[{"data":1,"prerenderedAt":9937},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-12239":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":371,"related":374},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":68,"unknownLicensePackageCount":103,"advisoryIds":104,"advisoryCount":369,"providers":370},"opencode:12239","opencode-12239",12239,"LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service","318cda8c49da743f2c4a18a4f4d5c36fc22102fc","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fcommit\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc","2026-07-31T12:19:47.438Z","2026-07-31T10:12:04.000Z",{"complete":89,"entryCount":90,"truncated":45},true,241,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","72d385efaa1c9d7ef74ecd2177161e9b80f5ec89cc764f9cf3892c4a65408df2",466608,"parsed",303,[101],"pypi",17,3,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368],"GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-24qx-w28j-9m6p","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g6r-c272-w58r","GHSA-2hm2-hc3v-44h9","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3644-q5cj-c5c7","GHSA-37w4-hwhx-4rc4","GHSA-38jv-5279-wg99","GHSA-3crg-w4f6-42mx","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-45pg-36p6-83v9","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4c99-qj7h-p3vg","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j32-57v6-6g45","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-537c-gmf6-5ccf","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-5789-5fc7-67v3","GHSA-58cw-g322-p94v","GHSA-59g5-xgcq-4qw3","GHSA-5chr-fjjv-38qv","GHSA-5hgr-hg42-57jg","GHSA-5mrq-x3x5-8v8f","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-6hm5-jgcp-p838","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6qv9-48xg-fc7f","GHSA-6r8x-57c9-28j4","GHSA-6w46-j5rx-g56g","GHSA-7432-952r-cw78","GHSA-752w-5fwx-jx9f","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7jqv-fw35-gmx9","GHSA-7p94-766c-hgjp","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-848c-c2cx-j7qx","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-89vp-jrxv-24w8","GHSA-8c25-4j27-2rv3","GHSA-8g87-j6q8-g93x","GHSA-8mp2-v27r-99xp","GHSA-8mpj-m6qm-5qr8","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8rfp-98v4-mmr6","GHSA-8v84-f9pq-wr9x","GHSA-926x-3r5x-gfhw","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9h52-p55h-vw2f","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9q39-rmj3-p4r2","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c67j-w6g6-q2cm","GHSA-c8j7-8cv4-2xmq","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cj93-chg6-vgv8","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4xh-w4cj-qxq8","GHSA-f83h-ghpp-7wcc","GHSA-f96h-pmfr-66vw","GHSA-fcw5-x6j4-ccmp","GHSA-ffq3-xpv3-j92q","GHSA-fg6f-75jq-6523","GHSA-fg7f-2386-8897","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fjqc-hq36-qh5p","GHSA-fp3f-mc75-235c","GHSA-fv5p-p927-qmxr","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g48c-2wqr-h844","GHSA-g6cj-pr64-35w5","GHSA-g7f3-828f-7h7m","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g97x-gvcm-x72h","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gj48-438w-jh9v","GHSA-gm62-xv2j-4w53","GHSA-gm8q-m8mv-jj5m","GHSA-gmj6-6f8f-6699","GHSA-gr75-jv2w-4656","GHSA-gx64-gj6p-pc4c","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h5v5-8746-g7mm","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hm4w-wwcw-mr6r","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hx9q-6w63-j58v","GHSA-j543-4vmf-qm7v","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jj8c-mmj3-mmgv","GHSA-jjj6-mw9f-p565","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m2v9-299j-rv96","GHSA-m344-f55w-2m6j","GHSA-m449-cwjh-6pw7","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqcg-5x36-vfcg","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-pc6w-59fv-rh23","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pjwx-r37v-7724","GHSA-pp6c-gr5w-3c5g","GHSA-pppj-hq3g-57pj","GHSA-pq5p-34cr-23v9","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q25c-c977-4cmh","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qcq2-496w-v96p","GHSA-qfrw-5rxm-mhh2","GHSA-qh6h-p6c9-ff54","GHSA-qh7q-6qm3-653w","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qvv7-cg9c-w4x3","GHSA-r4rv-85jg-w4mf","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-r7w7-9xr2-qq2r","GHSA-r95x-qfjj-fjj2","GHSA-rch3-82jr-f9w9","GHSA-rf74-v2fm-23pw","GHSA-rr7j-v2q5-chgv","GHSA-v87v-83h2-53w7","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vmhf-c436-hxj4","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vvfj-2jqx-52jm","GHSA-w2fm-2cpv-w7v5","GHSA-w39p-vh2g-g8g5","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w8p2-r796-3vmq","GHSA-wf5f-4jwr-ppcp","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-whvh-wf3x-g77j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wvwj-cvrp-7pv5","GHSA-x284-j5p8-9c5p","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xm59-rqc7-hhvf","PYSEC-2024-115","PYSEC-2024-323","PYSEC-2025-183","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2208","PYSEC-2026-2209","PYSEC-2026-2532","PYSEC-2026-3472","PYSEC-2026-597","PYSEC-2026-99",264,[],{"files":372,"occurrenceCount":99},[373],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":375,"vulnerabilities":3069},[376,387,396,405,415,427,436,448,456,466,475,484,493,502,511,520,529,539,549,560,572,582,591,600,609,619,629,639,648,657,666,675,686,695,704,713,722,731,740,749,758,768,777,786,795,805,814,823,832,841,850,859,867,876,885,896,905,913,922,931,941,950,959,969,978,987,996,1005,1014,1023,1031,1039,1047,1056,1065,1074,1083,1092,1101,1110,1119,1128,1137,1147,1157,1166,1175,1184,1192,1201,1210,1219,1228,1236,1245,1253,1262,1272,1281,1290,1299,1308,1317,1325,1334,1343,1352,1361,1370,1379,1388,1397,1406,1415,1424,1432,1441,1449,1458,1469,1478,1487,1495,1504,1514,1523,1532,1541,1550,1559,1568,1577,1586,1594,1603,1612,1621,1630,1639,1648,1657,1666,1674,1683,1692,1701,1710,1719,1728,1737,1745,1755,1764,1773,1782,1791,1800,1808,1817,1826,1835,1843,1851,1859,1868,1877,1886,1895,1903,1912,1921,1929,1938,1947,1957,1966,1975,1984,1993,2002,2010,2018,2026,2034,2043,2051,2059,2067,2075,2083,2091,2099,2107,2115,2123,2131,2139,2147,2155,2163,2171,2179,2187,2195,2203,2211,2219,2227,2235,2243,2251,2260,2269,2279,2287,2296,2305,2314,2323,2332,2341,2351,2360,2369,2377,2386,2394,2402,2410,2418,2427,2436,2445,2454,2463,2472,2481,2489,2497,2506,2515,2524,2533,2542,2551,2560,2569,2578,2587,2596,2605,2614,2623,2632,2641,2651,2659,2668,2677,2686,2695,2703,2712,2720,2729,2737,2746,2755,2763,2772,2781,2790,2799,2808,2817,2825,2834,2843,2852,2860,2869,2878,2887,2895,2904,2913,2921,2930,2939,2948,2957,2966,2974,2983,2992,3000,3008,3017,3026,3035,3044,3053,3061],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":89,"provider":82,"advisoryCount":381,"licenseExpressions":382,"versions":384,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":386},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","LangChain Core",7,[383],"MIT",[385],"1.4.9",[54],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":89,"provider":82,"advisoryCount":34,"licenseExpressions":392,"versions":393,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":395},"package:pypi:langchain-community","langchain-community-b296254c","pypi:langchain-community","LangChain Community",[383],[394],"0.4.2",[54],{"id":397,"slug":398,"identity":399,"label":400,"aiRelevant":89,"provider":82,"advisoryCount":103,"licenseExpressions":401,"versions":402,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":404},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","LangChain",[383],[403],"1.3.13",[54],{"id":406,"slug":407,"identity":408,"label":409,"aiRelevant":89,"provider":82,"advisoryCount":410,"licenseExpressions":411,"versions":412,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":414},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","LangGraph",2,[383],[413],"1.2.9",[54],{"id":416,"slug":417,"identity":418,"label":419,"aiRelevant":89,"provider":420,"advisoryCount":32,"licenseExpressions":423,"versions":424,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":426},"package:pypi:langchain-openai","langchain-openai-4985188e","pypi:langchain-openai","LangChain OpenAI",{"id":421,"label":422},"openai","OpenAI",[383],[425],"1.1.9",[54],{"id":428,"slug":429,"identity":430,"label":431,"aiRelevant":89,"provider":82,"advisoryCount":32,"licenseExpressions":432,"versions":433,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":435},"package:pypi:langchain-text-splitters","langchain-text-splitters-0c057788","pypi:langchain-text-splitters","LangChain · Text Splitters",[383],[434],"1.1.2",[54],{"id":437,"slug":438,"identity":439,"label":440,"aiRelevant":89,"provider":441,"advisoryCount":37,"licenseExpressions":444,"versions":445,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":447},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":442,"label":443},"anthropic","Anthropic",[383],[446],"0.116.0",[54],{"id":70,"slug":71,"identity":449,"label":72,"aiRelevant":89,"provider":450,"advisoryCount":37,"licenseExpressions":451,"versions":453,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":455},"pypi:openai",{"id":421,"label":422},[452],"Apache-2.0",[454],"1.109.1",[54],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":461,"versions":463,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":465},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[462],"non-standard",[464],"0.23.1",[54],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":471,"versions":472,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":474},"package:pypi:langchain-google-community","langchain-google-community-733aba30","pypi:langchain-google-community","LangChain · Google Community",[383],[473],"5.0.0",[54],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":480,"versions":481,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":483},"package:pypi:langchain-mcp-adapters","langchain-mcp-adapters-1c0e13c7","pypi:langchain-mcp-adapters","LangChain · MCP Adapters",[383],[482],"0.3.0",[54],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":489,"versions":490,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":492},"package:pypi:langchain-mistralai","langchain-mistralai-52e30148","pypi:langchain-mistralai","LangChain · Mistralai",[383],[491],"0.2.12",[54],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":498,"versions":499,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":501},"package:pypi:langchain-protocol","langchain-protocol-2715aeed","pypi:langchain-protocol","LangChain · Protocol",[383],[500],"0.0.18",[54],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":507,"versions":508,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":510},"package:pypi:langchain-weaviate","langchain-weaviate-707e0daa","pypi:langchain-weaviate","LangChain · Weaviate",[383],[509],"0.0.8",[54],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":516,"versions":517,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":519},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[452],[518],"5.0.0.93",[54],{"id":521,"slug":522,"identity":523,"label":524,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":525,"versions":526,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":528},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[462],[527],"0.13.0",[54],{"id":530,"slug":531,"identity":532,"label":533,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":534,"versions":536,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":538},"package:pypi:weaviate-client","weaviate-client-c34ddc0e","pypi:weaviate-client","Weaviate Client",[535],"BSD-3-Clause",[537],"4.22.0",[54],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":45,"provider":82,"advisoryCount":544,"licenseExpressions":545,"versions":546,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":548},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",37,[535,462],[547],"6.14.2",[54],{"id":550,"slug":551,"identity":552,"label":553,"aiRelevant":45,"provider":82,"advisoryCount":554,"licenseExpressions":555,"versions":557,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[452,556],"Apache-2.0 AND MIT",[558],"3.14.1",[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":82,"advisoryCount":565,"licenseExpressions":566,"versions":569,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":571},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[567,568],"HPND","MIT-CMU",[570],"12.3.0",[54],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":45,"provider":82,"advisoryCount":577,"licenseExpressions":578,"versions":579,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":581},"package:pypi:mistune","mistune-883ae9a9","pypi:mistune","mistune",16,[535],[580],"3.3.3",[54],{"id":583,"slug":584,"identity":585,"label":586,"aiRelevant":45,"provider":82,"advisoryCount":577,"licenseExpressions":587,"versions":588,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":590},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",[452],[589],"3.10.0",[54],{"id":592,"slug":593,"identity":594,"label":595,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":596,"versions":597,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":599},"package:pypi:jupyterlab","jupyterlab-da634f79","pypi:jupyterlab","jupyterlab",[462],[598],"4.6.1",[54],{"id":601,"slug":602,"identity":603,"label":604,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":605,"versions":606,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":608},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[452],[607],"6.5.7",[54],{"id":610,"slug":611,"identity":612,"label":613,"aiRelevant":45,"provider":82,"advisoryCount":614,"licenseExpressions":615,"versions":616,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":618},"package:pypi:authlib","authlib-c1d999b9","pypi:authlib","authlib",9,[535],[617],"1.7.2",[54],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":45,"provider":82,"advisoryCount":614,"licenseExpressions":624,"versions":626,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":628},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",[625],"Apache-2.0 OR BSD-3-Clause",[627],"49.0.0",[54],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":45,"provider":82,"advisoryCount":634,"licenseExpressions":635,"versions":636,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":638},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[452],[637],"0.0.32",[54],{"id":640,"slug":641,"identity":642,"label":643,"aiRelevant":45,"provider":82,"advisoryCount":634,"licenseExpressions":644,"versions":645,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":647},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[535],[646],"1.3.1",[54],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":45,"provider":82,"advisoryCount":381,"licenseExpressions":653,"versions":654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":656},"package:pypi:jupyter-server","jupyter-server-bda3ce93","pypi:jupyter-server","jupyter-server",[462],[655],"2.20.0",[54],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":45,"provider":82,"advisoryCount":381,"licenseExpressions":662,"versions":663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":665},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",[383],[664],"2.13.0",[54],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":45,"provider":82,"advisoryCount":381,"licenseExpressions":671,"versions":672,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":674},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[383],[673],"2.7.0",[54],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":45,"provider":82,"advisoryCount":680,"licenseExpressions":681,"versions":683,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":685},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[682],"BSD-2-Clause",[684],"0.6.4",[54],{"id":687,"slug":688,"identity":689,"label":690,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":691,"versions":692,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":694},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[535,462],[693],"3.1.6",[54],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":700,"versions":701,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":703},"package:pypi:langsmith","langsmith-a7ab7b96","pypi:langsmith","langsmith",[383],[702],"0.10.2",[54],{"id":705,"slug":706,"identity":707,"label":708,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":709,"versions":710,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":712},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[383],[711],"1.28.1",[54],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":718,"versions":719,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":721},"package:pypi:nbconvert","nbconvert-a72151db","pypi:nbconvert","nbconvert",[462],[720],"7.17.1",[54],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":727,"versions":728,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":730},"package:pypi:notebook","notebook-9683036a","pypi:notebook","notebook",[462],[729],"7.6.0",[54],{"id":732,"slug":733,"identity":734,"label":735,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":736,"versions":737,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":739},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[452],[738],"2.34.2",[54],{"id":741,"slug":742,"identity":743,"label":744,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":745,"versions":746,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":748},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[383],[747],"72.2.0",[54],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":45,"provider":82,"advisoryCount":410,"licenseExpressions":754,"versions":755,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":757},"package:pypi:bleach","bleach-b1747264","pypi:bleach","bleach",[462],[756],"6.4.0",[54],{"id":759,"slug":760,"identity":761,"label":762,"aiRelevant":45,"provider":82,"advisoryCount":410,"licenseExpressions":763,"versions":765,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":767},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[383,764],"Unlicense",[766],"3.29.7",[54],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":45,"provider":82,"advisoryCount":410,"licenseExpressions":773,"versions":774,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":776},"package:pypi:pdfminer-six","pdfminer-six-53ae17a4","pypi:pdfminer-six","pdfminer-six",[383],[775],"20260107",[54],{"id":778,"slug":779,"identity":780,"label":781,"aiRelevant":45,"provider":82,"advisoryCount":410,"licenseExpressions":782,"versions":783,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":785},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[535],[784],"5.29.6",[54],{"id":787,"slug":788,"identity":789,"label":790,"aiRelevant":45,"provider":82,"advisoryCount":410,"licenseExpressions":791,"versions":792,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":794},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[383],[793],"2.8.4",[54],{"id":796,"slug":797,"identity":798,"label":799,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":800,"versions":802,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":804},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[801],"MPL-2.0",[803],"2026.6.17",[54],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":810,"versions":811,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":813},"package:pypi:click","click-ef97f731","pypi:click","click",[535,462],[812],"8.4.2",[54],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":819,"versions":820,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":822},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[383],[821],"0.16.0",[54],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":828,"versions":829,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":831},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[535,462],[830],"3.18",[54],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":837,"versions":838,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":840},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[535,462],[839],"5.9.1",[54],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":846,"versions":847,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":849},"package:pypi:langchain-classic","langchain-classic-ee5360ab","pypi:langchain-classic","langchain-classic",[383],[848],"1.0.8",[54],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":855,"versions":856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":858},"package:pypi:langgraph-checkpoint","langgraph-checkpoint-b3039a64","pypi:langgraph-checkpoint","langgraph-checkpoint",[383],[857],"4.1.1",[54],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":864,"versions":865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":866},"package:pypi:langgraph-sdk","langgraph-sdk-7670dc92","pypi:langgraph-sdk","langgraph-sdk",[383],[394],[54],{"id":868,"slug":869,"identity":870,"label":871,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":872,"versions":873,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":875},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[535],[874],"6.1.1",[54],{"id":877,"slug":878,"identity":879,"label":880,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":881,"versions":882,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":884},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[383],[883],"3.26.2",[54],{"id":886,"slug":887,"identity":888,"label":889,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":890,"versions":893,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":895},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[891,892],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[894],"3.11.9",[54],{"id":897,"slug":898,"identity":899,"label":900,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":901,"versions":902,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":904},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[383],[903],"2.14.2",[54],{"id":906,"slug":907,"identity":908,"label":909,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":910,"versions":911,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":912},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[682],[655],[54],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":918,"versions":919,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":921},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[383],[920],"9.1.1",[54],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":927,"versions":928,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":930},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[535],[929],"1.2.2",[54],{"id":932,"slug":933,"identity":934,"label":935,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":936,"versions":938,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":940},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[937],"MIT AND MPL-2.0",[939],"4.68.4",[54],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":946,"versions":947,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":949},"package:pypi:unstructured","unstructured-9ec9bd94","pypi:unstructured","unstructured",[452],[948],"0.17.2",[54],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":955,"versions":956,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":958},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[452],[957],"25.1.0",[54],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":964,"versions":966,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":968},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[965],"PSF-2.0",[967],"2.7.1",[54],{"id":970,"slug":971,"identity":972,"label":973,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":974,"versions":975,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":977},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[452],[976],"1.4.0",[54],{"id":979,"slug":980,"identity":981,"label":982,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":983,"versions":984,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":986},"package:pypi:amqp","amqp-b7c07d93","pypi:amqp","amqp",[462],[985],"5.3.1",[54],{"id":988,"slug":989,"identity":990,"label":991,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":992,"versions":993,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":995},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[383],[994],"0.0.4",[54],{"id":997,"slug":998,"identity":999,"label":1000,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1001,"versions":1002,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1004},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[383],[1003],"0.7.0",[54],{"id":1006,"slug":1007,"identity":1008,"label":1009,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1010,"versions":1011,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1013},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[383],[1012],"4.14.2",[54],{"id":1015,"slug":1016,"identity":1017,"label":1018,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1019,"versions":1020,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1022},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[462],[1021],"0.1.4",[54],{"id":1024,"slug":1025,"identity":1026,"label":1027,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1028,"versions":1029,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1030},"package:pypi:argon2-cffi","argon2-cffi-0666afdc","pypi:argon2-cffi","argon2-cffi",[383],[957],[54],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1036,"versions":1037,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1038},"package:pypi:argon2-cffi-bindings","argon2-cffi-bindings-8c6d8583","pypi:argon2-cffi-bindings","argon2-cffi-bindings",[383],[957],[54],{"id":1040,"slug":1041,"identity":1042,"label":1043,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1044,"versions":1045,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1046},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[462],[976],[54],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1052,"versions":1053,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1055},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[452],[1054],"3.0.2",[54],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1061,"versions":1062,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1064},"package:pypi:async-lru","async-lru-57db467a","pypi:async-lru","async-lru",[383],[1063],"2.3.0",[54],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1070,"versions":1071,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1073},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[452],[1072],"5.0.1",[54],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1079,"versions":1080,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1082},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[383],[1081],"26.1.0",[54],{"id":1084,"slug":1085,"identity":1086,"label":1087,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1088,"versions":1089,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1091},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[535],[1090],"2.18.0",[54],{"id":1093,"slug":1094,"identity":1095,"label":1096,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1097,"versions":1098,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1100},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[383],[1099],"2.2.1",[54],{"id":1102,"slug":1103,"identity":1104,"label":1105,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1106,"versions":1107,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1109},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[383],[1108],"4.15.0",[54],{"id":1111,"slug":1112,"identity":1113,"label":1114,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1115,"versions":1116,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1118},"package:pypi:billiard","billiard-87cdf8d8","pypi:billiard","billiard",[462],[1117],"4.2.4",[54],{"id":1120,"slug":1121,"identity":1122,"label":1123,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1124,"versions":1125,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1127},"package:pypi:cached-property","cached-property-4115aa7b","pypi:cached-property","cached-property",[462],[1126],"2.0.1",[54],{"id":1129,"slug":1130,"identity":1131,"label":1132,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1133,"versions":1134,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1136},"package:pypi:celery","celery-b40d49f4","pypi:celery","celery",[535],[1135],"5.6.3",[54],{"id":1138,"slug":1139,"identity":1140,"label":1141,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1142,"versions":1144,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1146},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[383,1143],"MIT-0",[1145],"2.1.0",[54],{"id":1148,"slug":1149,"identity":1150,"label":1151,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1152,"versions":1154,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1156},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[1153,462],"0BSD",[1155],"7.4.3",[54],{"id":1158,"slug":1159,"identity":1160,"label":1161,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1162,"versions":1163,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1165},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[383],[1164],"3.4.9",[54],{"id":1167,"slug":1168,"identity":1169,"label":1170,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1171,"versions":1172,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1174},"package:pypi:click-didyoumean","click-didyoumean-4dbcd2d4","pypi:click-didyoumean","click-didyoumean",[383],[1173],"0.3.1",[54],{"id":1176,"slug":1177,"identity":1178,"label":1179,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1180,"versions":1181,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1183},"package:pypi:click-plugins","click-plugins-b43a6bb3","pypi:click-plugins","click-plugins",[462],[1182],"1.1.1.2",[54],{"id":1185,"slug":1186,"identity":1187,"label":1188,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1189,"versions":1190,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1191},"package:pypi:click-repl","click-repl-3c545c47","pypi:click-repl","click-repl",[383],[482],[54],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1197,"versions":1198,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1200},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[462],[1199],"0.4.6",[54],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1206,"versions":1207,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1209},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[462],[1208],"0.2.3",[54],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1215,"versions":1216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1218},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[383],[1217],"0.6.7",[54],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1224,"versions":1225,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1227},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[383],[1226],"1.8.21",[54],{"id":1229,"slug":1230,"identity":1231,"label":1232,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1233,"versions":1234,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1235},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[682,462],[985],[54],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1241,"versions":1242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1244},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[462],[1243],"0.7.1",[54],{"id":1246,"slug":1247,"identity":1248,"label":1249,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1250,"versions":1251,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1252},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[383],[646],[54],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1258,"versions":1259,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1261},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[452],[1260],"1.9.0",[54],{"id":1263,"slug":1264,"identity":1265,"label":1266,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1267,"versions":1269,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1271},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1268],"ISC",[1270],"2.8.0",[54],{"id":1273,"slug":1274,"identity":1275,"label":1276,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1277,"versions":1278,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1280},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[383],[1279],"0.18.0",[54],{"id":1282,"slug":1283,"identity":1284,"label":1285,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1286,"versions":1287,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1289},"package:pypi:docx2txt","docx2txt-d7a05e45","pypi:docx2txt","docx2txt",[],[1288],"0.8",[54],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1295,"versions":1296,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1298},"package:pypi:emoji","emoji-b8402ff3","pypi:emoji","emoji",[535,462],[1297],"2.15.0",[54],{"id":1300,"slug":1301,"identity":1302,"label":1303,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1304,"versions":1305,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1307},"package:pypi:eventlet","eventlet-d9e7dce2","pypi:eventlet","eventlet",[383],[1306],"0.41.0",[54],{"id":1309,"slug":1310,"identity":1311,"label":1312,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1313,"versions":1314,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1316},"package:pypi:exchangelib","exchangelib-2c02f617","pypi:exchangelib","exchangelib",[682],[1315],"5.6.0",[54],{"id":1318,"slug":1319,"identity":1320,"label":1321,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1322,"versions":1323,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1324},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[383],[1099],[54],{"id":1326,"slug":1327,"identity":1328,"label":1329,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1330,"versions":1331,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1333},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[383],[1332],"0.139.0",[54],{"id":1335,"slug":1336,"identity":1337,"label":1338,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1339,"versions":1340,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1342},"package:pypi:fastjsonschema","fastjsonschema-8288c29a","pypi:fastjsonschema","fastjsonschema",[462],[1341],"2.21.2",[54],{"id":1344,"slug":1345,"identity":1346,"label":1347,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1348,"versions":1349,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1351},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[383],[1350],"1.2.0",[54],{"id":1353,"slug":1354,"identity":1355,"label":1356,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1357,"versions":1358,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1360},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[452],[1359],"25.12.19",[54],{"id":1362,"slug":1363,"identity":1364,"label":1365,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1366,"versions":1367,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1369},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[462],[1368],"1.5.1",[54],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1375,"versions":1376,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1378},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[452],[1377],"1.8.0",[54],{"id":1380,"slug":1381,"identity":1382,"label":1383,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1384,"versions":1385,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1387},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[535,462],[1386],"2026.6.0",[54],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1393,"versions":1394,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1396},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[452],[1395],"2.31.0",[54],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1402,"versions":1403,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1405},"package:pypi:google-api-python-client","google-api-python-client-5dcdb5bd","pypi:google-api-python-client","google-api-python-client",[452],[1404],"2.198.0",[54],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1411,"versions":1412,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1414},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[452],[1413],"2.55.2",[54],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1420,"versions":1421,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1423},"package:pypi:google-auth-httplib2","google-auth-httplib2-dd7061f9","pypi:google-auth-httplib2","google-auth-httplib2",[452],[1422],"0.4.0",[54],{"id":1425,"slug":1426,"identity":1427,"label":1428,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1429,"versions":1430,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1431},"package:pypi:google-auth-oauthlib","google-auth-oauthlib-21213e6a","pypi:google-auth-oauthlib","google-auth-oauthlib",[452],[976],[54],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1437,"versions":1438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1440},"package:pypi:google-cloud-core","google-cloud-core-99cecb76","pypi:google-cloud-core","google-cloud-core",[452],[1439],"2.6.0",[54],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1446,"versions":1447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1448},"package:pypi:google-cloud-modelarmor","google-cloud-modelarmor-f880491c","pypi:google-cloud-modelarmor","google-cloud-modelarmor",[452],[1003],[54],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1454,"versions":1455,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1457},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[452],[1456],"1.75.0",[54],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1463,"versions":1466,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1468},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[383,1464,1465],"MIT AND PSF-2.0","MIT AND Python-2.0",[1467],"3.5.3",[54],{"id":1470,"slug":1471,"identity":1472,"label":1473,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1474,"versions":1475,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1477},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[452],[1476],"1.78.0",[54],{"id":1479,"slug":1480,"identity":1481,"label":1482,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1483,"versions":1484,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1486},"package:pypi:grpcio-status","grpcio-status-f4c90de4","pypi:grpcio-status","grpcio-status",[452],[1485],"1.71.2",[54],{"id":1488,"slug":1489,"identity":1490,"label":1491,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1492,"versions":1493,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1494},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[452],[1368],[54],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1500,"versions":1501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1503},"package:pypi:highlight-io","highlight-io-a0246cc7","pypi:highlight-io","highlight-io",[452],[1502],"0.9.3",[54],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1509,"versions":1511,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1513},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1510],"GPL-3.0",[1512],"2024.2.26",[54],{"id":1515,"slug":1516,"identity":1517,"label":1518,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1519,"versions":1520,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1522},"package:pypi:html5lib","html5lib-0ea30fe2","pypi:html5lib","html5lib",[383],[1521],"1.1",[54],{"id":1524,"slug":1525,"identity":1526,"label":1527,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1528,"versions":1529,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1531},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[535],[1530],"1.0.9",[54],{"id":1533,"slug":1534,"identity":1535,"label":1536,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1537,"versions":1538,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1540},"package:pypi:httplib2","httplib2-5ed73348","pypi:httplib2","httplib2",[383],[1539],"0.32.0",[54],{"id":1542,"slug":1543,"identity":1544,"label":1545,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1546,"versions":1547,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1549},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[535],[1548],"0.28.1",[54],{"id":1551,"slug":1552,"identity":1553,"label":1554,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1555,"versions":1556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1558},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[383],[1557],"0.4.3",[54],{"id":1560,"slug":1561,"identity":1562,"label":1563,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1564,"versions":1565,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1567},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[452,462],[1566],"1.23.0",[54],{"id":1569,"slug":1570,"identity":1571,"label":1572,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1573,"versions":1574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1576},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[452,462],[1575],"8.5.0",[54],{"id":1578,"slug":1579,"identity":1580,"label":1581,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1582,"versions":1583,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1585},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[383],[1584],"0.5.1",[54],{"id":1587,"slug":1588,"identity":1589,"label":1590,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1591,"versions":1592,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1593},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[383],[1063],[54],{"id":1595,"slug":1596,"identity":1597,"label":1598,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1599,"versions":1600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1602},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[535,462],[1601],"7.3.0",[54],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1608,"versions":1609,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1611},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[535],[1610],"9.15.0",[54],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1617,"versions":1618,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1620},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[462],[1619],"1.1.1",[54],{"id":1622,"slug":1623,"identity":1624,"label":1625,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1626,"versions":1627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1629},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[535],[1628],"8.1.8",[54],{"id":1631,"slug":1632,"identity":1633,"label":1634,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1635,"versions":1636,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1638},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[462],[1637],"0.7.2",[54],{"id":1640,"slug":1641,"identity":1642,"label":1643,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1644,"versions":1645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1647},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[1268],[1646],"20.11.0",[54],{"id":1649,"slug":1650,"identity":1651,"label":1652,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1653,"versions":1654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1656},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[383],[1655],"0.20.0",[54],{"id":1658,"slug":1659,"identity":1660,"label":1661,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1662,"versions":1663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1665},"package:pypi:jh2","jh2-5dba0ddb","pypi:jh2","jh2",[383],[1664],"5.0.13",[54],{"id":1667,"slug":1668,"identity":1669,"label":1670,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1671,"versions":1672,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1673},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[383],[821],[54],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1679,"versions":1680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1682},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[535],[1681],"1.5.3",[54],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1688,"versions":1689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1691},"package:pypi:joserfc","joserfc-f5385f6a","pypi:joserfc","joserfc",[535],[1690],"1.7.3",[54],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1697,"versions":1698,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1700},"package:pypi:json5","json5-79be3697","pypi:json5","json5",[462],[1699],"0.15.0",[54],{"id":1702,"slug":1703,"identity":1704,"label":1705,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1706,"versions":1707,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1709},"package:pypi:jsonpatch","jsonpatch-ce7aa354","pypi:jsonpatch","jsonpatch",[462],[1708],"1.33",[54],{"id":1711,"slug":1712,"identity":1713,"label":1714,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1715,"versions":1716,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1718},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[462],[1717],"3.1.1",[54],{"id":1720,"slug":1721,"identity":1722,"label":1723,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1724,"versions":1725,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1727},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[383],[1726],"4.26.0",[54],{"id":1729,"slug":1730,"identity":1731,"label":1732,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1733,"versions":1734,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1736},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[383],[1735],"2025.9.1",[54],{"id":1738,"slug":1739,"identity":1740,"label":1741,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1742,"versions":1743,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1744},"package:pypi:jupyter","jupyter-cfc2388a","pypi:jupyter","jupyter",[462],[1619],[54],{"id":1746,"slug":1747,"identity":1748,"label":1749,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1750,"versions":1752,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1754},"package:pypi:jupyter-builder","jupyter-builder-a8b1b3d0","pypi:jupyter-builder","jupyter-builder",[1751],"BSD-3-Clause AND ISC AND MIT",[1753],"1.1.0",[54],{"id":1756,"slug":1757,"identity":1758,"label":1759,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1760,"versions":1761,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1763},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[462],[1762],"8.9.1",[54],{"id":1765,"slug":1766,"identity":1767,"label":1768,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1769,"versions":1770,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1772},"package:pypi:jupyter-console","jupyter-console-fe43250b","pypi:jupyter-console","jupyter-console",[462],[1771],"6.6.3",[54],{"id":1774,"slug":1775,"identity":1776,"label":1777,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1778,"versions":1779,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1781},"package:pypi:jupyter-events","jupyter-events-f8263fc3","pypi:jupyter-events","jupyter-events",[462],[1780],"0.12.1",[54],{"id":1783,"slug":1784,"identity":1785,"label":1786,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1787,"versions":1788,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1790},"package:pypi:jupyter-lsp","jupyter-lsp-e5008e78","pypi:jupyter-lsp","jupyter-lsp",[535],[1789],"2.3.1",[54],{"id":1792,"slug":1793,"identity":1794,"label":1795,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1796,"versions":1797,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1799},"package:pypi:jupyter-server-terminals","jupyter-server-terminals-908697b8","pypi:jupyter-server-terminals","jupyter-server-terminals",[462],[1798],"0.5.4",[54],{"id":1801,"slug":1802,"identity":1803,"label":1804,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1805,"versions":1806,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1807},"package:pypi:jupyterlab-pygments","jupyterlab-pygments-f3159f9e","pypi:jupyterlab-pygments","jupyterlab-pygments",[462],[482],[54],{"id":1809,"slug":1810,"identity":1811,"label":1812,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1813,"versions":1814,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1816},"package:pypi:jupyterlab-server","jupyterlab-server-87bbeff5","pypi:jupyterlab-server","jupyterlab-server",[462],[1815],"2.28.0",[54],{"id":1818,"slug":1819,"identity":1820,"label":1821,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1822,"versions":1823,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1825},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[535,462],[1824],"3.0.16",[54],{"id":1827,"slug":1828,"identity":1829,"label":1830,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1831,"versions":1832,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1834},"package:pypi:kombu","kombu-4085784d","pypi:kombu","kombu",[535],[1833],"5.6.2",[54],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1840,"versions":1841,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1842},"package:pypi:langdetect","langdetect-3c0edcca","pypi:langdetect","langdetect",[383],[1530],[54],{"id":1844,"slug":1845,"identity":1846,"label":1847,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1848,"versions":1849,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1850},"package:pypi:langgraph-prebuilt","langgraph-prebuilt-84c4e144","pypi:langgraph-prebuilt","langgraph-prebuilt",[383],[1753],[54],{"id":1852,"slug":1853,"identity":1854,"label":1855,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1856,"versions":1857,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1858},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[383],[646],[54],{"id":1860,"slug":1861,"identity":1862,"label":1863,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1864,"versions":1865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1867},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[535,462],[1866],"3.0.3",[54],{"id":1869,"slug":1870,"identity":1871,"label":1872,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1873,"versions":1874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1876},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[535,462],[1875],"0.2.2",[54],{"id":1878,"slug":1879,"identity":1880,"label":1881,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1882,"versions":1883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1885},"package:pypi:msal","msal-b77215ab","pypi:msal","msal",[383],[1884],"1.37.0",[54],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1891,"versions":1892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1894},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[452],[1893],"6.7.1",[54],{"id":1896,"slug":1897,"identity":1898,"label":1899,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1900,"versions":1901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1902},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[383],[1753],[54],{"id":1904,"slug":1905,"identity":1906,"label":1907,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1908,"versions":1909,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1911},"package:pypi:nbclient","nbclient-e201d8f1","pypi:nbclient","nbclient",[462],[1910],"0.11.0",[54],{"id":1913,"slug":1914,"identity":1915,"label":1916,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1917,"versions":1918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1920},"package:pypi:nbformat","nbformat-2d86904f","pypi:nbformat","nbformat",[462],[1919],"5.10.4",[54],{"id":1922,"slug":1923,"identity":1924,"label":1925,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1926,"versions":1927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1928},"package:pypi:nest-asyncio2","nest-asyncio2-ac071203","pypi:nest-asyncio2","nest-asyncio2",[462],[617],[54],{"id":1930,"slug":1931,"identity":1932,"label":1933,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1934,"versions":1935,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1937},"package:pypi:niquests","niquests-afbb79b2","pypi:niquests","niquests",[452],[1936],"3.20.1",[54],{"id":1939,"slug":1940,"identity":1941,"label":1942,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1943,"versions":1944,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1946},"package:pypi:notebook-shim","notebook-shim-6d442652","pypi:notebook-shim","notebook-shim",[462],[1945],"0.2.4",[54],{"id":1948,"slug":1949,"identity":1950,"label":1951,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1952,"versions":1954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1956},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1953,462],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1955],"2.4.6",[54],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1962,"versions":1963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1965},"package:pypi:oauthlib","oauthlib-5d97cdbc","pypi:oauthlib","oauthlib",[535,462],[1964],"3.3.1",[54],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1971,"versions":1972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1974},"package:pypi:olefile","olefile-c842b5c6","pypi:olefile","olefile",[462],[1973],"0.47",[54],{"id":1976,"slug":1977,"identity":1978,"label":1979,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1980,"versions":1981,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1983},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[383],[1982],"1.27.0",[54],{"id":1985,"slug":1986,"identity":1987,"label":1988,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1989,"versions":1990,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1992},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[452],[1991],"1.28.2",[54],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1998,"versions":1999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2001},"package:pypi:opentelemetry-distro","opentelemetry-distro-dfa51d1d","pypi:opentelemetry-distro","opentelemetry-distro",[452],[2000],"0.49b2",[54],{"id":2003,"slug":2004,"identity":2005,"label":2006,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2007,"versions":2008,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2009},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[452],[1991],[54],{"id":2011,"slug":2012,"identity":2013,"label":2014,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2015,"versions":2016,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2017},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[452],[1991],[54],{"id":2019,"slug":2020,"identity":2021,"label":2022,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2023,"versions":2024,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2025},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[452],[1991],[54],{"id":2027,"slug":2028,"identity":2029,"label":2030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2031,"versions":2032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2033},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[452],[2000],[54],{"id":2035,"slug":2036,"identity":2037,"label":2038,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2039,"versions":2040,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2042},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[452],[2041],"0.33.12",[54],{"id":2044,"slug":2045,"identity":2046,"label":2047,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2048,"versions":2049,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2050},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[452],[2041],[54],{"id":2052,"slug":2053,"identity":2054,"label":2055,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2056,"versions":2057,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2058},"package:pypi:opentelemetry-instrumentation-boto","opentelemetry-instrumentation-boto-d95bfff1","pypi:opentelemetry-instrumentation-boto","opentelemetry-instrumentation-boto",[452],[2000],[54],{"id":2060,"slug":2061,"identity":2062,"label":2063,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2064,"versions":2065,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2066},"package:pypi:opentelemetry-instrumentation-boto3sqs","opentelemetry-instrumentation-boto3sqs-e0e650a8","pypi:opentelemetry-instrumentation-boto3sqs","opentelemetry-instrumentation-boto3sqs",[452],[2000],[54],{"id":2068,"slug":2069,"identity":2070,"label":2071,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2072,"versions":2073,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2074},"package:pypi:opentelemetry-instrumentation-celery","opentelemetry-instrumentation-celery-7a39e74e","pypi:opentelemetry-instrumentation-celery","opentelemetry-instrumentation-celery",[452],[2000],[54],{"id":2076,"slug":2077,"identity":2078,"label":2079,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2080,"versions":2081,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2082},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[452],[2041],[54],{"id":2084,"slug":2085,"identity":2086,"label":2087,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2088,"versions":2089,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2090},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[452],[2041],[54],{"id":2092,"slug":2093,"identity":2094,"label":2095,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2096,"versions":2097,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2098},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[452],[2041],[54],{"id":2100,"slug":2101,"identity":2102,"label":2103,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2104,"versions":2105,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2106},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[452],[2041],[54],{"id":2108,"slug":2109,"identity":2110,"label":2111,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2112,"versions":2113,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2114},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[452],[2041],[54],{"id":2116,"slug":2117,"identity":2118,"label":2119,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2120,"versions":2121,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2122},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[452],[2000],[54],{"id":2124,"slug":2125,"identity":2126,"label":2127,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2128,"versions":2129,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2130},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[452],[2041],[54],{"id":2132,"slug":2133,"identity":2134,"label":2135,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2136,"versions":2137,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2138},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[452],[2041],[54],{"id":2140,"slug":2141,"identity":2142,"label":2143,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2144,"versions":2145,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2146},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[452],[2041],[54],{"id":2148,"slug":2149,"identity":2150,"label":2151,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2152,"versions":2153,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2154},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[452],[2000],[54],{"id":2156,"slug":2157,"identity":2158,"label":2159,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2160,"versions":2161,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2162},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[452],[2041],[54],{"id":2164,"slug":2165,"identity":2166,"label":2167,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2168,"versions":2169,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2170},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[452],[2000],[54],{"id":2172,"slug":2173,"identity":2174,"label":2175,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2176,"versions":2177,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2178},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[452],[2000],[54],{"id":2180,"slug":2181,"identity":2182,"label":2183,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2184,"versions":2185,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2186},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[452],[2041],[54],{"id":2188,"slug":2189,"identity":2190,"label":2191,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2192,"versions":2193,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2194},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[452],[2041],[54],{"id":2196,"slug":2197,"identity":2198,"label":2199,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2200,"versions":2201,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2202},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[452],[2041],[54],{"id":2204,"slug":2205,"identity":2206,"label":2207,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2208,"versions":2209,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2210},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[452],[2041],[54],{"id":2212,"slug":2213,"identity":2214,"label":2215,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2216,"versions":2217,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2218},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[452],[1991],[54],{"id":2220,"slug":2221,"identity":2222,"label":2223,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2224,"versions":2225,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2226},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[452],[1991],[54],{"id":2228,"slug":2229,"identity":2230,"label":2231,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2232,"versions":2233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2234},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[452],[2000],[54],{"id":2236,"slug":2237,"identity":2238,"label":2239,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2240,"versions":2241,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2242},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[452],[394],[54],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2248,"versions":2249,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2250},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[452],[2000],[54],{"id":2252,"slug":2253,"identity":2254,"label":2255,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2256,"versions":2257,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2259},"package:pypi:ormsgpack","ormsgpack-56a067ff","pypi:ormsgpack","ormsgpack",[891],[2258],"1.12.2",[54],{"id":2261,"slug":2262,"identity":2263,"label":2264,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2265,"versions":2266,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2268},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[452],[2267],"7.7.0",[54],{"id":2270,"slug":2271,"identity":2272,"label":2273,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2274,"versions":2276,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2278},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2275,462],"Apache-2.0 OR BSD-2-Clause",[2277],"26.2",[54],{"id":2280,"slug":2281,"identity":2282,"label":2283,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2284,"versions":2285,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2286},"package:pypi:pandocfilters","pandocfilters-f452098e","pypi:pandocfilters","pandocfilters",[535],[1368],[54],{"id":2288,"slug":2289,"identity":2290,"label":2291,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2292,"versions":2293,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2295},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[383],[2294],"0.8.7",[54],{"id":2297,"slug":2298,"identity":2299,"label":2300,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2301,"versions":2302,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2304},"package:pypi:pdfplumber","pdfplumber-ba8dca54","pypi:pdfplumber","pdfplumber",[383],[2303],"0.11.10",[54],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2310,"versions":2311,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2313},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[462],[2312],"4.9.0",[54],{"id":2315,"slug":2316,"identity":2317,"label":2318,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2319,"versions":2320,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2322},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[801],[2321],"10.10.0",[54],{"id":2324,"slug":2325,"identity":2326,"label":2327,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2328,"versions":2329,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2331},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[383],[2330],"4.10.0",[54],{"id":2333,"slug":2334,"identity":2335,"label":2336,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2337,"versions":2338,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2340},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[383],[2339],"1.6.0",[54],{"id":2342,"slug":2343,"identity":2344,"label":2345,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2346,"versions":2348,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2350},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[452,2347],"Apache-2.0 AND BSD-2-Clause",[2349],"0.25.0",[54],{"id":2352,"slug":2353,"identity":2354,"label":2355,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2356,"versions":2357,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2359},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[535,462],[2358],"3.0.52",[54],{"id":2361,"slug":2362,"identity":2363,"label":2364,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2365,"versions":2366,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2368},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[452],[2367],"0.5.2",[54],{"id":2370,"slug":2371,"identity":2372,"label":2373,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2374,"versions":2375,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2376},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[452],[711],[54],{"id":2378,"slug":2379,"identity":2380,"label":2381,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2382,"versions":2383,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2385},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[535],[2384],"7.2.2",[54],{"id":2387,"slug":2388,"identity":2389,"label":2390,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2391,"versions":2392,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2393},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1268],[1003],[54],{"id":2395,"slug":2396,"identity":2397,"label":2398,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2399,"versions":2400,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2401},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[383],[1208],[54],{"id":2403,"slug":2404,"identity":2405,"label":2406,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2407,"versions":2408,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2409},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[462],[394],[54],{"id":2411,"slug":2412,"identity":2413,"label":2414,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2415,"versions":2416,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2417},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[383],[976],[54],{"id":2419,"slug":2420,"identity":2421,"label":2422,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2423,"versions":2424,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2426},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[535],[2425],"3.0",[54],{"id":2428,"slug":2429,"identity":2430,"label":2431,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2432,"versions":2433,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2435},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[383],[2434],"2.13.4",[54],{"id":2437,"slug":2438,"identity":2439,"label":2440,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2441,"versions":2442,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2444},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[383],[2443],"2.46.4",[54],{"id":2446,"slug":2447,"identity":2448,"label":2449,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2450,"versions":2451,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2453},"package:pypi:pymongo","pymongo-367c417d","pypi:pymongo","pymongo",[452],[2452],"4.17.0",[54],{"id":2455,"slug":2456,"identity":2457,"label":2458,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2459,"versions":2460,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2462},"package:pypi:pyncclient","pyncclient-babf6882","pypi:pyncclient","pyncclient",[462],[2461],"0.7",[54],{"id":2464,"slug":2465,"identity":2466,"label":2467,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2468,"versions":2469,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2471},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[383],[2470],"3.3.2",[54],{"id":2473,"slug":2474,"identity":2475,"label":2476,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2477,"versions":2478,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2480},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[462],[2479],"5.11.0",[54],{"id":2482,"slug":2483,"identity":2484,"label":2485,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2486,"versions":2487,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2488},"package:pypi:pyspnego","pyspnego-51559592","pypi:pyspnego","pyspnego",[383],[1780],[54],{"id":2490,"slug":2491,"identity":2492,"label":2493,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2494,"versions":2495,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2496},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[452],[976],[54],{"id":2498,"slug":2499,"identity":2500,"label":2501,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2502,"versions":2503,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2505},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[462],[2504],"2.9.0.post0",[54],{"id":2507,"slug":2508,"identity":2509,"label":2510,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2511,"versions":2512,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2514},"package:pypi:python-iso639","python-iso639-ccd49637","pypi:python-iso639","python-iso639",[452],[2513],"2026.4.20",[54],{"id":2516,"slug":2517,"identity":2518,"label":2519,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2520,"versions":2521,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2523},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[682,462],[2522],"4.1.0",[54],{"id":2525,"slug":2526,"identity":2527,"label":2528,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2529,"versions":2530,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2532},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[383],[2531],"0.4.27",[54],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2538,"versions":2539,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2541},"package:pypi:python-magic-bin","python-magic-bin-bfa92dc0","pypi:python-magic-bin","python-magic-bin",[],[2540],"0.4.14",[54],{"id":2543,"slug":2544,"identity":2545,"label":2546,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2547,"versions":2548,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2550},"package:pypi:python-oxmsg","python-oxmsg-1cecb37a","pypi:python-oxmsg","python-oxmsg",[383],[2549],"0.0.2",[54],{"id":2552,"slug":2553,"identity":2554,"label":2555,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2556,"versions":2557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2559},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2558],"312",[54],{"id":2561,"slug":2562,"identity":2563,"label":2564,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2565,"versions":2566,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2568},"package:pypi:pywinpty","pywinpty-0eb4e04a","pypi:pywinpty","pywinpty",[383],[2567],"3.0.5",[54],{"id":2570,"slug":2571,"identity":2572,"label":2573,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2574,"versions":2575,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2577},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[383],[2576],"6.0.3",[54],{"id":2579,"slug":2580,"identity":2581,"label":2582,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2583,"versions":2584,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2586},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[462],[2585],"27.1.0",[54],{"id":2588,"slug":2589,"identity":2590,"label":2591,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2592,"versions":2593,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2595},"package:pypi:qh3","qh3-30fc4da7","pypi:qh3","qh3",[462],[2594],"1.9.4",[54],{"id":2597,"slug":2598,"identity":2599,"label":2600,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2601,"versions":2602,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2604},"package:pypi:qrcode","qrcode-dc7f5ffb","pypi:qrcode","qrcode",[462],[2603],"8.2",[54],{"id":2606,"slug":2607,"identity":2608,"label":2609,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2610,"versions":2611,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2613},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[383],[2612],"3.14.5",[54],{"id":2615,"slug":2616,"identity":2617,"label":2618,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2619,"versions":2620,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2622},"package:pypi:rapidocr-onnxruntime","rapidocr-onnxruntime-649d0188","pypi:rapidocr-onnxruntime","rapidocr-onnxruntime",[452],[2621],"1.4.4",[54],{"id":2624,"slug":2625,"identity":2626,"label":2627,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2628,"versions":2629,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2631},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[383],[2630],"8.0.1",[54],{"id":2633,"slug":2634,"identity":2635,"label":2636,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2637,"versions":2638,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2640},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[383],[2639],"0.37.0",[54],{"id":2642,"slug":2643,"identity":2644,"label":2645,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2646,"versions":2648,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2650},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2647,462],"Apache-2.0 AND CNRI-Python",[2649],"2026.7.10",[54],{"id":2652,"slug":2653,"identity":2654,"label":2655,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2656,"versions":2657,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2658},"package:pypi:reportlab","reportlab-c4bc3646","pypi:reportlab","reportlab",[462],[473],[54],{"id":2660,"slug":2661,"identity":2662,"label":2663,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2664,"versions":2665,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2667},"package:pypi:requests-mock","requests-mock-f997e834","pypi:requests-mock","requests-mock",[452],[2666],"1.12.1",[54],{"id":2669,"slug":2670,"identity":2671,"label":2672,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2673,"versions":2674,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2676},"package:pypi:requests-ntlm","requests-ntlm-3ab6d59c","pypi:requests-ntlm","requests-ntlm",[1268],[2675],"1.3.0",[54],{"id":2678,"slug":2679,"identity":2680,"label":2681,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2682,"versions":2683,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2685},"package:pypi:requests-oauthlib","requests-oauthlib-865bff2a","pypi:requests-oauthlib","requests-oauthlib",[1268],[2684],"2.0.0",[54],{"id":2687,"slug":2688,"identity":2689,"label":2690,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2691,"versions":2692,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2694},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[452],[2693],"1.0.0",[54],{"id":2696,"slug":2697,"identity":2698,"label":2699,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2700,"versions":2701,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2702},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[383],[1021],[54],{"id":2704,"slug":2705,"identity":2706,"label":2707,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2708,"versions":2709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2711},"package:pypi:rfc3986-validator","rfc3986-validator-723c00af","pypi:rfc3986-validator","rfc3986-validator",[383],[2710],"0.1.1",[54],{"id":2713,"slug":2714,"identity":2715,"label":2716,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2717,"versions":2718,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2719},"package:pypi:rfc3987-syntax","rfc3987-syntax-1f7c3c6b","pypi:rfc3987-syntax","rfc3987-syntax",[383],[1753],[54],{"id":2721,"slug":2722,"identity":2723,"label":2724,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2725,"versions":2726,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2728},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[383],[2727],"2026.6.3",[54],{"id":2730,"slug":2731,"identity":2732,"label":2733,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2734,"versions":2735,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2736},"package:pypi:send2trash","send2trash-9494ed34","pypi:send2trash","send2trash",[535,462],[1145],[54],{"id":2738,"slug":2739,"identity":2740,"label":2741,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2742,"versions":2743,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2745},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[535],[2744],"2.1.2",[54],{"id":2747,"slug":2748,"identity":2749,"label":2750,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2751,"versions":2752,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2754},"package:pypi:six","six-3c3888bd","pypi:six","six",[383],[2753],"1.17.0",[54],{"id":2756,"slug":2757,"identity":2758,"label":2759,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2760,"versions":2761,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2762},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[891],[646],[54],{"id":2764,"slug":2765,"identity":2766,"label":2767,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2768,"versions":2769,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2771},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[383],[2770],"2.0.51",[54],{"id":2773,"slug":2774,"identity":2775,"label":2776,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2777,"versions":2778,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2780},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[535],[2779],"3.4.5",[54],{"id":2782,"slug":2783,"identity":2784,"label":2785,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2786,"versions":2787,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2789},"package:pypi:sspilib","sspilib-cdfba389","pypi:sspilib","sspilib",[383],[2788],"0.5.0",[54],{"id":2791,"slug":2792,"identity":2793,"label":2794,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2795,"versions":2796,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2798},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[383],[2797],"0.6.3",[54],{"id":2800,"slug":2801,"identity":2802,"label":2803,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2804,"versions":2805,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2807},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[452],[2806],"9.1.4",[54],{"id":2809,"slug":2810,"identity":2811,"label":2812,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2813,"versions":2814,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2816},"package:pypi:terminado","terminado-9ae7e4c0","pypi:terminado","terminado",[462],[2815],"0.18.1",[54],{"id":2818,"slug":2819,"identity":2820,"label":2821,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2822,"versions":2823,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2824},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[462],[1368],[54],{"id":2826,"slug":2827,"identity":2828,"label":2829,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2830,"versions":2831,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2833},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[462],[2832],"5.15.1",[54],{"id":2835,"slug":2836,"identity":2837,"label":2838,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2839,"versions":2840,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2842},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[965,462],[2841],"4.16.0",[54],{"id":2844,"slug":2845,"identity":2846,"label":2847,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2848,"versions":2849,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2851},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[383],[2850],"0.9.0",[54],{"id":2853,"slug":2854,"identity":2855,"label":2856,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2857,"versions":2858,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2859},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[383],[394],[54],{"id":2861,"slug":2862,"identity":2863,"label":2864,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2865,"versions":2866,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2868},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[452],[2867],"2026.3",[54],{"id":2870,"slug":2871,"identity":2872,"label":2873,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2874,"versions":2875,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2877},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[383],[2876],"5.4.4",[54],{"id":2879,"slug":2880,"identity":2881,"label":2882,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2883,"versions":2884,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2886},"package:pypi:unstructured-client","unstructured-client-182f0adb","pypi:unstructured-client","unstructured-client",[383],[2885],"0.45.0",[54],{"id":2888,"slug":2889,"identity":2890,"label":2891,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2892,"versions":2893,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2894},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[383],[2675],[54],{"id":2896,"slug":2897,"identity":2898,"label":2899,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2900,"versions":2901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2903},"package:pypi:uritemplate","uritemplate-02f8e588","pypi:uritemplate","uritemplate",[462],[2902],"4.2.0",[54],{"id":2905,"slug":2906,"identity":2907,"label":2908,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2909,"versions":2910,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2912},"package:pypi:uritools","uritools-75c85cd3","pypi:uritools","uritools",[383],[2911],"6.1.2",[54],{"id":2914,"slug":2915,"identity":2916,"label":2917,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2918,"versions":2919,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2920},"package:pypi:urlextract","urlextract-e0b99c49","pypi:urlextract","urlextract",[383],[1260],[54],{"id":2922,"slug":2923,"identity":2924,"label":2925,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2926,"versions":2927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2929},"package:pypi:urllib3-future","urllib3-future-fd77948f","pypi:urllib3-future","urllib3-future",[383],[2928],"2.22.901",[54],{"id":2931,"slug":2932,"identity":2933,"label":2934,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2935,"versions":2936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2938},"package:pypi:uuid-utils","uuid-utils-c3d356a2","pypi:uuid-utils","uuid-utils",[535,462],[2937],"0.17.0",[54],{"id":2940,"slug":2941,"identity":2942,"label":2943,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2944,"versions":2945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2947},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[535],[2946],"0.51.0",[54],{"id":2949,"slug":2950,"identity":2951,"label":2952,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2953,"versions":2954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2956},"package:pypi:validators","validators-7f3ecc07","pypi:validators","validators",[383],[2955],"0.35.0",[54],{"id":2958,"slug":2959,"identity":2960,"label":2961,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2962,"versions":2963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2965},"package:pypi:vine","vine-fa93acc9","pypi:vine","vine",[462],[2964],"5.1.0",[54],{"id":2967,"slug":2968,"identity":2969,"label":2970,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2971,"versions":2972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2973},"package:pypi:wassima","wassima-de972895","pypi:wassima","wassima",[383],[2744],[54],{"id":2975,"slug":2976,"identity":2977,"label":2978,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2979,"versions":2980,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2982},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[383],[2981],"0.8.2",[54],{"id":2984,"slug":2985,"identity":2986,"label":2987,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2988,"versions":2989,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2991},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[535],[2990],"25.10.0",[54],{"id":2993,"slug":2994,"identity":2995,"label":2996,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2997,"versions":2998,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2999},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[462],[1584],[54],{"id":3001,"slug":3002,"identity":3003,"label":3004,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3005,"versions":3006,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3007},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[452],[1260],[54],{"id":3009,"slug":3010,"identity":3011,"label":3012,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3013,"versions":3014,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3016},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[535],[3015],"15.0.1",[54],{"id":3018,"slug":3019,"identity":3020,"label":3021,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3022,"versions":3023,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3025},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[535],[3024],"4.0.15",[54],{"id":3027,"slug":3028,"identity":3029,"label":3030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3031,"versions":3032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3034},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[462],[3033],"1.17.3",[54],{"id":3036,"slug":3037,"identity":3038,"label":3039,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3040,"versions":3041,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3043},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[682,462],[3042],"3.8.1",[54],{"id":3045,"slug":3046,"identity":3047,"label":3048,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3049,"versions":3050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3052},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[452],[3051],"1.24.2",[54],{"id":3054,"slug":3055,"identity":3056,"label":3057,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3058,"versions":3059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3060},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[383],[2522],[54],{"id":3062,"slug":3063,"identity":3064,"label":3065,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3066,"versions":3067,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3068},"package:pypi:zstandard","zstandard-8fab007a","pypi:zstandard","zstandard",[535],[2349],[54],[3070,3108,3143,3183,3216,3246,3276,3304,3331,3357,3382,3408,3440,3467,3501,3531,3557,3586,3609,3638,3665,3699,3727,3763,3789,3812,3839,3859,3882,3900,3930,3959,3983,4001,4041,4067,4090,4115,4142,4173,4198,4226,4254,4279,4302,4328,4363,4386,4409,4436,4459,4489,4516,4535,4589,4614,4639,4662,4684,4707,4729,4752,4778,4804,4840,4867,4892,4921,4949,4974,5005,5044,5071,5100,5120,5149,5167,5188,5223,5273,5299,5330,5353,5373,5397,5420,5443,5475,5494,5517,5551,5575,5597,5620,5647,5677,5711,5737,5764,5790,5824,5854,5874,5899,5933,5956,5980,6034,6059,6091,6121,6145,6177,6204,6219,6245,6270,6306,6329,6356,6377,6401,6423,6451,6476,6504,6525,6551,6570,6595,6623,6649,6682,6707,6734,6758,6783,6811,6833,6849,6872,6900,6928,6953,6976,7010,7025,7047,7080,7107,7129,7151,7172,7192,7219,7254,7278,7305,7338,7360,7383,7411,7431,7458,7487,7506,7527,7558,7579,7626,7651,7677,7700,7737,7765,7788,7812,7831,7853,7875,7905,7933,7954,7977,8002,8034,8057,8079,8100,8130,8152,8181,8208,8232,8254,8275,8298,8322,8346,8370,8385,8412,8440,8466,8485,8513,8535,8566,8588,8614,8646,8671,8693,8715,8767,8795,8819,8843,8873,8887,8908,8927,8948,8971,8999,9026,9053,9075,9102,9128,9153,9176,9208,9228,9258,9280,9309,9335,9387,9409,9434,9457,9483,9517,9541,9566,9585,9612,9631,9659,9680,9701,9726,9759,9775,9792,9806,9837,9852,9867,9889,9911,9924],{"id":105,"slug":3071,"dossier":45,"summary":3072,"aliases":3073,"sourceIds":3076,"published":3077,"modified":3078,"checkedAt":7,"severity":3079,"references":3086,"versionKeys":3106,"packageCount":32,"repositoryCount":32},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3074,3075],"CVE-2026-48156","PYSEC-2026-3004",[105,3075],"2026-06-12T18:29:59Z","2026-07-13T16:43:52.833287270Z",[3080,3083],{"type":3081,"score":3082},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3084,"score":3085},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3087,3090,3093,3095,3097,3100,3102,3104],{"type":3088,"url":3089},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3091,"url":3092},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3088,"url":3094},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3088,"url":3096},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3098,"url":3099},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3088,"url":3101},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3098,"url":3103},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3091,"url":3105},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3107],"pypi:pypdf@5.1.0",{"id":106,"slug":3109,"dossier":45,"summary":3110,"aliases":3111,"sourceIds":3114,"published":3115,"modified":3116,"checkedAt":7,"severity":3117,"references":3120,"versionKeys":3141,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3112,3113],"CVE-2024-39689","PYSEC-2024-230",[106,3113],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[3118],{"type":3081,"score":3119},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3121,3123,3125,3128,3130,3132,3135,3137,3139],{"type":3091,"url":3122},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3091,"url":3124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3126,"url":3127},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3098,"url":3129},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3088,"url":3131},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3133,"url":3134},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3088,"url":3136},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3091,"url":3138},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3091,"url":3140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3142],"pypi:certifi@2024.6.2",{"id":107,"slug":3144,"dossier":45,"summary":3145,"aliases":3146,"sourceIds":3149,"published":3150,"modified":3151,"checkedAt":7,"severity":3152,"references":3157,"versionKeys":3181,"packageCount":32,"repositoryCount":32},"ghsa-24qx-w28j-9m6p-97a1f20a","Jupyter Server has a  CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`",[3147,3148],"CVE-2026-40110","PYSEC-2026-2187",[107,3148],"2026-05-05T16:54:31Z","2026-07-31T20:30:21.974763351Z",[3153,3155],{"type":3084,"score":3154},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3081,"score":3156},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3158,3160,3162,3165,3167,3169,3171,3173,3175,3177,3179],{"type":3126,"url":3159},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-24qx-w28j-9m6p",{"type":3091,"url":3161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40110",{"type":3163,"url":3164},"REPORT","https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fpull\u002F603",{"type":3126,"url":3166},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F057869a327c46730afede3eab0ca2d2e3e74acea",{"type":3126,"url":3168},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F49b34392feaa97735b3b777e3baf8f22f2a14ed8",{"type":3088,"url":3170},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":3088,"url":3172},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40110",{"type":3163,"url":3174},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2466912",{"type":3098,"url":3176},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server",{"type":3088,"url":3178},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-2187.yaml",{"type":3088,"url":3180},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40110.json",[3182],"pypi:jupyter-server@2.15.0",{"id":108,"slug":3184,"dossier":45,"summary":3185,"aliases":3186,"sourceIds":3189,"published":3190,"modified":3191,"checkedAt":7,"severity":3192,"references":3195,"versionKeys":3212,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3187,3188],"CVE-2025-54121","PYSEC-2026-1941",[108,3188],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[3193],{"type":3081,"score":3194},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3196,3198,3200,3202,3204,3206,3208,3210],{"type":3088,"url":3197},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3091,"url":3199},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3126,"url":3201},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3098,"url":3203},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3088,"url":3205},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3088,"url":3207},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3098,"url":3209},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3091,"url":3211},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3213,3214,3215],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":3217,"dossier":45,"summary":3218,"aliases":3219,"sourceIds":3222,"published":3223,"modified":3224,"checkedAt":7,"severity":3225,"references":3230,"versionKeys":3237,"packageCount":32,"repositoryCount":614},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3220,3221],"CVE-2026-54279","PYSEC-2026-2112",[109,3221],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[3226,3228],{"type":3084,"score":3227},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3229},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3231,3233,3235],{"type":3091,"url":3232},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3098,"url":3234},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3126,"url":3236},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[3238,3239,3240,3241,3242,3243,3244,3245],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":110,"slug":3247,"dossier":45,"summary":3248,"aliases":3249,"sourceIds":3252,"published":3253,"modified":3254,"checkedAt":7,"severity":3255,"references":3258,"versionKeys":3273,"packageCount":32,"repositoryCount":410},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[3250,3251],"CVE-2026-26013","PYSEC-2026-2562",[110,3251],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[3256],{"type":3081,"score":3257},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3259,3261,3263,3265,3267,3269,3271],{"type":3088,"url":3260},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":3091,"url":3262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":3088,"url":3264},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":3098,"url":3266},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",{"type":3088,"url":3268},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":3098,"url":3270},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":3091,"url":3272},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[3274,3275],"pypi:langchain-core@0.2.28","pypi:langchain-core@1.2.7",{"id":111,"slug":3277,"dossier":45,"summary":3278,"aliases":3279,"sourceIds":3282,"published":3283,"modified":3284,"checkedAt":7,"severity":3285,"references":3288,"versionKeys":3302,"packageCount":32,"repositoryCount":32},"ghsa-2hm2-hc3v-44h9-93b1e859","Mistune toc \u002F TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content",[3280,3281],"CVE-2026-59930","PYSEC-2026-2218",[111,3281],"2026-07-08T17:17:28.867Z","2026-07-20T21:46:43.352385519Z",[3286],{"type":3081,"score":3287},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3289,3292,3294,3296,3298,3300],{"type":3290,"url":3291},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-2hm2-hc3v-44h9",{"type":3091,"url":3293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59930",{"type":3126,"url":3295},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc4093c4742ed0d10d9332fb8edb455869b7b581b",{"type":3098,"url":3297},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune",{"type":3091,"url":3299},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.3.0",{"type":3088,"url":3301},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2218.yaml",[3303],"pypi:mistune@3.1.3",{"id":112,"slug":3305,"dossier":45,"summary":3306,"aliases":3307,"sourceIds":3310,"published":3311,"modified":3312,"checkedAt":7,"severity":3313,"references":3315,"versionKeys":3330,"packageCount":32,"repositoryCount":32},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3308,3309],"CVE-2026-24688","PYSEC-2026-1827",[112,3309],"2026-01-26T23:37:57Z","2026-07-07T17:56:12.815561375Z",[3314],{"type":3084,"score":3085},[3316,3318,3320,3322,3324,3325,3327,3328],{"type":3088,"url":3317},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3091,"url":3319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3088,"url":3321},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3088,"url":3323},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3098,"url":3099},{"type":3088,"url":3326},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3098,"url":3103},{"type":3091,"url":3329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3107],{"id":113,"slug":3332,"dossier":45,"summary":3333,"aliases":3334,"sourceIds":3337,"published":3338,"modified":3339,"checkedAt":7,"severity":3340,"references":3343,"versionKeys":3356,"packageCount":32,"repositoryCount":32},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3335,3336],"CVE-2026-27628","PYSEC-2026-3005",[113,3336],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3341],{"type":3084,"score":3342},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3344,3346,3348,3350,3352,3353,3354],{"type":3088,"url":3345},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3091,"url":3347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3088,"url":3349},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3088,"url":3351},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3098,"url":3099},{"type":3098,"url":3103},{"type":3091,"url":3355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3107],{"id":114,"slug":3358,"dossier":45,"summary":3359,"aliases":3360,"sourceIds":3363,"published":3364,"modified":3365,"checkedAt":7,"severity":3366,"references":3371,"versionKeys":3381,"packageCount":32,"repositoryCount":614},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3361,3362],"CVE-2026-34514","PYSEC-2026-2096",[114,3362],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[3367,3369],{"type":3084,"score":3368},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3370},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3372,3374,3376,3378,3379],{"type":3126,"url":3373},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3091,"url":3375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3126,"url":3377},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3098,"url":3234},{"type":3091,"url":3380},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3238,3239,3240,3241,3242,3243,3244,3245],{"id":115,"slug":3383,"dossier":45,"summary":3384,"aliases":3385,"sourceIds":3388,"published":3389,"modified":3390,"checkedAt":7,"severity":3391,"references":3393,"versionKeys":3404,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3386,3387],"CVE-2026-49476","PYSEC-2026-3071",[115,3387],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[3392],{"type":3081,"score":3229},[3394,3396,3398,3400,3402],{"type":3088,"url":3395},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3098,"url":3397},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3098,"url":3399},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3091,"url":3401},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3091,"url":3403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3405,3406,3407],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":116,"slug":3409,"dossier":89,"summary":3410,"aliases":3411,"sourceIds":3414,"published":3415,"modified":3416,"checkedAt":7,"severity":3417,"references":3420,"versionKeys":3433,"packageCount":32,"repositoryCount":3439},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3412,3413],"CVE-2025-66471","PYSEC-2026-1994",[116,3413],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[3418],{"type":3084,"score":3419},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3421,3423,3425,3427,3429,3431],{"type":3088,"url":3422},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3091,"url":3424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3126,"url":3426},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3098,"url":3428},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3098,"url":3430},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":3091,"url":3432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[3434,3435,3436,3437,3438],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":117,"slug":3441,"dossier":45,"summary":3442,"aliases":3443,"sourceIds":3446,"published":3447,"modified":3448,"checkedAt":7,"severity":3449,"references":3452,"versionKeys":3465,"packageCount":32,"repositoryCount":410},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3444,3445],"CVE-2025-30167","PYSEC-2026-1477",[117,3445],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[3450],{"type":3081,"score":3451},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3453,3455,3457,3459,3461,3463],{"type":3088,"url":3454},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3091,"url":3456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3088,"url":3458},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3098,"url":3460},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3098,"url":3462},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3091,"url":3464},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3466],"pypi:jupyter-core@5.7.2",{"id":118,"slug":3468,"dossier":45,"summary":3469,"aliases":3470,"sourceIds":3475,"published":3476,"modified":3477,"checkedAt":7,"severity":3478,"references":3481,"versionKeys":3496,"packageCount":103,"repositoryCount":103},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[3471,3472,3473,3474],"CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582",[118,3472,3473,3474],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[3479],{"type":3081,"score":3480},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3482,3484,3486,3488,3490,3492,3494],{"type":3088,"url":3483},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":3091,"url":3485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":3098,"url":3487},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":3098,"url":3489},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":3091,"url":3491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":3098,"url":3493},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":3098,"url":3495},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[3497,3498,3499,3500],"pypi:langchain-classic@1.0.1","pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langsmith@0.6.4",{"id":119,"slug":3502,"dossier":45,"summary":3503,"aliases":3504,"sourceIds":3508,"published":3509,"modified":3510,"checkedAt":7,"severity":3511,"references":3514,"versionKeys":3529,"packageCount":32,"repositoryCount":32},"ghsa-37w4-hwhx-4rc4-705a8c0a","JupyterLab has an Extension Manager API\u002FGUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request",[3505,3506,3507],"BIT-jupyterlab-2026-42266","CVE-2026-42266","PYSEC-2026-164",[119,3507],"2026-05-05T20:53:18Z","2026-06-08T20:31:00.051032052Z",[3512],{"type":3081,"score":3513},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3515,3517,3519,3521,3523,3525,3527],{"type":3091,"url":3516},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-37w4-hwhx-4rc4",{"type":3091,"url":3518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42266",{"type":3098,"url":3520},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab",{"type":3126,"url":3522},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.7",{"type":3088,"url":3524},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyterlab\u002FPYSEC-2026-164.yaml",{"type":3088,"url":3526},"https:\u002F\u002Fjupyterhub.readthedocs.io\u002Fen\u002F5.2.1\u002Fexplanation\u002Fwebsecurity.html",{"type":3088,"url":3528},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fextensions.html#extension-manager-implementations",[3530],"pypi:jupyterlab@4.4.0",{"id":120,"slug":3532,"dossier":89,"summary":3533,"aliases":3534,"sourceIds":3537,"published":3538,"modified":3539,"checkedAt":7,"severity":3540,"references":3543,"versionKeys":3556,"packageCount":32,"repositoryCount":3439},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3535,3536],"CVE-2026-21441","PYSEC-2026-1996",[120,3536],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[3541,3542],{"type":3081,"score":3229},{"type":3084,"score":3419},[3544,3546,3548,3550,3551,3553,3554],{"type":3088,"url":3545},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3091,"url":3547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3126,"url":3549},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3098,"url":3428},{"type":3088,"url":3552},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3098,"url":3430},{"type":3091,"url":3555},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3434,3435,3436,3437,3438],{"id":121,"slug":3558,"dossier":45,"summary":3559,"aliases":3560,"sourceIds":3563,"published":3564,"modified":3565,"checkedAt":7,"severity":3566,"references":3570,"versionKeys":3585,"packageCount":32,"repositoryCount":32},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3561,3562],"CVE-2026-40260","PYSEC-2026-3006",[121,3562],"2026-04-10T20:59:36Z","2026-07-13T16:42:24.793622978Z",[3567,3568],{"type":3081,"score":3194},{"type":3084,"score":3569},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3571,3573,3575,3577,3579,3580,3582,3583],{"type":3088,"url":3572},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3091,"url":3574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3088,"url":3576},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3088,"url":3578},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3098,"url":3099},{"type":3088,"url":3581},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3098,"url":3103},{"type":3091,"url":3584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3107],{"id":122,"slug":3587,"dossier":45,"summary":3588,"aliases":3589,"sourceIds":3592,"published":3593,"modified":3594,"checkedAt":7,"severity":3595,"references":3599,"versionKeys":3608,"packageCount":32,"repositoryCount":614},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3590,3591],"CVE-2026-34517","PYSEC-2026-2099",[122,3591],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3596,3598],{"type":3084,"score":3597},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3194},[3600,3602,3604,3606,3607],{"type":3126,"url":3601},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3091,"url":3603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3126,"url":3605},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":123,"slug":3610,"dossier":45,"summary":3611,"aliases":3612,"sourceIds":3615,"published":3616,"modified":3617,"checkedAt":7,"severity":3618,"references":3621,"versionKeys":3632,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[3613,3614],"CVE-2026-49853","PYSEC-2026-3387",[123,3614],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[3619],{"type":3081,"score":3620},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[3622,3624,3626,3628,3630],{"type":3088,"url":3623},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3098,"url":3625},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3098,"url":3627},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3091,"url":3629},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3091,"url":3631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[3633,3634,3635,3636,3637],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":124,"slug":3639,"dossier":45,"summary":3640,"aliases":3641,"sourceIds":3644,"published":3645,"modified":3646,"checkedAt":7,"severity":3647,"references":3649,"versionKeys":3662,"packageCount":32,"repositoryCount":410},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[3642,3643],"CVE-2025-68480","PYSEC-2026-1605",[124,3643],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[3648],{"type":3081,"score":3194},[3650,3652,3654,3656,3658,3660],{"type":3088,"url":3651},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3091,"url":3653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3088,"url":3655},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3098,"url":3657},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3098,"url":3659},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3091,"url":3661},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[3663,3664],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":125,"slug":3666,"dossier":89,"summary":3667,"aliases":3668,"sourceIds":3672,"published":3673,"modified":3674,"checkedAt":7,"severity":3675,"references":3677,"versionKeys":3690,"packageCount":32,"repositoryCount":3439},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[3669,3670,3671],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[125,3671],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[3676],{"type":3081,"score":3229},[3678,3680,3682,3684,3686,3688],{"type":3290,"url":3679},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3091,"url":3681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3126,"url":3683},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3088,"url":3685},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3098,"url":3687},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3091,"url":3689},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3691,3692,3693,3694,3695,3696,3697,3698],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":126,"slug":3700,"dossier":45,"summary":3701,"aliases":3702,"sourceIds":3705,"published":3706,"modified":3707,"checkedAt":7,"severity":3708,"references":3713,"versionKeys":3725,"packageCount":32,"repositoryCount":32},"ghsa-45pg-36p6-83v9-9505da12","Langchain SQL Injection vulnerability",[3703,358,3704],"CVE-2024-8309","PYSEC-2026-1507",[126],"2024-10-29T15:32:05Z","2026-07-07T17:57:12.591755527Z",[3709,3711],{"type":3081,"score":3710},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3084,"score":3712},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3714,3716,3718,3720,3721,3723],{"type":3091,"url":3715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8309",{"type":3088,"url":3717},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F64c317eba05fbac0c6a6fc5aa192bc0d7130972e",{"type":3088,"url":3719},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc2a3021bb0c5f54649d380b42a0684ca5778c255",{"type":3098,"url":3266},{"type":3088,"url":3722},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain\u002FPYSEC-2024-115.yaml",{"type":3088,"url":3724},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5",[3726],"pypi:langchain-community@0.2.7",{"id":127,"slug":3728,"dossier":45,"summary":3729,"aliases":3730,"sourceIds":3733,"published":3734,"modified":3735,"checkedAt":7,"severity":3736,"references":3739,"versionKeys":3760,"packageCount":32,"repositoryCount":103},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[3731,3732],"CVE-2026-33236","PYSEC-2026-2237",[127,3732],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[3737],{"type":3081,"score":3738},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3740,3742,3744,3746,3748,3750,3752,3754,3756,3758],{"type":3290,"url":3741},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3091,"url":3743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3126,"url":3745},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3098,"url":3747},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3088,"url":3749},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3088,"url":3751},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":3091,"url":3753},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3091,"url":3755},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3091,"url":3757},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3163,"url":3759},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3761,3762],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":128,"slug":3764,"dossier":45,"summary":3765,"aliases":3766,"sourceIds":3769,"published":3770,"modified":3771,"checkedAt":7,"severity":3772,"references":3775,"versionKeys":3788,"packageCount":32,"repositoryCount":381},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3767,3768],"CVE-2025-50182","PYSEC-2026-1997",[128,3768],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3773],{"type":3081,"score":3774},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3776,3778,3780,3782,3783,3785,3786],{"type":3088,"url":3777},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3091,"url":3779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3126,"url":3781},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3098,"url":3428},{"type":3088,"url":3784},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3098,"url":3430},{"type":3091,"url":3787},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3434,3435,3436,3437],{"id":129,"slug":3790,"dossier":45,"summary":3791,"aliases":3792,"sourceIds":3795,"published":3796,"modified":3797,"checkedAt":7,"severity":3798,"references":3801,"versionKeys":3810,"packageCount":32,"repositoryCount":32},"ghsa-4c99-qj7h-p3vg-9bb362f6","nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames",[3793,3794],"CVE-2026-39377","PYSEC-2026-2229",[129,3794],"2026-04-21T01:16:05.937Z","2026-07-13T07:26:39.970591013Z",[3799],{"type":3081,"score":3800},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3802,3804,3806,3808],{"type":3091,"url":3803},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-4c99-qj7h-p3vg",{"type":3091,"url":3805},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39377",{"type":3098,"url":3807},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert",{"type":3088,"url":3809},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.1",[3811],"pypi:nbconvert@7.16.6",{"id":130,"slug":3813,"dossier":45,"summary":3814,"aliases":3815,"sourceIds":3818,"published":3819,"modified":3820,"checkedAt":7,"severity":3821,"references":3823,"versionKeys":3838,"packageCount":32,"repositoryCount":32},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[3816,3817],"CVE-2026-22691","PYSEC-2026-1828",[130,3817],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[3822],{"type":3084,"score":3597},[3824,3826,3828,3830,3832,3833,3835,3836],{"type":3088,"url":3825},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3091,"url":3827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3088,"url":3829},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3088,"url":3831},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3098,"url":3099},{"type":3088,"url":3834},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3098,"url":3103},{"type":3091,"url":3837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3107],{"id":131,"slug":3840,"dossier":45,"summary":3841,"aliases":3842,"sourceIds":3845,"published":3846,"modified":3847,"checkedAt":7,"severity":3848,"references":3852,"versionKeys":3858,"packageCount":32,"repositoryCount":614},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3843,3844],"CVE-2026-54273","PYSEC-2026-2107",[131,3844],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3849,3851],{"type":3084,"score":3850},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3229},[3853,3855,3857],{"type":3091,"url":3854},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3126,"url":3856},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":132,"slug":3860,"dossier":45,"summary":3861,"aliases":3862,"sourceIds":3865,"published":3866,"modified":3867,"checkedAt":7,"severity":3868,"references":3870,"versionKeys":3881,"packageCount":32,"repositoryCount":32},"ghsa-4j32-57v6-6g45-cd8913d1","Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs",[3863,3864],"CVE-2026-59925","PYSEC-2026-2213",[132,3864],"2026-07-08T17:17:28.183Z","2026-07-20T21:46:43.348949802Z",[3869],{"type":3081,"score":3229},[3871,3873,3875,3877,3878,3879],{"type":3290,"url":3872},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-4j32-57v6-6g45",{"type":3091,"url":3874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59925",{"type":3126,"url":3876},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F5de41fb8e527004dbc363e047a3c380c9288c74f",{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":3880},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2213.yaml",[3303],{"id":133,"slug":3883,"dossier":45,"summary":3884,"aliases":3885,"sourceIds":3888,"published":3889,"modified":3890,"checkedAt":7,"severity":3891,"references":3895,"versionKeys":3899,"packageCount":32,"repositoryCount":614},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3886,3887],"CVE-2026-54275","PYSEC-2026-237",[133,3887],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3892,3894],{"type":3084,"score":3893},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3229},[3896,3898],{"type":3091,"url":3897},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":134,"slug":3901,"dossier":45,"summary":3902,"aliases":3903,"sourceIds":3906,"published":3907,"modified":3908,"checkedAt":7,"severity":3909,"references":3914,"versionKeys":3929,"packageCount":32,"repositoryCount":32},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[3904,3905],"CVE-2026-41313","PYSEC-2026-3007",[134,3905],"2026-04-16T21:30:12Z","2026-07-13T16:43:42.160859361Z",[3910,3912],{"type":3081,"score":3911},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3084,"score":3913},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3915,3917,3919,3921,3923,3924,3926,3927],{"type":3088,"url":3916},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3091,"url":3918},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3088,"url":3920},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3088,"url":3922},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3098,"url":3099},{"type":3088,"url":3925},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3098,"url":3103},{"type":3091,"url":3928},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3107],{"id":135,"slug":3931,"dossier":89,"summary":3932,"aliases":3933,"sourceIds":3937,"published":3938,"modified":3939,"checkedAt":7,"severity":3940,"references":3943,"versionKeys":3958,"packageCount":32,"repositoryCount":3439},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3934,3935,3936],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[135,3936],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3941],{"type":3081,"score":3942},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3944,3946,3948,3950,3952,3954,3956,3957],{"type":3290,"url":3945},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3091,"url":3947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3126,"url":3949},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3126,"url":3951},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3126,"url":3953},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3088,"url":3955},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3098,"url":3687},{"type":3091,"url":3689},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":136,"slug":3960,"dossier":45,"summary":3961,"aliases":3962,"sourceIds":3965,"published":3966,"modified":3967,"checkedAt":7,"severity":3968,"references":3970,"versionKeys":3982,"packageCount":32,"repositoryCount":32},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[3963,3964],"CVE-2026-22690","PYSEC-2026-1829",[136,3964],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[3969],{"type":3084,"score":3597},[3971,3973,3975,3976,3977,3978,3979,3980],{"type":3088,"url":3972},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3091,"url":3974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3088,"url":3829},{"type":3088,"url":3831},{"type":3098,"url":3099},{"type":3088,"url":3834},{"type":3098,"url":3103},{"type":3091,"url":3981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3107],{"id":137,"slug":3984,"dossier":45,"summary":3985,"aliases":3986,"sourceIds":3988,"published":3989,"modified":3990,"checkedAt":7,"severity":3991,"references":3994,"versionKeys":3999,"packageCount":32,"repositoryCount":410},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[3987],"CVE-2026-58203",[137],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[3992],{"type":3081,"score":3993},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3995,3997],{"type":3088,"url":3996},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3098,"url":3998},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[4000],"pypi:pydantic-settings@2.12.0",{"id":138,"slug":4002,"dossier":89,"summary":4003,"aliases":4004,"sourceIds":4007,"published":4008,"modified":4009,"checkedAt":7,"severity":4010,"references":4015,"versionKeys":4038,"packageCount":32,"repositoryCount":3439},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[4005,4006],"CVE-2026-4539","PYSEC-2026-2987",[138,4006],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[4011,4013],{"type":3081,"score":4012},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3084,"score":4014},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4016,4018,4020,4022,4024,4026,4028,4030,4032,4034,4036],{"type":3091,"url":4017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3088,"url":4019},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3088,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3088,"url":4023},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3098,"url":4025},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3088,"url":4027},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3088,"url":4029},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3088,"url":4031},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3088,"url":4033},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3098,"url":4035},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3091,"url":4037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[4039,4040],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":139,"slug":4042,"dossier":45,"summary":4043,"aliases":4044,"sourceIds":4047,"published":4048,"modified":4049,"checkedAt":7,"severity":4050,"references":4053,"versionKeys":4066,"packageCount":32,"repositoryCount":32},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[4045,4046],"CVE-2026-54530","PYSEC-2026-3009",[139,4046],"2026-06-16T14:05:40Z","2026-07-13T16:43:09.668829202Z",[4051],{"type":3084,"score":4052},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4054,4056,4058,4059,4061,4062,4064],{"type":3088,"url":4055},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3088,"url":4057},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3098,"url":3099},{"type":3088,"url":4060},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3098,"url":3103},{"type":3091,"url":4063},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3091,"url":4065},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3107],{"id":140,"slug":4068,"dossier":45,"summary":4069,"aliases":4070,"sourceIds":4071,"published":4072,"modified":4073,"checkedAt":7,"severity":4074,"references":4076,"versionKeys":4083,"packageCount":32,"repositoryCount":381},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[140],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[4075],{"type":3081,"score":3229},[4077,4079,4081],{"type":3088,"url":4078},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":3098,"url":4080},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":3088,"url":4082},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[4084,4085,4086,4087,4088,4089],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":141,"slug":4091,"dossier":45,"summary":4092,"aliases":4093,"sourceIds":4096,"published":4097,"modified":4098,"checkedAt":7,"severity":4099,"references":4102,"versionKeys":4114,"packageCount":32,"repositoryCount":381},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[4094,4095],"CVE-2025-69226","PYSEC-2026-1097",[141,4095],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[4100],{"type":3084,"score":4101},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4103,4105,4107,4109,4110,4112],{"type":3088,"url":4104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3091,"url":4106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3126,"url":4108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3098,"url":3234},{"type":3098,"url":4111},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3091,"url":4113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3238,3239,3240,3241,3242,3243,3244],{"id":142,"slug":4116,"dossier":45,"summary":4117,"aliases":4118,"sourceIds":4121,"published":4122,"modified":4123,"checkedAt":7,"severity":4124,"references":4126,"versionKeys":4141,"packageCount":32,"repositoryCount":32},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[4119,4120],"CVE-2026-59937","PYSEC-2026-3610",[142,4120],"2026-07-23T15:07:33Z","2026-08-04T14:40:43.949806417Z",[4125],{"type":3084,"score":3569},[4127,4129,4131,4133,4135,4136,4138,4139],{"type":3088,"url":4128},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3091,"url":4130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3088,"url":4132},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3088,"url":4134},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3098,"url":3099},{"type":3088,"url":4137},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3098,"url":3103},{"type":3091,"url":4140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3107],{"id":143,"slug":4143,"dossier":45,"summary":4144,"aliases":4145,"sourceIds":4148,"published":4149,"modified":4150,"checkedAt":7,"severity":4151,"references":4157,"versionKeys":4172,"packageCount":32,"repositoryCount":32},"ghsa-5789-5fc7-67v3-d09440f9","Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories",[4146,4147],"CVE-2026-35397","PYSEC-2026-68",[143,4147],"2026-05-05T16:49:10Z","2026-07-31T20:30:22.032211488Z",[4152,4154,4156],{"type":3081,"score":4153},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",{"type":3084,"score":4155},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3081,"score":3513},[4158,4160,4162,4163,4165,4167,4168,4170],{"type":3290,"url":4159},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5789-5fc7-67v3",{"type":3091,"url":4161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35397",{"type":3088,"url":3170},{"type":3088,"url":4164},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-35397",{"type":3088,"url":4166},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2466858",{"type":3098,"url":3176},{"type":3088,"url":4169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-68.yaml",{"type":3088,"url":4171},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-35397.json",[3182],{"id":144,"slug":4174,"dossier":45,"summary":4175,"aliases":4176,"sourceIds":4179,"published":4180,"modified":4181,"checkedAt":7,"severity":4182,"references":4187,"versionKeys":4197,"packageCount":32,"repositoryCount":32},"ghsa-58cw-g322-p94v-a1eee673","Mistune has XSS via unescaped figclass\u002Ffigwidth in Figure directive",[4177,4178],"CVE-2026-44896","PYSEC-2026-168",[144,4178],"2026-05-08T23:43:12Z","2026-06-08T23:45:17.995583404Z",[4183,4185],{"type":3081,"score":4184},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3084,"score":4186},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4188,4190,4192,4194,4195],{"type":3091,"url":4189},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-58cw-g322-p94v",{"type":3091,"url":4191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44896",{"type":3088,"url":4193},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fa3cb6e5655308797e8be021d6c7b5bab13cbace2",{"type":3098,"url":3297},{"type":3088,"url":4196},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-168.yaml",[3303],{"id":145,"slug":4199,"dossier":45,"summary":4200,"aliases":4201,"sourceIds":4204,"published":4205,"modified":4206,"checkedAt":7,"severity":4207,"references":4211,"versionKeys":4224,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[4202,4203],"CVE-2024-53981","PYSEC-2026-1851",[145,4203],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[4208,4209],{"type":3081,"score":3229},{"type":3084,"score":4210},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4212,4214,4216,4218,4220,4222],{"type":3088,"url":4213},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3091,"url":4215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3088,"url":4217},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3098,"url":4219},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3098,"url":4221},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3091,"url":4223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[4225],"pypi:python-multipart@0.0.9",{"id":146,"slug":4227,"dossier":45,"summary":4228,"aliases":4229,"sourceIds":4232,"published":4233,"modified":4234,"checkedAt":7,"severity":4235,"references":4238,"versionKeys":4253,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[4230,4231],"CVE-2024-10940","PYSEC-2026-1517",[146,4231],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[4236],{"type":3081,"score":4237},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4239,4241,4243,4245,4247,4248,4250,4251],{"type":3091,"url":4240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":3088,"url":4242},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":3088,"url":4244},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":3088,"url":4246},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":3098,"url":3266},{"type":3088,"url":4249},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":3098,"url":3270},{"type":3091,"url":4252},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[3274],{"id":147,"slug":4255,"dossier":45,"summary":4256,"aliases":4257,"sourceIds":4260,"published":4261,"modified":4262,"checkedAt":7,"severity":4263,"references":4265,"versionKeys":4278,"packageCount":32,"repositoryCount":32},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4258,4259],"CVE-2026-49460","PYSEC-2026-3010",[147,4259],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4264],{"type":3084,"score":3085},[4266,4268,4270,4271,4273,4274,4276],{"type":3088,"url":4267},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3088,"url":4269},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3098,"url":3099},{"type":3088,"url":4272},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3098,"url":3103},{"type":3091,"url":4275},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3091,"url":4277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3107],{"id":148,"slug":4280,"dossier":45,"summary":4281,"aliases":4282,"sourceIds":4285,"published":4286,"modified":4287,"checkedAt":7,"severity":4288,"references":4293,"versionKeys":4301,"packageCount":32,"repositoryCount":32},"ghsa-5mrq-x3x5-8v8f-c6e2734e","Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart",[4283,4284],"CVE-2026-40934","PYSEC-2026-69",[148,4284],"2026-05-05T17:03:24Z","2026-06-06T00:45:47.735760264Z",[4289,4291],{"type":3081,"score":4290},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"type":3084,"score":4292},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4294,4296,4298,4299],{"type":3290,"url":4295},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5mrq-x3x5-8v8f",{"type":3091,"url":4297},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40934",{"type":3098,"url":3176},{"type":3088,"url":4300},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-69.yaml",[3182],{"id":149,"slug":4303,"dossier":45,"summary":4304,"aliases":4305,"sourceIds":4308,"published":4309,"modified":4310,"checkedAt":7,"severity":4311,"references":4313,"versionKeys":4327,"packageCount":32,"repositoryCount":32},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4306,4307],"CVE-2026-59938","PYSEC-2026-3611",[149,4307],"2026-07-23T15:06:58Z","2026-08-04T14:41:04.368271781Z",[4312],{"type":3084,"score":3569},[4314,4316,4318,4320,4322,4323,4324,4325],{"type":3088,"url":4315},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3091,"url":4317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3088,"url":4319},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3088,"url":4321},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3098,"url":3099},{"type":3088,"url":4137},{"type":3098,"url":3103},{"type":3091,"url":4326},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3107],{"id":150,"slug":4329,"dossier":45,"summary":4330,"aliases":4331,"sourceIds":4335,"published":4336,"modified":4337,"checkedAt":7,"severity":4338,"references":4342,"versionKeys":4359,"packageCount":32,"repositoryCount":103},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4332,4333,4334],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[150,4334],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[4339,4341],{"type":3084,"score":4340},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3081,"score":3513},[4343,4345,4347,4349,4351,4353,4355,4357],{"type":3290,"url":4344},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3091,"url":4346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3163,"url":4348},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3126,"url":4350},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3088,"url":4352},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3098,"url":4354},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3088,"url":4356},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3133,"url":4358},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4360,4361,4362],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":151,"slug":4364,"dossier":45,"summary":4365,"aliases":4366,"sourceIds":4369,"published":4370,"modified":4371,"checkedAt":7,"severity":4372,"references":4374,"versionKeys":4383,"packageCount":32,"repositoryCount":680},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4367,4368],"CVE-2026-53539","PYSEC-2026-3036",[151,4368],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[4373],{"type":3081,"score":3229},[4375,4377,4378,4379,4381],{"type":3088,"url":4376},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3098,"url":4219},{"type":3098,"url":4221},{"type":3091,"url":4380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3091,"url":4382},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4384,4385,4225],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":152,"slug":4387,"dossier":89,"summary":4388,"aliases":4389,"sourceIds":4393,"published":4394,"modified":4395,"checkedAt":7,"severity":4396,"references":4398,"versionKeys":4408,"packageCount":32,"repositoryCount":3439},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4390,4391,4392],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[152,4392],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[4397],{"type":3081,"score":3229},[4399,4401,4403,4404,4406,4407],{"type":3290,"url":4400},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3091,"url":4402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3126,"url":3683},{"type":3088,"url":4405},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3098,"url":3687},{"type":3091,"url":3689},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":153,"slug":4410,"dossier":45,"summary":4411,"aliases":4412,"sourceIds":4415,"published":4416,"modified":4417,"checkedAt":7,"severity":4418,"references":4420,"versionKeys":4435,"packageCount":32,"repositoryCount":32},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[4413,4414],"CVE-2026-59936","PYSEC-2026-3612",[153,4414],"2026-07-23T16:36:41Z","2026-08-04T14:40:36.194125422Z",[4419],{"type":3084,"score":4210},[4421,4423,4425,4427,4429,4430,4432,4433],{"type":3088,"url":4422},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3091,"url":4424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3088,"url":4426},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3088,"url":4428},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3098,"url":3099},{"type":3088,"url":4431},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3098,"url":3103},{"type":3091,"url":4434},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3107],{"id":154,"slug":4437,"dossier":45,"summary":4438,"aliases":4439,"sourceIds":4443,"published":4444,"modified":4445,"checkedAt":7,"severity":4446,"references":4450,"versionKeys":4458,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[4440,4441,4442],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[154,4442],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[4447,4449],{"type":3081,"score":4448},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3084,"score":3085},[4451,4453,4455,4456],{"type":3091,"url":4452},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3091,"url":4454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3098,"url":3687},{"type":3091,"url":4457},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3694,3695,3696,3697,3698],{"id":155,"slug":4460,"dossier":89,"summary":4461,"aliases":4462,"sourceIds":4466,"published":4467,"modified":4468,"checkedAt":7,"severity":4469,"references":4472,"versionKeys":4488,"packageCount":32,"repositoryCount":3439},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[4463,4464,4465],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[155,4465],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[4470],{"type":3084,"score":4471},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4473,4475,4477,4479,4481,4482,4484,4486],{"type":3088,"url":4474},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3091,"url":4476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3088,"url":4478},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3088,"url":4480},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3098,"url":3687},{"type":3088,"url":4483},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3098,"url":4485},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3091,"url":4487},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":156,"slug":4490,"dossier":45,"summary":4491,"aliases":4492,"sourceIds":4495,"published":4496,"modified":4497,"checkedAt":7,"severity":4498,"references":4504,"versionKeys":4515,"packageCount":32,"repositoryCount":614},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[4493,4494],"CVE-2026-34520","PYSEC-2026-2102",[156,4494],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[4499,4501,4502],{"type":3081,"score":4500},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3084,"score":3368},{"type":3084,"score":4503},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4505,4507,4509,4511,4512,4513],{"type":3126,"url":4506},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3091,"url":4508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3126,"url":4510},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3098,"url":3234},{"type":3091,"url":3380},{"type":3088,"url":4514},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3238,3239,3240,3241,3242,3243,3244,3245],{"id":157,"slug":4517,"dossier":45,"summary":4518,"aliases":4519,"sourceIds":4522,"published":4523,"modified":4524,"checkedAt":7,"severity":4525,"references":4528,"versionKeys":4534,"packageCount":32,"repositoryCount":614},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[4520,4521],"CVE-2026-54277","PYSEC-2026-2110",[157,4521],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[4526,4527],{"type":3084,"score":3850},{"type":3081,"score":3229},[4529,4531,4533],{"type":3091,"url":4530},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3126,"url":4532},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":158,"slug":4536,"dossier":45,"summary":4537,"aliases":4538,"sourceIds":4541,"published":4542,"modified":4543,"checkedAt":7,"severity":4544,"references":4546,"versionKeys":4587,"packageCount":32,"repositoryCount":381},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[4539,4540],"CVE-2026-23490","PYSEC-2026-1810",[158,4540],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[4545],{"type":3081,"score":3229},[4547,4549,4551,4553,4555,4557,4559,4561,4563,4565,4567,4569,4571,4573,4575,4577,4579,4581,4583,4585],{"type":3088,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":3091,"url":4550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":3088,"url":4552},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":3088,"url":4554},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":3088,"url":4556},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":3088,"url":4558},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":3088,"url":4560},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":3088,"url":4562},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":3088,"url":4564},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":3088,"url":4566},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":3088,"url":4568},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":3088,"url":4570},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":3088,"url":4572},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":3088,"url":4574},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":3088,"url":4576},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":3088,"url":4578},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":3098,"url":4580},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":3088,"url":4582},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":3088,"url":4584},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":3088,"url":4586},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[4588],"pypi:pyasn1@0.6.1",{"id":159,"slug":4590,"dossier":89,"summary":4591,"aliases":4592,"sourceIds":4595,"published":4596,"modified":4597,"checkedAt":7,"severity":4598,"references":4601,"versionKeys":4610,"packageCount":32,"repositoryCount":102},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[4593,4594],"CVE-2026-45409","PYSEC-2026-215",[159,4594],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[4599,4600],{"type":3081,"score":3194},{"type":3084,"score":3569},[4602,4604,4606,4608],{"type":3091,"url":4603},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3091,"url":4605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3098,"url":4607},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3088,"url":4609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[4611,4612,4613],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":160,"slug":4615,"dossier":45,"summary":4616,"aliases":4617,"sourceIds":4620,"published":4621,"modified":4622,"checkedAt":7,"severity":4623,"references":4628,"versionKeys":4638,"packageCount":32,"repositoryCount":103},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[4618,4619],"CVE-2026-0847","PYSEC-2026-98",[160,4619],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[4624,4626],{"type":3081,"score":4625},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3081,"score":4627},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4629,4631,4632,4634,4636],{"type":3091,"url":4630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3098,"url":3747},{"type":3088,"url":4633},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3290,"url":4635},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3091,"url":4637},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3761,3762],{"id":161,"slug":4640,"dossier":45,"summary":4641,"aliases":4642,"sourceIds":4645,"published":4646,"modified":4647,"checkedAt":7,"severity":4648,"references":4650,"versionKeys":4661,"packageCount":32,"repositoryCount":381},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4643,4644],"CVE-2025-69224","PYSEC-2026-1099",[161,4644],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4649],{"type":3084,"score":3368},[4651,4653,4655,4657,4658,4659],{"type":3088,"url":4652},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3091,"url":4654},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3126,"url":4656},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":4660},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3238,3239,3240,3241,3242,3243,3244],{"id":162,"slug":4663,"dossier":45,"summary":4664,"aliases":4665,"sourceIds":4668,"published":4669,"modified":4670,"checkedAt":7,"severity":4671,"references":4673,"versionKeys":4683,"packageCount":32,"repositoryCount":103},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[4666,4667],"CVE-2026-12072","PYSEC-2026-3581",[162,4667],"2026-07-31T16:50:55Z","2026-08-06T15:11:53.284323541Z",[4672],{"type":3081,"score":4627},[4674,4676,4677,4679,4681],{"type":3088,"url":4675},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3098,"url":3747},{"type":3098,"url":4678},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3091,"url":4680},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3091,"url":4682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3761,3762],{"id":163,"slug":4685,"dossier":45,"summary":4686,"aliases":4687,"sourceIds":4690,"published":4691,"modified":4692,"checkedAt":7,"severity":4693,"references":4695,"versionKeys":4706,"packageCount":32,"repositoryCount":381},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4688,4689],"CVE-2025-69228","PYSEC-2026-1100",[163,4689],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4694],{"type":3084,"score":3850},[4696,4698,4700,4702,4703,4704],{"type":3088,"url":4697},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3091,"url":4699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3126,"url":4701},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":4705},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3238,3239,3240,3241,3242,3243,3244],{"id":164,"slug":4708,"dossier":45,"summary":4709,"aliases":4710,"sourceIds":4713,"published":4714,"modified":4715,"checkedAt":7,"severity":4716,"references":4719,"versionKeys":4728,"packageCount":32,"repositoryCount":680},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4711,4712],"CVE-2026-53538","PYSEC-2026-3037",[164,4712],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4717],{"type":3081,"score":4718},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4720,4722,4723,4724,4726],{"type":3088,"url":4721},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3098,"url":4219},{"type":3098,"url":4221},{"type":3091,"url":4725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3091,"url":4727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4384,4385,4225],{"id":165,"slug":4730,"dossier":45,"summary":4731,"aliases":4732,"sourceIds":4735,"published":4736,"modified":4737,"checkedAt":7,"severity":4738,"references":4740,"versionKeys":4751,"packageCount":32,"repositoryCount":381},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4733,4734],"CVE-2025-69223","PYSEC-2026-1101",[165,4734],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4739],{"type":3081,"score":3229},[4741,4743,4745,4747,4748,4749],{"type":3088,"url":4742},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3091,"url":4744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3126,"url":4746},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":4750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3238,3239,3240,3241,3242,3243,3244],{"id":166,"slug":4753,"dossier":45,"summary":4754,"aliases":4755,"sourceIds":4758,"published":4759,"modified":4760,"checkedAt":7,"severity":4761,"references":4764,"versionKeys":4777,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[4756,4757],"CVE-2025-65106","PYSEC-2026-1518",[166,4757],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[4762],{"type":3084,"score":4763},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4765,4767,4769,4771,4773,4774,4775],{"type":3088,"url":4766},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":3091,"url":4768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":3088,"url":4770},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":3088,"url":4772},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":3098,"url":3266},{"type":3098,"url":3270},{"type":3091,"url":4776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[3274],{"id":167,"slug":4779,"dossier":89,"summary":4780,"aliases":4781,"sourceIds":4785,"published":4786,"modified":4787,"checkedAt":7,"severity":4788,"references":4790,"versionKeys":4803,"packageCount":32,"repositoryCount":3439},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4782,4783,4784],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[167,4784],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[4789],{"type":3081,"score":3229},[4791,4793,4795,4797,4799,4801,4802],{"type":3290,"url":4792},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3091,"url":4794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3126,"url":4796},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3126,"url":4798},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3088,"url":4800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3098,"url":3687},{"type":3091,"url":4483},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":168,"slug":4805,"dossier":45,"summary":4806,"aliases":4807,"sourceIds":4810,"published":4811,"modified":4812,"checkedAt":7,"severity":4813,"references":4816,"versionKeys":4835,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[4808,4809],"CVE-2025-71176","PYSEC-2026-1845",[168,4809],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[4814],{"type":3081,"score":4815},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[4817,4819,4821,4823,4825,4827,4829,4831,4833],{"type":3091,"url":4818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3088,"url":4820},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3088,"url":4822},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3088,"url":4824},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3098,"url":4826},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3088,"url":4828},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3088,"url":4830},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3098,"url":4832},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3091,"url":4834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[4836,4837,4838,4839],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":169,"slug":4841,"dossier":45,"summary":4842,"aliases":4843,"sourceIds":4846,"published":4847,"modified":4848,"checkedAt":7,"severity":4849,"references":4854,"versionKeys":4865,"packageCount":32,"repositoryCount":32},"ghsa-7432-952r-cw78-bf3fc71f","Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle",[4844,4845],"CVE-2026-28490","PYSEC-2026-2116",[169,4845],"2026-03-16T15:17:28Z","2026-07-13T07:26:14.887077371Z",[4850,4852],{"type":3084,"score":4851},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3081,"score":4853},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4855,4857,4859,4861,4863],{"type":3290,"url":4856},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-7432-952r-cw78",{"type":3091,"url":4858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28490",{"type":3126,"url":4860},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F48b345f29f6c459f11c6a40162b6c0b742ef2e22",{"type":3098,"url":4862},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib",{"type":3091,"url":4864},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.9",[4866],"pypi:authlib@1.6.4",{"id":170,"slug":4868,"dossier":45,"summary":4869,"aliases":4870,"sourceIds":4873,"published":4874,"modified":4875,"checkedAt":7,"severity":4876,"references":4878,"versionKeys":4889,"packageCount":32,"repositoryCount":410},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[4871,4872],"CVE-2026-32597","PYSEC-2026-120",[170,4872],"2026-03-13T19:55:09.500Z","2026-06-08T19:15:12.447890578Z",[4877],{"type":3081,"score":3119},[4879,4881,4883,4885,4887],{"type":3290,"url":4880},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3091,"url":4882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3098,"url":4884},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3088,"url":4886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3088,"url":4888},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[4890,4891],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":171,"slug":4893,"dossier":45,"summary":4894,"aliases":4895,"sourceIds":4899,"published":4900,"modified":4901,"checkedAt":7,"severity":4902,"references":4908,"versionKeys":4920,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[4896,4897,4898],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[171,4897,4898],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[4903,4905,4907],{"type":3081,"score":4904},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3081,"score":4906},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3081,"score":3370},[4909,4911,4913,4914,4916,4918],{"type":3091,"url":4910},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3088,"url":4912},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3098,"url":3625},{"type":3088,"url":4915},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3091,"url":4917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3091,"url":4919},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[3633,3634,3635,3636],{"id":172,"slug":4922,"dossier":45,"summary":4069,"aliases":4923,"sourceIds":4926,"published":4927,"modified":4928,"checkedAt":7,"severity":4929,"references":4930,"versionKeys":4948,"packageCount":32,"repositoryCount":103},"ghsa-79v4-65xg-pq4g-b911b371",[4924,4925],"CVE-2024-12797","PYSEC-2026-1284",[172,4925],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4931,4933,4935,4937,4939,4941,4942,4944,4946],{"type":3088,"url":4932},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":3091,"url":4934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":3088,"url":4936},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":3088,"url":4938},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":3088,"url":4940},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":3098,"url":4080},{"type":3088,"url":4943},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":3098,"url":4945},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":3091,"url":4947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[4084,4085,4086],{"id":173,"slug":4950,"dossier":45,"summary":4951,"aliases":4952,"sourceIds":4955,"published":4956,"modified":4957,"checkedAt":7,"severity":4958,"references":4960,"versionKeys":4973,"packageCount":32,"repositoryCount":410},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[4953,4954],"CVE-2025-47287","PYSEC-2026-1974",[173,4954],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[4959],{"type":3081,"score":3229},[4961,4963,4965,4967,4968,4970,4971],{"type":3088,"url":4962},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3091,"url":4964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3088,"url":4966},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3098,"url":3625},{"type":3088,"url":4969},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3098,"url":3627},{"type":3091,"url":4972},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[3633],{"id":174,"slug":4975,"dossier":45,"summary":4976,"aliases":4977,"sourceIds":4980,"published":4981,"modified":4982,"checkedAt":7,"severity":4983,"references":4985,"versionKeys":5002,"packageCount":32,"repositoryCount":680},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4978,4979],"CVE-2025-62727","PYSEC-2026-1942",[174,4979],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4984],{"type":3081,"score":3229},[4986,4988,4990,4992,4995,4997,4999,5000],{"type":3088,"url":4987},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3091,"url":4989},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3126,"url":4991},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4993,"url":4994},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3098,"url":4996},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3088,"url":4998},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3098,"url":3209},{"type":3091,"url":5001},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3214,3215,5003,5004],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":175,"slug":5006,"dossier":45,"summary":5007,"aliases":5008,"sourceIds":5011,"published":5012,"modified":5013,"checkedAt":7,"severity":5014,"references":5017,"versionKeys":5034,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[5009,5010],"CVE-2026-0994","PYSEC-2026-1805",[175,5010],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[5015],{"type":3084,"score":5016},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[5018,5020,5022,5024,5026,5028,5030,5032],{"type":3091,"url":5019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3088,"url":5021},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3088,"url":5023},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3088,"url":5025},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3088,"url":5027},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3098,"url":5029},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3098,"url":5031},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3091,"url":5033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[5035,5036,5037,5038,5039,5040,5041,5042,5043],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":176,"slug":5045,"dossier":45,"summary":5046,"aliases":5047,"sourceIds":5050,"published":5051,"modified":5052,"checkedAt":7,"severity":5053,"references":5056,"versionKeys":5070,"packageCount":32,"repositoryCount":32},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[5048,5049],"CVE-2026-41312","PYSEC-2026-3011",[176,5049],"2026-04-16T21:30:00Z","2026-07-13T16:42:36.454088588Z",[5054,5055],{"type":3081,"score":3911},{"type":3084,"score":3913},[5057,5059,5061,5063,5065,5066,5067,5068],{"type":3088,"url":5058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3091,"url":5060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3088,"url":5062},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3088,"url":5064},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3098,"url":3099},{"type":3088,"url":3925},{"type":3098,"url":3103},{"type":3091,"url":5069},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3107],{"id":177,"slug":5072,"dossier":45,"summary":5073,"aliases":5074,"sourceIds":5077,"published":5078,"modified":5079,"checkedAt":7,"severity":5080,"references":5082,"versionKeys":5099,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[5075,5076],"CVE-2025-55197","PYSEC-2026-1830",[177,5076],"2025-08-13T19:51:24Z","2026-07-07T17:57:06.843769097Z",[5081],{"type":3084,"score":3850},[5083,5085,5087,5089,5091,5092,5094,5096,5097],{"type":3088,"url":5084},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3091,"url":5086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3088,"url":5088},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3088,"url":5090},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3098,"url":3099},{"type":3088,"url":5093},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3088,"url":5095},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3098,"url":3103},{"type":3091,"url":5098},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3107],{"id":178,"slug":5101,"dossier":45,"summary":5102,"aliases":5103,"sourceIds":5106,"published":5107,"modified":5108,"checkedAt":7,"severity":5109,"references":5112,"versionKeys":5119,"packageCount":32,"repositoryCount":32},"ghsa-7jqv-fw35-gmx9-d6bf4abd","nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding",[5104,5105],"CVE-2026-39378","PYSEC-2026-2230",[178,5105],"2026-04-21T01:16:06.073Z","2026-07-13T07:26:18.607056830Z",[5110],{"type":3081,"score":5111},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5113,5115,5117,5118],{"type":3091,"url":5114},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-7jqv-fw35-gmx9",{"type":3091,"url":5116},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39378",{"type":3098,"url":3807},{"type":3088,"url":3809},[3811],{"id":179,"slug":5121,"dossier":45,"summary":5122,"aliases":5123,"sourceIds":5126,"published":5127,"modified":5128,"checkedAt":7,"severity":5129,"references":5132,"versionKeys":5148,"packageCount":32,"repositoryCount":103},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[5124,5125],"CVE-2025-14009","PYSEC-2026-96",[179,5125],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[5130],{"type":3081,"score":5131},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5133,5135,5137,5139,5140,5142,5144,5146],{"type":3091,"url":5134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3088,"url":5136},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3088,"url":5138},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3098,"url":3747},{"type":3088,"url":5141},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3088,"url":5143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3290,"url":5145},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3091,"url":5147},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3761,3762],{"id":180,"slug":5150,"dossier":45,"summary":5151,"aliases":5152,"sourceIds":5155,"published":5156,"modified":5157,"checkedAt":7,"severity":5158,"references":5160,"versionKeys":5164,"packageCount":32,"repositoryCount":634},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5153,5154],"CVE-2026-54283","PYSEC-2026-249",[180,5154],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[5159],{"type":3081,"score":3229},[5161,5163],{"type":3091,"url":5162},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3098,"url":4996},[3213,3214,3215,5003,5004,5165,5166],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":181,"slug":5168,"dossier":45,"summary":5169,"aliases":5170,"sourceIds":5173,"published":5174,"modified":5175,"checkedAt":7,"severity":5176,"references":5178,"versionKeys":5187,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5171,5172],"CVE-2026-49477","PYSEC-2026-3072",[181,5172],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[5177],{"type":3081,"score":3229},[5179,5181,5182,5183,5185],{"type":3088,"url":5180},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3098,"url":3397},{"type":3098,"url":3399},{"type":3091,"url":5184},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3091,"url":5186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3405,3406,3407],{"id":182,"slug":5189,"dossier":45,"summary":5190,"aliases":5191,"sourceIds":5194,"published":5195,"modified":5196,"checkedAt":7,"severity":5197,"references":5204,"versionKeys":5222,"packageCount":32,"repositoryCount":103},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[5192,5193],"CVE-2025-71408","PYSEC-2026-3657",[182,5193],"2026-07-24T22:16:50.063Z","2026-08-12T19:59:11.940439452Z",[5198,5200,5202],{"type":3081,"score":5199},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3084,"score":5201},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3084,"score":5203},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5205,5207,5209,5211,5213,5214,5216,5218,5220],{"type":3091,"url":5206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3126,"url":5208},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3126,"url":5210},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3088,"url":5212},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3098,"url":3747},{"type":3091,"url":5215},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3088,"url":5217},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3126,"url":5219},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3290,"url":5221},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",[3761,3762],{"id":183,"slug":5224,"dossier":45,"summary":5225,"aliases":5226,"sourceIds":5230,"published":5231,"modified":5232,"checkedAt":7,"severity":5233,"references":5236,"versionKeys":5272,"packageCount":32,"repositoryCount":634},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5227,5228,5229],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[183,5228],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[5234],{"type":3081,"score":5235},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5237,5239,5241,5243,5245,5247,5249,5251,5253,5255,5256,5258,5261,5263,5265,5267,5268,5270],{"type":3091,"url":5238},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3091,"url":5240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3126,"url":5242},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3088,"url":5244},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3133,"url":5246},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3088,"url":5248},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3088,"url":5250},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3088,"url":5252},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3088,"url":5254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3098,"url":4996},{"type":3088,"url":5257},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5259,"url":5260},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3088,"url":5262},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3088,"url":5264},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3088,"url":5266},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3088,"url":3170},{"type":3133,"url":5269},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3091,"url":5271},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3213,3214,3215,5003,5004,5165,5166],{"id":184,"slug":5274,"dossier":45,"summary":5275,"aliases":5276,"sourceIds":5279,"published":5280,"modified":5281,"checkedAt":7,"severity":5282,"references":5285,"versionKeys":5298,"packageCount":32,"repositoryCount":32},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5277,5278],"CVE-2026-33699","PYSEC-2026-3012",[184,5278],"2026-03-25T20:05:22Z","2026-07-13T16:42:35.293920191Z",[5283],{"type":3084,"score":5284},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5286,5288,5290,5292,5293,5295,5296],{"type":3088,"url":5287},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3091,"url":5289},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3088,"url":5291},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3098,"url":3099},{"type":3088,"url":5294},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3098,"url":3103},{"type":3091,"url":5297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3107],{"id":185,"slug":5300,"dossier":45,"summary":5301,"aliases":5302,"sourceIds":5304,"published":5305,"modified":5306,"checkedAt":7,"severity":5307,"references":5310,"versionKeys":5328,"packageCount":32,"repositoryCount":32},"ghsa-89vp-jrxv-24w8-56cdaa85","JupyterLab: PyPI extension blocklist package-name canonicalization bypass",[5303],"CVE-2026-73416",[185],"2026-07-22T23:14:27Z","2026-08-12T20:00:09.906926487Z",[5308],{"type":3084,"score":5309},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5311,5313,5315,5317,5319,5321,5323,5324,5326],{"type":3088,"url":5312},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-89vp-jrxv-24w8",{"type":3088,"url":5314},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19184",{"type":3088,"url":5316},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19185",{"type":3088,"url":5318},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19186",{"type":3088,"url":5320},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fbe9303f5bcd5308eaeae953c5a3c903046682c2c",{"type":3088,"url":5322},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Ff1beab4a2027af4719d6edc07d52d6cf5a39a432",{"type":3098,"url":3520},{"type":3088,"url":5325},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.10",{"type":3088,"url":5327},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.6.2",[5329],"pypi:jupyterlab@4.6.1",{"id":186,"slug":5331,"dossier":45,"summary":5332,"aliases":5333,"sourceIds":5336,"published":5337,"modified":5338,"checkedAt":7,"severity":5339,"references":5341,"versionKeys":5352,"packageCount":32,"repositoryCount":32},"ghsa-8c25-4j27-2rv3-4e2c246a","Mistune: XSS via percent-encoded javascript URI bypass in safe_url()",[5334,5335],"CVE-2026-59923","PYSEC-2026-2211",[186,5335],"2026-07-08T17:17:27.910Z","2026-07-20T21:46:43.351006286Z",[5340],{"type":3081,"score":4184},[5342,5344,5346,5348,5349,5350],{"type":3290,"url":5343},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8c25-4j27-2rv3",{"type":3091,"url":5345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59923",{"type":3126,"url":5347},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc",{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":5351},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2211.yaml",[3303],{"id":187,"slug":5354,"dossier":45,"summary":5355,"aliases":5356,"sourceIds":5359,"published":5360,"modified":5361,"checkedAt":7,"severity":5362,"references":5364,"versionKeys":5372,"packageCount":32,"repositoryCount":32},"ghsa-8g87-j6q8-g93x-2e837b39","Mistune Math Plugin has an XSS Escape Bypass",[5357,5358],"CVE-2026-44708","PYSEC-2026-2206",[187,5358],"2026-05-08T23:40:04Z","2026-07-13T07:26:26.365066334Z",[5363],{"type":3081,"score":4184},[5365,5367,5369,5370],{"type":3290,"url":5366},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8g87-j6q8-g93x",{"type":3091,"url":5368},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44708",{"type":3098,"url":3297},{"type":3091,"url":5371},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.2.1",[3303],{"id":188,"slug":5374,"dossier":45,"summary":5375,"aliases":5376,"sourceIds":5379,"published":5380,"modified":5381,"checkedAt":7,"severity":5382,"references":5384,"versionKeys":5396,"packageCount":32,"repositoryCount":32},"ghsa-8mp2-v27r-99xp-3e3baa33","Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input",[5377,5378],"CVE-2026-33079","PYSEC-2026-2651",[188,5378],"2026-05-06T16:52:43Z","2026-07-13T16:42:39.431792280Z",[5383],{"type":3084,"score":4210},[5385,5387,5389,5390,5392,5394],{"type":3088,"url":5386},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",{"type":3091,"url":5388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33079",{"type":3098,"url":3297},{"type":3088,"url":5391},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fblob\u002Fdf23edd60b43b639d2e6760ef9dd3d618aa11c21\u002Fsrc\u002Fmistune\u002Fhelpers.py#L20-L25",{"type":3098,"url":5393},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmistune",{"type":3091,"url":5395},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",[3303],{"id":189,"slug":5398,"dossier":45,"summary":5399,"aliases":5400,"sourceIds":5403,"published":5404,"modified":5405,"checkedAt":7,"severity":5406,"references":5408,"versionKeys":5419,"packageCount":32,"repositoryCount":32},"ghsa-8mpj-m6qm-5qr8-24abd1d9","Mistune directives\u002Finclude: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files",[5401,5402],"CVE-2026-59927","PYSEC-2026-2215",[189,5402],"2026-07-08T17:17:28.450Z","2026-07-20T21:30:45.969881443Z",[5407],{"type":3081,"score":3194},[5409,5411,5413,5415,5416,5417],{"type":3290,"url":5410},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpj-m6qm-5qr8",{"type":3091,"url":5412},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59927",{"type":3126,"url":5414},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F1bef343ade163fc3bb95572b15be720084cdb993",{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":5418},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2215.yaml",[3303],{"id":190,"slug":5421,"dossier":45,"summary":5422,"aliases":5423,"sourceIds":5426,"published":5427,"modified":5428,"checkedAt":7,"severity":5429,"references":5431,"versionKeys":5441,"packageCount":32,"repositoryCount":634},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[5424,5425],"CVE-2026-59885","PYSEC-2026-3456",[190,5425],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[5430],{"type":3081,"score":3229},[5432,5434,5436,5438,5439],{"type":3091,"url":5433},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":3091,"url":5435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":3126,"url":5437},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":3098,"url":4580},{"type":3091,"url":5440},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[4588,5442],"pypi:pyasn1@0.6.3",{"id":191,"slug":5444,"dossier":45,"summary":5445,"aliases":5446,"sourceIds":5449,"published":5450,"modified":5451,"checkedAt":7,"severity":5452,"references":5455,"versionKeys":5474,"packageCount":32,"repositoryCount":103},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[5447,5448],"CVE-2025-4565","PYSEC-2026-1806",[191,5448],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[5453],{"type":3084,"score":5454},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5456,5458,5460,5462,5464,5465,5467,5469,5471,5472],{"type":3088,"url":5457},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3088,"url":5459},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3091,"url":5461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3088,"url":5463},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3098,"url":5029},{"type":3088,"url":5466},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3088,"url":5468},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3088,"url":5470},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3098,"url":5031},{"type":3091,"url":5473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[5035,5037,5038],{"id":192,"slug":5476,"dossier":45,"summary":5477,"aliases":5478,"sourceIds":5479,"published":5480,"modified":5481,"checkedAt":7,"severity":5482,"references":5485,"versionKeys":5492,"packageCount":32,"repositoryCount":32},"ghsa-8rfp-98v4-mmr6-7ea7e5dd","Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output",[],[192],"2026-06-16T14:06:29Z","2026-06-18T13:29:27.505774604Z",[5483],{"type":3081,"score":5484},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[5486,5488,5490],{"type":3088,"url":5487},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-8rfp-98v4-mmr6",{"type":3088,"url":5489},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=2023812",{"type":3098,"url":5491},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach",[5493],"pypi:bleach@6.2.0",{"id":193,"slug":5495,"dossier":89,"summary":5496,"aliases":5497,"sourceIds":5501,"published":5502,"modified":5503,"checkedAt":7,"severity":5504,"references":5506,"versionKeys":5516,"packageCount":32,"repositoryCount":3439},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[5498,5499,5500],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[193,5500],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[5505],{"type":3081,"score":3229},[5507,5509,5511,5512,5514,5515],{"type":3290,"url":5508},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3091,"url":5510},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3126,"url":3683},{"type":3088,"url":5513},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3098,"url":3687},{"type":3091,"url":3689},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":194,"slug":5518,"dossier":45,"summary":5519,"aliases":5520,"sourceIds":5523,"published":5524,"modified":5525,"checkedAt":7,"severity":5526,"references":5529,"versionKeys":5550,"packageCount":32,"repositoryCount":410},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[5521,5522],"CVE-2026-40087","PYSEC-2026-2563",[194,5522],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[5527],{"type":3081,"score":5528},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5530,5532,5534,5536,5538,5540,5542,5543,5545,5547,5548],{"type":3088,"url":5531},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":3091,"url":5533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":3088,"url":5535},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":3088,"url":5537},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":3088,"url":5539},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":3088,"url":5541},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":3098,"url":3266},{"type":3088,"url":5544},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":3088,"url":5546},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":3098,"url":3270},{"type":3091,"url":5549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[3274,3275],{"id":195,"slug":5552,"dossier":45,"summary":5553,"aliases":5554,"sourceIds":5557,"published":5558,"modified":5559,"checkedAt":7,"severity":5560,"references":5563,"versionKeys":5574,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[5555,5556],"CVE-2025-53643","PYSEC-2026-1104",[195,5556],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[5561],{"type":3084,"score":5562},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5564,5566,5568,5570,5571,5572],{"type":3088,"url":5565},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3091,"url":5567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3126,"url":5569},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":5573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3238,3239,3240,3241],{"id":196,"slug":5576,"dossier":45,"summary":5577,"aliases":5578,"sourceIds":5581,"published":5582,"modified":5583,"checkedAt":7,"severity":5584,"references":5587,"versionKeys":5596,"packageCount":32,"repositoryCount":614},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[5579,5580],"CVE-2026-34518","PYSEC-2026-2100",[196,5580],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[5585,5586],{"type":3081,"score":5528},{"type":3084,"score":4101},[5588,5590,5592,5594,5595],{"type":3126,"url":5589},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3091,"url":5591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3126,"url":5593},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":197,"slug":5598,"dossier":45,"summary":5599,"aliases":5600,"sourceIds":5603,"published":5604,"modified":5605,"checkedAt":7,"severity":5606,"references":5609,"versionKeys":5619,"packageCount":32,"repositoryCount":410},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[5601,5602],"CVE-2026-48522","PYSEC-2026-175",[197,5602],"2026-05-28T16:16:29.150Z","2026-07-31T22:15:22.444788060Z",[5607],{"type":3081,"score":5608},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5610,5612,5614,5616,5617],{"type":3290,"url":5611},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3091,"url":5613},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3088,"url":5615},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3098,"url":4884},{"type":3088,"url":5618},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[4890,4891],{"id":198,"slug":5621,"dossier":45,"summary":5622,"aliases":5623,"sourceIds":5626,"published":5627,"modified":5628,"checkedAt":7,"severity":5629,"references":5631,"versionKeys":5646,"packageCount":32,"repositoryCount":32},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[5624,5625],"CVE-2026-27024","PYSEC-2026-3013",[198,5625],"2026-02-18T22:40:49Z","2026-07-13T16:43:40.532306824Z",[5630],{"type":3084,"score":4052},[5632,5634,5636,5638,5640,5641,5643,5644],{"type":3088,"url":5633},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3091,"url":5635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3088,"url":5637},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3088,"url":5639},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3098,"url":3099},{"type":3088,"url":5642},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3098,"url":3103},{"type":3091,"url":5645},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3107],{"id":199,"slug":5648,"dossier":45,"summary":5649,"aliases":5650,"sourceIds":5653,"published":5654,"modified":5655,"checkedAt":7,"severity":5656,"references":5659,"versionKeys":5674,"packageCount":32,"repositoryCount":410},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[5651,5652],"CVE-2025-66416","PYSEC-2026-1617",[199,5652],"2025-12-02T16:52:08Z","2026-07-16T18:45:48.199773308Z",[5657],{"type":3084,"score":5658},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5660,5662,5664,5666,5668,5670,5672],{"type":3088,"url":5661},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3091,"url":5663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3088,"url":5665},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3091,"url":5667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3098,"url":5669},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3088,"url":5671},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3098,"url":5673},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5675,5676],"pypi:mcp@1.10.0","pypi:mcp@1.14.1",{"id":200,"slug":5678,"dossier":45,"summary":5679,"aliases":5680,"sourceIds":5683,"published":5684,"modified":5685,"checkedAt":7,"severity":5686,"references":5689,"versionKeys":5708,"packageCount":32,"repositoryCount":381},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[5681,5682],"CVE-2024-47081","PYSEC-2026-1872",[200,5682],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[5687],{"type":3081,"score":5688},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5690,5692,5694,5696,5698,5700,5702,5704,5706],{"type":3088,"url":5691},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3091,"url":5693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3088,"url":5695},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3126,"url":5697},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3098,"url":5699},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3088,"url":5701},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3088,"url":5703},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":3098,"url":5705},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3091,"url":5707},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[5709,5710],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":201,"slug":5712,"dossier":89,"summary":5713,"aliases":5714,"sourceIds":5718,"published":5719,"modified":5720,"checkedAt":7,"severity":5721,"references":5723,"versionKeys":5736,"packageCount":32,"repositoryCount":3439},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[5715,5716,5717],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[201,5717],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[5722],{"type":3081,"score":3229},[5724,5726,5728,5730,5732,5734,5735],{"type":3290,"url":5725},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3091,"url":5727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3126,"url":5729},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3126,"url":5731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3088,"url":5733},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3098,"url":3687},{"type":3091,"url":4483},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":202,"slug":5738,"dossier":45,"summary":5739,"aliases":5740,"sourceIds":5743,"published":5744,"modified":5745,"checkedAt":7,"severity":5746,"references":5748,"versionKeys":5763,"packageCount":32,"repositoryCount":32},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[5741,5742],"CVE-2026-28804","PYSEC-2026-3014",[202,5742],"2026-03-02T22:03:45Z","2026-07-13T16:42:53.625666226Z",[5747],{"type":3084,"score":3569},[5749,5751,5753,5755,5757,5758,5760,5761],{"type":3088,"url":5750},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3091,"url":5752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3088,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3088,"url":5756},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3098,"url":3099},{"type":3088,"url":5759},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3098,"url":3103},{"type":3091,"url":5762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3107],{"id":203,"slug":5765,"dossier":45,"summary":5766,"aliases":5767,"sourceIds":5770,"published":5771,"modified":5772,"checkedAt":7,"severity":5773,"references":5775,"versionKeys":5789,"packageCount":32,"repositoryCount":32},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[5768,5769],"CVE-2026-27026","PYSEC-2026-3015",[203,5769],"2026-02-18T22:41:24Z","2026-07-13T16:42:59.576223829Z",[5774],{"type":3084,"score":4052},[5776,5778,5780,5782,5784,5785,5786,5787],{"type":3088,"url":5777},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3091,"url":5779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3088,"url":5781},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3088,"url":5783},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3098,"url":3099},{"type":3088,"url":5642},{"type":3098,"url":3103},{"type":3091,"url":5788},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3107],{"id":204,"slug":5791,"dossier":45,"summary":5792,"aliases":5793,"sourceIds":5800,"published":5801,"modified":5802,"checkedAt":7,"severity":5803,"references":5808,"versionKeys":5822,"packageCount":32,"repositoryCount":32},"ghsa-9q39-rmj3-p4r2-67d5744e","HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering",[5794,5795,5796,5797,5798,5799],"BIT-jupyter-base-notebook-2024-43805","BIT-jupyter-notebook-2024-43805","BIT-jupyterlab-2024-43805","CVE-2024-43805","PYSEC-2026-1481","PYSEC-2026-2536",[204,5798],"2024-08-29T17:55:53Z","2026-07-13T16:43:05.974128183Z",[5804,5806],{"type":3081,"score":5805},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3084,"score":5807},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5809,5811,5813,5815,5817,5818,5820],{"type":3088,"url":5810},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",{"type":3091,"url":5812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-43805",{"type":3088,"url":5814},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F06ad9de836f155add7d3d651ef936cc4c5ea8093",{"type":3088,"url":5816},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88e24baac551196f9cb3de16bd060a7ab1597674",{"type":3098,"url":3520},{"type":3098,"url":5819},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyterlab",{"type":3091,"url":5821},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",[5823],"pypi:notebook@7.0.7",{"id":205,"slug":5825,"dossier":45,"summary":5826,"aliases":5827,"sourceIds":5830,"published":5831,"modified":5832,"checkedAt":7,"severity":5833,"references":5836,"versionKeys":5853,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[5828,5829],"CVE-2024-35195","PYSEC-2026-1873",[205,5829],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[5834],{"type":3081,"score":5835},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5837,5839,5841,5843,5845,5846,5848,5850,5851],{"type":3088,"url":5838},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3091,"url":5840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3088,"url":5842},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3126,"url":5844},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3098,"url":5699},{"type":3088,"url":5847},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3088,"url":5849},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3098,"url":5705},{"type":3091,"url":5852},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[5709],{"id":206,"slug":5855,"dossier":45,"summary":5856,"aliases":5857,"sourceIds":5860,"published":5861,"modified":5862,"checkedAt":7,"severity":5863,"references":5867,"versionKeys":5873,"packageCount":32,"repositoryCount":614},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5858,5859],"CVE-2026-54280","PYSEC-2026-2113",[206,5859],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5864,5866],{"type":3084,"score":5865},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":3229},[5868,5870,5872],{"type":3091,"url":5869},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3126,"url":5871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":207,"slug":5875,"dossier":45,"summary":5876,"aliases":5877,"sourceIds":5880,"published":5881,"modified":5882,"checkedAt":7,"severity":5883,"references":5887,"versionKeys":5898,"packageCount":32,"repositoryCount":614},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5878,5879],"CVE-2026-34525","PYSEC-2026-2103",[207,5879],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5884,5886],{"type":3084,"score":5885},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3081,"score":3370},[5888,5890,5892,5894,5896,5897],{"type":3126,"url":5889},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3091,"url":5891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3126,"url":5893},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3126,"url":5895},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":208,"slug":5900,"dossier":45,"summary":5901,"aliases":5902,"sourceIds":5905,"published":5906,"modified":5907,"checkedAt":7,"severity":5908,"references":5911,"versionKeys":5932,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[5903,5904],"CVE-2025-68664","PYSEC-2026-373",[208,5904],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[5909],{"type":3081,"score":5910},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[5912,5914,5916,5918,5920,5922,5924,5925,5927,5929,5930],{"type":3088,"url":5913},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":3091,"url":5915},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":3088,"url":5917},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":3088,"url":5919},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":3088,"url":5921},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":3088,"url":5923},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":3098,"url":3266},{"type":3088,"url":5926},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":3088,"url":5928},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":3098,"url":3270},{"type":3091,"url":5931},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[3274],{"id":209,"slug":5934,"dossier":45,"summary":5935,"aliases":5936,"sourceIds":5939,"published":5940,"modified":5941,"checkedAt":7,"severity":5942,"references":5944,"versionKeys":5955,"packageCount":32,"repositoryCount":32},"ghsa-c8j7-8cv4-2xmq-1ef013c3","Mistune plugins\u002Fformatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough \u002F mark \u002F insert)",[5937,5938],"CVE-2026-59922","PYSEC-2026-2210",[209,5938],"2026-07-08T17:17:27.770Z","2026-07-20T21:46:39.999565306Z",[5943],{"type":3081,"score":3229},[5945,5947,5949,5951,5952,5953],{"type":3290,"url":5946},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-c8j7-8cv4-2xmq",{"type":3091,"url":5948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59922",{"type":3126,"url":5950},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F96d0f57f8fe9eeb06bb4cff521962a27d7c402e7",{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":5954},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2210.yaml",[3303],{"id":210,"slug":5957,"dossier":45,"summary":5958,"aliases":5959,"sourceIds":5962,"published":5963,"modified":5964,"checkedAt":7,"severity":5965,"references":5967,"versionKeys":5979,"packageCount":32,"repositoryCount":680},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[5960,5961],"CVE-2025-67725","PYSEC-2025-266",[210,5961],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[5966],{"type":3081,"score":3229},[5968,5970,5972,5974,5976,5977],{"type":3091,"url":5969},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3091,"url":5971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3126,"url":5973},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3088,"url":5975},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3098,"url":3625},{"type":3091,"url":5978},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[3633,3634,3635],{"id":211,"slug":5981,"dossier":45,"summary":5982,"aliases":5983,"sourceIds":5987,"published":5988,"modified":5989,"checkedAt":7,"severity":5990,"references":5994,"versionKeys":6032,"packageCount":32,"repositoryCount":6033},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5984,5985,5986],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[211,5986],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5991,5993],{"type":3084,"score":5992},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3081,"score":3229},[5995,5997,5999,6001,6003,6005,6006,6008,6010,6012,6013,6015,6017,6019,6020,6022,6024,6026,6028,6030],{"type":3088,"url":5996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3091,"url":5998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3088,"url":6000},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3088,"url":6002},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3088,"url":6004},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3098,"url":3687},{"type":3088,"url":6007},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3088,"url":6009},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3088,"url":6011},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3091,"url":3753},{"type":3091,"url":6014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3091,"url":6016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3091,"url":6018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3091,"url":3755},{"type":3091,"url":6021},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3091,"url":6023},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3091,"url":6025},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3091,"url":6027},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3091,"url":6029},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3091,"url":6031},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3691,3692,3693,3694,3695,3696,3697],12,{"id":212,"slug":6035,"dossier":45,"summary":6036,"aliases":6037,"sourceIds":6040,"published":6041,"modified":6042,"checkedAt":7,"severity":6043,"references":6046,"versionKeys":6058,"packageCount":32,"repositoryCount":32},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[6038,6039],"CVE-2026-48155","PYSEC-2026-3016",[212,6039],"2026-06-12T18:29:15Z","2026-07-13T16:43:35.317206583Z",[6044],{"type":3084,"score":6045},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6047,6049,6051,6053,6054,6055,6056],{"type":3088,"url":6048},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3091,"url":6050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3088,"url":6052},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3098,"url":3099},{"type":3088,"url":3101},{"type":3098,"url":3103},{"type":3091,"url":6057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3107],{"id":213,"slug":6060,"dossier":45,"summary":6061,"aliases":6062,"sourceIds":6065,"published":6066,"modified":6067,"checkedAt":7,"severity":6068,"references":6071,"versionKeys":6088,"packageCount":32,"repositoryCount":410},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[6063,6064],"CVE-2025-27516","PYSEC-2026-1471",[213,6064],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[6069],{"type":3084,"score":6070},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6072,6074,6076,6078,6080,6082,6084,6086],{"type":3088,"url":6073},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3091,"url":6075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3126,"url":6077},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3098,"url":6079},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3088,"url":6081},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3088,"url":6083},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3098,"url":6085},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3091,"url":6087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[6089,6090],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":214,"slug":6092,"dossier":45,"summary":6093,"aliases":6094,"sourceIds":6097,"published":6098,"modified":6099,"checkedAt":7,"severity":6100,"references":6103,"versionKeys":6118,"packageCount":32,"repositoryCount":6120},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[6095,6096],"CVE-2026-69244","PYSEC-2026-3545",[214,6096],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[6101],{"type":3084,"score":6102},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6104,6106,6108,6110,6111,6113,6114,6116],{"type":3088,"url":6105},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3088,"url":6107},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3088,"url":6109},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3098,"url":3234},{"type":3088,"url":6112},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3098,"url":4111},{"type":3091,"url":6115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3091,"url":6117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3238,3239,3240,3241,3242,3243,3244,3245,6119],"pypi:aiohttp@3.14.1",11,{"id":215,"slug":6122,"dossier":45,"summary":6123,"aliases":6124,"sourceIds":6127,"published":6128,"modified":6129,"checkedAt":7,"severity":6130,"references":6133,"versionKeys":6144,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[6125,6126],"CVE-2026-49854","PYSEC-2026-3388",[215,6126],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[6131],{"type":3081,"score":6132},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6134,6136,6137,6139,6140,6142],{"type":3088,"url":6135},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3098,"url":3625},{"type":3088,"url":6138},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3098,"url":3627},{"type":3091,"url":6141},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3091,"url":6143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[3633,3634,3635,3636,3637],{"id":216,"slug":6146,"dossier":45,"summary":6147,"aliases":6148,"sourceIds":6152,"published":6153,"modified":6154,"checkedAt":7,"severity":6155,"references":6160,"versionKeys":6176,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[6149,6150,6151],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[216,6151],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[6156,6158],{"type":3081,"score":6157},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3084,"score":6159},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6161,6163,6165,6167,6168,6170,6172,6174],{"type":3091,"url":6162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3088,"url":6164},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3088,"url":6166},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3098,"url":4354},{"type":3088,"url":6169},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3088,"url":6171},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3098,"url":6173},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3091,"url":6175},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4360],{"id":217,"slug":6178,"dossier":45,"summary":6179,"aliases":6180,"sourceIds":6183,"published":6184,"modified":6185,"checkedAt":7,"severity":6186,"references":6188,"versionKeys":6203,"packageCount":32,"repositoryCount":32},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[6181,6182],"CVE-2026-28351","PYSEC-2026-3017",[217,6182],"2026-02-28T02:46:10Z","2026-07-13T16:43:26.452272481Z",[6187],{"type":3084,"score":3569},[6189,6191,6193,6195,6197,6198,6200,6201],{"type":3088,"url":6190},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3091,"url":6192},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3088,"url":6194},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3088,"url":6196},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3098,"url":3099},{"type":3088,"url":6199},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3098,"url":3103},{"type":3091,"url":6202},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3107],{"id":218,"slug":6205,"dossier":45,"summary":6206,"aliases":6207,"sourceIds":6209,"published":6210,"modified":6211,"checkedAt":7,"severity":6212,"references":6214,"versionKeys":6218,"packageCount":32,"repositoryCount":32},"ghsa-f4xh-w4cj-qxq8-981d76df","LangSmith SDK TracingMiddleware: Arbitrary server-side file read",[6208],"CVE-2026-59152",[218],"2026-06-19T22:10:34Z","2026-07-08T08:26:43.324048749Z",[6213],{"type":3081,"score":3620},[6215,6217],{"type":3088,"url":6216},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-f4xh-w4cj-qxq8",{"type":3098,"url":3487},[3500],{"id":219,"slug":6220,"dossier":45,"summary":6221,"aliases":6222,"sourceIds":6225,"published":6226,"modified":6227,"checkedAt":7,"severity":6228,"references":6230,"versionKeys":6243,"packageCount":32,"repositoryCount":32},"ghsa-f83h-ghpp-7wcc-fde96eee","Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc",[6223,6224],"CVE-2025-70559","PYSEC-2026-1761",[219,6224],"2025-11-07T23:17:05Z","2026-07-08T07:38:27.593871221Z",[6229],{"type":3081,"score":5199},[6231,6233,6235,6237,6239,6241],{"type":3088,"url":6232},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",{"type":3091,"url":6234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-70559",{"type":3088,"url":6236},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fcommit\u002Fb808ee05dd7f0c8ea8ec34bdf394d40e63501086",{"type":3098,"url":6238},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six",{"type":3098,"url":6240},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpdfminer-six",{"type":3091,"url":6242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",[6244],"pypi:pdfminer-six@20240706",{"id":220,"slug":6246,"dossier":45,"summary":6247,"aliases":6248,"sourceIds":6251,"published":6252,"modified":6253,"checkedAt":7,"severity":6254,"references":6258,"versionKeys":6269,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[6249,6250],"CVE-2024-47874","PYSEC-2026-1943",[220,6250],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[6255,6257],{"type":3081,"score":6256},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3084,"score":4210},[6259,6261,6263,6265,6266,6267],{"type":3088,"url":6260},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3091,"url":6262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3126,"url":6264},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3098,"url":3203},{"type":3098,"url":3209},{"type":3091,"url":6268},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3213],{"id":221,"slug":6271,"dossier":45,"summary":6272,"aliases":6273,"sourceIds":6276,"published":6277,"modified":6278,"checkedAt":7,"severity":6279,"references":6284,"versionKeys":6305,"packageCount":32,"repositoryCount":32},"ghsa-fcw5-x6j4-ccmp-6b9a05f5","Jupyter Server: Stored XSS in `NbconvertFileHandler` \u002F `NbconvertPostHandler` via missing `sandbox` CSP",[6274,6275],"CVE-2026-44727","PYSEC-2026-366",[221,6275],"2026-06-18T15:04:07Z","2026-07-22T12:46:58.982015256Z",[6280,6282],{"type":3081,"score":6281},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3084,"score":6283},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[6285,6287,6289,6291,6292,6294,6296,6298,6299,6301,6303],{"type":3088,"url":6286},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":3091,"url":6288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44727",{"type":3088,"url":6290},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F6cbee8d65e71abac851c4492fea987ad080580bd",{"type":3088,"url":3170},{"type":3088,"url":6293},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44727",{"type":3088,"url":6295},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491516",{"type":3091,"url":6297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":3098,"url":3176},{"type":3088,"url":6300},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-366.yaml",{"type":3098,"url":6302},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-server",{"type":3088,"url":6304},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44727.json",[3182],{"id":222,"slug":6307,"dossier":45,"summary":6308,"aliases":6309,"sourceIds":6312,"published":6313,"modified":6314,"checkedAt":7,"severity":6315,"references":6317,"versionKeys":6328,"packageCount":32,"repositoryCount":32},"ghsa-ffq3-xpv3-j92q-22580948","Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions",[6310,6311],"CVE-2026-59928","PYSEC-2026-2216",[222,6311],"2026-07-08T17:17:28.600Z","2026-07-20T21:30:38.320453360Z",[6316],{"type":3081,"score":3229},[6318,6320,6322,6324,6325,6326],{"type":3290,"url":6319},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ffq3-xpv3-j92q",{"type":3091,"url":6321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59928",{"type":3126,"url":6323},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F2b04d7ba341c16ac78fe82d3076bdd5c3de87c69",{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":6327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2216.yaml",[3303],{"id":223,"slug":6330,"dossier":45,"summary":6331,"aliases":6332,"sourceIds":6335,"published":6336,"modified":6337,"checkedAt":7,"severity":6338,"references":6341,"versionKeys":6355,"packageCount":32,"repositoryCount":32},"ghsa-fg6f-75jq-6523-c927e5c8","Authlib has 1-click Account Takeover vulnerability",[6333,6334],"CVE-2025-68158","PYSEC-2026-1201",[223,6334],"2026-01-08T22:40:56Z","2026-07-07T17:56:30.898731290Z",[6339],{"type":3081,"score":6340},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6342,6344,6346,6348,6350,6351,6353],{"type":3088,"url":6343},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",{"type":3091,"url":6345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68158",{"type":3088,"url":6347},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F2808378611dd6fb2532b189a9087877d8f0c0489",{"type":3088,"url":6349},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F7974f45e4d7492ab5f527577677f2770ce423228",{"type":3098,"url":4862},{"type":3098,"url":6352},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fauthlib",{"type":3091,"url":6354},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",[4866],{"id":224,"slug":6357,"dossier":45,"summary":6358,"aliases":6359,"sourceIds":6362,"published":6363,"modified":6364,"checkedAt":7,"severity":6365,"references":6367,"versionKeys":6376,"packageCount":32,"repositoryCount":103},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[6360,6361],"CVE-2026-12061","PYSEC-2026-3582",[224,6361],"2026-07-31T16:51:09Z","2026-08-06T15:11:53.004587618Z",[6366],{"type":3081,"score":3229},[6368,6370,6371,6372,6374],{"type":3088,"url":6369},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3098,"url":3747},{"type":3098,"url":4678},{"type":3091,"url":6373},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3091,"url":6375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3761,3762],{"id":225,"slug":6378,"dossier":45,"summary":6379,"aliases":6380,"sourceIds":6383,"published":6384,"modified":6385,"checkedAt":7,"severity":6386,"references":6389,"versionKeys":6400,"packageCount":32,"repositoryCount":381},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[6381,6382],"CVE-2025-69230","PYSEC-2026-1105",[225,6382],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[6387],{"type":3084,"score":6388},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6390,6392,6394,6396,6397,6398],{"type":3088,"url":6391},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3091,"url":6393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3126,"url":6395},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":6399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3238,3239,3240,3241,3242,3243,3244],{"id":226,"slug":6402,"dossier":45,"summary":6403,"aliases":6404,"sourceIds":6407,"published":6408,"modified":6409,"checkedAt":7,"severity":6410,"references":6412,"versionKeys":6422,"packageCount":32,"repositoryCount":410},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[6405,6406],"CVE-2026-48524","PYSEC-2026-177",[226,6406],"2026-05-28T16:16:29.403Z","2026-07-31T22:15:22.446184166Z",[6411],{"type":3081,"score":3257},[6413,6415,6417,6419,6420],{"type":3091,"url":6414},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3091,"url":6416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3088,"url":6418},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3098,"url":4884},{"type":3088,"url":6421},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[4890,4891],{"id":227,"slug":6424,"dossier":89,"summary":6425,"aliases":6426,"sourceIds":6430,"published":6431,"modified":6432,"checkedAt":7,"severity":6433,"references":6436,"versionKeys":6450,"packageCount":32,"repositoryCount":3439},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[6427,6428,6429],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[227,6429],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[6434],{"type":3081,"score":6435},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6437,6439,6441,6443,6445,6446,6447,6448],{"type":3088,"url":6438},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3091,"url":6440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3088,"url":6442},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3088,"url":6444},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3098,"url":3687},{"type":3088,"url":4483},{"type":3098,"url":4485},{"type":3091,"url":6449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":228,"slug":6452,"dossier":45,"summary":6453,"aliases":6454,"sourceIds":6457,"published":6458,"modified":6459,"checkedAt":7,"severity":6460,"references":6463,"versionKeys":6474,"packageCount":32,"repositoryCount":32},"ghsa-fjqc-hq36-qh5p-fbc7458c","LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading",[6455,6456],"CVE-2026-48775","PYSEC-2026-2573",[228,6456],"2026-06-25T18:25:42Z","2026-07-13T16:42:57.455268050Z",[6461],{"type":3081,"score":6462},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6464,6466,6468,6470,6472],{"type":3088,"url":6465},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",{"type":3091,"url":6467},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48775",{"type":3098,"url":6469},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",{"type":3098,"url":6471},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-checkpoint",{"type":3091,"url":6473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",[6475],"pypi:langgraph-checkpoint@4.0.0",{"id":229,"slug":6477,"dossier":45,"summary":6478,"aliases":6479,"sourceIds":6482,"published":6483,"modified":6484,"checkedAt":7,"severity":6485,"references":6487,"versionKeys":6502,"packageCount":32,"repositoryCount":410},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[6480,6481],"CVE-2026-71870","PYSEC-2026-3655",[229,6481],"2026-08-07T19:29:09Z","2026-08-10T11:40:56.634574772Z",[6486],{"type":3084,"score":6045},[6488,6490,6492,6494,6495,6497,6498,6500],{"type":3088,"url":6489},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3088,"url":6491},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3088,"url":6493},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3098,"url":3099},{"type":3088,"url":6496},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3098,"url":3103},{"type":3091,"url":6499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3091,"url":6501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3107,6503],"pypi:pypdf@6.14.2",{"id":230,"slug":6505,"dossier":45,"summary":6506,"aliases":6507,"sourceIds":6510,"published":6511,"modified":6512,"checkedAt":7,"severity":6513,"references":6515,"versionKeys":6523,"packageCount":32,"repositoryCount":32},"ghsa-fv5p-p927-qmxr-2692dd04","LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass",[6508,6509],"CVE-2026-41481","PYSEC-2026-77",[230,6509],"2026-04-16T22:53:32Z","2026-06-06T01:15:07.890699366Z",[6514],{"type":3081,"score":5111},[6516,6518,6520,6521],{"type":3091,"url":6517},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-fv5p-p927-qmxr",{"type":3091,"url":6519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41481",{"type":3098,"url":3266},{"type":3088,"url":6522},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-text-splitters\u002FPYSEC-2026-77.yaml",[6524],"pypi:langchain-text-splitters@1.1.0",{"id":231,"slug":6526,"dossier":45,"summary":6527,"aliases":6528,"sourceIds":6531,"published":6532,"modified":6533,"checkedAt":7,"severity":6534,"references":6536,"versionKeys":6550,"packageCount":32,"repositoryCount":410},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[6529,6530],"CVE-2026-71852","PYSEC-2026-3656",[231,6530],"2026-08-07T18:54:00Z","2026-08-10T11:40:57.725619888Z",[6535],{"type":3084,"score":6045},[6537,6539,6541,6543,6544,6545,6546,6548],{"type":3088,"url":6538},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3088,"url":6540},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3088,"url":6542},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3098,"url":3099},{"type":3088,"url":6496},{"type":3098,"url":3103},{"type":3091,"url":6547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3091,"url":6549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3107,6503],{"id":232,"slug":6552,"dossier":45,"summary":6553,"aliases":6554,"sourceIds":6557,"published":6558,"modified":6559,"checkedAt":7,"severity":6560,"references":6563,"versionKeys":6569,"packageCount":32,"repositoryCount":614},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[6555,6556],"CVE-2026-54278","PYSEC-2026-2111",[232,6556],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[6561,6562],{"type":3084,"score":3850},{"type":3081,"score":3229},[6564,6566,6567],{"type":3091,"url":6565},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3098,"url":3234},{"type":3126,"url":6568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3238,3239,3240,3241,3242,3243,3244,3245],{"id":233,"slug":6571,"dossier":45,"summary":6572,"aliases":6573,"sourceIds":6576,"published":6577,"modified":6578,"checkedAt":7,"severity":6579,"references":6583,"versionKeys":6591,"packageCount":32,"repositoryCount":103},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[6574,6575],"CVE-2026-28277","PYSEC-2026-83",[233,6575],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[6580,6581],{"type":3081,"score":6462},{"type":3081,"score":6582},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6584,6586,6588,6589],{"type":3091,"url":6585},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":3091,"url":6587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":3098,"url":6469},{"type":3088,"url":6590},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[6592,6593,6594],"pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@1.0.6",{"id":234,"slug":6596,"dossier":45,"summary":6597,"aliases":6598,"sourceIds":6601,"published":6602,"modified":6603,"checkedAt":7,"severity":6604,"references":6607,"versionKeys":6620,"packageCount":32,"repositoryCount":381},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[6599,6600],"CVE-2026-69247","PYSEC-2026-3552",[234,6600],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[6605],{"type":3084,"score":6606},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6608,6610,6612,6614,6615,6616,6618],{"type":3088,"url":6609},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":3088,"url":6611},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":3088,"url":6613},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":3098,"url":4080},{"type":3098,"url":4945},{"type":3091,"url":6617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":3091,"url":6619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[4086,4087,4088,4089,6621,6622],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":235,"slug":6624,"dossier":45,"summary":6625,"aliases":6626,"sourceIds":6629,"published":6630,"modified":6631,"checkedAt":7,"severity":6632,"references":6635,"versionKeys":6648,"packageCount":32,"repositoryCount":32},"ghsa-g7f3-828f-7h7m-12134915","Authlib : JWE zip=DEF decompression bomb enables DoS",[6627,6628],"CVE-2025-62706","PYSEC-2026-1202",[235,6628],"2025-10-10T22:54:03Z","2026-07-07T17:57:19.270494442Z",[6633],{"type":3081,"score":6634},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[6636,6638,6640,6642,6643,6645,6646],{"type":3088,"url":6637},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",{"type":3091,"url":6639},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62706",{"type":3088,"url":6641},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fe0863d5129316b1790eee5f14cece32a03b8184d",{"type":3098,"url":4862},{"type":3088,"url":6644},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00032.html",{"type":3098,"url":6352},{"type":3091,"url":6647},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",[4866],{"id":236,"slug":6650,"dossier":45,"summary":6651,"aliases":6652,"sourceIds":6655,"published":6656,"modified":6657,"checkedAt":7,"severity":6658,"references":6661,"versionKeys":6680,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[6653,6654],"CVE-2024-34062","PYSEC-2026-1976",[236,6654],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[6659],{"type":3081,"score":6660},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6662,6664,6666,6668,6670,6672,6674,6676,6678],{"type":3088,"url":6663},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3091,"url":6665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3088,"url":6667},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3098,"url":6669},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3088,"url":6671},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3088,"url":6673},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3088,"url":6675},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3098,"url":6677},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3091,"url":6679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[6681],"pypi:tqdm@4.66.2",{"id":237,"slug":6683,"dossier":45,"summary":6684,"aliases":6685,"sourceIds":6688,"published":6689,"modified":6690,"checkedAt":7,"severity":6691,"references":6693,"versionKeys":6706,"packageCount":32,"repositoryCount":381},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[6686,6687],"CVE-2025-69229","PYSEC-2026-1106",[237,6687],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[6692],{"type":3084,"score":3850},[6694,6696,6698,6700,6702,6703,6704],{"type":3088,"url":6695},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3091,"url":6697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3088,"url":6699},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3088,"url":6701},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":6705},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3238,3239,3240,3241,3242,3243,3244],{"id":238,"slug":6708,"dossier":45,"summary":6709,"aliases":6710,"sourceIds":6713,"published":6714,"modified":6715,"checkedAt":7,"severity":6716,"references":6718,"versionKeys":6733,"packageCount":32,"repositoryCount":32},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[6711,6712],"CVE-2026-59935","PYSEC-2026-3613",[238,6712],"2026-07-23T16:37:07Z","2026-08-04T14:41:08.867533593Z",[6717],{"type":3084,"score":4210},[6719,6721,6723,6725,6727,6728,6730,6731],{"type":3088,"url":6720},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3091,"url":6722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3088,"url":6724},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3088,"url":6726},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3098,"url":3099},{"type":3088,"url":6729},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3098,"url":3103},{"type":3091,"url":6732},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3107],{"id":239,"slug":6735,"dossier":45,"summary":6736,"aliases":6737,"sourceIds":6740,"published":6741,"modified":6742,"checkedAt":7,"severity":6743,"references":6747,"versionKeys":6757,"packageCount":32,"repositoryCount":32},"ghsa-g97x-gvcm-x72h-ff087202","Mistune: XSS via unescaped class option in Admonition directive",[6738,6739],"CVE-2026-59926","PYSEC-2026-2214",[239,6739],"2026-07-08T17:17:28.323Z","2026-07-20T21:46:40.083797845Z",[6744,6746],{"type":3084,"score":6745},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3081,"score":4184},[6748,6750,6752,6753,6754,6755],{"type":3091,"url":6749},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-g97x-gvcm-x72h",{"type":3091,"url":6751},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59926",{"type":3126,"url":4193},{"type":3098,"url":3297},{"type":3091,"url":5371},{"type":3088,"url":6756},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2214.yaml",[3303],{"id":240,"slug":6759,"dossier":45,"summary":6760,"aliases":6761,"sourceIds":6764,"published":6765,"modified":6766,"checkedAt":7,"severity":6767,"references":6769,"versionKeys":6782,"packageCount":32,"repositoryCount":32},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[6762,6763],"CVE-2026-54651","PYSEC-2026-3018",[240,6763],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[6768],{"type":3084,"score":4052},[6770,6772,6774,6776,6777,6779,6780],{"type":3088,"url":6771},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3091,"url":6773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3088,"url":6775},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3098,"url":3099},{"type":3088,"url":6778},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3098,"url":3103},{"type":3091,"url":6781},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3107],{"id":241,"slug":6784,"dossier":89,"summary":6785,"aliases":6786,"sourceIds":6789,"published":6790,"modified":6791,"checkedAt":7,"severity":6792,"references":6797,"versionKeys":6807,"packageCount":32,"repositoryCount":6810},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[6787,6788],"CVE-2026-25645","PYSEC-2026-2275",[241,6788],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[6793,6795],{"type":3081,"score":6794},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3081,"score":6796},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6798,6800,6802,6804,6805],{"type":3091,"url":6799},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3091,"url":6801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3126,"url":6803},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3098,"url":5699},{"type":3091,"url":6806},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[5709,5710,6808,6809],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":242,"slug":6812,"dossier":45,"summary":6813,"aliases":6814,"sourceIds":6817,"published":6818,"modified":6819,"checkedAt":7,"severity":6820,"references":6822,"versionKeys":6832,"packageCount":32,"repositoryCount":103},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[6815,6816],"CVE-2026-33230","PYSEC-2026-2235",[242,6816],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[6821],{"type":3081,"score":4184},[6823,6825,6827,6829,6831],{"type":3290,"url":6824},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3091,"url":6826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3126,"url":6828},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3126,"url":6830},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3098,"url":3747},[3761,3762],{"id":243,"slug":6834,"dossier":45,"summary":6835,"aliases":6836,"sourceIds":6837,"published":6838,"modified":6839,"checkedAt":7,"severity":6840,"references":6842,"versionKeys":6848,"packageCount":32,"repositoryCount":32},"ghsa-gj48-438w-jh9v-02216692","Bleach clean() \u002F Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes",[],[243],"2026-06-16T14:07:49Z","2026-06-18T18:29:26.517334064Z",[6841],{"type":3081,"score":4184},[6843,6845,6846],{"type":3088,"url":6844},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-gj48-438w-jh9v",{"type":3098,"url":5491},{"type":3088,"url":6847},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Freleases\u002Ftag\u002Fv6.4.0",[5493],{"id":244,"slug":6850,"dossier":89,"summary":6851,"aliases":6852,"sourceIds":6855,"published":6856,"modified":6857,"checkedAt":7,"severity":6858,"references":6860,"versionKeys":6871,"packageCount":32,"repositoryCount":3439},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[6853,6854],"CVE-2025-66418","PYSEC-2026-1998",[244,6854],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[6859],{"type":3084,"score":3419},[6861,6863,6865,6867,6868,6869],{"type":3088,"url":6862},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3091,"url":6864},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3126,"url":6866},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3098,"url":3428},{"type":3098,"url":3430},{"type":3091,"url":6870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3434,3435,3436,3437,3438],{"id":245,"slug":6873,"dossier":45,"summary":6874,"aliases":6875,"sourceIds":6878,"published":6879,"modified":6880,"checkedAt":7,"severity":6881,"references":6884,"versionKeys":6897,"packageCount":32,"repositoryCount":410},"ghsa-gm8q-m8mv-jj5m-f488c667","Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write",[6876,6877],"CVE-2025-64712","PYSEC-2026-558",[245,6877],"2026-02-03T17:43:56Z","2026-07-13T16:15:34.752594062Z",[6882],{"type":3081,"score":6883},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6885,6887,6889,6891,6893,6895],{"type":3088,"url":6886},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fsecurity\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",{"type":3091,"url":6888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64712",{"type":3088,"url":6890},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fcommit\u002Fb01d35b2373fd087d2e15162b9c021663c97155d",{"type":3098,"url":6892},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured",{"type":3098,"url":6894},"https:\u002F\u002Fpypi.org\u002Fproject\u002Funstructured",{"type":3091,"url":6896},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",[6898,6899],"pypi:unstructured@0.16.12","pypi:unstructured@0.17.2",{"id":246,"slug":6901,"dossier":45,"summary":6902,"aliases":6903,"sourceIds":6906,"published":6907,"modified":6908,"checkedAt":7,"severity":6909,"references":6912,"versionKeys":6927,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[6904,6905],"CVE-2024-56201","PYSEC-2026-1472",[246,6905],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[6910,6911],{"type":3081,"score":3513},{"type":3084,"score":6070},[6913,6915,6917,6919,6921,6922,6924,6925],{"type":3088,"url":6914},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3091,"url":6916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3088,"url":6918},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3126,"url":6920},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3098,"url":6079},{"type":3088,"url":6923},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3098,"url":6085},{"type":3091,"url":6926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[6089],{"id":247,"slug":6929,"dossier":45,"summary":6930,"aliases":6931,"sourceIds":6935,"published":6936,"modified":6937,"checkedAt":7,"severity":6938,"references":6943,"versionKeys":6951,"packageCount":32,"repositoryCount":103},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[6932,6933,6934],"CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556",[247,6933],"2026-06-16T15:03:14Z","2026-08-07T08:11:57.170704540Z",[6939,6941],{"type":3081,"score":6940},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3081,"score":6942},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6944,6946,6948,6950],{"type":3091,"url":6945},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":3091,"url":6947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":3126,"url":6949},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":3098,"url":3266},[3498,3499,6952],"pypi:langchain@1.2.6",{"id":248,"slug":6954,"dossier":45,"summary":6955,"aliases":6956,"sourceIds":6958,"published":6959,"modified":6960,"checkedAt":7,"severity":6961,"references":6964,"versionKeys":6975,"packageCount":32,"repositoryCount":410},"ghsa-gx64-gj6p-pc4c-8fabc035","JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab",[6957],"CVE-2026-73415",[248],"2026-07-22T23:14:44Z","2026-08-12T20:00:09.958377926Z",[6962],{"type":3084,"score":6963},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6965,6967,6968,6969,6970,6971,6972,6973,6974],{"type":3088,"url":6966},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-gx64-gj6p-pc4c",{"type":3088,"url":5314},{"type":3088,"url":5316},{"type":3088,"url":5318},{"type":3088,"url":5320},{"type":3088,"url":5322},{"type":3098,"url":3520},{"type":3088,"url":5325},{"type":3088,"url":5327},[3530,5329],{"id":249,"slug":6977,"dossier":89,"summary":6978,"aliases":6979,"sourceIds":6983,"published":6984,"modified":6985,"checkedAt":7,"severity":6986,"references":6989,"versionKeys":7001,"packageCount":32,"repositoryCount":7009},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[6980,6981,6982],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[249,6982],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[6987],{"type":3081,"score":6988},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6990,6992,6994,6996,6998,6999],{"type":3290,"url":6991},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3091,"url":6993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3126,"url":6995},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3088,"url":6997},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3098,"url":4354},{"type":3091,"url":7000},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4360,4361,4362,7002,7003,7004,7005,7006,7007,7008],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":250,"slug":7011,"dossier":45,"summary":7012,"aliases":7013,"sourceIds":7014,"published":7015,"modified":7016,"checkedAt":7,"severity":7017,"references":7018,"versionKeys":7024,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[250],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[7019,7021,7022],{"type":3088,"url":7020},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":3098,"url":4080},{"type":3088,"url":7023},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[4084],{"id":251,"slug":7026,"dossier":45,"summary":7027,"aliases":7028,"sourceIds":7029,"published":7030,"modified":7031,"checkedAt":7,"severity":7032,"references":7035,"versionKeys":7046,"packageCount":32,"repositoryCount":410},"ghsa-h5v5-8746-g7mm-7b4783af","JupyterLab PluginManager lock-rule enforcement bypass",[],[251],"2026-07-22T23:13:34Z","2026-08-08T09:26:58.136390127Z",[7033],{"type":3084,"score":7034},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7036,7038,7039,7040,7041,7042,7043,7044,7045],{"type":3088,"url":7037},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-h5v5-8746-g7mm",{"type":3088,"url":5314},{"type":3088,"url":5316},{"type":3088,"url":5318},{"type":3088,"url":5320},{"type":3088,"url":5322},{"type":3098,"url":3520},{"type":3088,"url":5325},{"type":3088,"url":5327},[3530,5329],{"id":252,"slug":7048,"dossier":45,"summary":7049,"aliases":7050,"sourceIds":7053,"published":7054,"modified":7055,"checkedAt":7,"severity":7056,"references":7058,"versionKeys":7079,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[7051,7052],"CVE-2024-34064","PYSEC-2026-1474",[252,7052],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[7057],{"type":3081,"score":4904},[7059,7061,7063,7065,7066,7068,7070,7072,7074,7076,7077],{"type":3088,"url":7060},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3091,"url":7062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3126,"url":7064},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3098,"url":6079},{"type":3088,"url":7067},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3088,"url":7069},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3088,"url":7071},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3088,"url":7073},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3088,"url":7075},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3098,"url":6085},{"type":3091,"url":7078},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[6089],{"id":253,"slug":7081,"dossier":45,"summary":7082,"aliases":7083,"sourceIds":7086,"published":7087,"modified":7088,"checkedAt":7,"severity":7089,"references":7092,"versionKeys":7106,"packageCount":32,"repositoryCount":103},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[7084,7085],"CVE-2026-0846","PYSEC-2026-97",[253,7085],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[7090,7091],{"type":3081,"score":4625},{"type":3081,"score":4627},[7093,7095,7097,7099,7100,7102,7104],{"type":3091,"url":7094},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3088,"url":7096},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3088,"url":7098},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3098,"url":3747},{"type":3088,"url":7101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3290,"url":7103},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3091,"url":7105},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3761,3762],{"id":254,"slug":7108,"dossier":45,"summary":7109,"aliases":7110,"sourceIds":7113,"published":7114,"modified":7115,"checkedAt":7,"severity":7116,"references":7119,"versionKeys":7128,"packageCount":32,"repositoryCount":614},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[7111,7112],"CVE-2026-34513","PYSEC-2026-2095",[254,7112],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[7117,7118],{"type":3084,"score":3597},{"type":3081,"score":3229},[7120,7122,7124,7126,7127],{"type":3126,"url":7121},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3091,"url":7123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3126,"url":7125},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":255,"slug":7130,"dossier":45,"summary":7131,"aliases":7132,"sourceIds":7135,"published":7136,"modified":7137,"checkedAt":7,"severity":7138,"references":7142,"versionKeys":7150,"packageCount":32,"repositoryCount":614},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[7133,7134],"CVE-2026-47265","PYSEC-2026-2105",[255,7134],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[7139,7141],{"type":3084,"score":7140},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3081,"score":4627},[7143,7145,7147,7149],{"type":3126,"url":7144},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3091,"url":7146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3126,"url":7148},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":256,"slug":7152,"dossier":45,"summary":7153,"aliases":7154,"sourceIds":7157,"published":7158,"modified":7159,"checkedAt":7,"severity":7160,"references":7162,"versionKeys":7171,"packageCount":32,"repositoryCount":634},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[7155,7156],"CVE-2026-59886","PYSEC-2026-3457",[256,7156],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[7161],{"type":3081,"score":3229},[7163,7165,7167,7169,7170],{"type":3091,"url":7164},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":3091,"url":7166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":3126,"url":7168},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":3098,"url":4580},{"type":3091,"url":5440},[4588,5442],{"id":257,"slug":7173,"dossier":45,"summary":7174,"aliases":7175,"sourceIds":7178,"published":7179,"modified":7180,"checkedAt":7,"severity":7181,"references":7185,"versionKeys":7191,"packageCount":32,"repositoryCount":614},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[7176,7177],"CVE-2026-54276","PYSEC-2026-2109",[257,7177],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[7182,7184],{"type":3084,"score":7183},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3081,"score":4184},[7186,7188,7190],{"type":3091,"url":7187},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3126,"url":7189},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":258,"slug":7193,"dossier":45,"summary":7194,"aliases":7195,"sourceIds":7198,"published":7199,"modified":7200,"checkedAt":7,"severity":7201,"references":7203,"versionKeys":7218,"packageCount":32,"repositoryCount":32},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[7196,7197],"CVE-2026-31826","PYSEC-2026-3019",[258,7197],"2026-03-11T00:14:02Z","2026-07-13T16:43:52.358788786Z",[7202],{"type":3084,"score":3913},[7204,7206,7208,7210,7212,7213,7215,7216],{"type":3088,"url":7205},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3091,"url":7207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3088,"url":7209},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3088,"url":7211},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3098,"url":3099},{"type":3088,"url":7214},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3098,"url":3103},{"type":3091,"url":7217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3107],{"id":259,"slug":7220,"dossier":45,"summary":7221,"aliases":7222,"sourceIds":7225,"published":7226,"modified":7227,"checkedAt":7,"severity":7228,"references":7232,"versionKeys":7249,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[7223,7224],"CVE-2025-67221","PYSEC-2026-107",[259,7224],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[7229,7231],{"type":3084,"score":7230},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3081,"score":3229},[7233,7235,7237,7239,7241,7243,7245,7247],{"type":3091,"url":7234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":3088,"url":7236},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":3088,"url":7238},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":3088,"url":7240},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":3098,"url":7242},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":3290,"url":7244},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":3088,"url":7246},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":3091,"url":7248},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[7250,7251,7252,7253],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":260,"slug":7255,"dossier":45,"summary":7256,"aliases":7257,"sourceIds":7260,"published":7261,"modified":7262,"checkedAt":7,"severity":7263,"references":7265,"versionKeys":7277,"packageCount":32,"repositoryCount":32},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[7258,7259],"CVE-2026-49461","PYSEC-2026-3020",[260,7259],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[7264],{"type":3084,"score":4052},[7266,7268,7270,7271,7272,7273,7275],{"type":3088,"url":7267},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3088,"url":7269},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3098,"url":3099},{"type":3088,"url":4272},{"type":3098,"url":3103},{"type":3091,"url":7274},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3091,"url":7276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3107],{"id":261,"slug":7279,"dossier":45,"summary":7280,"aliases":7281,"sourceIds":7284,"published":7285,"modified":7286,"checkedAt":7,"severity":7287,"references":7289,"versionKeys":7304,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[7282,7283],"CVE-2025-62708","PYSEC-2026-1831",[261,7283],"2025-10-22T19:40:50Z","2026-07-07T17:56:05.697066629Z",[7288],{"type":3084,"score":3850},[7290,7292,7294,7296,7298,7299,7301,7302],{"type":3088,"url":7291},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3091,"url":7293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3088,"url":7295},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3088,"url":7297},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3098,"url":3099},{"type":3088,"url":7300},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3098,"url":3103},{"type":3091,"url":7303},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3107],{"id":262,"slug":7306,"dossier":45,"summary":7307,"aliases":7308,"sourceIds":7311,"published":7312,"modified":7313,"checkedAt":7,"severity":7314,"references":7318,"versionKeys":7337,"packageCount":32,"repositoryCount":614},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[7309,7310],"CVE-2026-34993","PYSEC-2026-2104",[262,7310],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[7315,7317],{"type":3081,"score":7316},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3081,"score":3451},[7319,7321,7323,7325,7326,7328,7330,7332,7334,7335],{"type":3126,"url":7320},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3091,"url":7322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3126,"url":7324},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3098,"url":3234},{"type":3088,"url":7327},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3088,"url":7329},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3091,"url":7331},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3091,"url":7333},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3091,"url":3757},{"type":3163,"url":7336},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3238,3239,3240,3241,3242,3243,3244,3245],{"id":263,"slug":7339,"dossier":45,"summary":7340,"aliases":7341,"sourceIds":7344,"published":7345,"modified":7346,"checkedAt":7,"severity":7347,"references":7349,"versionKeys":7359,"packageCount":32,"repositoryCount":680},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[7342,7343],"CVE-2025-67726","PYSEC-2025-267",[263,7343],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[7348],{"type":3081,"score":3229},[7350,7352,7354,7355,7357,7358],{"type":3091,"url":7351},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3091,"url":7353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3126,"url":5973},{"type":3088,"url":7356},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3098,"url":3625},{"type":3091,"url":5978},[3633,3634,3635],{"id":264,"slug":7361,"dossier":45,"summary":7362,"aliases":7363,"sourceIds":7366,"published":7367,"modified":7368,"checkedAt":7,"severity":7369,"references":7371,"versionKeys":7382,"packageCount":32,"repositoryCount":381},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[7364,7365],"CVE-2025-69227","PYSEC-2026-1107",[264,7365],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[7370],{"type":3084,"score":3850},[7372,7374,7376,7378,7379,7380],{"type":3088,"url":7373},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3091,"url":7375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3088,"url":7377},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":7381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3238,3239,3240,3241,3242,3243,3244],{"id":265,"slug":7384,"dossier":45,"summary":7385,"aliases":7386,"sourceIds":7389,"published":7390,"modified":7391,"checkedAt":7,"severity":7392,"references":7395,"versionKeys":7410,"packageCount":32,"repositoryCount":32},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[7387,7388],"CVE-2026-41168","PYSEC-2026-3021",[265,7388],"2026-04-15T19:43:09Z","2026-07-13T16:43:07.020121646Z",[7393,7394],{"type":3081,"score":3194},{"type":3084,"score":6045},[7396,7398,7400,7402,7404,7405,7407,7408],{"type":3088,"url":7397},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3091,"url":7399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3088,"url":7401},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3088,"url":7403},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3098,"url":3099},{"type":3088,"url":7406},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3098,"url":3103},{"type":3091,"url":7409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3107],{"id":266,"slug":7412,"dossier":45,"summary":7413,"aliases":7414,"sourceIds":7417,"published":7418,"modified":7419,"checkedAt":7,"severity":7420,"references":7422,"versionKeys":7430,"packageCount":32,"repositoryCount":32},"ghsa-jj8c-mmj3-mmgv-216e3367","Authlib: Cross-site request forging when using cache",[7415,7416],"CVE-2026-41425","PYSEC-2026-25",[266,7416],"2026-04-16T22:38:03Z","2026-06-05T14:45:30.092809707Z",[7421],{"type":3081,"score":4904},[7423,7425,7427,7428],{"type":3290,"url":7424},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-jj8c-mmj3-mmgv",{"type":3091,"url":7426},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41425",{"type":3098,"url":4862},{"type":3088,"url":7429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-25.yaml",[4866],{"id":267,"slug":7432,"dossier":89,"summary":7433,"aliases":7434,"sourceIds":7438,"published":7439,"modified":7440,"checkedAt":7,"severity":7441,"references":7443,"versionKeys":7457,"packageCount":32,"repositoryCount":3439},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[7435,7436,7437],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[267,7437],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[7442],{"type":3081,"score":3229},[7444,7446,7448,7450,7452,7453,7454,7455],{"type":3088,"url":7445},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3091,"url":7447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3088,"url":7449},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3088,"url":7451},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3098,"url":3687},{"type":3088,"url":4483},{"type":3098,"url":4485},{"type":3091,"url":7456},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":268,"slug":7459,"dossier":45,"summary":7460,"aliases":7461,"sourceIds":7464,"published":7465,"modified":7466,"checkedAt":7,"severity":7467,"references":7469,"versionKeys":7486,"packageCount":32,"repositoryCount":103},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[7462,7463],"CVE-2026-33231","PYSEC-2026-2236",[268,7463],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[7468],{"type":3081,"score":3229},[7470,7472,7474,7476,7477,7479,7481,7482,7483,7484],{"type":3290,"url":7471},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3091,"url":7473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3126,"url":7475},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3098,"url":3747},{"type":3088,"url":7478},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3088,"url":7480},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3091,"url":3755},{"type":3091,"url":7331},{"type":3091,"url":3757},{"type":3163,"url":7485},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3761,3762],{"id":269,"slug":7488,"dossier":45,"summary":7489,"aliases":7490,"sourceIds":7492,"published":7493,"modified":7494,"checkedAt":7,"severity":7495,"references":7497,"versionKeys":7505,"packageCount":32,"repositoryCount":32},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[7491],"CVE-2026-57204",[269],"2026-06-18T14:28:49Z","2026-07-08T08:27:12.200342088Z",[7496],{"type":3084,"score":4052},[7498,7500,7502,7503],{"type":3088,"url":7499},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3088,"url":7501},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3098,"url":3099},{"type":3088,"url":7504},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3107],{"id":270,"slug":7507,"dossier":45,"summary":7508,"aliases":7509,"sourceIds":7512,"published":7513,"modified":7514,"checkedAt":7,"severity":7515,"references":7518,"versionKeys":7526,"packageCount":32,"repositoryCount":634},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[7510,7511],"CVE-2026-54282","PYSEC-2026-248",[270,7511],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[7516,7517],{"type":3081,"score":4718},{"type":3081,"score":3370},[7519,7521,7523,7524],{"type":3091,"url":7520},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3091,"url":7522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3098,"url":4996},{"type":3088,"url":7525},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3213,3214,3215,5003,5004,5165,5166],{"id":271,"slug":7528,"dossier":45,"summary":7529,"aliases":7530,"sourceIds":7533,"published":7534,"modified":7535,"checkedAt":7,"severity":7536,"references":7538,"versionKeys":7557,"packageCount":32,"repositoryCount":410},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[7531,7532],"CVE-2026-52869","PYSEC-2026-3482",[271,7532],"2026-07-16T19:58:53Z","2026-07-23T15:11:29.023312800Z",[7537],{"type":3081,"score":4153},[7539,7541,7543,7545,7547,7549,7551,7552,7554,7555],{"type":3088,"url":7540},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3091,"url":7542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3088,"url":7544},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3088,"url":7546},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3088,"url":7548},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3088,"url":7550},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3098,"url":5669},{"type":3088,"url":7553},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3098,"url":5673},{"type":3091,"url":7556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[5675,5676],{"id":272,"slug":7559,"dossier":45,"summary":7560,"aliases":7561,"sourceIds":7564,"published":7565,"modified":7566,"checkedAt":7,"severity":7567,"references":7570,"versionKeys":7578,"packageCount":32,"repositoryCount":410},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[7562,7563],"CVE-2026-48523","PYSEC-2026-176",[272,7563],"2026-05-28T16:16:29.280Z","2026-06-16T15:44:20.868973576Z",[7568],{"type":3081,"score":7569},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7571,7573,7575,7576],{"type":3290,"url":7572},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3091,"url":7574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3098,"url":4884},{"type":3088,"url":7577},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[4890,4891],{"id":273,"slug":7580,"dossier":45,"summary":7581,"aliases":7582,"sourceIds":7585,"published":7586,"modified":7587,"checkedAt":7,"severity":7588,"references":7592,"versionKeys":7625,"packageCount":32,"repositoryCount":381},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[7583,7584],"CVE-2026-30922","PYSEC-2026-2263",[273,7584],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[7589,7591],{"type":3081,"score":7590},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3081,"score":3229},[7593,7595,7597,7599,7601,7602,7604,7606,7608,7610,7611,7613,7615,7617,7619,7621,7623],{"type":3290,"url":7594},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":3091,"url":7596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":3088,"url":7598},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":3126,"url":7600},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":3088,"url":3753},{"type":3088,"url":7603},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":3088,"url":7605},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":3088,"url":7607},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":3088,"url":7609},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3088,"url":3757},{"type":3088,"url":7612},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":3088,"url":7614},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":3088,"url":7616},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":3088,"url":7618},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":3088,"url":7620},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":3088,"url":7622},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":3088,"url":7624},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[4588],{"id":274,"slug":7627,"dossier":45,"summary":7628,"aliases":7629,"sourceIds":7632,"published":7633,"modified":7634,"checkedAt":7,"severity":7635,"references":7637,"versionKeys":7650,"packageCount":32,"repositoryCount":634},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[7630,7631],"CVE-2026-69249","PYSEC-2026-3553",[274,7631],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[7636],{"type":3084,"score":4210},[7638,7640,7642,7644,7645,7646,7648],{"type":3088,"url":7639},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":3088,"url":7641},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":3088,"url":7643},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":3098,"url":4080},{"type":3098,"url":4945},{"type":3091,"url":7647},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":3091,"url":7649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[4084,4085,4086,4087,4088,4089,6621],{"id":275,"slug":7652,"dossier":45,"summary":7653,"aliases":7654,"sourceIds":7657,"published":7658,"modified":7659,"checkedAt":7,"severity":7660,"references":7663,"versionKeys":7676,"packageCount":32,"repositoryCount":634},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[7655,7656],"CVE-2026-69248","PYSEC-2026-3554",[275,7656],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[7661],{"type":3084,"score":7662},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7664,7666,7668,7670,7671,7672,7674],{"type":3088,"url":7665},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":3088,"url":7667},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":3088,"url":7669},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":3098,"url":4080},{"type":3098,"url":4945},{"type":3091,"url":7673},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":3091,"url":7675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[4084,4085,4086,4087,4088,4089,6621],{"id":276,"slug":7678,"dossier":45,"summary":7679,"aliases":7680,"sourceIds":7683,"published":7684,"modified":7685,"checkedAt":7,"severity":7686,"references":7688,"versionKeys":7699,"packageCount":32,"repositoryCount":32},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[7681,7682],"CVE-2026-54531","PYSEC-2026-3022",[276,7682],"2026-06-16T14:05:57Z","2026-07-13T16:43:49.403109632Z",[7687],{"type":3084,"score":4052},[7689,7691,7692,7693,7694,7695,7697],{"type":3088,"url":7690},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3088,"url":4057},{"type":3098,"url":3099},{"type":3088,"url":4060},{"type":3098,"url":3103},{"type":3091,"url":7696},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3091,"url":7698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3107],{"id":277,"slug":7701,"dossier":45,"summary":7702,"aliases":7703,"sourceIds":7706,"published":7707,"modified":7708,"checkedAt":7,"severity":7709,"references":7713,"versionKeys":7736,"packageCount":32,"repositoryCount":32},"ghsa-m344-f55w-2m6j-43fc4846","Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding",[7704,7705],"CVE-2026-28498","PYSEC-2026-2117",[277,7705],"2026-03-16T16:15:06Z","2026-07-13T07:26:18.508336668Z",[7710,7712],{"type":3084,"score":7711},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3081,"score":3119},[7714,7716,7718,7720,7721,7722,7724,7726,7727,7729,7731,7732,7733,7734],{"type":3290,"url":7715},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-m344-f55w-2m6j",{"type":3091,"url":7717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28498",{"type":3126,"url":7719},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fb9bb2b25bf8b7e01512d847a95c1749646eaa72b",{"type":3098,"url":4862},{"type":3091,"url":4864},{"type":3088,"url":7723},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-28498",{"type":3088,"url":7725},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-28498.json",{"type":3091,"url":7614},{"type":3091,"url":7728},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6497",{"type":3091,"url":7730},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6567",{"type":3091,"url":7616},{"type":3091,"url":7618},{"type":3091,"url":7620},{"type":3163,"url":7735},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2448182",[4866],{"id":278,"slug":7738,"dossier":45,"summary":7739,"aliases":7740,"sourceIds":7743,"published":7744,"modified":7745,"checkedAt":7,"severity":7746,"references":7748,"versionKeys":7764,"packageCount":32,"repositoryCount":32},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[7741,7742],"CVE-2025-66019","PYSEC-2026-1832",[278,7742],"2025-11-24T22:42:07Z","2026-07-07T17:56:14.246224195Z",[7747],{"type":3084,"score":3850},[7749,7750,7752,7754,7756,7758,7759,7761,7762],{"type":3088,"url":7291},{"type":3088,"url":7751},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3091,"url":7753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3088,"url":7755},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3088,"url":7757},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3098,"url":3099},{"type":3088,"url":7760},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3098,"url":3103},{"type":3091,"url":7763},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3107],{"id":279,"slug":7766,"dossier":45,"summary":7767,"aliases":7768,"sourceIds":7771,"published":7772,"modified":7773,"checkedAt":7,"severity":7774,"references":7776,"versionKeys":7787,"packageCount":32,"repositoryCount":634},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[7769,7770],"CVE-2026-59884","PYSEC-2026-3455",[279,7770],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[7775],{"type":3081,"score":3229},[7777,7779,7781,7783,7784,7785],{"type":3091,"url":7778},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":3091,"url":7780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":3126,"url":7782},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":3098,"url":4580},{"type":3091,"url":5440},{"type":3088,"url":7786},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[4588,5442],{"id":280,"slug":7789,"dossier":45,"summary":7790,"aliases":7791,"sourceIds":7794,"published":7795,"modified":7796,"checkedAt":7,"severity":7797,"references":7802,"versionKeys":7811,"packageCount":32,"repositoryCount":614},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[7792,7793],"CVE-2026-34516","PYSEC-2026-2098",[280,7793],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[7798,7799,7800],{"type":3081,"score":3229},{"type":3084,"score":3850},{"type":3084,"score":7801},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7803,7805,7807,7809,7810],{"type":3126,"url":7804},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3091,"url":7806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3126,"url":7808},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":281,"slug":7813,"dossier":45,"summary":7814,"aliases":7815,"sourceIds":7818,"published":7819,"modified":7820,"checkedAt":7,"severity":7821,"references":7824,"versionKeys":7830,"packageCount":32,"repositoryCount":614},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[7816,7817],"CVE-2026-50269","PYSEC-2026-2106",[281,7817],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[7822,7823],{"type":3084,"score":3368},{"type":3081,"score":3229},[7825,7827,7829],{"type":3091,"url":7826},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3126,"url":7828},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3098,"url":3234},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":282,"slug":7832,"dossier":45,"summary":7833,"aliases":7834,"sourceIds":7837,"published":7838,"modified":7839,"checkedAt":7,"severity":7840,"references":7844,"versionKeys":7852,"packageCount":32,"repositoryCount":381},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[7835,7836],"CVE-2026-34073","PYSEC-2026-35",[282,7836],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[7841,7842],{"type":3081,"score":3370},{"type":3084,"score":7843},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7845,7847,7849,7850],{"type":3091,"url":7846},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":3091,"url":7848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":3098,"url":4080},{"type":3088,"url":7851},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[4084,4085,4086,4087,4088,4089],{"id":283,"slug":7854,"dossier":45,"summary":7855,"aliases":7856,"sourceIds":7859,"published":7860,"modified":7861,"checkedAt":7,"severity":7862,"references":7865,"versionKeys":7873,"packageCount":32,"repositoryCount":103},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[7857,7858],"CVE-2026-44432","PYSEC-2026-142",[283,7858],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[7863,7864],{"type":3081,"score":3229},{"type":3084,"score":3419},[7866,7868,7870,7872],{"type":3091,"url":7867},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3091,"url":7869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3088,"url":7871},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3098,"url":3428},[7874],"pypi:urllib3@2.6.3",{"id":284,"slug":7876,"dossier":45,"summary":7877,"aliases":7878,"sourceIds":7881,"published":7882,"modified":7883,"checkedAt":7,"severity":7884,"references":7887,"versionKeys":7900,"packageCount":32,"repositoryCount":6120},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[7879,7880],"CVE-2026-28684","PYSEC-2026-2270",[284,7880],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[7885],{"type":3081,"score":7886},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7888,7890,7892,7894,7896,7898],{"type":3126,"url":7889},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3091,"url":7891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3126,"url":7893},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3088,"url":7895},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3098,"url":7897},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3091,"url":7899},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[7901,7902,7903,7904],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":285,"slug":7906,"dossier":45,"summary":7907,"aliases":7908,"sourceIds":7911,"published":7912,"modified":7913,"checkedAt":7,"severity":7914,"references":7917,"versionKeys":7932,"packageCount":32,"repositoryCount":6120},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[7909,7910],"CVE-2026-69243","PYSEC-2026-3546",[285,7910],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[7915],{"type":3084,"score":7916},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7918,7920,7922,7924,7925,7927,7928,7930],{"type":3088,"url":7919},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3088,"url":7921},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3088,"url":7923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3098,"url":3234},{"type":3088,"url":7926},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3098,"url":4111},{"type":3091,"url":7929},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3091,"url":7931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3238,3239,3240,3241,3242,3243,3244,3245,6119],{"id":286,"slug":7934,"dossier":45,"summary":7935,"aliases":7936,"sourceIds":7939,"published":7940,"modified":7941,"checkedAt":7,"severity":7942,"references":7944,"versionKeys":7953,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[7937,7938],"CVE-2026-49855","PYSEC-2026-3389",[286,7938],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[7943],{"type":3081,"score":3229},[7945,7947,7948,7949,7951],{"type":3088,"url":7946},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3098,"url":3625},{"type":3098,"url":3627},{"type":3091,"url":7950},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3091,"url":7952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[3633,3634,3635,3636,3637],{"id":287,"slug":7955,"dossier":45,"summary":7956,"aliases":7957,"sourceIds":7960,"published":7961,"modified":7962,"checkedAt":7,"severity":7963,"references":7965,"versionKeys":7976,"packageCount":32,"repositoryCount":680},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[7958,7959],"CVE-2026-40347","PYSEC-2026-3038",[287,7959],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[7964],{"type":3081,"score":3194},[7966,7968,7970,7971,7973,7974],{"type":3088,"url":7967},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3091,"url":7969},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3098,"url":4219},{"type":3088,"url":7972},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3098,"url":4221},{"type":3091,"url":7975},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4384,4385,4225],{"id":288,"slug":7978,"dossier":45,"summary":7979,"aliases":7980,"sourceIds":7983,"published":7984,"modified":7985,"checkedAt":7,"severity":7986,"references":7988,"versionKeys":8001,"packageCount":32,"repositoryCount":6120},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[7981,7982],"CVE-2026-59881","PYSEC-2026-3547",[288,7982],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[7987],{"type":3084,"score":3569},[7989,7991,7993,7995,7997,7998,7999],{"type":3088,"url":7990},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3091,"url":7992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3088,"url":7994},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3088,"url":7996},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":8000},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3238,3239,3240,3241,3242,3243,3244,3245,6119],{"id":289,"slug":8003,"dossier":45,"summary":8004,"aliases":8005,"sourceIds":8012,"published":8013,"modified":8014,"checkedAt":7,"severity":8015,"references":8020,"versionKeys":8033,"packageCount":410,"repositoryCount":32},"ghsa-mqcg-5x36-vfcg-bd7ad531","JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content",[8006,8007,8008,8009,8010,8011],"BIT-jupyter-base-notebook-2026-42557","BIT-jupyter-notebook-2026-42557","BIT-jupyterlab-2026-42557","CVE-2026-42557","PYSEC-2026-2537","PYSEC-2026-2681",[289,8010,8011],"2026-05-06T21:43:44Z","2026-07-13T16:43:04.081738235Z",[8016,8018],{"type":3081,"score":8017},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":3084,"score":8019},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8021,8023,8025,8026,8028,8029,8031],{"type":3088,"url":8022},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":3091,"url":8024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42557",{"type":3098,"url":3520},{"type":3088,"url":8027},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-files",{"type":3098,"url":5819},{"type":3091,"url":8030},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":3098,"url":8032},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnotebook",[3530,5823],{"id":290,"slug":8035,"dossier":45,"summary":8036,"aliases":8037,"sourceIds":8040,"published":8041,"modified":8042,"checkedAt":7,"severity":8043,"references":8045,"versionKeys":8056,"packageCount":32,"repositoryCount":381},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[8038,8039],"CVE-2025-69225","PYSEC-2026-1109",[290,8039],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[8044],{"type":3084,"score":3368},[8046,8048,8050,8052,8053,8054],{"type":3088,"url":8047},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3091,"url":8049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3126,"url":8051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3098,"url":3234},{"type":3098,"url":4111},{"type":3091,"url":8055},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3238,3239,3240,3241,3242,3243,3244],{"id":291,"slug":8058,"dossier":45,"summary":8059,"aliases":8060,"sourceIds":8063,"published":8064,"modified":8065,"checkedAt":7,"severity":8066,"references":8069,"versionKeys":8078,"packageCount":32,"repositoryCount":614},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[8061,8062],"CVE-2026-34519","PYSEC-2026-2101",[291,8062],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[8067,8068],{"type":3084,"score":3368},{"type":3081,"score":3370},[8070,8072,8074,8076,8077],{"type":3126,"url":8071},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3091,"url":8073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3126,"url":8075},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":292,"slug":8080,"dossier":45,"summary":8081,"aliases":8082,"sourceIds":8085,"published":8086,"modified":8087,"checkedAt":7,"severity":8088,"references":8091,"versionKeys":8099,"packageCount":32,"repositoryCount":103},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[8083,8084],"CVE-2026-39892","PYSEC-2026-36",[292,8084],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[8089,8090],{"type":3084,"score":3569},{"type":3081,"score":6883},[8092,8094,8096,8097],{"type":3091,"url":8093},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":3091,"url":8095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":3098,"url":4080},{"type":3088,"url":8098},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[4088,4089],{"id":293,"slug":8101,"dossier":45,"summary":8102,"aliases":8103,"sourceIds":8106,"published":8107,"modified":8108,"checkedAt":7,"severity":8109,"references":8111,"versionKeys":8129,"packageCount":32,"repositoryCount":103},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[8104,8105],"CVE-2026-54293","PYSEC-2026-2078",[293,8105],"2026-06-16T14:34:15Z","2026-07-21T12:46:29.659855804Z",[8110],{"type":3081,"score":4627},[8112,8114,8116,8118,8120,8122,8124,8125,8127],{"type":3290,"url":8113},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3091,"url":8115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3126,"url":8117},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3088,"url":8119},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3088,"url":8121},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3163,"url":8123},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3098,"url":3747},{"type":3088,"url":8126},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3088,"url":8128},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3761,3762],{"id":294,"slug":8131,"dossier":45,"summary":8132,"aliases":8133,"sourceIds":8136,"published":8137,"modified":8138,"checkedAt":7,"severity":8139,"references":8142,"versionKeys":8151,"packageCount":32,"repositoryCount":614},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[8134,8135],"CVE-2026-34515","PYSEC-2026-2097",[294,8135],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[8140,8141],{"type":3084,"score":7140},{"type":3081,"score":4627},[8143,8145,8147,8149,8150],{"type":3126,"url":8144},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3091,"url":8146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3126,"url":8148},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":295,"slug":8153,"dossier":45,"summary":8154,"aliases":8155,"sourceIds":8158,"published":8159,"modified":8160,"checkedAt":7,"severity":8161,"references":8164,"versionKeys":8179,"packageCount":32,"repositoryCount":410},"ghsa-pc6w-59fv-rh23-cab9cb2f","Langchain Community Vulnerable to XML External Entity (XXE) Attacks",[8156,8157],"CVE-2025-6984","PYSEC-2026-1515",[295,8157],"2025-09-04T12:30:42Z","2026-07-07T17:56:45.822570559Z",[8162],{"type":3081,"score":8163},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8165,8167,8169,8171,8173,8175,8177],{"type":3091,"url":8166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6984",{"type":3088,"url":8168},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community\u002Fcommit\u002Fe842452108089524e22c3a2ced851c021884556f",{"type":3098,"url":8170},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community",{"type":3088,"url":8172},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fblob\u002Fd79b5813a0b3b243c612b77013768995e46c4337\u002Flibs\u002Flangchain\u002Flangchain\u002Fdocument_loaders\u002Fevernote.py#L1-L23",{"type":3088,"url":8174},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa6b521cf-258c-41c0-9edb-d8ef976abb2a",{"type":3098,"url":8176},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-community",{"type":3091,"url":8178},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pc6w-59fv-rh23",[3726,8180],"pypi:langchain-community@0.3.7",{"id":296,"slug":8182,"dossier":45,"summary":8183,"aliases":8184,"sourceIds":8188,"published":8189,"modified":8190,"checkedAt":7,"severity":8191,"references":8194,"versionKeys":8207,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[8185,8186,8187],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[296,8187],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[8192,8193],{"type":3081,"score":3194},{"type":3081,"score":3229},[8195,8197,8199,8201,8203,8205,8206],{"type":3290,"url":8196},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3091,"url":8198},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3126,"url":8200},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3126,"url":8202},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3088,"url":8204},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3098,"url":3687},{"type":3091,"url":4483},[3696,3697,3698],{"id":297,"slug":8209,"dossier":89,"summary":8210,"aliases":8211,"sourceIds":8215,"published":8216,"modified":8217,"checkedAt":7,"severity":8218,"references":8220,"versionKeys":8231,"packageCount":32,"repositoryCount":3439},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[8212,8213,8214],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[297,8214],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[8219],{"type":3081,"score":3229},[8221,8223,8225,8227,8229,8230],{"type":3290,"url":8222},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3091,"url":8224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3126,"url":8226},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3088,"url":8228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3098,"url":3687},{"type":3091,"url":3689},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":298,"slug":8233,"dossier":45,"summary":8234,"aliases":8235,"sourceIds":8238,"published":8239,"modified":8240,"checkedAt":7,"severity":8241,"references":8244,"versionKeys":8253,"packageCount":32,"repositoryCount":410},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[8236,8237],"CVE-2026-44843","PYSEC-2026-2564",[298,8237],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[8242],{"type":3081,"score":8243},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[8245,8247,8249,8250,8251],{"type":3088,"url":8246},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":3091,"url":8248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":3098,"url":3266},{"type":3098,"url":3270},{"type":3091,"url":8252},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[3274,3275],{"id":299,"slug":8255,"dossier":45,"summary":8256,"aliases":8257,"sourceIds":8260,"published":8261,"modified":8262,"checkedAt":7,"severity":8263,"references":8265,"versionKeys":8274,"packageCount":32,"repositoryCount":680},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[8258,8259],"CVE-2026-42561","PYSEC-2026-3039",[299,8259],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[8264],{"type":3081,"score":3229},[8266,8268,8270,8271,8272],{"type":3088,"url":8267},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3091,"url":8269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3098,"url":4219},{"type":3098,"url":4221},{"type":3091,"url":8273},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4384,4385,4225],{"id":300,"slug":8276,"dossier":45,"summary":8277,"aliases":8278,"sourceIds":8280,"published":8281,"modified":8282,"checkedAt":7,"severity":8283,"references":8286,"versionKeys":8297,"packageCount":32,"repositoryCount":410},"ghsa-pppj-hq3g-57pj-cec62aea","JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)",[8279],"CVE-2026-73417",[300],"2026-07-22T23:16:18Z","2026-08-12T20:15:07.672765933Z",[8284],{"type":3084,"score":8285},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:L",[8287,8289,8290,8291,8292,8293,8294,8295,8296],{"type":3088,"url":8288},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-pppj-hq3g-57pj",{"type":3088,"url":5314},{"type":3088,"url":5316},{"type":3088,"url":5318},{"type":3088,"url":5320},{"type":3088,"url":5322},{"type":3098,"url":3520},{"type":3088,"url":5325},{"type":3088,"url":5327},[3530,5329],{"id":301,"slug":8299,"dossier":45,"summary":8300,"aliases":8301,"sourceIds":8304,"published":8305,"modified":8306,"checkedAt":7,"severity":8307,"references":8309,"versionKeys":8321,"packageCount":32,"repositoryCount":32},"ghsa-pq5p-34cr-23v9-127ea2b8","Authlib is vulnerable to Denial of Service via Oversized JOSE Segments",[8302,8303],"CVE-2025-61920","PYSEC-2026-1203",[301,8303],"2025-10-10T20:26:43Z","2026-07-07T17:56:17.886883361Z",[8308],{"type":3081,"score":3229},[8310,8312,8314,8316,8317,8318,8319],{"type":3088,"url":8311},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",{"type":3091,"url":8313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61920",{"type":3088,"url":8315},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F867e3f87b072347a1ae9cf6983cc8bbf88447e5e",{"type":3098,"url":4862},{"type":3088,"url":6644},{"type":3098,"url":6352},{"type":3091,"url":8320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",[4866],{"id":302,"slug":8323,"dossier":45,"summary":8324,"aliases":8325,"sourceIds":8328,"published":8329,"modified":8330,"checkedAt":7,"severity":8331,"references":8333,"versionKeys":8345,"packageCount":32,"repositoryCount":381},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[8326,8327],"CVE-2025-50181","PYSEC-2026-1999",[302,8327],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[8332],{"type":3081,"score":3774},[8334,8336,8338,8340,8341,8342,8343],{"type":3088,"url":8335},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3091,"url":8337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3126,"url":8339},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3098,"url":3428},{"type":3088,"url":3784},{"type":3098,"url":3430},{"type":3091,"url":8344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3434,3435,3436,3437],{"id":303,"slug":8347,"dossier":45,"summary":8348,"aliases":8349,"sourceIds":8352,"published":8353,"modified":8354,"checkedAt":7,"severity":8355,"references":8358,"versionKeys":8369,"packageCount":32,"repositoryCount":680},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[8350,8351],"CVE-2025-67724","PYSEC-2025-265",[303,8351],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[8356,8357],{"type":3081,"score":4904},{"type":3081,"score":4184},[8359,8361,8363,8365,8367,8368],{"type":3091,"url":8360},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3091,"url":8362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3126,"url":8364},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3088,"url":8366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3098,"url":3625},{"type":3091,"url":5978},[3633,3634,3635],{"id":304,"slug":8371,"dossier":45,"summary":8372,"aliases":8373,"sourceIds":8374,"published":8375,"modified":8376,"checkedAt":7,"severity":8377,"references":8380,"versionKeys":8384,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[304],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[8378],{"type":3081,"score":8379},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8381,8383],{"type":3088,"url":8382},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3098,"url":3625},[3633,3634,3635,3636,3637],{"id":305,"slug":8386,"dossier":89,"summary":8387,"aliases":8388,"sourceIds":8392,"published":8393,"modified":8394,"checkedAt":7,"severity":8395,"references":8399,"versionKeys":8411,"packageCount":32,"repositoryCount":3439},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[8389,8390,8391],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[305,8391],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[8396,8397],{"type":3084,"score":5992},{"type":3081,"score":8398},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8400,8401,8403,8405,8407,8409,8410],{"type":3088,"url":5996},{"type":3126,"url":8402},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3091,"url":8404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3126,"url":8406},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3126,"url":8408},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3098,"url":3687},{"type":3091,"url":4457},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":306,"slug":8413,"dossier":45,"summary":8414,"aliases":8415,"sourceIds":8418,"published":8419,"modified":8420,"checkedAt":7,"severity":8421,"references":8424,"versionKeys":8439,"packageCount":32,"repositoryCount":32},"ghsa-q25c-c977-4cmh-8e74e348","Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever",[8416,8417],"CVE-2024-3095","PYSEC-2026-1516",[306,8417],"2024-06-06T21:30:36Z","2026-07-07T17:57:27.127785500Z",[8422],{"type":3081,"score":8423},"CVSS:3.0\u002FAV:P\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[8425,8427,8429,8431,8432,8434,8436,8437],{"type":3091,"url":8426},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-3095",{"type":3088,"url":8428},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F24451",{"type":3088,"url":8430},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":3098,"url":3266},{"type":3088,"url":8433},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-community%3D%3D0.2.9",{"type":3088,"url":8435},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe62d4895-2901-405b-9559-38276b6a5273",{"type":3098,"url":8176},{"type":3091,"url":8438},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q25c-c977-4cmh",[3726],{"id":307,"slug":8441,"dossier":45,"summary":8442,"aliases":8443,"sourceIds":8446,"published":8447,"modified":8448,"checkedAt":7,"severity":8449,"references":8452,"versionKeys":8465,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[8444,8445],"CVE-2024-56326","PYSEC-2026-1475",[307,8445],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[8450,8451],{"type":3081,"score":5199},{"type":3084,"score":6070},[8453,8455,8457,8459,8460,8461,8462,8463],{"type":3088,"url":8454},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3091,"url":8456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3126,"url":8458},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3098,"url":6079},{"type":3088,"url":6923},{"type":3088,"url":6081},{"type":3098,"url":6085},{"type":3091,"url":8464},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[6089],{"id":308,"slug":8467,"dossier":89,"summary":8468,"aliases":8469,"sourceIds":8472,"published":8473,"modified":8474,"checkedAt":7,"severity":8475,"references":8478,"versionKeys":8484,"packageCount":32,"repositoryCount":6810},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[8470,8471],"CVE-2026-44431","PYSEC-2026-141",[308,8471],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[8476,8477],{"type":3081,"score":5528},{"type":3084,"score":6606},[8479,8481,8483],{"type":3091,"url":8480},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3091,"url":8482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3098,"url":3428},[3434,3435,3436,3437,3438,7874],{"id":309,"slug":8486,"dossier":45,"summary":8487,"aliases":8488,"sourceIds":8491,"published":8492,"modified":8493,"checkedAt":7,"severity":8494,"references":8497,"versionKeys":8512,"packageCount":32,"repositoryCount":32},"ghsa-qcq2-496w-v96p-f873dd58","Mistune: Potential DoS via quadratic-time parsing in parse_link_text",[8489,8490],"CVE-2026-49851","PYSEC-2026-2652",[309,8490],"2026-07-09T23:52:27Z","2026-07-23T05:15:25.338180329Z",[8495,8496],{"type":3081,"score":3229},{"type":3084,"score":4210},[8498,8500,8502,8504,8506,8507,8509,8510],{"type":3088,"url":8499},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",{"type":3091,"url":8501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49851",{"type":3088,"url":8503},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49851",{"type":3088,"url":8505},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492304",{"type":3098,"url":3297},{"type":3088,"url":8508},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49851.json",{"type":3098,"url":5393},{"type":3091,"url":8511},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",[3303],{"id":310,"slug":8514,"dossier":45,"summary":8515,"aliases":8516,"sourceIds":8519,"published":8520,"modified":8521,"checkedAt":7,"severity":8522,"references":8524,"versionKeys":8534,"packageCount":32,"repositoryCount":32},"ghsa-qfrw-5rxm-mhh2-586619d0","Mistune renderers\u002Fhtml.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution",[8517,8518],"CVE-2026-59929","PYSEC-2026-2217",[310,8518],"2026-07-08T17:17:28.737Z","2026-07-20T21:46:41.246867209Z",[8523],{"type":3081,"score":4184},[8525,8527,8529,8530,8531,8532],{"type":3290,"url":8526},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qfrw-5rxm-mhh2",{"type":3091,"url":8528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59929",{"type":3126,"url":5347},{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":8533},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2217.yaml",[3303],{"id":311,"slug":8536,"dossier":45,"summary":8537,"aliases":8538,"sourceIds":8541,"published":8542,"modified":8543,"checkedAt":7,"severity":8544,"references":8546,"versionKeys":8565,"packageCount":32,"repositoryCount":410},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[8539,8540],"CVE-2026-34070","PYSEC-2026-2193",[311,8540],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[8545],{"type":3081,"score":4627},[8547,8549,8551,8553,8554,8556,8558,8560,8562,8563],{"type":3290,"url":8548},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":3091,"url":8550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":3126,"url":8552},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":3098,"url":3266},{"type":3091,"url":8555},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":3088,"url":8557},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":3088,"url":8559},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":3091,"url":8561},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":3091,"url":3757},{"type":3163,"url":8564},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[3274,3275],{"id":312,"slug":8567,"dossier":45,"summary":8568,"aliases":8569,"sourceIds":8572,"published":8573,"modified":8574,"checkedAt":7,"severity":8575,"references":8579,"versionKeys":8587,"packageCount":32,"repositoryCount":32},"ghsa-qh7q-6qm3-653w-ce7f1a0b","Jupyter Server has an open redirection vulnerability in `next` query parameter",[8570,8571],"CVE-2025-61669","PYSEC-2026-67",[312,8571],"2026-05-05T16:16:10.133Z","2026-06-05T18:00:15.359519984Z",[8576,8578],{"type":3084,"score":8577},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",{"type":3081,"score":4184},[8580,8582,8584,8585],{"type":3290,"url":8581},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-qh7q-6qm3-653w",{"type":3091,"url":8583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61669",{"type":3098,"url":3176},{"type":3088,"url":8586},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-67.yaml",[3182],{"id":313,"slug":8589,"dossier":45,"summary":8590,"aliases":8591,"sourceIds":8594,"published":8595,"modified":8596,"checkedAt":7,"severity":8597,"references":8600,"versionKeys":8613,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[8592,8593],"CVE-2026-31958","PYSEC-2026-140",[313,8593],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[8598,8599],{"type":3081,"score":3229},{"type":3084,"score":4210},[8601,8603,8605,8607,8609,8610,8611],{"type":3091,"url":8602},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3091,"url":8604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3088,"url":8606},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3088,"url":8608},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3098,"url":3625},{"type":3088,"url":4915},{"type":3088,"url":8612},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[3633,3634,3635,3636],{"id":314,"slug":8615,"dossier":45,"summary":8616,"aliases":8617,"sourceIds":8620,"published":8621,"modified":8622,"checkedAt":7,"severity":8623,"references":8626,"versionKeys":8641,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[8618,8619],"CVE-2026-22701","PYSEC-2026-1374",[314,8619],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[8624],{"type":3081,"score":8625},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8627,8629,8631,8633,8635,8637,8639],{"type":3088,"url":8628},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3091,"url":8630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3088,"url":8632},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3088,"url":8634},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3098,"url":8636},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3098,"url":8638},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3091,"url":8640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[8642,8643,8644,8645],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":315,"slug":8647,"dossier":45,"summary":8648,"aliases":8649,"sourceIds":8652,"published":8653,"modified":8654,"checkedAt":7,"severity":8655,"references":8657,"versionKeys":8670,"packageCount":32,"repositoryCount":32},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[8650,8651],"CVE-2026-33123","PYSEC-2026-3023",[315,8651],"2026-03-18T16:17:31Z","2026-07-13T16:43:25.259140299Z",[8656],{"type":3084,"score":3085},[8658,8660,8662,8664,8665,8667,8668],{"type":3088,"url":8659},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3091,"url":8661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3088,"url":8663},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3098,"url":3099},{"type":3088,"url":8666},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3098,"url":3103},{"type":3091,"url":8669},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3107],{"id":316,"slug":8672,"dossier":45,"summary":8673,"aliases":8674,"sourceIds":8677,"published":8678,"modified":8679,"checkedAt":7,"severity":8680,"references":8683,"versionKeys":8692,"packageCount":32,"repositoryCount":103},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[8675,8676],"CVE-2026-12075","PYSEC-2026-3583",[316,8676],"2026-07-31T16:51:29Z","2026-08-06T15:11:52.346921403Z",[8681],{"type":3081,"score":8682},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[8684,8686,8687,8688,8690],{"type":3088,"url":8685},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3098,"url":3747},{"type":3098,"url":4678},{"type":3091,"url":8689},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3091,"url":8691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3761,3762],{"id":317,"slug":8694,"dossier":45,"summary":8695,"aliases":8696,"sourceIds":8699,"published":8700,"modified":8701,"checkedAt":7,"severity":8702,"references":8704,"versionKeys":8714,"packageCount":32,"repositoryCount":32},"ghsa-r4rv-85jg-w4mf-c97959dd","Mistune: Arbitrary File Read via Include directive path traversal",[8697,8698],"CVE-2026-59924","PYSEC-2026-2212",[317,8698],"2026-07-08T17:17:28.050Z","2026-07-20T21:46:41.298212805Z",[8703],{"type":3081,"score":8379},[8705,8707,8709,8710,8711,8712],{"type":3290,"url":8706},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-r4rv-85jg-w4mf",{"type":3091,"url":8708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59924",{"type":3126,"url":5414},{"type":3098,"url":3297},{"type":3091,"url":3299},{"type":3088,"url":8713},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2212.yaml",[3303],{"id":318,"slug":8716,"dossier":45,"summary":8717,"aliases":8718,"sourceIds":8721,"published":8722,"modified":8723,"checkedAt":7,"severity":8724,"references":8728,"versionKeys":8766,"packageCount":32,"repositoryCount":381},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[8719,8720],"CVE-2026-26007","PYSEC-2026-2141",[318,8720],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[8725,8727],{"type":3084,"score":8726},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":3081,"score":5111},[8729,8731,8733,8735,8736,8738,8740,8742,8743,8745,8747,8749,8751,8753,8755,8757,8759,8761,8763,8765],{"type":3088,"url":8730},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":3091,"url":8732},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":3088,"url":8734},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":3098,"url":4080},{"type":3088,"url":8737},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":3088,"url":8739},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":3088,"url":8741},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":3091,"url":3753},{"type":3091,"url":8744},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":3091,"url":8746},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":3091,"url":8748},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3091,"url":8750},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3091,"url":8752},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":3091,"url":8754},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":3091,"url":8756},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":3091,"url":8758},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":3091,"url":8760},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":3091,"url":8762},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":3091,"url":8764},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":3091,"url":6031},[4084,4085,4086,4087,4088,4089],{"id":319,"slug":8768,"dossier":45,"summary":8769,"aliases":8770,"sourceIds":8774,"published":8775,"modified":8776,"checkedAt":7,"severity":8777,"references":8780,"versionKeys":8794,"packageCount":32,"repositoryCount":3439},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[8771,8772,8773],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[319,8773],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[8778,8779],{"type":3081,"score":4448},{"type":3084,"score":3085},[8781,8783,8785,8787,8789,8790,8791,8792],{"type":3088,"url":8782},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3091,"url":8784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3088,"url":8786},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3088,"url":8788},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3098,"url":3687},{"type":3088,"url":4457},{"type":3098,"url":4485},{"type":3091,"url":8793},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":320,"slug":8796,"dossier":45,"summary":8797,"aliases":8798,"sourceIds":8801,"published":8802,"modified":8803,"checkedAt":7,"severity":8804,"references":8807,"versionKeys":8815,"packageCount":32,"repositoryCount":103},"ghsa-r7w7-9xr2-qq2r-7a3a0a91","langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding",[8799,8800],"CVE-2026-41488","PYSEC-2026-76",[320,8800],"2026-04-16T23:00:12Z","2026-06-06T01:15:07.912179267Z",[8805],{"type":3081,"score":8806},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8808,8810,8812,8813],{"type":3091,"url":8809},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-r7w7-9xr2-qq2r",{"type":3091,"url":8811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41488",{"type":3098,"url":3266},{"type":3088,"url":8814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-openai\u002FPYSEC-2026-76.yaml",[8816,8817,8818],"pypi:langchain-openai@0.2.8","pypi:langchain-openai@1.1.7","pypi:langchain-openai@1.1.9",{"id":321,"slug":8820,"dossier":45,"summary":8821,"aliases":8822,"sourceIds":8825,"published":8826,"modified":8827,"checkedAt":7,"severity":8828,"references":8830,"versionKeys":8842,"packageCount":32,"repositoryCount":32},"ghsa-r95x-qfjj-fjj2-df4fdb80","Authlib OIDC Implicit\u002FHybrid Authorization Vulnerable to Open Redirect",[8823,8824],"CVE-2026-44681","PYSEC-2026-188",[321,8824],"2026-05-13T01:36:03Z","2026-06-09T00:00:25.468861825Z",[8829],{"type":3081,"score":4184},[8831,8833,8835,8836,8838,8840],{"type":3290,"url":8832},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-r95x-qfjj-fjj2",{"type":3091,"url":8834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44681",{"type":3098,"url":4862},{"type":3088,"url":8837},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.12",{"type":3088,"url":8839},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.7.1",{"type":3088,"url":8841},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-188.yaml",[4866],{"id":322,"slug":8844,"dossier":45,"summary":8845,"aliases":8846,"sourceIds":8853,"published":8854,"modified":8855,"checkedAt":7,"severity":8856,"references":8859,"versionKeys":8872,"packageCount":410,"repositoryCount":32},"ghsa-rch3-82jr-f9w9-c220441f","Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS",[8847,8848,8849,8850,8851,8852],"BIT-jupyter-base-notebook-2026-40171","BIT-jupyter-notebook-2026-40171","BIT-jupyterlab-2026-40171","CVE-2026-40171","PYSEC-2026-2538","PYSEC-2026-2682",[322,8851,8852],"2026-04-30T17:25:47Z","2026-07-13T16:42:47.886298772Z",[8857],{"type":3084,"score":8858},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8860,8862,8864,8866,8868,8869,8871],{"type":3088,"url":8861},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook\u002Fsecurity\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":3091,"url":8863},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40171",{"type":3098,"url":8865},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook",{"type":3088,"url":8867},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-output-and-files",{"type":3098,"url":5819},{"type":3091,"url":8870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":3098,"url":8032},[3530,5823],{"id":323,"slug":8874,"dossier":45,"summary":8875,"aliases":8876,"sourceIds":8877,"published":8878,"modified":8879,"checkedAt":7,"severity":8880,"references":8882,"versionKeys":8886,"packageCount":32,"repositoryCount":103},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[323],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[8881],{"type":3084,"score":3085},[8883,8885],{"type":3088,"url":8884},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3098,"url":3747},[3761,3762],{"id":324,"slug":8888,"dossier":45,"summary":8889,"aliases":8890,"sourceIds":8893,"published":8894,"modified":8895,"checkedAt":7,"severity":8896,"references":8898,"versionKeys":8907,"packageCount":32,"repositoryCount":32},"ghsa-rr7j-v2q5-chgv-a773969e","LangSmith SDK: Streaming token events bypass output redaction",[8891,8892],"CVE-2026-41182","PYSEC-2026-2583",[324,8892],"2026-04-16T01:20:37Z","2026-07-13T16:43:37.566182133Z",[8897],{"type":3081,"score":5528},[8899,8901,8903,8904,8905],{"type":3088,"url":8900},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",{"type":3091,"url":8902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41182",{"type":3098,"url":3487},{"type":3098,"url":3495},{"type":3091,"url":8906},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",[3500],{"id":325,"slug":8909,"dossier":45,"summary":8910,"aliases":8911,"sourceIds":8914,"published":8915,"modified":8916,"checkedAt":7,"severity":8917,"references":8919,"versionKeys":8926,"packageCount":32,"repositoryCount":32},"ghsa-v87v-83h2-53w7-36afb5ef","Mistune Heading ID Attribute has Injection XSS",[8912,8913],"CVE-2026-44897","PYSEC-2026-2207",[325,8913],"2026-05-09T00:13:12Z","2026-07-13T07:26:47.040339656Z",[8918],{"type":3081,"score":4184},[8920,8922,8924,8925],{"type":3290,"url":8921},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-v87v-83h2-53w7",{"type":3091,"url":8923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44897",{"type":3098,"url":3297},{"type":3091,"url":5371},[3303],{"id":326,"slug":8928,"dossier":45,"summary":8929,"aliases":8930,"sourceIds":8933,"published":8934,"modified":8935,"checkedAt":7,"severity":8936,"references":8938,"versionKeys":8947,"packageCount":32,"repositoryCount":680},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[8931,8932],"CVE-2026-53540","PYSEC-2026-3040",[326,8932],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[8937],{"type":3081,"score":3257},[8939,8941,8942,8943,8945],{"type":3088,"url":8940},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3098,"url":4219},{"type":3098,"url":4221},{"type":3091,"url":8944},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3091,"url":8946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4384,4385,4225],{"id":327,"slug":8949,"dossier":45,"summary":8950,"aliases":8951,"sourceIds":8954,"published":8955,"modified":8956,"checkedAt":7,"severity":8957,"references":8959,"versionKeys":8970,"packageCount":32,"repositoryCount":680},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[8952,8953],"CVE-2026-53537","PYSEC-2026-3041",[327,8953],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[8958],{"type":3081,"score":4718},[8960,8962,8964,8965,8967,8969],{"type":3088,"url":8961},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3091,"url":8963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3098,"url":4219},{"type":3091,"url":8966},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3088,"url":8968},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3098,"url":4221},[4384,4385,4225],{"id":328,"slug":8972,"dossier":45,"summary":8973,"aliases":8974,"sourceIds":8977,"published":8978,"modified":8979,"checkedAt":7,"severity":8980,"references":8982,"versionKeys":8995,"packageCount":32,"repositoryCount":680},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[8975,8976],"CVE-2026-41066","PYSEC-2026-87",[328,8976],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[8981],{"type":3081,"score":4627},[8983,8985,8987,8989,8991,8993],{"type":3091,"url":8984},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3091,"url":8986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3163,"url":8988},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3098,"url":8990},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3088,"url":8992},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3088,"url":8994},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[8996,8997,8998],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":329,"slug":9000,"dossier":45,"summary":9001,"aliases":9002,"sourceIds":9005,"published":9006,"modified":9007,"checkedAt":7,"severity":9008,"references":9010,"versionKeys":9025,"packageCount":32,"repositoryCount":410},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[9003,9004],"CVE-2026-59950","PYSEC-2026-3483",[329,9004],"2026-07-16T20:14:34Z","2026-07-23T15:11:47.407353087Z",[9009],{"type":3084,"score":5658},[9011,9013,9015,9017,9019,9020,9022,9023],{"type":3088,"url":9012},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3091,"url":9014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3088,"url":9016},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3088,"url":9018},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3098,"url":5669},{"type":3088,"url":9021},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3098,"url":5673},{"type":3091,"url":9024},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[5675,5676],{"id":330,"slug":9027,"dossier":45,"summary":9028,"aliases":9029,"sourceIds":9033,"published":9034,"modified":9035,"checkedAt":7,"severity":9036,"references":9038,"versionKeys":9052,"packageCount":32,"repositoryCount":3439},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[9030,9031,9032],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[330,9032],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[9037],{"type":3084,"score":4210},[9039,9041,9043,9045,9047,9048,9049,9050],{"type":3088,"url":9040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3091,"url":9042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3088,"url":9044},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3088,"url":9046},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3098,"url":3687},{"type":3088,"url":4483},{"type":3098,"url":4485},{"type":3091,"url":9051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":331,"slug":9054,"dossier":45,"summary":9055,"aliases":9056,"sourceIds":9058,"published":9059,"modified":9060,"checkedAt":7,"severity":9061,"references":9064,"versionKeys":9074,"packageCount":32,"repositoryCount":32},"ghsa-vmhf-c436-hxj4-2356488f","JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol",[9057],"CVE-2026-67338",[331],"2026-06-19T15:11:17Z","2026-08-02T03:56:47.223984500Z",[9062],{"type":3084,"score":9063},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[9065,9067,9069,9071,9072],{"type":3088,"url":9066},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vmhf-c436-hxj4",{"type":3088,"url":9068},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F4e61e07d0a91145b53fbf96ac74b0387f6bc51f6",{"type":3088,"url":9070},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fd5d961f6e10a6442dddbf94d9a976b3897055a12",{"type":3098,"url":3520},{"type":3088,"url":9073},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.9",[3530],{"id":332,"slug":9076,"dossier":45,"summary":9077,"aliases":9078,"sourceIds":9081,"published":9082,"modified":9083,"checkedAt":7,"severity":9084,"references":9087,"versionKeys":9100,"packageCount":32,"repositoryCount":103},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[9079,9080],"CVE-2025-43859","PYSEC-2026-348",[332,9080],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[9085],{"type":3081,"score":9086},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9088,9090,9092,9094,9096,9098],{"type":3088,"url":9089},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3091,"url":9091},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3088,"url":9093},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3098,"url":9095},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3098,"url":9097},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3091,"url":9099},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[9101],"pypi:h11@0.14.0",{"id":333,"slug":9103,"dossier":45,"summary":9104,"aliases":9105,"sourceIds":9108,"published":9109,"modified":9110,"checkedAt":7,"severity":9111,"references":9113,"versionKeys":9127,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[9106,9107],"CVE-2025-62707","PYSEC-2026-1833",[333,9107],"2025-10-22T19:40:47Z","2026-07-07T17:56:08.279731969Z",[9112],{"type":3084,"score":3850},[9114,9116,9118,9120,9122,9123,9124,9125],{"type":3088,"url":9115},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3091,"url":9117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3088,"url":9119},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3088,"url":9121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3098,"url":3099},{"type":3088,"url":7300},{"type":3098,"url":3103},{"type":3091,"url":9126},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3107],{"id":334,"slug":9129,"dossier":45,"summary":9130,"aliases":9131,"sourceIds":9135,"published":9136,"modified":9137,"checkedAt":7,"severity":9138,"references":9141,"versionKeys":9152,"packageCount":32,"repositoryCount":32},"ghsa-vvfj-2jqx-52jm-5fd8a3bd","JupyterLab LaTeX typesetter links did not enforce `noopener` attribute",[9132,9133,9134],"BIT-jupyterlab-2025-59842","CVE-2025-59842","PYSEC-2026-1482",[334,9134],"2025-09-26T14:26:40Z","2026-07-07T17:57:38.072715082Z",[9139],{"type":3084,"score":9140},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9142,9144,9146,9148,9149,9150],{"type":3088,"url":9143},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",{"type":3091,"url":9145},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59842",{"type":3088,"url":9147},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88ef373039a8cc09f27d3814382a512d9033675c",{"type":3098,"url":3520},{"type":3098,"url":5819},{"type":3091,"url":9151},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",[3530],{"id":335,"slug":9154,"dossier":45,"summary":9155,"aliases":9156,"sourceIds":9159,"published":9160,"modified":9161,"checkedAt":7,"severity":9162,"references":9166,"versionKeys":9175,"packageCount":32,"repositoryCount":614},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[9157,9158],"CVE-2026-22815","PYSEC-2026-2094",[335,9158],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[9163,9164],{"type":3084,"score":3569},{"type":3084,"score":9165},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9167,9169,9171,9173,9174],{"type":3126,"url":9168},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3091,"url":9170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3126,"url":9172},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3098,"url":3234},{"type":3091,"url":3380},[3238,3239,3240,3241,3242,3243,3244,3245],{"id":336,"slug":9177,"dossier":45,"summary":9178,"aliases":9179,"sourceIds":9183,"published":9184,"modified":9185,"checkedAt":7,"severity":9186,"references":9190,"versionKeys":9206,"packageCount":410,"repositoryCount":410},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[9180,9181,9182],"CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575",[336,9181,9182],"2026-06-17T10:55:15.113Z","2026-07-21T15:15:50.659527533Z",[9187,9189],{"type":3081,"score":9188},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3081,"score":9086},[9191,9193,9195,9197,9198,9200,9202,9204],{"type":3088,"url":9192},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":3091,"url":9194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":3091,"url":9196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":3098,"url":6469},{"type":3088,"url":9199},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":3088,"url":9201},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph-sdk\u002FPYSEC-2026-2575.yaml",{"type":3088,"url":9203},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-2194.yaml",{"type":3098,"url":9205},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",[9207,6592],"pypi:langgraph-sdk@0.3.3",{"id":337,"slug":9209,"dossier":45,"summary":9210,"aliases":9211,"sourceIds":9214,"published":9215,"modified":9216,"checkedAt":7,"severity":9217,"references":9219,"versionKeys":9227,"packageCount":32,"repositoryCount":410},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[9212,9213],"CVE-2026-48525","PYSEC-2026-178",[337,9213],"2026-05-28T16:16:29.533Z","2026-06-16T15:44:21.139278330Z",[9218],{"type":3081,"score":3194},[9220,9222,9224,9225],{"type":3290,"url":9221},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3091,"url":9223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3098,"url":4884},{"type":3088,"url":9226},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[4890,4891],{"id":338,"slug":9229,"dossier":45,"summary":9230,"aliases":9231,"sourceIds":9234,"published":9235,"modified":9236,"checkedAt":7,"severity":9237,"references":9240,"versionKeys":9257,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[9232,9233],"CVE-2025-68146","PYSEC-2026-1375",[338,9233],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[9238],{"type":3081,"score":9239},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9241,9243,9245,9246,9248,9250,9252,9253,9255],{"type":3088,"url":9242},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3088,"url":9244},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3098,"url":8636},{"type":3088,"url":9247},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3088,"url":9249},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3088,"url":9251},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3098,"url":8638},{"type":3091,"url":9254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3091,"url":9256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[8642,8643,8644,8645],{"id":339,"slug":9259,"dossier":45,"summary":9260,"aliases":9261,"sourceIds":9264,"published":9265,"modified":9266,"checkedAt":7,"severity":9267,"references":9269,"versionKeys":9279,"packageCount":32,"repositoryCount":32},"ghsa-w8p2-r796-3vmq-0e5f6b4f","Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type",[9262,9263],"CVE-2026-41479","PYSEC-2026-2119",[339,9263],"2026-06-08T17:52:04Z","2026-07-18T17:30:29.215396840Z",[9268],{"type":3081,"score":4904},[9270,9272,9274,9276,9277],{"type":3290,"url":9271},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-w8p2-r796-3vmq",{"type":3091,"url":9273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41479",{"type":3126,"url":9275},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F3be08468201a7766a93012ce149ea12822cab096",{"type":3098,"url":4862},{"type":3088,"url":9278},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-2119.yaml",[4866],{"id":340,"slug":9281,"dossier":45,"summary":9282,"aliases":9283,"sourceIds":9286,"published":9287,"modified":9288,"checkedAt":7,"severity":9289,"references":9292,"versionKeys":9308,"packageCount":32,"repositoryCount":32},"ghsa-wf5f-4jwr-ppcp-6aafc086","Arbitrary Code Execution in pdfminer.six via Crafted PDF Input",[9284,9285],"CVE-2025-64512","PYSEC-2026-1762",[340,9285],"2025-11-07T20:52:24Z","2026-07-07T17:56:32.052583560Z",[9290],{"type":3081,"score":9291},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9293,9295,9297,9298,9299,9301,9303,9305,9306],{"type":3088,"url":9294},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",{"type":3091,"url":9296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64512",{"type":3088,"url":6236},{"type":3098,"url":6238},{"type":3088,"url":9300},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Freleases\u002Ftag\u002F20251107",{"type":3088,"url":9302},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F11\u002Fmsg00017.html",{"type":3088,"url":9304},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00005.html",{"type":3098,"url":6240},{"type":3091,"url":9307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",[6244],{"id":341,"slug":9310,"dossier":45,"summary":9311,"aliases":9312,"sourceIds":9315,"published":9316,"modified":9317,"checkedAt":7,"severity":9318,"references":9320,"versionKeys":9334,"packageCount":32,"repositoryCount":32},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[9313,9314],"CVE-2026-27025","PYSEC-2026-3024",[341,9314],"2026-02-18T22:41:13Z","2026-07-13T16:43:04.734501329Z",[9319],{"type":3084,"score":4052},[9321,9323,9325,9327,9329,9330,9331,9332],{"type":3088,"url":9322},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3091,"url":9324},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3088,"url":9326},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3088,"url":9328},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3098,"url":3099},{"type":3088,"url":5642},{"type":3098,"url":3103},{"type":3091,"url":9333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3107],{"id":342,"slug":9336,"dossier":45,"summary":9337,"aliases":9338,"sourceIds":9342,"published":9343,"modified":9344,"checkedAt":7,"severity":9345,"references":9348,"versionKeys":9386,"packageCount":32,"repositoryCount":3439},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[9339,9340,9341],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[342,9341],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[9346,9347],{"type":3081,"score":3229},{"type":3084,"score":4210},[9349,9351,9353,9355,9357,9358,9360,9362,9364,9366,9368,9370,9371,9373,9375,9377,9378,9380,9382,9384],{"type":3088,"url":9350},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3091,"url":9352},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3088,"url":9354},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3088,"url":9356},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3098,"url":3687},{"type":3088,"url":9359},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3088,"url":9361},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3088,"url":9363},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3091,"url":9365},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3091,"url":9367},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3091,"url":9369},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3091,"url":6018},{"type":3091,"url":9372},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3091,"url":9374},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3091,"url":9376},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3091,"url":3755},{"type":3091,"url":9379},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3091,"url":9381},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3091,"url":9383},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3091,"url":9385},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3691,3692,3693,3694,3695,3696,3697,3698],{"id":343,"slug":9388,"dossier":45,"summary":9389,"aliases":9390,"sourceIds":9391,"published":9392,"modified":9393,"checkedAt":7,"severity":9394,"references":9397,"versionKeys":9408,"packageCount":32,"repositoryCount":410},"ghsa-whvh-wf3x-g77j-38e6ead5","JupyterLab: Allowlist\u002Fblocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)",[],[343],"2026-07-22T23:12:22Z","2026-08-08T09:26:58.996028341Z",[9395],{"type":3081,"score":9396},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[9398,9400,9401,9402,9403,9404,9405,9406,9407],{"type":3088,"url":9399},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-whvh-wf3x-g77j",{"type":3088,"url":5314},{"type":3088,"url":5316},{"type":3088,"url":5318},{"type":3088,"url":5320},{"type":3088,"url":5322},{"type":3098,"url":3520},{"type":3088,"url":5325},{"type":3088,"url":5327},[3530,5329],{"id":344,"slug":9410,"dossier":45,"summary":9411,"aliases":9412,"sourceIds":9415,"published":9416,"modified":9417,"checkedAt":7,"severity":9418,"references":9420,"versionKeys":9433,"packageCount":32,"repositoryCount":32},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[9413,9414],"CVE-2026-48735","PYSEC-2026-3025",[344,9414],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[9419],{"type":3084,"score":4052},[9421,9423,9425,9427,9428,9430,9431],{"type":3088,"url":9422},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3091,"url":9424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3088,"url":9426},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3098,"url":3099},{"type":3088,"url":9429},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3098,"url":3103},{"type":3091,"url":9432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3107],{"id":345,"slug":9435,"dossier":45,"summary":9436,"aliases":9437,"sourceIds":9441,"published":9442,"modified":9443,"checkedAt":7,"severity":9444,"references":9447,"versionKeys":9456,"packageCount":32,"repositoryCount":3439},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[9438,9439,9440],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[345,9440],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[9445,9446],{"type":3081,"score":4448},{"type":3084,"score":3085},[9448,9450,9452,9454,9455],{"type":3091,"url":9449},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3091,"url":9451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3088,"url":9453},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3098,"url":3687},{"type":3091,"url":4457},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":346,"slug":9458,"dossier":45,"summary":9459,"aliases":9460,"sourceIds":9463,"published":9464,"modified":9465,"checkedAt":7,"severity":9466,"references":9469,"versionKeys":9482,"packageCount":32,"repositoryCount":680},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[9461,9462],"CVE-2026-24486","PYSEC-2026-1852",[346,9462],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[9467],{"type":3081,"score":9468},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[9470,9472,9474,9476,9477,9479,9480],{"type":3088,"url":9471},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3091,"url":9473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3088,"url":9475},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3098,"url":4219},{"type":3088,"url":9478},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3098,"url":4221},{"type":3091,"url":9481},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4384,4385,4225],{"id":347,"slug":9484,"dossier":45,"summary":9485,"aliases":9486,"sourceIds":9489,"published":9490,"modified":9491,"checkedAt":7,"severity":9492,"references":9494,"versionKeys":9516,"packageCount":32,"repositoryCount":634},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[9487,9488],"CVE-2026-48818","PYSEC-2026-2281",[347,9488],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[9493],{"type":3081,"score":4627},[9495,9497,9498,9500,9502,9504,9506,9508,9510,9512,9514],{"type":3091,"url":9496},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3098,"url":4996},{"type":3088,"url":9499},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3088,"url":9501},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3091,"url":9503},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3091,"url":9505},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3091,"url":9507},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3091,"url":9509},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3163,"url":9511},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3126,"url":9513},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3126,"url":9515},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3213,3214,3215,5003,5004,5165,5166],{"id":348,"slug":9518,"dossier":45,"summary":9519,"aliases":9520,"sourceIds":9523,"published":9524,"modified":9525,"checkedAt":7,"severity":9526,"references":9528,"versionKeys":9540,"packageCount":32,"repositoryCount":32},"ghsa-wvwj-cvrp-7pv5-e187e76a","Authlib JWS JWK Header Injection: Signature Verification Bypass",[9521,9522],"CVE-2026-27962","PYSEC-2026-287",[348,9522],"2026-03-16T15:17:15Z","2026-07-13T16:15:15.641042659Z",[9527],{"type":3081,"score":9086},[9529,9531,9533,9535,9536,9537,9538],{"type":3088,"url":9530},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",{"type":3091,"url":9532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27962",{"type":3088,"url":9534},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fa5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",{"type":3098,"url":4862},{"type":3088,"url":4864},{"type":3098,"url":6352},{"type":3091,"url":9539},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",[4866],{"id":349,"slug":9542,"dossier":45,"summary":9543,"aliases":9544,"sourceIds":9547,"published":9548,"modified":9549,"checkedAt":7,"severity":9550,"references":9553,"versionKeys":9565,"packageCount":32,"repositoryCount":32},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[9545,9546],"CVE-2026-41314","PYSEC-2026-3026",[349,9546],"2026-04-16T21:30:25Z","2026-07-13T16:43:30.190503912Z",[9551,9552],{"type":3081,"score":3911},{"type":3084,"score":3913},[9554,9556,9558,9559,9560,9561,9562,9563],{"type":3088,"url":9555},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3091,"url":9557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3088,"url":5062},{"type":3088,"url":5064},{"type":3098,"url":3099},{"type":3088,"url":3925},{"type":3098,"url":3103},{"type":3091,"url":9564},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3107],{"id":350,"slug":9567,"dossier":45,"summary":9568,"aliases":9569,"sourceIds":9572,"published":9573,"modified":9574,"checkedAt":7,"severity":9575,"references":9577,"versionKeys":9584,"packageCount":32,"repositoryCount":634},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[9570,9571],"CVE-2026-48817","PYSEC-2026-2280",[350,9571],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[9576],{"type":3081,"score":3370},[9578,9580,9582,9583],{"type":3091,"url":9579},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3091,"url":9581},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3098,"url":4996},{"type":3091,"url":9509},[3213,3214,3215,5003,5004,5165,5166],{"id":351,"slug":9586,"dossier":45,"summary":9587,"aliases":9588,"sourceIds":9591,"published":9592,"modified":9593,"checkedAt":7,"severity":9594,"references":9596,"versionKeys":9611,"packageCount":32,"repositoryCount":32},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[9589,9590],"CVE-2026-27888","PYSEC-2026-3027",[351,9590],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[9595],{"type":3084,"score":3850},[9597,9599,9601,9603,9605,9606,9608,9609],{"type":3088,"url":9598},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3091,"url":9600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3088,"url":9602},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3088,"url":9604},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3098,"url":3099},{"type":3088,"url":9607},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3098,"url":3103},{"type":3091,"url":9610},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3107],{"id":352,"slug":9613,"dossier":45,"summary":9614,"aliases":9615,"sourceIds":9618,"published":9619,"modified":9620,"checkedAt":7,"severity":9621,"references":9624,"versionKeys":9630,"packageCount":32,"repositoryCount":614},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[9616,9617],"CVE-2026-54274","PYSEC-2026-2108",[352,9617],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[9622,9623],{"type":3084,"score":3850},{"type":3081,"score":3229},[9625,9627,9628],{"type":3091,"url":9626},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3098,"url":3234},{"type":3126,"url":9629},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3238,3239,3240,3241,3242,3243,3244,3245],{"id":353,"slug":9632,"dossier":45,"summary":9633,"aliases":9634,"sourceIds":9638,"published":9639,"modified":9640,"checkedAt":7,"severity":9641,"references":9644,"versionKeys":9658,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[9635,9636,9637],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[353,9637],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[9642],{"type":3081,"score":9643},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9645,9647,9649,9651,9653,9655,9656],{"type":3091,"url":9646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3091,"url":9648},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3088,"url":9650},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3126,"url":9652},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3088,"url":9654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3098,"url":3687},{"type":3088,"url":9657},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3694],{"id":354,"slug":9660,"dossier":45,"summary":9661,"aliases":9662,"sourceIds":9665,"published":9666,"modified":9667,"checkedAt":7,"severity":9668,"references":9671,"versionKeys":9679,"packageCount":32,"repositoryCount":410},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[9663,9664],"CVE-2026-48526","PYSEC-2026-179",[354,9664],"2026-05-28T16:16:29.657Z","2026-06-16T15:44:21.766942950Z",[9669],{"type":3081,"score":9670},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9672,9674,9676,9677],{"type":3290,"url":9673},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3091,"url":9675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3098,"url":4884},{"type":3088,"url":9678},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[4890,4891],{"id":355,"slug":9681,"dossier":45,"summary":9682,"aliases":9683,"sourceIds":9686,"published":9687,"modified":9688,"checkedAt":7,"severity":9689,"references":9691,"versionKeys":9700,"packageCount":32,"repositoryCount":103},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[9684,9685],"CVE-2026-12074","PYSEC-2026-3584",[355,9685],"2026-07-31T16:50:41Z","2026-08-06T15:11:52.598451868Z",[9690],{"type":3081,"score":4627},[9692,9694,9695,9696,9698],{"type":3088,"url":9693},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3098,"url":3747},{"type":3098,"url":4678},{"type":3091,"url":9697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3091,"url":9699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3761,3762],{"id":356,"slug":9702,"dossier":45,"summary":9703,"aliases":9704,"sourceIds":9708,"published":9709,"modified":9710,"checkedAt":7,"severity":9711,"references":9714,"versionKeys":9725,"packageCount":32,"repositoryCount":3439},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[9705,9706,9707],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[356,9707],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[9712],{"type":3081,"score":9713},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9715,9717,9719,9721,9723,9724],{"type":3290,"url":9716},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3091,"url":9718},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3126,"url":9720},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3126,"url":9722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3098,"url":3687},{"type":3091,"url":4483},[3691,3692,3693,3694,3695,3696,3697,3698],{"id":357,"slug":9727,"dossier":45,"summary":9728,"aliases":9729,"sourceIds":9732,"published":9733,"modified":9734,"checkedAt":7,"severity":9735,"references":9738,"versionKeys":9758,"packageCount":32,"repositoryCount":32},"ghsa-xm59-rqc7-hhvf-9413791b","nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows",[9730,9731],"CVE-2025-53000","PYSEC-2026-1691",[357,9731],"2025-12-18T22:03:08Z","2026-07-07T17:56:11.809154672Z",[9736],{"type":3084,"score":9737},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9739,9741,9743,9745,9747,9748,9750,9752,9754,9756],{"type":3088,"url":9740},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",{"type":3091,"url":9742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53000",{"type":3088,"url":9744},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fissues\u002F2258",{"type":3088,"url":9746},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fcommit\u002Fc9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71",{"type":3098,"url":3807},{"type":3088,"url":9749},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fblob\u002F4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7\u002Fnbconvert\u002Fpreprocessors\u002Fsvg2pdf.py#L104",{"type":3088,"url":9751},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.0",{"type":3088,"url":9753},"https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fcode-execution-in-jupyter-notebook-exports",{"type":3098,"url":9755},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnbconvert",{"type":3091,"url":9757},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",[3811],{"id":359,"slug":9760,"dossier":45,"summary":82,"aliases":9761,"sourceIds":9765,"published":9766,"modified":9767,"checkedAt":7,"severity":9768,"references":9770,"versionKeys":9774,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[9762,9763,9764],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[359],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[9769],{"type":3081,"score":8398},[9771,9772],{"type":3126,"url":8430},{"type":3290,"url":9773},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[3498],{"id":360,"slug":9776,"dossier":45,"summary":82,"aliases":9777,"sourceIds":9779,"published":9780,"modified":9781,"checkedAt":7,"severity":9782,"references":9785,"versionKeys":9791,"packageCount":32,"repositoryCount":410},"pysec-2025-183-08217171",[9778],"CVE-2025-45768",[360],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[9783],{"type":3081,"score":9784},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[9786,9788,9790],{"type":3088,"url":9787},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3163,"url":9789},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3098,"url":4884},[4890,4891],{"id":361,"slug":9793,"dossier":45,"summary":82,"aliases":9794,"sourceIds":9796,"published":9797,"modified":9798,"checkedAt":7,"severity":9799,"references":9802,"versionKeys":9805,"packageCount":32,"repositoryCount":103},"pysec-2026-2085-e081ac1d",[9795],"CVE-2026-12252",[361],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[9800],{"type":3081,"score":9801},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[9803],{"type":3290,"url":9804},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3761,3762],{"id":362,"slug":9807,"dossier":89,"summary":82,"aliases":9808,"sourceIds":9811,"published":9812,"modified":9813,"checkedAt":7,"severity":9814,"references":9817,"versionKeys":9830,"packageCount":32,"repositoryCount":7009},"pysec-2026-2132-627bf7c7",[9809,9810],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[362],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[9815],{"type":3081,"score":9816},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9818,9820,9822,9823,9824,9826,9828],{"type":3088,"url":9819},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":3088,"url":9821},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":3091,"url":7607},{"type":3091,"url":7609},{"type":3163,"url":9825},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":3126,"url":9827},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3290,"url":9829},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[9831,9832,9833,9834,9835,9836],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":363,"slug":9838,"dossier":45,"summary":82,"aliases":9839,"sourceIds":9842,"published":9843,"modified":9844,"checkedAt":7,"severity":9845,"references":9847,"versionKeys":9851,"packageCount":32,"repositoryCount":32},"pysec-2026-2208-4dad303d",[9840,9841],"CVE-2026-44898","GHSA-6269-cqxg-mhhv",[363],"2026-05-26T21:16:39.810Z","2026-07-13T07:15:28.986856174Z",[9846],{"type":3081,"score":4184},[9848,9849],{"type":3091,"url":5371},{"type":3290,"url":9850},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-6269-cqxg-mhhv",[3303],{"id":364,"slug":9853,"dossier":45,"summary":82,"aliases":9854,"sourceIds":9857,"published":9858,"modified":9859,"checkedAt":7,"severity":9860,"references":9862,"versionKeys":9866,"packageCount":32,"repositoryCount":32},"pysec-2026-2209-f89c37e9",[9855,9856],"CVE-2026-44899","GHSA-ccfx-mfmx-2fx9",[364],"2026-05-26T21:16:39.953Z","2026-07-13T07:15:29.089597285Z",[9861],{"type":3081,"score":4184},[9863,9864],{"type":3091,"url":5371},{"type":3290,"url":9865},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ccfx-mfmx-2fx9",[3303],{"id":365,"slug":9868,"dossier":45,"summary":9869,"aliases":9870,"sourceIds":9873,"published":9874,"modified":9875,"checkedAt":7,"severity":9876,"references":9879,"versionKeys":9888,"packageCount":32,"repositoryCount":32},"pysec-2026-2532-53eb0619","Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()",[9871,9872],"CVE-2026-5422","GHSA-gf7q-q4j7-hp7c",[365],"2026-07-13T15:46:13.935289Z","2026-07-13T16:31:58.966038327Z",[9877],{"type":3081,"score":9878},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9880,9882,9883,9885,9886],{"type":3091,"url":9881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5422",{"type":3098,"url":3176},{"type":3088,"url":9884},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F24a36953-6490-466f-8cb2-a90d1ca56e0f",{"type":3098,"url":6302},{"type":3091,"url":9887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gf7q-q4j7-hp7c",[3182],{"id":366,"slug":9890,"dossier":45,"summary":9891,"aliases":9892,"sourceIds":9895,"published":9896,"modified":9897,"checkedAt":7,"severity":9898,"references":9901,"versionKeys":9910,"packageCount":32,"repositoryCount":32},"pysec-2026-3472-ec05ba41","jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used",[9893,9894],"CVE-2026-6657","GHSA-v42x-x7jp-845h",[366],"2026-07-23T11:41:37.761563Z","2026-07-23T15:00:15.106608390Z",[9899],{"type":3081,"score":9900},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[9902,9904,9905,9907,9908],{"type":3091,"url":9903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6657",{"type":3098,"url":3176},{"type":3088,"url":9906},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F18f642db-3569-43b3-b58d-ff97be4b09d7",{"type":3098,"url":6302},{"type":3091,"url":9909},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v42x-x7jp-845h",[3182],{"id":367,"slug":9912,"dossier":45,"summary":82,"aliases":9913,"sourceIds":9915,"published":9916,"modified":9917,"checkedAt":7,"severity":9918,"references":9920,"versionKeys":9923,"packageCount":32,"repositoryCount":103},"pysec-2026-597-f85c09cd",[9914],"CVE-2026-12243",[367],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[9919],{"type":3081,"score":8163},[9921],{"type":3290,"url":9922},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[3761,3762],{"id":368,"slug":9925,"dossier":45,"summary":82,"aliases":9926,"sourceIds":9928,"published":9929,"modified":9930,"checkedAt":7,"severity":9931,"references":9933,"versionKeys":9936,"packageCount":32,"repositoryCount":103},"pysec-2026-99-2c63e84f",[9927],"CVE-2026-0848",[368],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[9932],{"type":3081,"score":5131},[9934],{"type":3290,"url":9935},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3761,3762],1786588638143]