19243,"references":19245,"versionKeys":19261,"packageCount":32,"repositoryCount":578},"ghsa-xjj6-f33q-929c-e46b746e","undici vulnerable to Denial of Service via unhandled error on excessive content-encodings",[19239],"CVE-2026-109869",[551],"2026-10-23T22:14:31Z","2026-10-23T22:30:05.007687918Z",[19244],{"type":8547,"score":8583},[19246,19248,19250,19252,19254,19256,19257,19258,19259,19260],{"type":8512,"url":19247},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-xjj6-f33q-929c",{"type":8515,"url":19249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109869",{"type":8512,"url":19251},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F07ded4941b1e72afec862958c3b8ddf468f3b429",{"type":8512,"url":19253},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1325a87dfb3492f8e87e6b0a84b3bda4e82e3436",{"type":8512,"url":19255},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb5084c7dc239172d75c336b1cd51ddac023938a5",{"type":8512,"url":8767},{"type":8520,"url":9070},{"type":8512,"url":9190},{"type":8512,"url":9192},{"type":8512,"url":9194},[9077,9196],{"id":552,"slug":19263,"dossier":47,"summary":19264,"aliases":19265,"sourceIds":19268,"published":19269,"modified":19270,"checkedAt":7,"severity":19271,"references":19276,"versionKeys":19291,"packageCount":32,"repositoryCount":8535},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[19266,19267],"CVE-2026-112902","PYSEC-2026-4363",[552,19267],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[19272,19274],{"type":8508,"score":19273},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8547,"score":19275},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[19277,19279,19281,19283,19285,19287,19289,19290],{"type":8638,"url":19278},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":8515,"url":19280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":8512,"url":19282},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":8638,"url":19284},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":8638,"url":19286},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":8512,"url":19288},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":8520,"url":8521},{"type":8515,"url":8523},[8525,8526,8527,8528,8529,8530,8531,8532,8533,8534],{"id":553,"slug":19293,"dossier":47,"summary":19294,"aliases":19295,"sourceIds":19297,"published":19298,"modified":19299,"checkedAt":7,"severity":19300,"references":19302,"versionKeys":19318,"packageCount":32,"repositoryCount":831},"ghsa-xwg4-73v4-xw9w-e114930d","nanoid: Integer Overflow or Wraparound",[19296],"CVE-2026-73086",[553],"2026-09-01T19:23:45Z","2026-09-01T19:30:08.615560716Z",[19301],{"type":8547,"score":9175},[19303,19305,19307,19309,19311,19313,19314,19316],{"type":8512,"url":19304},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fsecurity\u002Fadvisories\u002FGHSA-xwg4-73v4-xw9w",{"type":8515,"url":19306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73086",{"type":8512,"url":19308},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F7087969281cab8ba8ae3babf1894e819068b3bb4",{"type":8512,"url":19310},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F821dfed7b5db7f88e92f56c60eef32c8135077c3",{"type":8512,"url":19312},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fb0036ed60dc9facd7f1191a50dfb3076500202ac",{"type":8520,"url":8864},{"type":8512,"url":19315},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.12",{"type":8512,"url":19317},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.11",[8870],{"id":554,"slug":19320,"dossier":47,"summary":19321,"aliases":19322,"sourceIds":19324,"published":19325,"modified":19326,"checkedAt":7,"severity":19327,"references":19329,"versionKeys":19335,"packageCount":32,"repositoryCount":32},"ghsa-xx6v-rp6x-q39c-44625a35","Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion",[19323],"CVE-2026-42042",[554],"2026-05-05T00:25:22Z","2026-09-10T03:51:07.425895085Z",[19328],{"type":8547,"score":15185},[19330,19332,19334],{"type":8512,"url":19331},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-xx6v-rp6x-q39c",{"type":8515,"url":19333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42042",{"type":8520,"url":9450},[9452,9453],{"id":555,"slug":19337,"dossier":47,"summary":84,"aliases":19338,"sourceIds":19340,"published":19341,"modified":19342,"checkedAt":7,"severity":19343,"references":19346,"versionKeys":19352,"packageCount":32,"repositoryCount":831},"pysec-2025-183-08217171",[19339],"CVE-2025-45768",[555],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[19344],{"type":8547,"score":19345},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[19347,19349,19351],{"type":8512,"url":19348},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":9654,"url":19350},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":8520,"url":9097},[9105,9107],1794724251833]