[{"data":1,"prerenderedAt":4063},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11432":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":224,"related":227},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-30T08:36:30.871Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-30T08:33:18.305Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,38,37,0,4104,4093,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2460,50,7146,9,55,2426,34,822,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":222,"providers":223},"opencode:11432","opencode-11432",11432,"URBAN.KI Sovia-app","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app","2351f6930f4d7a1c812f6c7d6e4b71bf88de6041","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app\u002F-\u002Fcommit\u002F2351f6930f4d7a1c812f6c7d6e4b71bf88de6041","2026-09-15T13:12:13.158Z","2026-09-14T08:20:02.000Z",{"complete":90,"entryCount":91,"truncated":47},true,57,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","23045eafdfb483ec149e375bcdcde05eebbacd50","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app\u002F-\u002Fblob\u002F2351f6930f4d7a1c812f6c7d6e4b71bf88de6041\u002Fuv.lock","b74bb096d47b3a37759845db494e848a6612ed5aae81025097905744d143687b",194138,"parsed",75,[102],"pypi",2,12,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221],"GHSA-248v-346w-9cwc","GHSA-284h-m62q-gf8w","GHSA-2f96-g7mh-g2hx","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3rp5-jjmw-4wv2","GHSA-3wxw-xv34-2frg","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4x4j-2g7c-83w6","GHSA-539m-9xh6-q6rr","GHSA-53q9-r3pm-6pq6","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-5xxx-qhh7-9287","GHSA-62p4-gmf7-7g93","GHSA-65pc-fj4g-8rjx","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-7545-fcxq-7j24","GHSA-7833-fr7j-v32q","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-82r6-8w77-94w6","GHSA-8423-8fgw-73vq","GHSA-887c-mr87-cxwp","GHSA-8mcc-hrx5-hvxc","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hh9p-6wh2-4mfc","GHSA-hmq2-w58f-27jc","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jm78-9fvv-mhgr","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mpf4-983q-p7j4","GHSA-mv93-w799-cj2w","GHSA-p538-c434-8v24","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rwj8-pgh3-r573","GHSA-v87r-6q3f-2j67","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wvpp-8hx9-p66j","GHSA-wwv5-g3v4-889x","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-112","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3982","PYSEC-2026-3984",116,[],{"files":225,"occurrenceCount":100},[226],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":228,"vulnerabilities":916},[229,239,249,259,271,281,292,302,312,321,330,340,349,358,368,377,386,395,404,413,422,431,440,449,458,467,476,485,494,503,512,521,530,539,548,557,566,575,584,594,603,612,621,629,638,647,656,665,674,683,692,701,709,718,726,736,745,754,763,772,781,790,799,808,817,827,836,845,854,863,872,881,891,899,908],{"id":230,"slug":231,"identity":232,"label":233,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":234,"versions":236,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":238},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[235],"BSD-3-Clause",[237],"2.9.0",[56],{"id":240,"slug":241,"identity":242,"label":243,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":244,"versions":246,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":248},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[245],"Apache-2.0",[247],"4.12.0.88",[56],{"id":250,"slug":251,"identity":252,"label":253,"aiRelevant":47,"provider":83,"advisoryCount":254,"licenseExpressions":255,"versions":256,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":258},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",29,[235],[257],"3.1.45",[56],{"id":260,"slug":261,"identity":262,"label":263,"aiRelevant":47,"provider":83,"advisoryCount":264,"licenseExpressions":265,"versions":268,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":270},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[266,267],"HPND","MIT-CMU",[269],"12.0.0",[56],{"id":272,"slug":273,"identity":274,"label":275,"aiRelevant":47,"provider":83,"advisoryCount":276,"licenseExpressions":277,"versions":278,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":280},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",13,[245],[279],"6.5.2",[56],{"id":282,"slug":283,"identity":284,"label":285,"aiRelevant":47,"provider":83,"advisoryCount":286,"licenseExpressions":287,"versions":289,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":291},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[288],"MIT",[290],"2.5.0",[56],{"id":293,"slug":294,"identity":295,"label":296,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":297,"versions":299,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":301},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[235,298],"non-standard",[300],"3.1.6",[56],{"id":303,"slug":304,"identity":305,"label":306,"aiRelevant":47,"provider":83,"advisoryCount":307,"licenseExpressions":308,"versions":309,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":311},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[245],[310],"2.32.5",[56],{"id":313,"slug":314,"identity":315,"label":316,"aiRelevant":47,"provider":83,"advisoryCount":307,"licenseExpressions":317,"versions":318,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":320},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[288],[319],"80.9.0",[56],{"id":322,"slug":323,"identity":324,"label":325,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":326,"versions":327,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":329},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[288],[328],"4.11.0",[56],{"id":331,"slug":332,"identity":333,"label":334,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":335,"versions":337,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":339},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[288,336],"Unlicense",[338],"3.20.0",[56],{"id":341,"slug":342,"identity":343,"label":344,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":345,"versions":346,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":348},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[235],[347],"6.33.0",[56],{"id":350,"slug":351,"identity":352,"label":353,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":354,"versions":355,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":357},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[245],[356],"1.51.0",[56],{"id":359,"slug":360,"identity":361,"label":362,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":363,"versions":365,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":367},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[364],"MPL-2.0",[366],"2025.10.5",[56],{"id":369,"slug":370,"identity":371,"label":372,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":373,"versions":374,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":376},"package:pypi:click","click-ef97f731","pypi:click","click",[235,298],[375],"8.3.0",[56],{"id":378,"slug":379,"identity":380,"label":381,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":382,"versions":383,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":385},"package:pypi:duckdb","duckdb-8c0332c9","pypi:duckdb","duckdb",[288],[384],"1.4.1",[56],{"id":387,"slug":388,"identity":389,"label":390,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":391,"versions":392,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":394},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[288],[393],"0.16.0",[56],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":400,"versions":401,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":403},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[235,298],[402],"3.11",[56],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":409,"versions":410,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":412},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[245,298],[411],"21.0.0",[56],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":418,"versions":419,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":421},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[298],[420],"5.5.0",[56],{"id":423,"slug":424,"identity":425,"label":426,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":427,"versions":428,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":430},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[288],[429],"25.4.0",[56],{"id":432,"slug":433,"identity":434,"label":435,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":436,"versions":437,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":439},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[288],[438],"1.9.0",[56],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":445,"versions":446,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":448},"package:pypi:branca","branca-e1a3550c","pypi:branca","branca",[288],[447],"0.8.2",[56],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":454,"versions":455,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":457},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[288],[456],"6.2.1",[56],{"id":459,"slug":460,"identity":461,"label":462,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":463,"versions":464,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":466},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[288],[465],"3.4.4",[56],{"id":468,"slug":469,"identity":470,"label":471,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":472,"versions":473,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":475},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[298],[474],"0.4.6",[56],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":481,"versions":482,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":484},"package:pypi:filepath","filepath-6e8545d1","pypi:filepath","filepath",[288],[483],"0.1",[56],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":490,"versions":491,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":493},"package:pypi:folium","folium-6e89a148","pypi:folium","folium",[288],[492],"0.20.0",[56],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":499,"versions":500,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":502},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[235,298],[501],"2025.10.0",[56],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":508,"versions":509,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":511},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[298],[510],"4.0.12",[56],{"id":513,"slug":514,"identity":515,"label":516,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":517,"versions":518,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":520},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[235],[519],"1.0.9",[56],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":526,"versions":527,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":529},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[235],[528],"0.28.1",[56],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":535,"versions":536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":538},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[288],[537],"4.25.1",[56],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":544,"versions":545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":547},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[288],[546],"2025.9.1",[56],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":553,"versions":554,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":556},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[235,298],[555],"3.0.3",[56],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":562,"versions":563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":565},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[298],[564],"1.3.0",[56],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":571,"versions":572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":574},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[288,298],[573],"2.11.0",[56],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":580,"versions":581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":583},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[235,298],[582],"3.5",[56],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":589,"versions":591,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":593},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[590,298],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[592],"2.2.6",[56],{"id":595,"slug":596,"identity":597,"label":598,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":599,"versions":600,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":602},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[298],[601],"12.8.4.1",[56],{"id":604,"slug":605,"identity":606,"label":607,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":608,"versions":609,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":611},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[298],[610],"12.8.90",[56],{"id":613,"slug":614,"identity":615,"label":616,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":617,"versions":618,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":620},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[298],[619],"12.8.93",[56],{"id":622,"slug":623,"identity":624,"label":625,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":626,"versions":627,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":628},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[298],[610],[56],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":634,"versions":635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":637},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[298],[636],"9.10.2.21",[56],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":643,"versions":644,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":646},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[298],[645],"11.3.3.83",[56],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":652,"versions":653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":655},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[298],[654],"1.13.1.3",[56],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":661,"versions":662,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":664},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[298],[663],"10.3.9.90",[56],{"id":666,"slug":667,"identity":668,"label":669,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":670,"versions":671,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":673},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[298],[672],"11.7.3.90",[56],{"id":675,"slug":676,"identity":677,"label":678,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":679,"versions":680,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":682},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[298],[681],"12.5.8.93",[56],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":688,"versions":689,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":691},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[298],[690],"0.7.1",[56],{"id":693,"slug":694,"identity":695,"label":696,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":697,"versions":698,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":700},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[235,298],[699],"2.27.5",[56],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":706,"versions":707,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":708},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[298],[619],[56],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":714,"versions":715,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":717},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[235,298],[716],"3.3.20",[56],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":723,"versions":724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":725},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[245,298],[610],[56],{"id":727,"slug":728,"identity":729,"label":730,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":731,"versions":733,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":735},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[732,298],"Apache-2.0 OR BSD-2-Clause",[734],"25.0",[56],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":741,"versions":742,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":744},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[298],[743],"2.3.3",[56],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":750,"versions":751,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":753},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[245],[752],"0.9.1",[56],{"id":755,"slug":756,"identity":757,"label":758,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":759,"versions":760,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":762},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[298],[761],"2.9.0.post0",[56],{"id":764,"slug":765,"identity":766,"label":767,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":768,"versions":769,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":771},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[288],[770],"2025.2",[56],{"id":773,"slug":774,"identity":775,"label":776,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":777,"versions":778,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":780},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[288],[779],"0.37.0",[56],{"id":782,"slug":783,"identity":784,"label":785,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":786,"versions":787,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":789},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[288],[788],"0.28.0",[56],{"id":791,"slug":792,"identity":793,"label":794,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":795,"versions":796,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":798},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[235],[797],"2.1.2",[56],{"id":800,"slug":801,"identity":802,"label":803,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":804,"versions":805,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":807},"package:pypi:six","six-3c3888bd","pypi:six","six",[288],[806],"1.17.0",[56],{"id":809,"slug":810,"identity":811,"label":812,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":813,"versions":814,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":816},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[235],[815],"5.0.2",[56],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":822,"versions":824,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":826},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[823],"Apache-2.0 OR MIT",[825],"1.3.1",[56],{"id":828,"slug":829,"identity":830,"label":831,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":832,"versions":833,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":835},"package:pypi:streamlit-folium","streamlit-folium-e76fb4ea","pypi:streamlit-folium","streamlit-folium",[],[834],"0.25.3",[56],{"id":837,"slug":838,"identity":839,"label":840,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":841,"versions":842,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":844},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[298],[843],"1.14.0",[56],{"id":846,"slug":847,"identity":848,"label":849,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":850,"versions":851,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":853},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[245],[852],"9.1.2",[56],{"id":855,"slug":856,"identity":857,"label":858,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":859,"versions":860,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":862},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[288],[861],"0.10.2",[56],{"id":864,"slug":865,"identity":866,"label":867,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":868,"versions":869,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":871},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[298],[870],"0.24.0",[56],{"id":873,"slug":874,"identity":875,"label":876,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":877,"versions":878,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":880},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[288],[879],"3.5.0",[56],{"id":882,"slug":883,"identity":884,"label":885,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":886,"versions":888,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":890},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[887,298],"PSF-2.0",[889],"4.15.0",[56],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":896,"versions":897,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":898},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[245],[770],[56],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":904,"versions":905,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":907},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[245],[906],"6.0.0",[56],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":913,"versions":914,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":915},"package:pypi:xyzservices","xyzservices-a1955a18","pypi:xyzservices","xyzservices",[235],[501],[56],[917,956,990,1021,1057,1100,1127,1154,1179,1209,1238,1274,1301,1330,1359,1383,1407,1438,1474,1497,1520,1543,1573,1602,1628,1654,1677,1709,1739,1764,1804,1833,1854,1879,1918,1950,1982,2005,2032,2060,2094,2120,2147,2177,2209,2233,2288,2320,2344,2376,2410,2438,2461,2489,2512,2540,2574,2607,2634,2666,2688,2715,2739,2761,2782,2807,2828,2855,2882,2906,2930,2955,2971,2998,3024,3045,3082,3109,3141,3169,3192,3222,3242,3276,3306,3326,3354,3381,3408,3451,3481,3533,3556,3583,3607,3630,3662,3689,3714,3736,3756,3773,3792,3809,3830,3846,3861,3878,3893,3910,3927,3944,3967,4000,4030,4047],{"id":106,"slug":918,"dossier":47,"summary":919,"aliases":920,"sourceIds":923,"published":924,"modified":925,"checkedAt":7,"severity":926,"references":930,"versionKeys":954,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[921,922],"CVE-2024-39689","PYSEC-2024-230",[106,922],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[927],{"type":928,"score":929},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[931,934,936,939,942,945,948,950,952],{"type":932,"url":933},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":932,"url":935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":937,"url":938},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":940,"url":941},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":943,"url":944},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":946,"url":947},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":943,"url":949},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":932,"url":951},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":932,"url":953},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[955],"pypi:certifi@2024.6.2",{"id":107,"slug":957,"dossier":47,"summary":958,"aliases":959,"sourceIds":962,"published":963,"modified":964,"checkedAt":7,"severity":965,"references":973,"versionKeys":985,"packageCount":32,"repositoryCount":989},"ghsa-284h-m62q-gf8w-da9acb0c","GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE",[960,961],"CVE-2026-78676","PYSEC-2026-3786",[107,961],"2026-08-25T02:16:52.030Z","2026-09-08T19:00:06.885837775Z",[966,968,971],{"type":928,"score":967},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":969,"score":970},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":969,"score":972},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[974,977,979,981,983],{"type":975,"url":976},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-284h-m62q-gf8w",{"type":932,"url":978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78676",{"type":940,"url":980},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":943,"url":982},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3786.yaml",{"type":932,"url":984},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-config-injection",[986,987,988],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",6,{"id":108,"slug":991,"dossier":47,"summary":992,"aliases":993,"sourceIds":996,"published":997,"modified":998,"checkedAt":7,"severity":999,"references":1002,"versionKeys":1020,"packageCount":32,"repositoryCount":989},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[994,995],"CVE-2026-67325","PYSEC-2026-3836",[108,995],"2026-07-21T19:43:43Z","2026-09-23T05:15:05.950374846Z",[1000],{"type":928,"score":1001},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1003,1005,1007,1009,1011,1012,1014,1016,1018],{"type":943,"url":1004},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":932,"url":1006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67325",{"type":943,"url":1008},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":943,"url":1010},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":940,"url":980},{"type":943,"url":1013},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",{"type":943,"url":1015},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-option-prefix-abbreviation",{"type":940,"url":1017},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fgitpython",{"type":932,"url":1019},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",[986,987,988],{"id":109,"slug":1022,"dossier":90,"summary":1023,"aliases":1024,"sourceIds":1027,"published":1028,"modified":1029,"checkedAt":7,"severity":1030,"references":1033,"versionKeys":1050,"packageCount":32,"repositoryCount":1056},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1025,1026],"CVE-2025-66471","PYSEC-2026-1994",[109,1026],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1031],{"type":969,"score":1032},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1034,1036,1038,1040,1042,1044,1046,1048],{"type":943,"url":1035},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":932,"url":1037},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":937,"url":1039},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":943,"url":1041},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":932,"url":1043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":943,"url":1045},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":940,"url":1047},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":940,"url":1049},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1051,1052,1053,1054,1055],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":110,"slug":1058,"dossier":47,"summary":1059,"aliases":1060,"sourceIds":1064,"published":1065,"modified":1066,"checkedAt":7,"severity":1067,"references":1074,"versionKeys":1096,"packageCount":32,"repositoryCount":307},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1061,1062,1063],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[110,1063],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1068,1070,1072],{"type":928,"score":1069},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":969,"score":1071},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":928,"score":1073},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1075,1077,1080,1082,1084,1086,1088,1090,1092,1094],{"type":932,"url":1076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1078,"url":1079},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1078,"url":1081},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":943,"url":1083},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":940,"url":1085},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":943,"url":1087},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1078,"url":1089},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":932,"url":1091},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":932,"url":1093},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":932,"url":1095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1097,1098,1099],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":111,"slug":1101,"dossier":90,"summary":1102,"aliases":1103,"sourceIds":1106,"published":1107,"modified":1108,"checkedAt":7,"severity":1109,"references":1113,"versionKeys":1126,"packageCount":32,"repositoryCount":1056},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1104,1105],"CVE-2026-21441","PYSEC-2026-1996",[111,1105],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1110,1112],{"type":928,"score":1111},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":969,"score":1032},[1114,1116,1118,1120,1121,1123,1124],{"type":943,"url":1115},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":932,"url":1117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":937,"url":1119},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":940,"url":1047},{"type":943,"url":1122},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":940,"url":1049},{"type":932,"url":1125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1051,1052,1053,1054,1055],{"id":112,"slug":1128,"dossier":47,"summary":1129,"aliases":1130,"sourceIds":1133,"published":1134,"modified":1135,"checkedAt":7,"severity":1136,"references":1141,"versionKeys":1153,"packageCount":32,"repositoryCount":989},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[1131,1132],"CVE-2026-73620","PYSEC-2026-3949",[112,1132],"2026-08-03T20:09:56Z","2026-09-10T13:10:44.075529324Z",[1137,1139],{"type":928,"score":1138},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":969,"score":1140},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1142,1144,1146,1148,1149,1151],{"type":975,"url":1143},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":943,"url":1145},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":943,"url":1147},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":940,"url":980},{"type":943,"url":1150},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",{"type":932,"url":1152},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-and-read",[986,987,988],{"id":113,"slug":1155,"dossier":47,"summary":1156,"aliases":1157,"sourceIds":1160,"published":1161,"modified":1162,"checkedAt":7,"severity":1163,"references":1168,"versionKeys":1178,"packageCount":32,"repositoryCount":989},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[1158,1159],"CVE-2026-69097","PYSEC-2026-3981",[113,1159],"2026-07-24T16:22:02Z","2026-09-17T09:10:35.253135365Z",[1164,1166],{"type":928,"score":1165},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":928,"score":1167},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1169,1171,1173,1174,1176],{"type":975,"url":1170},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":943,"url":1172},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":940,"url":980},{"type":943,"url":1175},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",{"type":932,"url":1177},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-submodule-names",[986,987,988],{"id":114,"slug":1180,"dossier":47,"summary":1181,"aliases":1182,"sourceIds":1185,"published":1186,"modified":1187,"checkedAt":7,"severity":1188,"references":1191,"versionKeys":1208,"packageCount":32,"repositoryCount":989},"ghsa-3wxw-xv34-2frg-c013ae2d","GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)",[1183,1184],"CVE-2026-78679","PYSEC-2026-3837",[114,1184],"2026-09-08T19:42:22Z","2026-09-23T05:15:05.925079070Z",[1189],{"type":928,"score":1190},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1192,1194,1196,1198,1200,1201,1203,1205,1206],{"type":943,"url":1193},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",{"type":932,"url":1195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78679",{"type":943,"url":1197},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2208",{"type":943,"url":1199},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6",{"type":940,"url":980},{"type":943,"url":1202},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.59",{"type":943,"url":1204},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-tagreference-create",{"type":940,"url":1017},{"type":932,"url":1207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",[986,987,988],{"id":115,"slug":1210,"dossier":47,"summary":1211,"aliases":1212,"sourceIds":1215,"published":1216,"modified":1217,"checkedAt":7,"severity":1218,"references":1221,"versionKeys":1232,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1213,1214],"CVE-2026-49853","PYSEC-2026-3387",[115,1214],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[1219],{"type":928,"score":1220},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1222,1224,1226,1228,1230],{"type":943,"url":1223},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":940,"url":1225},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":940,"url":1227},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":932,"url":1229},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":932,"url":1231},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1233,1234,1235,1236,1237],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":116,"slug":1239,"dossier":90,"summary":1240,"aliases":1241,"sourceIds":1245,"published":1246,"modified":1247,"checkedAt":7,"severity":1248,"references":1250,"versionKeys":1263,"packageCount":32,"repositoryCount":1273},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1242,1243,1244],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[116,1244],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1249],{"type":928,"score":1111},[1251,1253,1255,1257,1259,1261],{"type":975,"url":1252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":932,"url":1254},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":937,"url":1256},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":943,"url":1258},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":940,"url":1260},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":932,"url":1262},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1264,1265,1266,1267,1268,1269,1270,1271,1272],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",17,{"id":117,"slug":1275,"dossier":47,"summary":1276,"aliases":1277,"sourceIds":1280,"published":1281,"modified":1282,"checkedAt":7,"severity":1283,"references":1286,"versionKeys":1299,"packageCount":32,"repositoryCount":1300},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1278,1279],"CVE-2025-50182","PYSEC-2026-1997",[117,1279],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1284],{"type":928,"score":1285},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1287,1289,1291,1293,1294,1296,1297],{"type":943,"url":1288},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":932,"url":1290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":937,"url":1292},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":940,"url":1047},{"type":943,"url":1295},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":940,"url":1049},{"type":932,"url":1298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1051,1052,1053,1054],8,{"id":118,"slug":1302,"dossier":47,"summary":1303,"aliases":1304,"sourceIds":1307,"published":1308,"modified":1309,"checkedAt":7,"severity":1310,"references":1312,"versionKeys":1329,"packageCount":32,"repositoryCount":989},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[1305,1306],"CVE-2026-76219","PYSEC-2026-3838",[118,1306],"2026-08-07T15:33:57Z","2026-09-10T12:25:42.767166279Z",[1311],{"type":928,"score":1138},[1313,1315,1317,1319,1321,1322,1324,1326,1327],{"type":943,"url":1314},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":932,"url":1316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76219",{"type":943,"url":1318},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":943,"url":1320},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":940,"url":980},{"type":943,"url":1323},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",{"type":943,"url":1325},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-read-tree",{"type":940,"url":1017},{"type":932,"url":1328},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",[986,987,988],{"id":119,"slug":1331,"dossier":90,"summary":1332,"aliases":1333,"sourceIds":1337,"published":1338,"modified":1339,"checkedAt":7,"severity":1340,"references":1343,"versionKeys":1358,"packageCount":32,"repositoryCount":1273},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1334,1335,1336],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[119,1336],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1341],{"type":928,"score":1342},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1344,1346,1348,1350,1352,1354,1356,1357],{"type":975,"url":1345},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":932,"url":1347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":937,"url":1349},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":937,"url":1351},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":937,"url":1353},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":943,"url":1355},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":940,"url":1260},{"type":932,"url":1262},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":120,"slug":1360,"dossier":47,"summary":1361,"aliases":1362,"sourceIds":1365,"published":1366,"modified":1367,"checkedAt":7,"severity":1368,"references":1372,"versionKeys":1382,"packageCount":32,"repositoryCount":989},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[1363,1364],"CVE-2026-73619","PYSEC-2026-3948",[120,1364],"2026-08-03T20:14:28Z","2026-09-10T13:11:01.695990206Z",[1369,1370],{"type":928,"score":1190},{"type":969,"score":1371},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1373,1375,1376,1378,1379,1380],{"type":975,"url":1374},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":943,"url":1145},{"type":943,"url":1377},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":940,"url":980},{"type":943,"url":1150},{"type":932,"url":1381},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-archive",[986,987,988],{"id":121,"slug":1384,"dossier":47,"summary":1385,"aliases":1386,"sourceIds":1390,"published":1391,"modified":1392,"checkedAt":7,"severity":1393,"references":1396,"versionKeys":1406,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1387,1388,1389],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[121,1389],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1394,1395],{"type":969,"score":970},{"type":928,"score":967},[1397,1399,1401,1403,1405],{"type":932,"url":1398},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":932,"url":1400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":943,"url":1402},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":943,"url":1404},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":940,"url":1085},[1097],{"id":122,"slug":1408,"dossier":90,"summary":1409,"aliases":1410,"sourceIds":1412,"published":1413,"modified":1414,"checkedAt":7,"severity":1415,"references":1418,"versionKeys":1429,"packageCount":32,"repositoryCount":1056},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[1411],"CVE-2026-64847",[122],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[1416],{"type":969,"score":1417},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1419,1421,1423,1425,1427],{"type":943,"url":1420},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":943,"url":1422},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":943,"url":1424},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":940,"url":1426},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":943,"url":1428},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[1430,1431,1432,1433,1434,1435,1436,1437],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":123,"slug":1439,"dossier":47,"summary":1440,"aliases":1441,"sourceIds":1445,"published":1446,"modified":1447,"checkedAt":7,"severity":1448,"references":1452,"versionKeys":1469,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1442,1443,1444],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[123,1444],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1449,1451],{"type":969,"score":1450},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":928,"score":1001},[1453,1455,1457,1459,1461,1463,1465,1467],{"type":975,"url":1454},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":932,"url":1456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1078,"url":1458},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":937,"url":1460},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":943,"url":1462},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":940,"url":1464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":943,"url":1466},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":946,"url":1468},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1470,1471,1472,1473],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":124,"slug":1475,"dossier":90,"summary":1476,"aliases":1477,"sourceIds":1481,"published":1482,"modified":1483,"checkedAt":7,"severity":1484,"references":1486,"versionKeys":1496,"packageCount":32,"repositoryCount":1273},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1478,1479,1480],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[124,1480],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1485],{"type":928,"score":1111},[1487,1489,1491,1492,1494,1495],{"type":975,"url":1488},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":932,"url":1490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":937,"url":1256},{"type":943,"url":1493},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":940,"url":1260},{"type":932,"url":1262},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":125,"slug":1498,"dossier":47,"summary":1499,"aliases":1500,"sourceIds":1504,"published":1505,"modified":1506,"checkedAt":7,"severity":1507,"references":1511,"versionKeys":1519,"packageCount":32,"repositoryCount":104},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1501,1502,1503],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[125,1503],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1508,1509],{"type":928,"score":1073},{"type":969,"score":1510},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1512,1514,1516,1517],{"type":932,"url":1513},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":932,"url":1515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":940,"url":1260},{"type":932,"url":1518},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1267,1268,1269,1270,1271],{"id":126,"slug":1521,"dossier":47,"summary":1522,"aliases":1523,"sourceIds":1526,"published":1527,"modified":1528,"checkedAt":7,"severity":1529,"references":1532,"versionKeys":1542,"packageCount":32,"repositoryCount":989},"ghsa-5xxx-qhh7-9287-87d91b3e","GitPython: Incomplete unsafe_git_revision_options denylist omits --contents\u002F-S, enabling arbitrary file read via Repo.blame()",[1524,1525],"CVE-2026-78678","PYSEC-2026-3788",[126,1525],"2026-08-25T02:16:52.313Z","2026-09-08T19:00:06.904435463Z",[1530,1531],{"type":928,"score":1190},{"type":969,"score":1371},[1533,1535,1537,1538,1540],{"type":975,"url":1534},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-5xxx-qhh7-9287",{"type":932,"url":1536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78678",{"type":940,"url":980},{"type":943,"url":1539},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3788.yaml",{"type":932,"url":1541},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-blame",[986,987,988],{"id":127,"slug":1544,"dossier":90,"summary":1545,"aliases":1546,"sourceIds":1550,"published":1551,"modified":1552,"checkedAt":7,"severity":1553,"references":1556,"versionKeys":1572,"packageCount":32,"repositoryCount":1273},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1547,1548,1549],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[127,1549],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[1554],{"type":969,"score":1555},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1557,1559,1561,1563,1565,1566,1568,1570],{"type":943,"url":1558},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":932,"url":1560},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":943,"url":1562},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":943,"url":1564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":940,"url":1260},{"type":943,"url":1567},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":940,"url":1569},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":932,"url":1571},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":128,"slug":1574,"dossier":90,"summary":1575,"aliases":1576,"sourceIds":1579,"published":1580,"modified":1581,"checkedAt":7,"severity":1582,"references":1587,"versionKeys":1596,"packageCount":32,"repositoryCount":1601},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1577,1578],"CVE-2026-45409","PYSEC-2026-215",[128,1578],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[1583,1585],{"type":928,"score":1584},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":969,"score":1586},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1588,1590,1592,1594],{"type":932,"url":1589},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":932,"url":1591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":940,"url":1593},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":943,"url":1595},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1597,1598,1599,1600],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":129,"slug":1603,"dossier":47,"summary":1604,"aliases":1605,"sourceIds":1608,"published":1609,"modified":1610,"checkedAt":7,"severity":1611,"references":1615,"versionKeys":1627,"packageCount":32,"repositoryCount":989},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[1606,1607],"CVE-2026-73623","PYSEC-2026-3952",[129,1607],"2026-07-24T16:42:09Z","2026-09-10T13:11:03.995690741Z",[1612,1614],{"type":928,"score":1613},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":928,"score":1001},[1616,1618,1620,1622,1623,1625],{"type":975,"url":1617},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":943,"url":1619},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":943,"url":1621},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":940,"url":980},{"type":943,"url":1624},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",{"type":932,"url":1626},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-template",[986,987,988],{"id":130,"slug":1629,"dossier":90,"summary":1630,"aliases":1631,"sourceIds":1635,"published":1636,"modified":1637,"checkedAt":7,"severity":1638,"references":1640,"versionKeys":1653,"packageCount":32,"repositoryCount":1273},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[1632,1633,1634],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[130,1634],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[1639],{"type":928,"score":1111},[1641,1643,1645,1647,1649,1651,1652],{"type":975,"url":1642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":932,"url":1644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":937,"url":1646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":937,"url":1648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":943,"url":1650},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":940,"url":1260},{"type":932,"url":1567},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":131,"slug":1655,"dossier":47,"summary":1656,"aliases":1657,"sourceIds":1660,"published":1661,"modified":1662,"checkedAt":7,"severity":1663,"references":1668,"versionKeys":1676,"packageCount":32,"repositoryCount":989},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[1658,1659],"CVE-2026-44243","PYSEC-2026-2162",[131,1659],"2026-05-06T19:38:48Z","2026-09-10T03:50:45.903378498Z",[1664,1666],{"type":928,"score":1665},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":969,"score":1667},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1669,1671,1673,1674],{"type":975,"url":1670},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":932,"url":1672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":940,"url":980},{"type":937,"url":1675},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[986,987,988],{"id":132,"slug":1678,"dossier":47,"summary":1679,"aliases":1680,"sourceIds":1683,"published":1684,"modified":1685,"checkedAt":7,"severity":1686,"references":1693,"versionKeys":1708,"packageCount":32,"repositoryCount":989},"ghsa-7833-fr7j-v32q-fd003872","GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)",[1681,1682],"CVE-2026-78675","PYSEC-2026-3785",[132,1682],"2026-08-25T02:16:51.887Z","2026-09-23T05:15:05.931147061Z",[1687,1689,1691],{"type":928,"score":1688},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":969,"score":1690},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":928,"score":1692},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1694,1696,1698,1700,1702,1703,1704,1706],{"type":975,"url":1695},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7833-fr7j-v32q",{"type":932,"url":1697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78675",{"type":943,"url":1699},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2211",{"type":943,"url":1701},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fef7568e3b317ce617eacda39b8b54dcdff8c3b5c",{"type":940,"url":980},{"type":943,"url":1202},{"type":943,"url":1705},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3785.yaml",{"type":932,"url":1707},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-local-file-content-disclosure-via-gitmodules",[986,987,988],{"id":133,"slug":1710,"dossier":47,"summary":1711,"aliases":1712,"sourceIds":1716,"published":1717,"modified":1718,"checkedAt":7,"severity":1719,"references":1726,"versionKeys":1738,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[1713,1714,1715],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[133,1714,1715],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[1720,1722,1724],{"type":928,"score":1721},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":928,"score":1723},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":928,"score":1725},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1727,1729,1731,1732,1734,1736],{"type":932,"url":1728},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":943,"url":1730},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":940,"url":1225},{"type":943,"url":1733},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":932,"url":1735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":932,"url":1737},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1233,1234,1235,1236],{"id":134,"slug":1740,"dossier":47,"summary":1741,"aliases":1742,"sourceIds":1745,"published":1746,"modified":1747,"checkedAt":7,"severity":1748,"references":1750,"versionKeys":1763,"packageCount":32,"repositoryCount":103},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[1743,1744],"CVE-2025-47287","PYSEC-2026-1974",[134,1744],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[1749],{"type":928,"score":1111},[1751,1753,1755,1757,1758,1760,1761],{"type":943,"url":1752},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":932,"url":1754},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":943,"url":1756},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":940,"url":1225},{"type":943,"url":1759},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":940,"url":1227},{"type":932,"url":1762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1233],{"id":135,"slug":1765,"dossier":47,"summary":1766,"aliases":1767,"sourceIds":1770,"published":1771,"modified":1772,"checkedAt":7,"severity":1773,"references":1776,"versionKeys":1793,"packageCount":32,"repositoryCount":276},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[1768,1769],"CVE-2026-0994","PYSEC-2026-1805",[135,1769],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[1774],{"type":969,"score":1775},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[1777,1779,1781,1783,1785,1787,1789,1791],{"type":932,"url":1778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":943,"url":1780},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":943,"url":1782},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":943,"url":1784},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":943,"url":1786},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":940,"url":1788},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":940,"url":1790},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":932,"url":1792},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[1794,1795,1796,1797,1798,1799,1800,1801,1802,1803],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":136,"slug":1805,"dossier":47,"summary":1806,"aliases":1807,"sourceIds":1810,"published":1811,"modified":1812,"checkedAt":7,"severity":1813,"references":1818,"versionKeys":1829,"packageCount":32,"repositoryCount":307},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[1808,1809],"CVE-2026-33682","PYSEC-2026-2285",[136,1809],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[1814,1816],{"type":928,"score":1815},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":928,"score":1817},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1819,1821,1823,1825,1827],{"type":932,"url":1820},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":932,"url":1822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":937,"url":1824},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":940,"url":1826},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":932,"url":1828},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[1830,1831,1832],"pypi:streamlit@1.49.0","pypi:streamlit@1.49.1","pypi:streamlit@1.51.0",{"id":137,"slug":1834,"dossier":47,"summary":1835,"aliases":1836,"sourceIds":1838,"published":1839,"modified":1840,"checkedAt":7,"severity":1841,"references":1844,"versionKeys":1853,"packageCount":32,"repositoryCount":1056},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[1837],"CVE-2026-63374",[137],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[1842],{"type":969,"score":1843},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1845,1847,1849,1851,1852],{"type":943,"url":1846},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":943,"url":1848},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":943,"url":1850},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":940,"url":1426},{"type":943,"url":1428},[1430,1431,1432,1433,1434,1435,1436,1437],{"id":138,"slug":1855,"dossier":47,"summary":1856,"aliases":1857,"sourceIds":1859,"published":1860,"modified":1861,"checkedAt":7,"severity":1862,"references":1864,"versionKeys":1876,"packageCount":32,"repositoryCount":1878},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[1858],"CVE-2026-91990",[138],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[1863],{"type":969,"score":1586},[1865,1867,1869,1871,1873,1874],{"type":943,"url":1866},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":943,"url":1868},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":943,"url":1870},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":943,"url":1872},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":940,"url":1225},{"type":943,"url":1875},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[1233,1234,1235,1236,1237,1877],"pypi:tornado@6.5.7",10,{"id":139,"slug":1880,"dossier":47,"summary":1881,"aliases":1882,"sourceIds":1886,"published":1887,"modified":1888,"checkedAt":7,"severity":1889,"references":1893,"versionKeys":1915,"packageCount":32,"repositoryCount":1300},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1883,1884,1885],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[139,1885],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[1890,1891],{"type":928,"score":1069},{"type":969,"score":1892},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1894,1896,1898,1900,1902,1904,1905,1907,1909,1911,1913],{"type":932,"url":1895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":943,"url":1897},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":943,"url":1899},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":943,"url":1901},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":943,"url":1903},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":940,"url":1085},{"type":943,"url":1906},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":943,"url":1908},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":943,"url":1910},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":940,"url":1912},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":932,"url":1914},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1097,1098,1099,1916,1917],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":140,"slug":1919,"dossier":47,"summary":1920,"aliases":1921,"sourceIds":1924,"published":1925,"modified":1926,"checkedAt":7,"severity":1927,"references":1934,"versionKeys":1949,"packageCount":32,"repositoryCount":989},"ghsa-8mcc-hrx5-hvxc-9da62a9f","GitPython: clone_from()\u002Fclone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination",[1922,1923],"CVE-2026-78677","PYSEC-2026-3787",[140,1923],"2026-08-25T02:16:52.173Z","2026-09-08T19:00:06.914140693Z",[1928,1930,1932],{"type":928,"score":1929},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":969,"score":1931},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":969,"score":1933},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1935,1937,1939,1941,1943,1944,1945,1947],{"type":975,"url":1936},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-8mcc-hrx5-hvxc",{"type":932,"url":1938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78677",{"type":943,"url":1940},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2210",{"type":943,"url":1942},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fb68afff45af0f49e79a3e2d2162018986b37ad5d",{"type":940,"url":980},{"type":943,"url":1202},{"type":943,"url":1946},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3787.yaml",{"type":932,"url":1948},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-separate-git-dir",[986,987,988],{"id":141,"slug":1951,"dossier":47,"summary":1952,"aliases":1953,"sourceIds":1956,"published":1957,"modified":1958,"checkedAt":7,"severity":1959,"references":1962,"versionKeys":1981,"packageCount":32,"repositoryCount":307},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[1954,1955],"CVE-2025-4565","PYSEC-2026-1806",[141,1955],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[1960],{"type":969,"score":1961},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1963,1965,1967,1969,1971,1972,1974,1976,1978,1979],{"type":943,"url":1964},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":943,"url":1966},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":932,"url":1968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":943,"url":1970},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":940,"url":1788},{"type":943,"url":1973},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":943,"url":1975},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":943,"url":1977},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":940,"url":1790},{"type":932,"url":1980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[1794,1796,1797],{"id":142,"slug":1983,"dossier":90,"summary":1984,"aliases":1985,"sourceIds":1989,"published":1990,"modified":1991,"checkedAt":7,"severity":1992,"references":1994,"versionKeys":2004,"packageCount":32,"repositoryCount":1273},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[1986,1987,1988],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[142,1988],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[1993],{"type":928,"score":1111},[1995,1997,1999,2000,2002,2003],{"type":975,"url":1996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":932,"url":1998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":937,"url":1256},{"type":943,"url":2001},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":940,"url":1260},{"type":932,"url":1262},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":143,"slug":2006,"dossier":47,"summary":2007,"aliases":2008,"sourceIds":2011,"published":2012,"modified":2013,"checkedAt":7,"severity":2014,"references":2017,"versionKeys":2031,"packageCount":32,"repositoryCount":989},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[2009,2010],"CVE-2026-73622","PYSEC-2026-3951",[143,2010],"2026-07-24T21:45:16Z","2026-09-24T14:45:07.411775302Z",[2015,2016],{"type":928,"score":1929},{"type":969,"score":1933},[2018,2020,2022,2024,2025,2027,2029],{"type":975,"url":2019},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":943,"url":2021},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":937,"url":2023},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":940,"url":980},{"type":943,"url":2026},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",{"type":943,"url":2028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3951.yaml",{"type":932,"url":2030},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-remote-add",[986,987,988],{"id":144,"slug":2033,"dossier":47,"summary":2034,"aliases":2035,"sourceIds":2038,"published":2039,"modified":2040,"checkedAt":7,"severity":2041,"references":2043,"versionKeys":2059,"packageCount":32,"repositoryCount":989},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[2036,2037],"CVE-2026-67323","PYSEC-2026-3839",[144,2037],"2026-07-21T20:10:06Z","2026-09-10T12:25:39.217544351Z",[2042],{"type":928,"score":1688},[2044,2046,2048,2050,2052,2053,2054,2056,2057],{"type":943,"url":2045},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":932,"url":2047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67323",{"type":943,"url":2049},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":943,"url":2051},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":940,"url":980},{"type":943,"url":1013},{"type":943,"url":2055},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-unguarded-git-options",{"type":940,"url":1017},{"type":932,"url":2058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",[986,987,988],{"id":145,"slug":2061,"dossier":47,"summary":2062,"aliases":2063,"sourceIds":2066,"published":2067,"modified":2068,"checkedAt":7,"severity":2069,"references":2072,"versionKeys":2091,"packageCount":32,"repositoryCount":1300},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2064,2065],"CVE-2024-47081","PYSEC-2026-1872",[145,2065],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2070],{"type":928,"score":2071},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2073,2075,2077,2079,2081,2083,2085,2087,2089],{"type":943,"url":2074},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":932,"url":2076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":943,"url":2078},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":937,"url":2080},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":940,"url":2082},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":943,"url":2084},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":943,"url":2086},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":940,"url":2088},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":932,"url":2090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2092,2093],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":146,"slug":2095,"dossier":90,"summary":2096,"aliases":2097,"sourceIds":2101,"published":2102,"modified":2103,"checkedAt":7,"severity":2104,"references":2106,"versionKeys":2119,"packageCount":32,"repositoryCount":1273},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2098,2099,2100],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[146,2100],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2105],{"type":928,"score":1111},[2107,2109,2111,2113,2115,2117,2118],{"type":975,"url":2108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":932,"url":2110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":937,"url":2112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":937,"url":2114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":943,"url":2116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":940,"url":1260},{"type":932,"url":1567},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":147,"slug":2121,"dossier":47,"summary":2122,"aliases":2123,"sourceIds":2126,"published":2127,"modified":2128,"checkedAt":7,"severity":2129,"references":2131,"versionKeys":2146,"packageCount":32,"repositoryCount":989},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[2124,2125],"CVE-2026-76218","PYSEC-2026-3840",[147,2125],"2026-08-07T15:36:43Z","2026-09-10T12:25:55.324487522Z",[2130],{"type":928,"score":1613},[2132,2134,2136,2137,2139,2140,2141,2143,2144],{"type":943,"url":2133},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":932,"url":2135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76218",{"type":943,"url":1318},{"type":943,"url":2138},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":940,"url":980},{"type":943,"url":1323},{"type":943,"url":2142},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-repo-init",{"type":940,"url":1017},{"type":932,"url":2145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",[986,987,988],{"id":148,"slug":2148,"dossier":47,"summary":2149,"aliases":2150,"sourceIds":2153,"published":2154,"modified":2155,"checkedAt":7,"severity":2156,"references":2159,"versionKeys":2176,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2151,2152],"CVE-2024-35195","PYSEC-2026-1873",[148,2152],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2157],{"type":928,"score":2158},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2160,2162,2164,2166,2168,2169,2171,2173,2174],{"type":943,"url":2161},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":932,"url":2163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":943,"url":2165},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":937,"url":2167},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":940,"url":2082},{"type":943,"url":2170},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":943,"url":2172},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":940,"url":2088},{"type":932,"url":2175},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2092],{"id":149,"slug":2178,"dossier":47,"summary":2179,"aliases":2180,"sourceIds":2184,"published":2185,"modified":2186,"checkedAt":7,"severity":2187,"references":2192,"versionKeys":2208,"packageCount":32,"repositoryCount":103},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2181,2182,2183],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[149],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2188,2190],{"type":928,"score":2189},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":969,"score":2191},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2193,2195,2197,2199,2200,2202,2204,2206],{"type":932,"url":2194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":943,"url":2196},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":943,"url":2198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":940,"url":1085},{"type":943,"url":2201},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":943,"url":2203},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":943,"url":2205},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":943,"url":2207},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1097,1098],{"id":150,"slug":2210,"dossier":47,"summary":2211,"aliases":2212,"sourceIds":2215,"published":2216,"modified":2217,"checkedAt":7,"severity":2218,"references":2220,"versionKeys":2232,"packageCount":32,"repositoryCount":1300},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[2213,2214],"CVE-2025-67725","PYSEC-2025-266",[150,2214],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[2219],{"type":928,"score":1111},[2221,2223,2225,2227,2229,2230],{"type":932,"url":2222},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":932,"url":2224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":937,"url":2226},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":943,"url":2228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":940,"url":1225},{"type":932,"url":2231},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[1233,1234,1235],{"id":151,"slug":2234,"dossier":47,"summary":2235,"aliases":2236,"sourceIds":2240,"published":2241,"modified":2242,"checkedAt":7,"severity":2243,"references":2246,"versionKeys":2286,"packageCount":32,"repositoryCount":2287},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2237,2238,2239],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[151,2239],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2244,2245],{"type":969,"score":1690},{"type":928,"score":1111},[2247,2249,2251,2253,2255,2257,2258,2260,2262,2264,2266,2268,2270,2272,2274,2276,2278,2280,2282,2284],{"type":943,"url":2248},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":932,"url":2250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":943,"url":2252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":943,"url":2254},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":943,"url":2256},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":940,"url":1260},{"type":943,"url":2259},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":943,"url":2261},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":943,"url":2263},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":932,"url":2265},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":932,"url":2267},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":932,"url":2269},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":932,"url":2271},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":932,"url":2273},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":932,"url":2275},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":932,"url":2277},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":932,"url":2279},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":932,"url":2281},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":932,"url":2283},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":932,"url":2285},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1264,1265,1266,1267,1268,1269,1270],15,{"id":152,"slug":2289,"dossier":47,"summary":2290,"aliases":2291,"sourceIds":2294,"published":2295,"modified":2296,"checkedAt":7,"severity":2297,"references":2300,"versionKeys":2317,"packageCount":32,"repositoryCount":103},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2292,2293],"CVE-2025-27516","PYSEC-2026-1471",[152,2293],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2298],{"type":969,"score":2299},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2301,2303,2305,2307,2309,2311,2313,2315],{"type":943,"url":2302},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":932,"url":2304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":937,"url":2306},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":940,"url":2308},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":943,"url":2310},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":943,"url":2312},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":940,"url":2314},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":932,"url":2316},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2318,2319],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":153,"slug":2321,"dossier":47,"summary":2322,"aliases":2323,"sourceIds":2326,"published":2327,"modified":2328,"checkedAt":7,"severity":2329,"references":2332,"versionKeys":2343,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[2324,2325],"CVE-2026-49854","PYSEC-2026-3388",[153,2325],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[2330],{"type":928,"score":2331},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2333,2335,2336,2338,2339,2341],{"type":943,"url":2334},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":940,"url":1225},{"type":943,"url":2337},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":940,"url":1227},{"type":932,"url":2340},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":932,"url":2342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1233,1234,1235,1236,1237],{"id":154,"slug":2345,"dossier":47,"summary":2346,"aliases":2347,"sourceIds":2351,"published":2352,"modified":2353,"checkedAt":7,"severity":2354,"references":2359,"versionKeys":2375,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2348,2349,2350],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[154,2350],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2355,2357],{"type":928,"score":2356},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":969,"score":2358},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2360,2362,2364,2366,2367,2369,2371,2373],{"type":932,"url":2361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":943,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":943,"url":2365},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":940,"url":1464},{"type":943,"url":2368},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":943,"url":2370},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":940,"url":2372},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":932,"url":2374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1470],{"id":155,"slug":2377,"dossier":47,"summary":2378,"aliases":2379,"sourceIds":2383,"published":2384,"modified":2385,"checkedAt":7,"severity":2386,"references":2391,"versionKeys":2409,"packageCount":32,"repositoryCount":103},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2380,2381,2382],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[155],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2387,2389],{"type":928,"score":2388},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":969,"score":2390},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2392,2394,2396,2398,2400,2402,2403,2405,2407],{"type":932,"url":2393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":943,"url":2395},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":943,"url":2397},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":943,"url":2399},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":943,"url":2401},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":940,"url":1085},{"type":943,"url":2404},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":943,"url":2406},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":943,"url":2408},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1097,1098],{"id":156,"slug":2411,"dossier":90,"summary":2412,"aliases":2413,"sourceIds":2417,"published":2418,"modified":2419,"checkedAt":7,"severity":2420,"references":2423,"versionKeys":2437,"packageCount":32,"repositoryCount":1273},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2414,2415,2416],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[156,2416],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[2421],{"type":928,"score":2422},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2424,2426,2428,2430,2432,2433,2434,2435],{"type":943,"url":2425},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":932,"url":2427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":943,"url":2429},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":943,"url":2431},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":940,"url":1260},{"type":943,"url":1567},{"type":940,"url":1569},{"type":932,"url":2436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":157,"slug":2439,"dossier":47,"summary":2440,"aliases":2441,"sourceIds":2444,"published":2445,"modified":2446,"checkedAt":7,"severity":2447,"references":2450,"versionKeys":2460,"packageCount":32,"repositoryCount":989},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[2442,2443],"CVE-2026-73624","PYSEC-2026-3995",[157,2443],"2026-07-24T16:41:20Z","2026-09-29T09:10:55.738617943Z",[2448,2449],{"type":928,"score":1138},{"type":969,"score":1140},[2451,2453,2454,2456,2457,2458],{"type":975,"url":2452},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":943,"url":1619},{"type":943,"url":2455},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":940,"url":980},{"type":943,"url":1624},{"type":932,"url":2459},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-diff",[986,987,988],{"id":158,"slug":2462,"dossier":90,"summary":2463,"aliases":2464,"sourceIds":2467,"published":2468,"modified":2469,"checkedAt":7,"severity":2470,"references":2475,"versionKeys":2485,"packageCount":32,"repositoryCount":2488},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[2465,2466],"CVE-2026-25645","PYSEC-2026-2275",[158,2466],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[2471,2473],{"type":928,"score":2472},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":928,"score":2474},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2476,2478,2480,2482,2483],{"type":932,"url":2477},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":932,"url":2479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":937,"url":2481},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":940,"url":2082},{"type":932,"url":2484},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2092,2093,2486,2487],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":159,"slug":2490,"dossier":47,"summary":2491,"aliases":2492,"sourceIds":2495,"published":2496,"modified":2497,"checkedAt":7,"severity":2498,"references":2500,"versionKeys":2511,"packageCount":32,"repositoryCount":1056},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2493,2494],"CVE-2025-66418","PYSEC-2026-1998",[159,2494],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[2499],{"type":969,"score":1032},[2501,2503,2505,2507,2508,2509],{"type":943,"url":2502},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":932,"url":2504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":937,"url":2506},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":940,"url":1047},{"type":940,"url":1049},{"type":932,"url":2510},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1051,1052,1053,1054,1055],{"id":160,"slug":2513,"dossier":47,"summary":2514,"aliases":2515,"sourceIds":2518,"published":2519,"modified":2520,"checkedAt":7,"severity":2521,"references":2524,"versionKeys":2539,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2516,2517],"CVE-2024-56201","PYSEC-2026-1472",[160,2517],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[2522,2523],{"type":928,"score":1001},{"type":969,"score":2299},[2525,2527,2529,2531,2533,2534,2536,2537],{"type":943,"url":2526},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":932,"url":2528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":943,"url":2530},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":937,"url":2532},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":940,"url":2308},{"type":943,"url":2535},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":940,"url":2314},{"type":932,"url":2538},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2318],{"id":161,"slug":2541,"dossier":90,"summary":2542,"aliases":2543,"sourceIds":2547,"published":2548,"modified":2549,"checkedAt":7,"severity":2550,"references":2553,"versionKeys":2565,"packageCount":32,"repositoryCount":2488},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[2544,2545,2546],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[161,2546],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[2551],{"type":928,"score":2552},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2554,2556,2558,2560,2562,2563],{"type":975,"url":2555},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":932,"url":2557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":937,"url":2559},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":943,"url":2561},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":940,"url":1464},{"type":932,"url":2564},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1470,1471,1472,1473,2566,2567,2568,2569,2570,2571,2572,2573],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":162,"slug":2575,"dossier":47,"summary":2576,"aliases":2577,"sourceIds":2580,"published":2581,"modified":2582,"checkedAt":7,"severity":2583,"references":2585,"versionKeys":2606,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2578,2579],"CVE-2024-34064","PYSEC-2026-1474",[162,2579],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[2584],{"type":928,"score":1721},[2586,2588,2590,2592,2593,2595,2597,2599,2601,2603,2604],{"type":943,"url":2587},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":932,"url":2589},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":937,"url":2591},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":940,"url":2308},{"type":943,"url":2594},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":943,"url":2596},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":943,"url":2598},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":943,"url":2600},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":943,"url":2602},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":940,"url":2314},{"type":932,"url":2605},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2318],{"id":163,"slug":2608,"dossier":47,"summary":2609,"aliases":2610,"sourceIds":2613,"published":2614,"modified":2615,"checkedAt":7,"severity":2616,"references":2618,"versionKeys":2633,"packageCount":32,"repositoryCount":989},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[2611,2612],"CVE-2026-76217","PYSEC-2026-3841",[163,2612],"2026-08-07T15:43:56Z","2026-09-10T12:26:07.095223621Z",[2617],{"type":928,"score":1190},[2619,2621,2623,2624,2626,2627,2628,2630,2631],{"type":943,"url":2620},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":932,"url":2622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76217",{"type":943,"url":1318},{"type":943,"url":2625},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":940,"url":980},{"type":943,"url":1323},{"type":943,"url":2629},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-pathspec-from-file",{"type":940,"url":1017},{"type":932,"url":2632},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",[986,987,988],{"id":164,"slug":2635,"dossier":47,"summary":2636,"aliases":2637,"sourceIds":2640,"published":2641,"modified":2642,"checkedAt":7,"severity":2643,"references":2648,"versionKeys":2665,"packageCount":32,"repositoryCount":989},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[2638,2639],"CVE-2026-76222","PYSEC-2026-3784",[164,2639],"2026-08-07T15:45:39Z","2026-09-08T21:00:05.149418166Z",[2644,2646],{"type":928,"score":2645},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",{"type":969,"score":2647},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:H\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2649,2651,2653,2655,2657,2659,2660,2661,2663],{"type":975,"url":2650},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":932,"url":2652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76222",{"type":943,"url":2654},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":943,"url":2656},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":943,"url":2658},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":940,"url":980},{"type":943,"url":1323},{"type":943,"url":2662},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3784.yaml",{"type":932,"url":2664},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-gitmodules-submodule-name",[986,987,988],{"id":165,"slug":2667,"dossier":47,"summary":2668,"aliases":2669,"sourceIds":2672,"published":2673,"modified":2674,"checkedAt":7,"severity":2675,"references":2677,"versionKeys":2687,"packageCount":32,"repositoryCount":1300},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[2670,2671],"CVE-2025-67726","PYSEC-2025-267",[165,2671],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[2676],{"type":928,"score":1111},[2678,2680,2682,2683,2685,2686],{"type":932,"url":2679},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":932,"url":2681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":937,"url":2226},{"type":943,"url":2684},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":940,"url":1225},{"type":932,"url":2231},[1233,1234,1235],{"id":166,"slug":2689,"dossier":90,"summary":2690,"aliases":2691,"sourceIds":2695,"published":2696,"modified":2697,"checkedAt":7,"severity":2698,"references":2700,"versionKeys":2714,"packageCount":32,"repositoryCount":1273},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[2692,2693,2694],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[166,2694],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[2699],{"type":928,"score":1111},[2701,2703,2705,2707,2709,2710,2711,2712],{"type":943,"url":2702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":932,"url":2704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":943,"url":2706},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":943,"url":2708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":940,"url":1260},{"type":943,"url":1567},{"type":940,"url":1569},{"type":932,"url":2713},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":167,"slug":2716,"dossier":47,"summary":2717,"aliases":2718,"sourceIds":2721,"published":2722,"modified":2723,"checkedAt":7,"severity":2724,"references":2728,"versionKeys":2738,"packageCount":32,"repositoryCount":989},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[2719,2720],"CVE-2026-76221","PYSEC-2026-3783",[167,2720],"2026-08-07T15:46:35Z","2026-09-10T03:51:14.296736368Z",[2725,2726],{"type":928,"score":1001},{"type":969,"score":2727},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2729,2731,2732,2734,2735,2736],{"type":975,"url":2730},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":943,"url":1318},{"type":943,"url":2733},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":940,"url":980},{"type":943,"url":1323},{"type":932,"url":2737},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-option-name",[986,987,988],{"id":168,"slug":2740,"dossier":47,"summary":2741,"aliases":2742,"sourceIds":2745,"published":2746,"modified":2747,"checkedAt":7,"severity":2748,"references":2751,"versionKeys":2759,"packageCount":32,"repositoryCount":307},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2743,2744],"CVE-2026-44432","PYSEC-2026-142",[168,2744],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[2749,2750],{"type":928,"score":1111},{"type":969,"score":1032},[2752,2754,2756,2758],{"type":932,"url":2753},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":932,"url":2755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":943,"url":2757},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":940,"url":1047},[2760],"pypi:urllib3@2.6.3",{"id":169,"slug":2762,"dossier":47,"summary":2763,"aliases":2764,"sourceIds":2767,"published":2768,"modified":2769,"checkedAt":7,"severity":2770,"references":2772,"versionKeys":2781,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[2765,2766],"CVE-2026-49855","PYSEC-2026-3389",[169,2766],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[2771],{"type":928,"score":1111},[2773,2775,2776,2777,2779],{"type":943,"url":2774},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":940,"url":1225},{"type":940,"url":1227},{"type":932,"url":2778},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":932,"url":2780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1233,1234,1235,1236,1237],{"id":170,"slug":2783,"dossier":47,"summary":2784,"aliases":2785,"sourceIds":2788,"published":2789,"modified":2790,"checkedAt":7,"severity":2791,"references":2793,"versionKeys":2806,"packageCount":32,"repositoryCount":1878},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[2786,2787],"CVE-2026-82397","PYSEC-2026-3928",[170,2787],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[2792],{"type":928,"score":1111},[2794,2796,2798,2799,2801,2802,2803,2804],{"type":943,"url":2795},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":932,"url":2797},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":943,"url":1868},{"type":943,"url":2800},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":940,"url":1225},{"type":943,"url":1875},{"type":940,"url":1227},{"type":932,"url":2805},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[1233,1234,1235,1236,1237,1877],{"id":171,"slug":2808,"dossier":47,"summary":2809,"aliases":2810,"sourceIds":2813,"published":2814,"modified":2815,"checkedAt":7,"severity":2816,"references":2819,"versionKeys":2827,"packageCount":32,"repositoryCount":989},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[2811,2812],"CVE-2026-67326","PYSEC-2026-3980",[171,2812],"2026-05-08T23:19:02Z","2026-09-17T09:10:55.928803360Z",[2817,2818],{"type":928,"score":1165},{"type":928,"score":1692},[2820,2822,2824,2825],{"type":975,"url":2821},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":932,"url":2823},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":940,"url":980},{"type":932,"url":2826},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-newline-injection-via-config-writer-section",[986,987,988],{"id":172,"slug":2829,"dossier":47,"summary":2830,"aliases":2831,"sourceIds":2834,"published":2835,"modified":2836,"checkedAt":7,"severity":2837,"references":2842,"versionKeys":2854,"packageCount":32,"repositoryCount":989},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[2832,2833],"CVE-2026-73621","PYSEC-2026-3950",[172,2833],"2026-08-03T20:23:17Z","2026-09-10T13:10:55.177009469Z",[2838,2840],{"type":928,"score":2839},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":969,"score":2841},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2843,2845,2847,2849,2850,2852],{"type":975,"url":2844},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":943,"url":2846},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":943,"url":2848},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":940,"url":980},{"type":943,"url":2851},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",{"type":932,"url":2853},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-truncation-via-commit-count",[986,987,988],{"id":173,"slug":2856,"dossier":47,"summary":2857,"aliases":2858,"sourceIds":2862,"published":2863,"modified":2864,"checkedAt":7,"severity":2865,"references":2868,"versionKeys":2881,"packageCount":32,"repositoryCount":989},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[2859,2860,2861],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[173,2861],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[2866,2867],{"type":928,"score":1584},{"type":928,"score":1111},[2869,2871,2873,2875,2877,2879,2880],{"type":975,"url":2870},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":932,"url":2872},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":937,"url":2874},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":937,"url":2876},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":943,"url":2878},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":940,"url":1260},{"type":932,"url":1567},[1269,1270,1271,1272],{"id":174,"slug":2883,"dossier":90,"summary":2884,"aliases":2885,"sourceIds":2889,"published":2890,"modified":2891,"checkedAt":7,"severity":2892,"references":2894,"versionKeys":2905,"packageCount":32,"repositoryCount":1273},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[2886,2887,2888],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[174,2888],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[2893],{"type":928,"score":1111},[2895,2897,2899,2901,2903,2904],{"type":975,"url":2896},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":932,"url":2898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":937,"url":2900},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":943,"url":2902},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":940,"url":1260},{"type":932,"url":1262},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":175,"slug":2907,"dossier":47,"summary":2908,"aliases":2909,"sourceIds":2912,"published":2913,"modified":2914,"checkedAt":7,"severity":2915,"references":2917,"versionKeys":2929,"packageCount":32,"repositoryCount":1300},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2910,2911],"CVE-2025-50181","PYSEC-2026-1999",[175,2911],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[2916],{"type":928,"score":1285},[2918,2920,2922,2924,2925,2926,2927],{"type":943,"url":2919},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":932,"url":2921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":937,"url":2923},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":940,"url":1047},{"type":943,"url":1295},{"type":940,"url":1049},{"type":932,"url":2928},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1051,1052,1053,1054],{"id":176,"slug":2931,"dossier":47,"summary":2932,"aliases":2933,"sourceIds":2936,"published":2937,"modified":2938,"checkedAt":7,"severity":2939,"references":2943,"versionKeys":2954,"packageCount":32,"repositoryCount":1300},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[2934,2935],"CVE-2025-67724","PYSEC-2025-265",[176,2935],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[2940,2941],{"type":928,"score":1721},{"type":928,"score":2942},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[2944,2946,2948,2950,2952,2953],{"type":932,"url":2945},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":932,"url":2947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":937,"url":2949},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":943,"url":2951},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":940,"url":1225},{"type":932,"url":2231},[1233,1234,1235],{"id":177,"slug":2956,"dossier":47,"summary":2957,"aliases":2958,"sourceIds":2960,"published":2961,"modified":2962,"checkedAt":7,"severity":2963,"references":2966,"versionKeys":2970,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[2959],"CVE-2026-91992",[177],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[2964],{"type":928,"score":2965},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2967,2969],{"type":943,"url":2968},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":940,"url":1225},[1233,1234,1235,1236,1237],{"id":178,"slug":2972,"dossier":47,"summary":2973,"aliases":2974,"sourceIds":2978,"published":2979,"modified":2980,"checkedAt":7,"severity":2981,"references":2985,"versionKeys":2997,"packageCount":32,"repositoryCount":1056},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2975,2976,2977],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[178,2977],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[2982,2983],{"type":969,"score":1690},{"type":928,"score":2984},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2986,2987,2989,2991,2993,2995,2996],{"type":943,"url":2248},{"type":937,"url":2988},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":932,"url":2990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":937,"url":2992},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":937,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":940,"url":1260},{"type":932,"url":1518},[1264,1265,1266,1267,1268,1269,1270,1271],{"id":179,"slug":2999,"dossier":47,"summary":3000,"aliases":3001,"sourceIds":3004,"published":3005,"modified":3006,"checkedAt":7,"severity":3007,"references":3010,"versionKeys":3023,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3002,3003],"CVE-2024-56326","PYSEC-2026-1475",[179,3003],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3008,3009],{"type":928,"score":1692},{"type":969,"score":2299},[3011,3013,3015,3017,3018,3019,3020,3021],{"type":943,"url":3012},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":932,"url":3014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":937,"url":3016},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":940,"url":2308},{"type":943,"url":2535},{"type":943,"url":2310},{"type":940,"url":2314},{"type":932,"url":3022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2318],{"id":180,"slug":3025,"dossier":90,"summary":3026,"aliases":3027,"sourceIds":3030,"published":3031,"modified":3032,"checkedAt":7,"severity":3033,"references":3038,"versionKeys":3044,"packageCount":32,"repositoryCount":2488},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3028,3029],"CVE-2026-44431","PYSEC-2026-141",[180,3029],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3034,3036],{"type":928,"score":3035},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":969,"score":3037},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3039,3041,3043],{"type":932,"url":3040},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":932,"url":3042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":940,"url":1047},[1051,1052,1053,1054,1055,2760],{"id":181,"slug":3046,"dossier":47,"summary":3047,"aliases":3048,"sourceIds":3052,"published":3053,"modified":3054,"checkedAt":7,"severity":3055,"references":3059,"versionKeys":3077,"packageCount":32,"repositoryCount":276},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[3049,3050,3051],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[181],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[3056,3057],{"type":928,"score":2388},{"type":969,"score":3058},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3060,3062,3064,3066,3068,3070,3071,3073,3075],{"type":932,"url":3061},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":943,"url":3063},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":943,"url":3065},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":943,"url":3067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":943,"url":3069},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":940,"url":1085},{"type":943,"url":3072},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":943,"url":3074},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":943,"url":3076},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1097,1098,1099,1916,1917,3078,3079,3080,3081],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":182,"slug":3083,"dossier":47,"summary":3084,"aliases":3085,"sourceIds":3088,"published":3089,"modified":3090,"checkedAt":7,"severity":3091,"references":3095,"versionKeys":3108,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[3086,3087],"CVE-2026-31958","PYSEC-2026-140",[182,3087],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[3092,3093],{"type":928,"score":1111},{"type":969,"score":3094},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3096,3098,3100,3102,3104,3105,3106],{"type":932,"url":3097},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":932,"url":3099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":943,"url":3101},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":943,"url":3103},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":940,"url":1225},{"type":943,"url":1733},{"type":943,"url":3107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1233,1234,1235,1236],{"id":183,"slug":3110,"dossier":47,"summary":3111,"aliases":3112,"sourceIds":3115,"published":3116,"modified":3117,"checkedAt":7,"severity":3118,"references":3121,"versionKeys":3136,"packageCount":32,"repositoryCount":276},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3113,3114],"CVE-2026-22701","PYSEC-2026-1374",[183,3114],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3119],{"type":928,"score":3120},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3122,3124,3126,3128,3130,3132,3134],{"type":943,"url":3123},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":932,"url":3125},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":943,"url":3127},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":943,"url":3129},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":940,"url":3131},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":940,"url":3133},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":932,"url":3135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3137,3138,3139,3140],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":184,"slug":3142,"dossier":47,"summary":3143,"aliases":3144,"sourceIds":3148,"published":3149,"modified":3150,"checkedAt":7,"severity":3151,"references":3154,"versionKeys":3168,"packageCount":32,"repositoryCount":1056},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[3145,3146,3147],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[184,3147],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[3152,3153],{"type":928,"score":1073},{"type":969,"score":1510},[3155,3157,3159,3161,3163,3164,3165,3166],{"type":943,"url":3156},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":932,"url":3158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":943,"url":3160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":943,"url":3162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":940,"url":1260},{"type":943,"url":1518},{"type":940,"url":1569},{"type":932,"url":3167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1264,1265,1266,1267,1268,1269,1270,1271],{"id":185,"slug":3170,"dossier":47,"summary":3171,"aliases":3172,"sourceIds":3175,"published":3176,"modified":3177,"checkedAt":7,"severity":3178,"references":3181,"versionKeys":3191,"packageCount":32,"repositoryCount":989},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[3173,3174],"CVE-2026-73625","PYSEC-2026-3953",[185,3174],"2026-07-24T16:42:57Z","2026-09-10T13:10:47.448946391Z",[3179,3180],{"type":928,"score":1001},{"type":969,"score":2727},[3182,3184,3185,3187,3188,3189],{"type":975,"url":3183},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":943,"url":1619},{"type":943,"url":3186},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":940,"url":980},{"type":943,"url":1624},{"type":932,"url":3190},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-kwarg-value-smuggling",[986,987,988],{"id":186,"slug":3193,"dossier":47,"summary":3194,"aliases":3195,"sourceIds":3198,"published":3199,"modified":3200,"checkedAt":7,"severity":3201,"references":3204,"versionKeys":3217,"packageCount":32,"repositoryCount":276},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[3196,3197],"CVE-2026-25087","PYSEC-2026-113",[186,3197],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[3202],{"type":928,"score":3203},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[3205,3207,3209,3211,3213,3215],{"type":932,"url":3206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":937,"url":3208},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":940,"url":3210},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":943,"url":3212},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":932,"url":3214},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":932,"url":3216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[3218,3219,3220,3221],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":187,"slug":3223,"dossier":47,"summary":3224,"aliases":3225,"sourceIds":3228,"published":3229,"modified":3230,"checkedAt":7,"severity":3231,"references":3233,"versionKeys":3241,"packageCount":32,"repositoryCount":989},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[3226,3227],"CVE-2026-42215","PYSEC-2026-2160",[187,3227],"2026-04-25T23:42:16Z","2026-09-10T03:51:03.167884784Z",[3232],{"type":928,"score":1001},[3234,3236,3238,3239],{"type":975,"url":3235},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":932,"url":3237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":940,"url":980},{"type":937,"url":3240},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[986,987,988],{"id":188,"slug":3243,"dossier":47,"summary":3244,"aliases":3245,"sourceIds":3249,"published":2384,"modified":3250,"checkedAt":7,"severity":3251,"references":3254,"versionKeys":3272,"packageCount":32,"repositoryCount":1056},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[3246,3247,3248],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[188],"2026-09-10T03:49:48.419046410Z",[3252,3253],{"type":928,"score":2388},{"type":969,"score":3058},[3255,3257,3259,3261,3263,3265,3266,3268,3270],{"type":932,"url":3256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":943,"url":3258},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":943,"url":3260},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":943,"url":3262},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":943,"url":3264},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":940,"url":1085},{"type":943,"url":3267},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":943,"url":3269},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":943,"url":3271},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[3273,3274,3275,1097,1098,1099,1916,1917,3078,3079,3080,3081],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":189,"slug":3277,"dossier":47,"summary":3278,"aliases":3279,"sourceIds":3282,"published":3283,"modified":3284,"checkedAt":7,"severity":3285,"references":3287,"versionKeys":3305,"packageCount":32,"repositoryCount":989},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[3280,3281],"CVE-2026-67322","PYSEC-2026-3842",[189,3281],"2026-07-21T22:06:09Z","2026-09-24T18:28:17.149390188Z",[3286],{"type":928,"score":1929},[3288,3290,3292,3294,3295,3297,3298,3300,3302,3303],{"type":943,"url":3289},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":932,"url":3291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67322",{"type":943,"url":3293},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":943,"url":2023},{"type":932,"url":3296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":940,"url":980},{"type":943,"url":3299},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",{"type":943,"url":3301},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3842.yaml",{"type":940,"url":1017},{"type":943,"url":3304},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-clone-from",[986,987,988],{"id":190,"slug":3307,"dossier":47,"summary":3308,"aliases":3309,"sourceIds":3312,"published":3313,"modified":3314,"checkedAt":7,"severity":3315,"references":3317,"versionKeys":3325,"packageCount":32,"repositoryCount":989},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[3310,3311],"CVE-2026-44244","PYSEC-2026-2163",[190,3311],"2026-05-06T21:58:00Z","2026-09-10T03:50:47.691444343Z",[3316],{"type":928,"score":1692},[3318,3320,3322,3323],{"type":975,"url":3319},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":932,"url":3321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":940,"url":980},{"type":937,"url":3324},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[986,987,988],{"id":191,"slug":3327,"dossier":47,"summary":3328,"aliases":3329,"sourceIds":3333,"published":2384,"modified":3334,"checkedAt":7,"severity":3335,"references":3338,"versionKeys":3353,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[3330,3331,3332],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[191],"2026-06-10T17:41:15.774477397Z",[3336,3337],{"type":928,"score":2388},{"type":969,"score":2390},[3339,3341,3342,3343,3344,3346,3347,3349,3351],{"type":932,"url":3340},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":943,"url":2395},{"type":943,"url":2397},{"type":943,"url":2399},{"type":943,"url":3345},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":940,"url":1085},{"type":943,"url":3348},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":943,"url":3350},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":943,"url":3352},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1097,1098,1099,1916,1917,3078,3079],{"id":192,"slug":3355,"dossier":90,"summary":3356,"aliases":3357,"sourceIds":3361,"published":3362,"modified":3363,"checkedAt":7,"severity":3364,"references":3366,"versionKeys":3380,"packageCount":32,"repositoryCount":1273},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[3358,3359,3360],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[192,3360],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[3365],{"type":969,"score":3094},[3367,3369,3371,3373,3375,3376,3377,3378],{"type":943,"url":3368},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":932,"url":3370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":943,"url":3372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":943,"url":3374},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":940,"url":1260},{"type":943,"url":1567},{"type":940,"url":1569},{"type":932,"url":3379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":193,"slug":3382,"dossier":47,"summary":3383,"aliases":3384,"sourceIds":3387,"published":3388,"modified":3389,"checkedAt":7,"severity":3390,"references":3393,"versionKeys":3406,"packageCount":32,"repositoryCount":307},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[3385,3386],"CVE-2025-43859","PYSEC-2026-348",[193,3386],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[3391],{"type":928,"score":3392},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3394,3396,3398,3400,3402,3404],{"type":943,"url":3395},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":932,"url":3397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":943,"url":3399},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":940,"url":3401},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":940,"url":3403},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":932,"url":3405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[3407],"pypi:h11@0.14.0",{"id":194,"slug":3409,"dossier":47,"summary":3410,"aliases":3411,"sourceIds":3414,"published":3415,"modified":3416,"checkedAt":7,"severity":3417,"references":3424,"versionKeys":3450,"packageCount":32,"repositoryCount":307},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[3412,3413],"CVE-2026-10804","PYSEC-2026-212",[194,3413],"2026-06-04T12:16:24.620Z","2026-07-23T15:00:23.893493649Z",[3418,3420,3422],{"type":928,"score":3419},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":969,"score":3421},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":928,"score":3423},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3425,3427,3429,3431,3433,3435,3437,3438,3440,3442,3444,3446,3448],{"type":932,"url":3426},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":937,"url":3428},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":937,"url":3430},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":943,"url":3432},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":943,"url":3434},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":943,"url":3436},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":940,"url":1826},{"type":932,"url":3439},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":932,"url":3441},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":932,"url":3443},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":1078,"url":3445},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":943,"url":3447},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",{"type":932,"url":3449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqwp-45wm-r9r5",[1830,1831,1832],{"id":195,"slug":3452,"dossier":47,"summary":3453,"aliases":3454,"sourceIds":3457,"published":3458,"modified":3459,"checkedAt":7,"severity":3460,"references":3463,"versionKeys":3480,"packageCount":32,"repositoryCount":276},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[3455,3456],"CVE-2025-68146","PYSEC-2026-1375",[195,3456],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[3461],{"type":928,"score":3462},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3464,3466,3468,3469,3471,3473,3475,3476,3478],{"type":943,"url":3465},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":943,"url":3467},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":940,"url":3131},{"type":943,"url":3470},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":943,"url":3472},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":943,"url":3474},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":940,"url":3133},{"type":932,"url":3477},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":932,"url":3479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3137,3138,3139,3140],{"id":196,"slug":3482,"dossier":47,"summary":3483,"aliases":3484,"sourceIds":3488,"published":3489,"modified":3490,"checkedAt":7,"severity":3491,"references":3494,"versionKeys":3532,"packageCount":32,"repositoryCount":1056},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[3485,3486,3487],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[196,3487],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[3492,3493],{"type":928,"score":1111},{"type":969,"score":3094},[3495,3497,3499,3501,3503,3504,3506,3508,3510,3512,3514,3516,3517,3519,3521,3523,3524,3526,3528,3530],{"type":943,"url":3496},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":932,"url":3498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":943,"url":3500},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":943,"url":3502},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":940,"url":1260},{"type":943,"url":3505},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":943,"url":3507},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":943,"url":3509},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":932,"url":3511},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":932,"url":3513},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":932,"url":3515},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":932,"url":2271},{"type":932,"url":3518},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":932,"url":3520},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":932,"url":3522},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":932,"url":2273},{"type":932,"url":3525},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":932,"url":3527},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":932,"url":3529},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":932,"url":3531},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1264,1265,1266,1267,1268,1269,1270,1271],{"id":197,"slug":3534,"dossier":47,"summary":3535,"aliases":3536,"sourceIds":3540,"published":3541,"modified":3542,"checkedAt":7,"severity":3543,"references":3546,"versionKeys":3555,"packageCount":32,"repositoryCount":1056},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[3537,3538,3539],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[197,3539],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[3544,3545],{"type":928,"score":1073},{"type":969,"score":1510},[3547,3549,3551,3553,3554],{"type":932,"url":3548},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":932,"url":3550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":943,"url":3552},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":940,"url":1260},{"type":932,"url":1518},[1264,1265,1266,1267,1268,1269,1270,1271],{"id":198,"slug":3557,"dossier":47,"summary":3558,"aliases":3559,"sourceIds":3562,"published":3563,"modified":3564,"checkedAt":7,"severity":3565,"references":3567,"versionKeys":3582,"packageCount":32,"repositoryCount":989},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[3560,3561],"CVE-2026-76220","PYSEC-2026-3843",[198,3561],"2026-08-07T15:49:07Z","2026-09-10T12:26:01.792035310Z",[3566],{"type":928,"score":1001},[3568,3570,3572,3573,3575,3576,3577,3579,3580],{"type":943,"url":3569},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":932,"url":3571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76220",{"type":943,"url":1318},{"type":943,"url":3574},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":940,"url":980},{"type":943,"url":1323},{"type":943,"url":3578},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-execution-via-split-single-char-options",{"type":940,"url":1017},{"type":932,"url":3581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",[986,987,988],{"id":199,"slug":3584,"dossier":47,"summary":3585,"aliases":3586,"sourceIds":3588,"published":3589,"modified":3590,"checkedAt":7,"severity":3591,"references":3594,"versionKeys":3606,"packageCount":32,"repositoryCount":103},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[3587],"CVE-2026-91991",[199],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[3592],{"type":969,"score":3593},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3595,3597,3598,3600,3602,3604,3605],{"type":943,"url":3596},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":943,"url":1868},{"type":943,"url":3599},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":943,"url":3601},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":943,"url":3603},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":940,"url":1225},{"type":943,"url":1875},[1237,1877],{"id":200,"slug":3608,"dossier":47,"summary":3609,"aliases":3610,"sourceIds":3613,"published":3614,"modified":3615,"checkedAt":7,"severity":3616,"references":3620,"versionKeys":3629,"packageCount":32,"repositoryCount":989},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[3611,3612],"CVE-2026-42284","PYSEC-2026-2161",[200,3612],"2026-04-25T23:41:49Z","2026-09-10T03:51:03.787491179Z",[3617,3619],{"type":928,"score":3618},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":928,"score":967},[3621,3623,3625,3626,3627],{"type":975,"url":3622},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":932,"url":3624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":940,"url":980},{"type":937,"url":3240},{"type":943,"url":3628},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[986,987,988],{"id":201,"slug":3631,"dossier":47,"summary":3632,"aliases":3633,"sourceIds":3637,"published":3638,"modified":3639,"checkedAt":7,"severity":3640,"references":3645,"versionKeys":3661,"packageCount":32,"repositoryCount":103},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[3634,3635,3636],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[201],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[3641,3643],{"type":928,"score":3642},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":969,"score":3644},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3646,3648,3650,3652,3654,3655,3657,3659],{"type":932,"url":3647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":943,"url":3649},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":943,"url":3651},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":943,"url":3653},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":940,"url":1085},{"type":943,"url":3656},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":943,"url":3658},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":943,"url":3660},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1097,1098],{"id":202,"slug":3663,"dossier":47,"summary":3664,"aliases":3665,"sourceIds":3669,"published":3670,"modified":3671,"checkedAt":7,"severity":3672,"references":3674,"versionKeys":3688,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[3666,3667,3668],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[202,3668],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[3673],{"type":928,"score":1665},[3675,3677,3679,3681,3683,3685,3686],{"type":932,"url":3676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":932,"url":3678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":943,"url":3680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":937,"url":3682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":943,"url":3684},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":940,"url":1260},{"type":943,"url":3687},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1267],{"id":203,"slug":3690,"dossier":90,"summary":3691,"aliases":3692,"sourceIds":3696,"published":3697,"modified":3698,"checkedAt":7,"severity":3699,"references":3702,"versionKeys":3713,"packageCount":32,"repositoryCount":1273},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[3693,3694,3695],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[203,3695],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[3700],{"type":928,"score":3701},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3703,3705,3707,3709,3711,3712],{"type":975,"url":3704},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":932,"url":3706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":937,"url":3708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":937,"url":3710},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":940,"url":1260},{"type":932,"url":1567},[1264,1265,1266,1267,1268,1269,1270,1271,1272],{"id":204,"slug":3715,"dossier":47,"summary":83,"aliases":3716,"sourceIds":3719,"published":3720,"modified":3721,"checkedAt":7,"severity":3722,"references":3725,"versionKeys":3734,"packageCount":32,"repositoryCount":32},"pysec-2025-112-653e8a7c",[3717,3718],"CVE-2025-64429","GHSA-vmp8-hg63-v2hp",[204],"2025-11-12T22:15:49.813Z","2026-05-20T09:18:59.601738Z",[3723],{"type":928,"score":3724},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3726,3728,3730,3732],{"type":943,"url":3727},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fblob\u002F029a5b87ff5b1cd22f7f9717d48cd8830d00807c\u002Fsrc\u002Fcommon\u002Frandom_engine.cpp#L20",{"type":932,"url":3729},"https:\u002F\u002Fduckdb.org\u002F2025\u002F09\u002F16\u002Fannouncing-duckdb-140.html",{"type":932,"url":3731},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fsecurity\u002Fadvisories\u002FGHSA-vmp8-hg63-v2hp",{"type":937,"url":3733},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fpull\u002F17275",[3735],"pypi:duckdb@1.4.1",{"id":205,"slug":3737,"dossier":47,"summary":83,"aliases":3738,"sourceIds":3741,"published":3742,"modified":3743,"checkedAt":7,"severity":3744,"references":3746,"versionKeys":3755,"packageCount":32,"repositoryCount":103},"pysec-2025-198-62b25ed4",[3739,3740],"BIT-pytorch-2025-46148","CVE-2025-46148",[205],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[3745],{"type":928,"score":3035},[3747,3749,3751,3753],{"type":932,"url":3748},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":932,"url":3750},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1078,"url":3752},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":937,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1097,1098],{"id":206,"slug":3757,"dossier":47,"summary":83,"aliases":3758,"sourceIds":3761,"published":3762,"modified":3763,"checkedAt":7,"severity":3764,"references":3766,"versionKeys":3772,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[3759,3760],"BIT-pytorch-2025-46149","CVE-2025-46149",[206],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[3765],{"type":928,"score":3035},[3767,3768,3770],{"type":932,"url":3748},{"type":1078,"url":3769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":937,"url":3771},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1098],{"id":207,"slug":3774,"dossier":47,"summary":83,"aliases":3775,"sourceIds":3778,"published":3779,"modified":3780,"checkedAt":7,"severity":3781,"references":3783,"versionKeys":3791,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[3776,3777],"BIT-pytorch-2025-46150","CVE-2025-46150",[207],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[3782],{"type":928,"score":3035},[3784,3785,3787,3789],{"type":932,"url":3748},{"type":1078,"url":3786},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1078,"url":3788},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":937,"url":3790},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1098],{"id":208,"slug":3793,"dossier":47,"summary":83,"aliases":3794,"sourceIds":3797,"published":3798,"modified":3799,"checkedAt":7,"severity":3800,"references":3802,"versionKeys":3808,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[3795,3796],"BIT-pytorch-2025-46152","CVE-2025-46152",[208],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[3801],{"type":928,"score":1584},[3803,3804,3806],{"type":932,"url":3748},{"type":1078,"url":3805},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":937,"url":3807},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1098],{"id":209,"slug":3810,"dossier":47,"summary":83,"aliases":3811,"sourceIds":3814,"published":3815,"modified":3816,"checkedAt":7,"severity":3817,"references":3819,"versionKeys":3829,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[3812,3813],"BIT-pytorch-2025-46153","CVE-2025-46153",[209],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[3818],{"type":928,"score":3035},[3820,3822,3823,3825,3827],{"type":943,"url":3821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":932,"url":3748},{"type":932,"url":3824},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1078,"url":3826},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":937,"url":3828},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1098],{"id":210,"slug":3831,"dossier":47,"summary":83,"aliases":3832,"sourceIds":3835,"published":3836,"modified":3837,"checkedAt":7,"severity":3838,"references":3840,"versionKeys":3845,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[3833,3834],"BIT-pytorch-2025-55551","CVE-2025-55551",[210],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[3839],{"type":928,"score":1111},[3841,3843],{"type":932,"url":3842},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1078,"url":3844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1097,1098,1099,1916,1917,3078],{"id":211,"slug":3847,"dossier":47,"summary":83,"aliases":3848,"sourceIds":3851,"published":3852,"modified":3853,"checkedAt":7,"severity":3854,"references":3856,"versionKeys":3860,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[3849,3850],"BIT-pytorch-2025-55552","CVE-2025-55552",[211],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[3855],{"type":928,"score":1111},[3857,3858],{"type":932,"url":3842},{"type":1078,"url":3859},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1097,1098,1099,1916,1917,3078],{"id":212,"slug":3862,"dossier":47,"summary":83,"aliases":3863,"sourceIds":3866,"published":3867,"modified":3868,"checkedAt":7,"severity":3869,"references":3871,"versionKeys":3877,"packageCount":32,"repositoryCount":307},"pysec-2025-205-fd5e58fd",[3864,3865],"BIT-pytorch-2025-55553","CVE-2025-55553",[212],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[3870],{"type":928,"score":1111},[3872,3873,3875],{"type":932,"url":3842},{"type":1078,"url":3874},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":937,"url":3876},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1097,1098,1099],{"id":213,"slug":3879,"dossier":47,"summary":83,"aliases":3880,"sourceIds":3883,"published":3884,"modified":3885,"checkedAt":7,"severity":3886,"references":3888,"versionKeys":3892,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[3881,3882],"BIT-pytorch-2025-55554","CVE-2025-55554",[213],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[3887],{"type":928,"score":1584},[3889,3890],{"type":932,"url":3842},{"type":1078,"url":3891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1097,1098,1099,1916,1917,3078],{"id":214,"slug":3894,"dossier":47,"summary":83,"aliases":3895,"sourceIds":3898,"published":3899,"modified":3900,"checkedAt":7,"severity":3901,"references":3903,"versionKeys":3909,"packageCount":32,"repositoryCount":307},"pysec-2025-207-2abef3fc",[3896,3897],"BIT-pytorch-2025-55557","CVE-2025-55557",[214],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[3902],{"type":928,"score":1111},[3904,3905,3907],{"type":932,"url":3842},{"type":1078,"url":3906},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":937,"url":3908},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1097,1098,1099],{"id":215,"slug":3911,"dossier":47,"summary":83,"aliases":3912,"sourceIds":3915,"published":3916,"modified":3917,"checkedAt":7,"severity":3918,"references":3920,"versionKeys":3926,"packageCount":32,"repositoryCount":307},"pysec-2025-208-6e93fe9d",[3913,3914],"BIT-pytorch-2025-55558","CVE-2025-55558",[215],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[3919],{"type":928,"score":1111},[3921,3922,3924],{"type":932,"url":3842},{"type":1078,"url":3923},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":937,"url":3925},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1097,1098,1099],{"id":216,"slug":3928,"dossier":47,"summary":83,"aliases":3929,"sourceIds":3932,"published":3933,"modified":3934,"checkedAt":7,"severity":3935,"references":3937,"versionKeys":3943,"packageCount":32,"repositoryCount":307},"pysec-2025-209-e6f352b0",[3930,3931],"BIT-pytorch-2025-55560","CVE-2025-55560",[216],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[3936],{"type":928,"score":1111},[3938,3939,3941],{"type":932,"url":3842},{"type":1078,"url":3940},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":937,"url":3942},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1097,1098,1099],{"id":217,"slug":3945,"dossier":47,"summary":83,"aliases":3946,"sourceIds":3949,"published":3950,"modified":3951,"checkedAt":7,"severity":3952,"references":3954,"versionKeys":3965,"packageCount":32,"repositoryCount":3966},"pysec-2026-139-96951ff6",[3947,3948],"BIT-pytorch-2026-4538","CVE-2026-4538",[217],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[3953],{"type":928,"score":1692},[3955,3957,3959,3961,3963],{"type":943,"url":3956},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":932,"url":3958},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":932,"url":3960},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1078,"url":3962},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":937,"url":3964},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[3273,1097,1098,1099,1916,1917,3078,3079,3080,3081],14,{"id":218,"slug":3968,"dossier":90,"summary":83,"aliases":3969,"sourceIds":3972,"published":3973,"modified":3974,"checkedAt":7,"severity":3975,"references":3978,"versionKeys":3993,"packageCount":32,"repositoryCount":1273},"pysec-2026-2132-627bf7c7",[3970,3971],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[218],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[3976],{"type":928,"score":3977},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3979,3981,3983,3985,3987,3989,3991],{"type":943,"url":3980},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":943,"url":3982},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":932,"url":3984},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":932,"url":3986},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1078,"url":3988},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":937,"url":3990},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":975,"url":3992},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[3994,3995,3996,3997,3998,3999],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":219,"slug":4001,"dossier":47,"summary":83,"aliases":4002,"sourceIds":4007,"published":4008,"modified":4009,"checkedAt":7,"severity":4010,"references":4012,"versionKeys":4029,"packageCount":32,"repositoryCount":276},"pysec-2026-2286-8795b007",[4003,4004,4005,4006],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[219],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[4011],{"type":928,"score":2356},[4013,4015,4017,4019,4021,4023,4025,4027],{"type":943,"url":4014},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":943,"url":4016},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":932,"url":4018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":932,"url":4020},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":932,"url":4022},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1078,"url":4024},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1078,"url":4026},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":937,"url":4028},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1097,1098,1099,1916,1917,3078,3079,3080,3081],{"id":220,"slug":4031,"dossier":47,"summary":83,"aliases":4032,"sourceIds":4035,"published":4036,"modified":4037,"checkedAt":7,"severity":4038,"references":4041,"versionKeys":4046,"packageCount":32,"repositoryCount":989},"pysec-2026-3982-7ce8a239",[4033,4034],"CVE-2026-87817","GHSA-239g-whfq-7xj9",[220],"2026-09-09T12:17:16.830Z","2026-09-17T09:00:03.355630821Z",[4039],{"type":969,"score":4040},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4042,4044],{"type":932,"url":4043},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation",{"type":975,"url":4045},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-239g-whfq-7xj9",[986,987,988],{"id":221,"slug":4048,"dossier":47,"summary":83,"aliases":4049,"sourceIds":4052,"published":4053,"modified":4054,"checkedAt":7,"severity":4055,"references":4057,"versionKeys":4062,"packageCount":32,"repositoryCount":989},"pysec-2026-3984-82a1692f",[4050,4051],"CVE-2026-87819","GHSA-g5vv-9gxw-82hx",[221],"2026-09-09T12:17:17.120Z","2026-09-17T09:00:03.352876639Z",[4056],{"type":928,"score":1111},[4058,4060],{"type":932,"url":4059},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-denial-of-service-via-redos",{"type":975,"url":4061},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-g5vv-9gxw-82hx",[986,987,988],1790757844085]