[{"data":1,"prerenderedAt":15130},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-14327":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":77,"entity":78,"evidence":567,"related":570},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-15T06:22:58.222Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-15T06:19:38.732Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5086,5074,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":71,"topPackage":72},2871,51,9941,11,63,2832,39,1120,43,{"id":73,"slug":74,"label":75,"repositoryCount":33,"repositoryShare":76},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":39,"packageCount":101,"ecosystems":102,"aiPackageCount":42,"licenseExpressionCount":104,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":565,"providers":566},"opencode:14327","opencode-14327",14327,"URBAN.KI SmartEnergie","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie","a2e4efe7d678b6891f080c5fe87df3f7120d2c10","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie\u002F-\u002Fcommit\u002Fa2e4efe7d678b6891f080c5fe87df3f7120d2c10","2026-11-12T17:13:57.881Z","2026-11-12T17:13:40.000Z",{"complete":91,"entryCount":92,"truncated":47},true,121,[94],{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","b999006073eed3c4ff84d359c9b073b0b3899f18","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie\u002F-\u002Fblob\u002Fa2e4efe7d678b6891f080c5fe87df3f7120d2c10\u002Fuv.lock","5bc9c3742e46d283568bac153a2117227cbb749c54f13f479c74214dc47187f6",968814,"parsed",328,[103],"pypi",23,2,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564],"GHSA-22hg-r758-rrw9","GHSA-23w6-3w8w-8484","GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-27h8-gf7j-v5hc","GHSA-27vj-qcqg-25rc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g59-m95p-pgfq","GHSA-2g87-pp6c-29x5","GHSA-2gx3-rcp4-g85q","GHSA-2jhm-w3mp-jcwr","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3936-cmfr-pm3m","GHSA-394h-qwmc-48pf","GHSA-39mj-jf6j-2qj3","GHSA-3cr3-8m4c-fpxw","GHSA-3crg-w4f6-42mx","GHSA-3gq4-3j92-5w49","GHSA-3gqm-fcw5-w839","GHSA-3hhw-38pf-pxj6","GHSA-3hv7-mjh2-fv65","GHSA-3j72-p6qg-6xp7","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-42gh-23hr-vphw","GHSA-42vr-xj54-vc7v","GHSA-43mp-35q3-x3fq","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-494p-63j8-28p3","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4j63-6c4x-wfg4","GHSA-4jhm-jv67-739f","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4vqv-7265-gm2w","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-556j-vv39-8rqv","GHSA-558c-9hv2-4prj","GHSA-55h5-xmcq-c37v","GHSA-567q-5qvw-pf92","GHSA-568f-pv23-39p4","GHSA-5849-834g-hvw5","GHSA-58r4-6rv3-gfh8","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cjw-f85j-cv6r","GHSA-5gh2-94qg-qppq","GHSA-5h93-6whr-6q8j","GHSA-5hgr-hg42-57jg","GHSA-5hx5-vpf9-5wcv","GHSA-5jq2-8x83-x246","GHSA-5p39-cfhj-2xmp","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5vjq-rrrf-7h2q","GHSA-5w7q-77mv-v69f","GHSA-5wp5-5229-5g6q","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-62m5-6wh8-28x7","GHSA-62p4-gmf7-7g93","GHSA-63cw-57p8-fm3p","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-64vx-6h2c-rjh7","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-6655-6qjp-jx7x","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-69w3-r845-3855","GHSA-6c7f-9265-g8fw","GHSA-6cjc-53gc-5rqm","GHSA-6hm5-jgcp-p838","GHSA-6hwm-xvph-95vm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6vvc-x485-93v7","GHSA-6w3r-xr62-4xcp","GHSA-6w46-j5rx-g56g","GHSA-6ww7-3frv-cqxh","GHSA-72r2-7mfr-5xr9","GHSA-74r2-7ff9-mjj2","GHSA-752w-5fwx-jx9f","GHSA-763m-79hh-57f2","GHSA-78cv-mqj4-43f7","GHSA-78g4-xqwv-q3g8","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7g44-g9rc-x53w","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7mh2-4gg2-979f","GHSA-7mwm-ghpf-9vrm","GHSA-7p94-766c-hgjp","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-848c-c2cx-j7qx","GHSA-84m7-p3x7-pcfv","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-89p3-fcch-88ph","GHSA-8fx7-8jr8-84rv","GHSA-8g5g-8vmr-9782","GHSA-8mgp-746c-j5xp","GHSA-8mpw-7fpc-4gqj","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8rjx-v5ww-45pp","GHSA-8v84-f9pq-wr9x","GHSA-8wjv-2p76-3863","GHSA-9356-575x-2w9m","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-97qj-x29f-37w7","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9f4q-q82q-4359","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9jxx-vjrv-h2rq","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9mx8-4j7g-633p","GHSA-9r6g-266r-89x4","GHSA-9v7f-9g4p-ffgj","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-c2m8-h5v5-343r","GHSA-c39v-8hrw-h448","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c6hw-5grf-ff96","GHSA-c947-3pg5-gm8q","GHSA-c978-59m8-c77v","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cg8m-r9f2-5wm2","GHSA-cgc7-9qp3-86m3","GHSA-cgf9-327m-v77c","GHSA-cggf-277g-3q54","GHSA-cgwc-pv48-fhj5","GHSA-chx6-46f5-w4vp","GHSA-cj93-chg6-vgv8","GHSA-cjqg-rq2h-2fvj","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cr42-rg2m-mq4q","GHSA-cv22-g7mw-8v73","GHSA-cw65-gx24-rc82","GHSA-cw6x-m8jw-qmrh","GHSA-cwqr-hh33-gh44","GHSA-cx28-75q4-x26q","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2g6-542v-9j58","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f54x-cmq8-qg57","GHSA-f794-5jv7-7672","GHSA-f833-7jw8-xwrv","GHSA-f96h-pmfr-66vw","GHSA-f9xw-jh8m-3mwq","GHSA-fc2g-4w5p-6whm","GHSA-fc8x-2rww-xw9m","GHSA-fc9g-5qg7-mf45","GHSA-ff5c-cp5c-9wjf","GHSA-ffc3-869f-jxw9","GHSA-ffj6-66c4-86gw","GHSA-ffr9-mgrr-wcvr","GHSA-fg7f-2386-8897","GHSA-fg9w-wfp5-j933","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fj7x-q9j7-g6q6","GHSA-fp3f-mc75-235c","GHSA-fp3h-c4fm-7vvf","GHSA-fpwr-67px-3qhx","GHSA-fq56-3cx3-fjxp","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g4qv-2jxx-769h","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9cg-prrw-2r8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gjv8-xp57-g29c","GHSA-gm62-xv2j-4w53","GHSA-gmh7-3g9r-mjh5","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-gpwc-27cw-rh9r","GHSA-gvp8-978c-rx2q","GHSA-gx76-c99x-2c96","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hhxq-47xx-j5xx","GHSA-hmq2-7hp6-7crh","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hvfh-5mj3-5f3j","GHSA-hw26-mmpg-fqfg","GHSA-hxm8-2xgr-2p9m","GHSA-hxxf-235m-72v3","GHSA-j456-xh4h-cpf2","GHSA-j4m9-6w36-pw47","GHSA-j543-4vmf-qm7v","GHSA-j5xp-7m2f-49jv","GHSA-j8f7-rjxc-mr56","GHSA-j934-xhv5-fg8f","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jmmv-h3mp-59v8","GHSA-jp53-mhqp-8xcg","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jr96-gvgh-j3r4","GHSA-jw7q-gvrg-4vj3","GHSA-jwrc-g2q2-pq5p","GHSA-m2v9-299j-rv96","GHSA-m42h-3232-vpv3","GHSA-m449-cwjh-6pw7","GHSA-m4rf-3fr8-xwx3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m88r-rg27-5xfg","GHSA-m9gh-vj53-gvh9","GHSA-mf5v-w3w3-f6cg","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfr5-77xh-9j7h","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mmhr-3c5m-f64f","GHSA-mpf4-983q-p7j4","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mwh4-6h8g-pg8w","GHSA-p3m8-78j2-g5p3","GHSA-p4g4-x82p-q773","GHSA-p4gq-832x-fm9v","GHSA-p4rw-rvv2-7xwr","GHSA-p4wg-p73j-c528","GHSA-p58f-9548-mpm2","GHSA-p8hx-v2p6-rp84","GHSA-p944-4xh2-x776","GHSA-p998-jp59-783m","GHSA-pcg2-g6cj-q92c","GHSA-pchr-8j38-3x4p","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-php9-fj8v-98fj","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pw9p-v7r6-gx4p","GHSA-pwv6-vv43-88gr","GHSA-pxh4-856f-4h89","GHSA-q29v-xc37-wh5m","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q45j-58j2-45rg","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qfv9-64jg-mh7p","GHSA-qg35-44qx-7vrr","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qmx5-4p3x-wvqf","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qv6h-rv94-w285","GHSA-qvv7-cg9c-w4x3","GHSA-qx2g-xrx7-vfh8","GHSA-qxrp-vhvm-j765","GHSA-r3xg-rg9j-67fv","GHSA-r4j5-9xpp-3985","GHSA-r53h-rw34-8h97","GHSA-r6gq-whwq-mvg9","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rfgq-q3w2-pmv2","GHSA-rfpc-qcw5-3pc4","GHSA-rgxp-2hwp-jwgg","GHSA-rhp5-r9x4-f5g2","GHSA-rrmf-rvhw-rf47","GHSA-rrv8-h7p8-rx55","GHSA-rwrf-2pqf-9j8j","GHSA-v247-6f48-mgcj","GHSA-v492-6xx2-p57g","GHSA-v4x8-3wr5-3wq8","GHSA-v8f3-6phw-6mh9","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vp2x-qp44-57v7","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vx6w-vv9f-6gvg","GHSA-vxj4-q4g9-crj7","GHSA-vxq7-64xx-v4gw","GHSA-w23x-9jrw-r45c","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w3fx-mc44-mf6j","GHSA-w3v8-gmh9-3wv7","GHSA-w4fh-qvv9-3v23","GHSA-w6j9-cwv2-h6wq","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqgw-9xfh-qf2g","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-ww6m-cw3f-q94g","GHSA-wwv5-g3v4-889x","GHSA-x284-j5p8-9c5p","GHSA-x33g-cr3x-6449","GHSA-x3gm-94wq-g975","GHSA-x3rh-gjgm-fmqc","GHSA-x5ph-mj9p-rfr8","GHSA-x746-7m8f-x49c","GHSA-x78j-v8h9-3j2q","GHSA-x7hp-r3qg-r3cj","GHSA-x8wg-4xgc-vr54","GHSA-x99w-6fgc-pmfw","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xcvg-w56q-r89m","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xmj3-9gf7-h52w","GHSA-xrqw-3rrv-vx5w","GHSA-xvh5-g6gv-559v","GHSA-xvp8-3mhv-424c","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2120","PYSEC-2026-598","PYSEC-2026-99",458,[],{"files":568,"occurrenceCount":101},[569],{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":571,"vulnerabilities":3471},[572,586,596,606,619,631,640,649,658,668,677,686,695,705,716,726,737,747,757,766,776,786,795,805,814,823,833,842,852,862,871,880,890,899,908,918,927,936,945,954,963,972,981,990,999,1008,1017,1026,1035,1045,1054,1063,1072,1081,1091,1100,1110,1119,1128,1137,1146,1156,1165,1174,1183,1192,1201,1210,1219,1228,1238,1247,1256,1265,1274,1283,1292,1301,1310,1319,1328,1337,1346,1355,1364,1373,1382,1391,1400,1408,1417,1426,1435,1444,1452,1460,1469,1478,1487,1496,1505,1514,1523,1532,1541,1552,1562,1571,1579,1589,1598,1607,1615,1624,1633,1642,1651,1660,1669,1678,1687,1696,1705,1714,1723,1732,1741,1750,1759,1768,1777,1785,1793,1802,1811,1819,1828,1837,1846,1854,1863,1871,1880,1889,1898,1906,1914,1922,1930,1938,1946,1955,1964,1972,1981,1990,1999,2007,2016,2024,2033,2042,2051,2060,2070,2079,2088,2097,2105,2114,2123,2132,2141,2150,2159,2167,2176,2184,2193,2201,2210,2218,2227,2235,2243,2251,2259,2268,2277,2285,2293,2301,2309,2317,2325,2333,2341,2349,2357,2365,2373,2381,2389,2397,2405,2413,2421,2429,2437,2445,2453,2461,2469,2477,2485,2493,2501,2509,2517,2525,2533,2541,2549,2557,2565,2573,2582,2590,2600,2609,2617,2627,2636,2645,2654,2663,2671,2680,2688,2697,2706,2715,2724,2732,2741,2749,2757,2766,2775,2784,2793,2802,2811,2819,2828,2837,2846,2854,2862,2870,2878,2887,2896,2904,2913,2921,2930,2939,2948,2957,2966,2975,2984,2993,3002,3012,3020,3029,3038,3047,3056,3065,3074,3083,3092,3100,3109,3118,3126,3135,3144,3153,3162,3171,3180,3189,3198,3207,3215,3224,3233,3242,3251,3259,3268,3277,3285,3294,3302,3310,3319,3328,3337,3345,3351,3359,3367,3375,3384,3393,3401,3410,3418,3427,3436,3444,3453,3462],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":91,"provider":577,"advisoryCount":580,"licenseExpressions":581,"versions":583,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":585},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":578,"label":579},"hugging-face","Hugging Face",27,[582],"Apache-2.0",[584],"4.57.1",[56],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":91,"provider":84,"advisoryCount":104,"licenseExpressions":591,"versions":593,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":595},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[592],"BSD-3-Clause",[594],"2.9.0",[56],{"id":597,"slug":598,"identity":599,"label":600,"aiRelevant":91,"provider":84,"advisoryCount":32,"licenseExpressions":601,"versions":603,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":605},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[582,602],"non-standard",[604],"1.11.0",[56],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":91,"provider":611,"advisoryCount":39,"licenseExpressions":614,"versions":616,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":618},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":612,"label":613},"anthropic","Anthropic",[615],"MIT",[617],"0.72.0",[56],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":91,"provider":624,"advisoryCount":39,"licenseExpressions":627,"versions":628,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":630},"package:pypi:openai","openai-0dd26ac5","pypi:openai","OpenAI SDK",{"id":625,"label":626},"openai","OpenAI",[582],[629],"1.109.1",[56],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":636,"versions":637,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":639},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[602],[638],"0.22.1",[56],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":645,"versions":646,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":648},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[615],[647],"0.14.6",[56],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":654,"versions":655,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":657},"package:pypi:llama-index-llms-openai","llama-index-llms-openai-9155387e","pypi:llama-index-llms-openai","LlamaIndex · Llms OpenAI",[615],[656],"0.6.6",[56],{"id":659,"slug":660,"identity":661,"label":662,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":663,"versions":665,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":667},"package:pypi:llama-index-readers-web","llama-index-readers-web-ef09483c","pypi:llama-index-readers-web","LlamaIndex · Readers Web",[664],"GPL-3.0-or-later",[666],"0.5.5",[56],{"id":669,"slug":670,"identity":671,"label":672,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":673,"versions":674,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":676},"package:pypi:llama-index-vector-stores-lancedb","llama-index-vector-stores-lancedb-d8d9098c","pypi:llama-index-vector-stores-lancedb","LlamaIndex · Vector Stores Lancedb",[615],[675],"0.4.1",[56],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":682,"versions":683,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":685},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[582],[684],"4.11.0.86",[56],{"id":687,"slug":688,"identity":689,"label":690,"aiRelevant":91,"provider":84,"advisoryCount":39,"licenseExpressions":691,"versions":692,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":694},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[615],[693],"0.12.0",[56],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":47,"provider":84,"advisoryCount":700,"licenseExpressions":701,"versions":702,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":704},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",67,[592,602],[703],"6.1.3",[56],{"id":706,"slug":707,"identity":708,"label":709,"aiRelevant":47,"provider":84,"advisoryCount":67,"licenseExpressions":710,"versions":713,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":715},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",[711,712],"HPND","MIT-CMU",[714],"11.3.0",[56],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":47,"provider":84,"advisoryCount":721,"licenseExpressions":722,"versions":723,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":725},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",56,[582],[724],"3.9.2",[56],{"id":727,"slug":728,"identity":729,"label":730,"aiRelevant":47,"provider":84,"advisoryCount":731,"licenseExpressions":732,"versions":734,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":736},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[582,733],"Apache-2.0 AND MIT",[735],"3.13.2",[56],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":47,"provider":84,"advisoryCount":742,"licenseExpressions":743,"versions":744,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":746},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",22,[615],[745],"2.10.1",[56],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":47,"provider":84,"advisoryCount":752,"licenseExpressions":753,"versions":754,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":756},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",20,[582],[755],"6.5.2",[56],{"id":758,"slug":759,"identity":760,"label":761,"aiRelevant":47,"provider":84,"advisoryCount":752,"licenseExpressions":762,"versions":763,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":765},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[615],[764],"20.35.4",[56],{"id":767,"slug":768,"identity":769,"label":770,"aiRelevant":47,"provider":84,"advisoryCount":66,"licenseExpressions":771,"versions":773,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":775},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[615,772],"Unlicense",[774],"3.20.0",[56],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":47,"provider":84,"advisoryCount":781,"licenseExpressions":782,"versions":783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":785},"package:pypi:docling","docling-61c4e452","pypi:docling","docling",10,[615],[784],"2.58.0",[56],{"id":787,"slug":788,"identity":789,"label":790,"aiRelevant":47,"provider":84,"advisoryCount":781,"licenseExpressions":791,"versions":792,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":794},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[615],[793],"2.5.0",[56],{"id":796,"slug":797,"identity":798,"label":799,"aiRelevant":47,"provider":84,"advisoryCount":800,"licenseExpressions":801,"versions":802,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":804},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[582],[803],"0.0.20",[56],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":47,"provider":84,"advisoryCount":800,"licenseExpressions":810,"versions":811,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":813},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[615],[812],"2.8",[56],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":47,"provider":84,"advisoryCount":800,"licenseExpressions":819,"versions":820,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":822},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[592],[821],"0.48.0",[56],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":47,"provider":84,"advisoryCount":828,"licenseExpressions":829,"versions":830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":832},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",7,[615],[831],"1.19.0",[56],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":47,"provider":84,"advisoryCount":34,"licenseExpressions":838,"versions":839,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":841},"package:pypi:chainlit","chainlit-b11abd2e","pypi:chainlit","chainlit",[582],[840],"2.8.3",[56],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":47,"provider":84,"advisoryCount":847,"licenseExpressions":848,"versions":849,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":851},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",5,[615],[850],"2.2.0",[56],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":47,"provider":84,"advisoryCount":857,"licenseExpressions":858,"versions":859,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":861},"package:pypi:black","black-af583dd9","pypi:black","black",4,[615],[860],"25.9.0",[56],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":47,"provider":84,"advisoryCount":857,"licenseExpressions":867,"versions":868,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":870},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[592,602],[869],"3.1.6",[56],{"id":872,"slug":873,"identity":874,"label":875,"aiRelevant":47,"provider":84,"advisoryCount":857,"licenseExpressions":876,"versions":877,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":879},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[615],[878],"80.9.0",[56],{"id":881,"slug":882,"identity":883,"label":884,"aiRelevant":47,"provider":84,"advisoryCount":885,"licenseExpressions":886,"versions":887,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":889},"package:pypi:lxml-html-clean","lxml-html-clean-a658348a","pypi:lxml-html-clean","lxml-html-clean",3,[592],[888],"0.4.3",[56],{"id":891,"slug":892,"identity":893,"label":894,"aiRelevant":47,"provider":84,"advisoryCount":885,"licenseExpressions":895,"versions":896,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":898},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[582],[897],"2.32.5",[56],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":904,"versions":905,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":907},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[615],[906],"4.11.0",[56],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":913,"versions":915,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":917},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[914],"MPL-2.0",[916],"2025.10.5",[56],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":923,"versions":924,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":926},"package:pypi:docling-core","docling-core-f56a60f5","pypi:docling-core","docling-core",[615],[925],"2.49.0",[56],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":932,"versions":933,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":935},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[582],[934],"1.38.0",[56],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":941,"versions":942,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":944},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[592],[943],"6.33.0",[56],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":47,"provider":84,"advisoryCount":105,"licenseExpressions":950,"versions":951,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":953},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[615],[952],"4.12.3",[56],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":959,"versions":960,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":962},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[592],[961],"2025.9.0",[56],{"id":964,"slug":965,"identity":966,"label":967,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":968,"versions":969,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":971},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[615],[970],"0.16.0",[56],{"id":973,"slug":974,"identity":975,"label":976,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":977,"versions":978,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":980},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[592,602],[979],"3.11",[56],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":986,"versions":987,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":989},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[592],[988],"5.9.1",[56],{"id":991,"slug":992,"identity":993,"label":994,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":995,"versions":996,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":998},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[592],[997],"5.4.0",[56],{"id":1000,"slug":1001,"identity":1002,"label":1003,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1004,"versions":1005,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1007},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[615],[1006],"3.26.1",[56],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1013,"versions":1014,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1016},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[582],[1015],"6.7.0",[56],{"id":1018,"slug":1019,"identity":1020,"label":1021,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1022,"versions":1023,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1025},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[582,602],[1024],"22.0.0",[56],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1031,"versions":1032,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1034},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[615],[1033],"2.11.0",[56],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1040,"versions":1042,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1044},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[1041],"BSD-2-Clause",[1043],"2.19.2",[56],{"id":1046,"slug":1047,"identity":1048,"label":1049,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1050,"versions":1051,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1053},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[602],[1052],"3.0.1",[56],{"id":1055,"slug":1056,"identity":1057,"label":1058,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1059,"versions":1060,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1062},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[615],[1061],"8.4.2",[56],{"id":1064,"slug":1065,"identity":1066,"label":1067,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1068,"versions":1069,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1071},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[592],[1070],"1.2.1",[56],{"id":1073,"slug":1074,"identity":1075,"label":1076,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1077,"versions":1078,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1080},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[615],[1079],"5.14.3",[56],{"id":1082,"slug":1083,"identity":1084,"label":1085,"aiRelevant":47,"provider":84,"advisoryCount":32,"licenseExpressions":1086,"versions":1088,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1090},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[1087],"MIT AND MPL-2.0",[1089],"4.67.1",[56],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1096,"versions":1097,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1099},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[582],[1098],"24.1.0",[56],{"id":1101,"slug":1102,"identity":1103,"label":1104,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1105,"versions":1107,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1109},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[1106],"PSF-2.0",[1108],"2.6.1",[56],{"id":1111,"slug":1112,"identity":1113,"label":1114,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1115,"versions":1116,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1118},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[582],[1117],"1.4.0",[56],{"id":1120,"slug":1121,"identity":1122,"label":1123,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1124,"versions":1125,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1127},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[615],[1126],"0.21.0",[56],{"id":1129,"slug":1130,"identity":1131,"label":1132,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1133,"versions":1134,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1136},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[615],[1135],"0.7.0",[56],{"id":1138,"slug":1139,"identity":1140,"label":1141,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1142,"versions":1143,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1145},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[602],[1144],"4.9.3",[56],{"id":1147,"slug":1148,"identity":1149,"label":1150,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1151,"versions":1153,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1155},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[1152],"BSD-1-Clause",[1154],"0.1.4",[56],{"id":1157,"slug":1158,"identity":1159,"label":1160,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1161,"versions":1162,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1164},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[615],[1163],"3.11.0",[56],{"id":1166,"slug":1167,"identity":1168,"label":1169,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1170,"versions":1171,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1173},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[582],[1172],"3.0.0",[56],{"id":1175,"slug":1176,"identity":1177,"label":1178,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1179,"versions":1180,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1182},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[615],[1181],"0.0.10",[56],{"id":1184,"slug":1185,"identity":1186,"label":1187,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1188,"versions":1189,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1191},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[615],[1190],"25.4.0",[56],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1197,"versions":1198,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1200},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[1106],[1199],"0.2.2",[56],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1206,"versions":1207,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1209},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[615],[1208],"2.2.1",[56],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1215,"versions":1216,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1218},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[615],[1217],"4.14.2",[56],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1224,"versions":1225,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1227},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[914],[1226],"0.23.1",[56],{"id":1229,"slug":1230,"identity":1231,"label":1232,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1233,"versions":1235,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1237},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[615,1234],"MIT-0",[1236],"2.0.0",[56],{"id":1239,"slug":1240,"identity":1241,"label":1242,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1243,"versions":1244,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1246},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[615],[1245],"3.4.0",[56],{"id":1248,"slug":1249,"identity":1250,"label":1251,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1252,"versions":1253,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1255},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[615],[1254],"3.4.4",[56],{"id":1257,"slug":1258,"identity":1259,"label":1260,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1261,"versions":1262,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1264},"package:pypi:chevron","chevron-e2cf8dfd","pypi:chevron","chevron",[615],[1263],"0.14.0",[56],{"id":1266,"slug":1267,"identity":1268,"label":1269,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1270,"versions":1271,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1273},"package:pypi:chromedriver-autoinstaller","chromedriver-autoinstaller-c57f66e8","pypi:chromedriver-autoinstaller","chromedriver-autoinstaller",[615],[1272],"0.6.4",[56],{"id":1275,"slug":1276,"identity":1277,"label":1278,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1279,"versions":1280,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1282},"package:pypi:click","click-ef97f731","pypi:click","click",[592,602],[1281],"8.3.0",[56],{"id":1284,"slug":1285,"identity":1286,"label":1287,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1288,"versions":1289,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1291},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[602],[1290],"0.4.6",[56],{"id":1293,"slug":1294,"identity":1295,"label":1296,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1297,"versions":1298,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1300},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[615],[1299],"6.10.1",[56],{"id":1302,"slug":1303,"identity":1304,"label":1305,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1306,"versions":1307,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1309},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[592],[1308],"0.2.3",[56],{"id":1311,"slug":1312,"identity":1313,"label":1314,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1315,"versions":1316,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1318},"package:pypi:cssselect","cssselect-2437b3c5","pypi:cssselect","cssselect",[592],[1317],"1.3.0",[56],{"id":1320,"slug":1321,"identity":1322,"label":1323,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1324,"versions":1325,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1327},"package:pypi:cuid","cuid-297d1f96","pypi:cuid","cuid",[602],[1326],"0.4",[56],{"id":1329,"slug":1330,"identity":1331,"label":1332,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1333,"versions":1334,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1336},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[615],[1335],"0.6.7",[56],{"id":1338,"slug":1339,"identity":1340,"label":1341,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1342,"versions":1343,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1345},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[615],[1344],"1.8.17",[56],{"id":1347,"slug":1348,"identity":1349,"label":1350,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1351,"versions":1352,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1354},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[1041,602],[1353],"5.2.1",[56],{"id":1356,"slug":1357,"identity":1358,"label":1359,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1360,"versions":1361,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1363},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[602],[1362],"0.7.1",[56],{"id":1365,"slug":1366,"identity":1367,"label":1368,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1369,"versions":1370,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1372},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[615],[1371],"1.2.18",[56],{"id":1374,"slug":1375,"identity":1376,"label":1377,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1378,"versions":1379,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1381},"package:pypi:deprecation","deprecation-c367808e","pypi:deprecation","deprecation",[582],[1380],"2.1.0",[56],{"id":1383,"slug":1384,"identity":1385,"label":1386,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1387,"versions":1388,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1390},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[592],[1389],"0.4.0",[56],{"id":1392,"slug":1393,"identity":1394,"label":1395,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1396,"versions":1397,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1399},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[615],[1398],"1.0.8",[56],{"id":1401,"slug":1402,"identity":1403,"label":1404,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1405,"versions":1406,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1407},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[1106],[1389],[56],{"id":1409,"slug":1410,"identity":1411,"label":1412,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1413,"versions":1414,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1416},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[582],[1415],"1.9.0",[56],{"id":1418,"slug":1419,"identity":1420,"label":1421,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1422,"versions":1423,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1425},"package:pypi:docling-ibm-models","docling-ibm-models-4f15d6af","pypi:docling-ibm-models","docling-ibm-models",[615],[1424],"3.10.2",[56],{"id":1427,"slug":1428,"identity":1429,"label":1430,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1431,"versions":1432,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1434},"package:pypi:docling-parse","docling-parse-b9af4bcb","pypi:docling-parse","docling-parse",[615],[1433],"4.7.0",[56],{"id":1436,"slug":1437,"identity":1438,"label":1439,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1440,"versions":1441,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1443},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[615],[1442],"0.17.0",[56],{"id":1445,"slug":1446,"identity":1447,"label":1448,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1449,"versions":1450,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1451},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[615],[1236],[56],{"id":1453,"slug":1454,"identity":1455,"label":1456,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1457,"versions":1458,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1459},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[615],[1208],[56],{"id":1461,"slug":1462,"identity":1463,"label":1464,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1465,"versions":1466,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1468},"package:pypi:faker","faker-af8bb74a","pypi:faker","faker",[615],[1467],"37.12.0",[56],{"id":1470,"slug":1471,"identity":1472,"label":1473,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1474,"versions":1475,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1477},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[615],[1476],"0.116.2",[56],{"id":1479,"slug":1480,"identity":1481,"label":1482,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1483,"versions":1484,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1486},"package:pypi:feedfinder2","feedfinder2-a2efca90","pypi:feedfinder2","feedfinder2",[615],[1485],"0.0.4",[56],{"id":1488,"slug":1489,"identity":1490,"label":1491,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1492,"versions":1493,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1495},"package:pypi:feedparser","feedparser-7de97965","pypi:feedparser","feedparser",[1041],[1494],"6.0.12",[56],{"id":1497,"slug":1498,"identity":1499,"label":1500,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1501,"versions":1502,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1504},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[615],[1503],"1.2.0",[56],{"id":1506,"slug":1507,"identity":1508,"label":1509,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1510,"versions":1511,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1513},"package:pypi:firecrawl-py","firecrawl-py-2dd84658","pypi:firecrawl-py","firecrawl-py",[615],[1512],"4.5.0",[56],{"id":1515,"slug":1516,"identity":1517,"label":1518,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1519,"versions":1520,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1522},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[615],[1521],"7.3.0",[56],{"id":1524,"slug":1525,"identity":1526,"label":1527,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1528,"versions":1529,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1531},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[582],[1530],"1.8.0",[56],{"id":1533,"slug":1534,"identity":1535,"label":1536,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1537,"versions":1538,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1540},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[582],[1539],"1.71.0",[56],{"id":1542,"slug":1543,"identity":1544,"label":1545,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1546,"versions":1549,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1551},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[615,1547,1548],"MIT AND PSF-2.0","MIT AND Python-2.0",[1550],"3.2.4",[56],{"id":1553,"slug":1554,"identity":1555,"label":1556,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1557,"versions":1559,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1561},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[1558],"ISC",[1560],"1.14.0",[56],{"id":1563,"slug":1564,"identity":1565,"label":1566,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1567,"versions":1568,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1570},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[582],[1569],"1.76.0",[56],{"id":1572,"slug":1573,"identity":1574,"label":1575,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1576,"versions":1577,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1578},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[582],[1503],[56],{"id":1580,"slug":1581,"identity":1582,"label":1583,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1584,"versions":1586,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1588},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1585],"GPL-3.0",[1587],"2024.2.26",[56],{"id":1590,"slug":1591,"identity":1592,"label":1593,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1594,"versions":1595,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1597},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[592],[1596],"1.0.9",[56],{"id":1599,"slug":1600,"identity":1601,"label":1602,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1603,"versions":1604,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1606},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[592],[1605],"0.28.1",[56],{"id":1608,"slug":1609,"identity":1610,"label":1611,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1612,"versions":1613,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1614},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[615],[888],[56],{"id":1616,"slug":1617,"identity":1618,"label":1619,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1620,"versions":1621,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1623},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[582],[1622],"0.36.0",[56],{"id":1625,"slug":1626,"identity":1627,"label":1628,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1629,"versions":1630,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1632},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[615],[1631],"2.6.15",[56],{"id":1634,"slug":1635,"identity":1636,"label":1637,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1638,"versions":1639,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1641},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[582,602],[1640],"8.7.0",[56],{"id":1643,"slug":1644,"identity":1645,"label":1646,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1647,"versions":1648,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1650},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[615],[1649],"0.5.1",[56],{"id":1652,"slug":1653,"identity":1654,"label":1655,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1656,"versions":1657,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1659},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[615],[1658],"2.3.0",[56],{"id":1661,"slug":1662,"identity":1663,"label":1664,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1665,"versions":1666,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1668},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[592],[1667],"7.1.0",[56],{"id":1670,"slug":1671,"identity":1672,"label":1673,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1674,"versions":1675,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1677},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[592],[1676],"9.6.0",[56],{"id":1679,"slug":1680,"identity":1681,"label":1682,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1683,"versions":1684,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1686},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[602],[1685],"1.1.1",[56],{"id":1688,"slug":1689,"identity":1690,"label":1691,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1692,"versions":1693,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1695},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[615],[1694],"7.0.0",[56],{"id":1697,"slug":1698,"identity":1699,"label":1700,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1701,"versions":1702,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1704},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[615],[1703],"0.19.2",[56],{"id":1706,"slug":1707,"identity":1708,"label":1709,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1710,"versions":1711,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1713},"package:pypi:jieba3k","jieba3k-2ef848d4","pypi:jieba3k","jieba3k",[],[1712],"0.35.1",[56],{"id":1715,"slug":1716,"identity":1717,"label":1718,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1719,"versions":1720,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1722},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[615],[1721],"0.11.1",[56],{"id":1724,"slug":1725,"identity":1726,"label":1727,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1728,"versions":1729,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1731},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[592],[1730],"1.5.2",[56],{"id":1733,"slug":1734,"identity":1735,"label":1736,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1737,"versions":1738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1740},"package:pypi:jsonlines","jsonlines-779d1204","pypi:jsonlines","jsonlines",[592],[1739],"4.0.0",[56],{"id":1742,"slug":1743,"identity":1744,"label":1745,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1746,"versions":1747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1749},"package:pypi:jsonref","jsonref-181eaf53","pypi:jsonref","jsonref",[615],[1748],"1.1.0",[56],{"id":1751,"slug":1752,"identity":1753,"label":1754,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1755,"versions":1756,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1758},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[615],[1757],"4.25.1",[56],{"id":1760,"slug":1761,"identity":1762,"label":1763,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1764,"versions":1765,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1767},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[615],[1766],"2025.9.1",[56],{"id":1769,"slug":1770,"identity":1771,"label":1772,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1773,"versions":1774,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1776},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[592],[1775],"8.6.3",[56],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1782,"versions":1783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1784},"package:pypi:lance-namespace","lance-namespace-70425b3b","pypi:lance-namespace","lance-namespace",[582],[803],[56],{"id":1786,"slug":1787,"identity":1788,"label":1789,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1790,"versions":1791,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1792},"package:pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client-1a0b30f8","pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client",[582],[803],[56],{"id":1794,"slug":1795,"identity":1796,"label":1797,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1798,"versions":1799,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1801},"package:pypi:lancedb","lancedb-b5c306b5","pypi:lancedb","lancedb",[602],[1800],"0.25.2",[56],{"id":1803,"slug":1804,"identity":1805,"label":1806,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1807,"versions":1808,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1810},"package:pypi:latex2mathml","latex2mathml-4b5e6391","pypi:latex2mathml","latex2mathml",[615],[1809],"3.78.1",[56],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1816,"versions":1817,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1818},"package:pypi:lazify","lazify-bfb0197d","pypi:lazify","lazify",[602],[1389],[56],{"id":1820,"slug":1821,"identity":1822,"label":1823,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1824,"versions":1825,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1827},"package:pypi:literalai","literalai-7854f46d","pypi:literalai","literalai",[582],[1826],"0.1.201",[56],{"id":1829,"slug":1830,"identity":1831,"label":1832,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1833,"versions":1834,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1836},"package:pypi:llama-cloud","llama-cloud-b191f0f9","pypi:llama-cloud","llama-cloud",[615],[1835],"0.1.35",[56],{"id":1838,"slug":1839,"identity":1840,"label":1841,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1842,"versions":1843,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1845},"package:pypi:llama-cloud-services","llama-cloud-services-bef88366","pypi:llama-cloud-services","llama-cloud-services",[615],[1844],"0.6.54",[56],{"id":1847,"slug":1848,"identity":1849,"label":1850,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1851,"versions":1852,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1853},"package:pypi:llama-index","llama-index-0f867dab","pypi:llama-index","llama-index",[615],[647],[56],{"id":1855,"slug":1856,"identity":1857,"label":1858,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1859,"versions":1860,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1862},"package:pypi:llama-index-cli","llama-index-cli-03ecd5c5","pypi:llama-index-cli","llama-index-cli",[615],[1861],"0.5.3",[56],{"id":1864,"slug":1865,"identity":1866,"label":1867,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1868,"versions":1869,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1870},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[615],[1649],[56],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1876,"versions":1877,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1879},"package:pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud-ddf42c36","pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud",[615],[1878],"0.9.4",[56],{"id":1881,"slug":1882,"identity":1883,"label":1884,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1885,"versions":1886,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1888},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[615],[1887],"0.4.2",[56],{"id":1890,"slug":1891,"identity":1892,"label":1893,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1894,"versions":1895,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1897},"package:pypi:llama-index-readers-file","llama-index-readers-file-c8a58a84","pypi:llama-index-readers-file","llama-index-readers-file",[615],[1896],"0.5.4",[56],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1903,"versions":1904,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1905},"package:pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse-58739d42","pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse",[615],[1649],[56],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1911,"versions":1912,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1913},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[615],[594],[56],{"id":1915,"slug":1916,"identity":1917,"label":1918,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1919,"versions":1920,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1921},"package:pypi:llama-parse","llama-parse-f89f5dbf","pypi:llama-parse","llama-parse",[615],[1844],[56],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1927,"versions":1928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1929},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[615],[1739],[56],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1935,"versions":1936,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1937},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[615],[1503],[56],{"id":1939,"slug":1940,"identity":1941,"label":1942,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1943,"versions":1944,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1945},"package:pypi:marko","marko-cf8df36c","pypi:marko","marko",[615],[1208],[56],{"id":1947,"slug":1948,"identity":1949,"label":1950,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1951,"versions":1952,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1954},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[592],[1953],"3.0.3",[56],{"id":1956,"slug":1957,"identity":1958,"label":1959,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1960,"versions":1961,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1963},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[592],[1962],"0.2.1",[56],{"id":1965,"slug":1966,"identity":1967,"label":1968,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1969,"versions":1970,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1971},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[615],[1135],[56],{"id":1973,"slug":1974,"identity":1975,"label":1976,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1977,"versions":1978,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1980},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[615],[1979],"0.1.2",[56],{"id":1982,"slug":1983,"identity":1984,"label":1985,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1986,"versions":1987,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1989},"package:pypi:monotonic","monotonic-c3c6b23a","pypi:monotonic","monotonic",[602],[1988],"1.6",[56],{"id":1991,"slug":1992,"identity":1993,"label":1994,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":1995,"versions":1996,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1998},"package:pypi:mpire","mpire-1706081d","pypi:mpire","mpire",[615],[1997],"2.10.2",[56],{"id":2000,"slug":2001,"identity":2002,"label":2003,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2004,"versions":2005,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2006},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[592],[1317],[56],{"id":2008,"slug":2009,"identity":2010,"label":2011,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2012,"versions":2013,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2015},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[592],[2014],"0.70.18",[56],{"id":2017,"slug":2018,"identity":2019,"label":2020,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2021,"versions":2022,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2023},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[615],[1748],[56],{"id":2025,"slug":2026,"identity":2027,"label":2028,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2029,"versions":2030,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2032},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[1041],[2031],"1.6.0",[56],{"id":2034,"slug":2035,"identity":2036,"label":2037,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2038,"versions":2039,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2041},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[592,602],[2040],"3.5",[56],{"id":2043,"slug":2044,"identity":2045,"label":2046,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2047,"versions":2048,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2050},"package:pypi:newspaper3k","newspaper3k-139e17f3","pypi:newspaper3k","newspaper3k",[615],[2049],"0.2.8",[56],{"id":2052,"slug":2053,"identity":2054,"label":2055,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2056,"versions":2057,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2059},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[592,602],[2058],"1.9.1",[56],{"id":2061,"slug":2062,"identity":2063,"label":2064,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2065,"versions":2067,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2069},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[2066,602],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[2068],"2.3.4",[56],{"id":2071,"slug":2072,"identity":2073,"label":2074,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2075,"versions":2076,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2078},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[602],[2077],"12.8.4.1",[56],{"id":2080,"slug":2081,"identity":2082,"label":2083,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2084,"versions":2085,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2087},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[602],[2086],"12.8.90",[56],{"id":2089,"slug":2090,"identity":2091,"label":2092,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2093,"versions":2094,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2096},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[602],[2095],"12.8.93",[56],{"id":2098,"slug":2099,"identity":2100,"label":2101,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2102,"versions":2103,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2104},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[602],[2086],[56],{"id":2106,"slug":2107,"identity":2108,"label":2109,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2110,"versions":2111,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2113},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[602],[2112],"9.10.2.21",[56],{"id":2115,"slug":2116,"identity":2117,"label":2118,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2119,"versions":2120,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2122},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[602],[2121],"11.3.3.83",[56],{"id":2124,"slug":2125,"identity":2126,"label":2127,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2128,"versions":2129,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2131},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[602],[2130],"1.13.1.3",[56],{"id":2133,"slug":2134,"identity":2135,"label":2136,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2137,"versions":2138,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2140},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[602],[2139],"10.3.9.90",[56],{"id":2142,"slug":2143,"identity":2144,"label":2145,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2146,"versions":2147,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2149},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[602],[2148],"11.7.3.90",[56],{"id":2151,"slug":2152,"identity":2153,"label":2154,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2155,"versions":2156,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2158},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[602],[2157],"12.5.8.93",[56],{"id":2160,"slug":2161,"identity":2162,"label":2163,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2164,"versions":2165,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2166},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[602],[1362],[56],{"id":2168,"slug":2169,"identity":2170,"label":2171,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2172,"versions":2173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2175},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[592],[2174],"2.27.5",[56],{"id":2177,"slug":2178,"identity":2179,"label":2180,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2181,"versions":2182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2183},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[602],[2095],[56],{"id":2185,"slug":2186,"identity":2187,"label":2188,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2189,"versions":2190,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2192},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[592,602],[2191],"3.3.20",[56],{"id":2194,"slug":2195,"identity":2196,"label":2197,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2198,"versions":2199,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2200},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[582,602],[2086],[56],{"id":2202,"slug":2203,"identity":2204,"label":2205,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2206,"versions":2207,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2209},"package:pypi:ocrmac","ocrmac-7acc3c55","pypi:ocrmac","ocrmac",[615],[2208],"1.0.0",[56],{"id":2211,"slug":2212,"identity":2213,"label":2214,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2215,"versions":2216,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2217},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[592],[1658],[56],{"id":2219,"slug":2220,"identity":2221,"label":2222,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2223,"versions":2224,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2226},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[615],[2225],"3.1.5",[56],{"id":2228,"slug":2229,"identity":2230,"label":2231,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2232,"versions":2233,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2234},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[582],[934],[56],{"id":2236,"slug":2237,"identity":2238,"label":2239,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2240,"versions":2241,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2242},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[582],[934],[56],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2248,"versions":2249,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2250},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[582],[934],[56],{"id":2252,"slug":2253,"identity":2254,"label":2255,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2256,"versions":2257,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2258},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[582],[934],[56],{"id":2260,"slug":2261,"identity":2262,"label":2263,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2264,"versions":2265,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2267},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[582],[2266],"0.59b0",[56],{"id":2269,"slug":2270,"identity":2271,"label":2272,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2273,"versions":2274,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2276},"package:pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha-b1a8b6f5","pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha",[582],[2275],"0.47.5",[56],{"id":2278,"slug":2279,"identity":2280,"label":2281,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2282,"versions":2283,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2284},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[582],[2275],[56],{"id":2286,"slug":2287,"identity":2288,"label":2289,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2290,"versions":2291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2292},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[582],[2275],[56],{"id":2294,"slug":2295,"identity":2296,"label":2297,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2298,"versions":2299,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2300},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[582],[2275],[56],{"id":2302,"slug":2303,"identity":2304,"label":2305,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2306,"versions":2307,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2308},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[582],[2275],[56],{"id":2310,"slug":2311,"identity":2312,"label":2313,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2314,"versions":2315,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2316},"package:pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai-236cb6a6","pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai",[582],[2275],[56],{"id":2318,"slug":2319,"identity":2320,"label":2321,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2322,"versions":2323,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2324},"package:pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai-dd555f24","pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai",[582],[2275],[56],{"id":2326,"slug":2327,"identity":2328,"label":2329,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2330,"versions":2331,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2332},"package:pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq-a9bf4841","pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq",[582],[2275],[56],{"id":2334,"slug":2335,"identity":2336,"label":2337,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2338,"versions":2339,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2340},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[582],[2275],[56],{"id":2342,"slug":2343,"identity":2344,"label":2345,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2346,"versions":2347,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2348},"package:pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb-337c7f86","pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb",[582],[2275],[56],{"id":2350,"slug":2351,"identity":2352,"label":2353,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2354,"versions":2355,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2356},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[582],[2275],[56],{"id":2358,"slug":2359,"identity":2360,"label":2361,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2362,"versions":2363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2364},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[582],[2275],[56],{"id":2366,"slug":2367,"identity":2368,"label":2369,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2370,"versions":2371,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2372},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[582],[2266],[56],{"id":2374,"slug":2375,"identity":2376,"label":2377,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2378,"versions":2379,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2380},"package:pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo-7fffb308","pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo",[582],[2275],[56],{"id":2382,"slug":2383,"identity":2384,"label":2385,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2386,"versions":2387,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2388},"package:pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp-6fbe8e0d","pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp",[582],[2275],[56],{"id":2390,"slug":2391,"identity":2392,"label":2393,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2394,"versions":2395,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2396},"package:pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus-dc786c2a","pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus",[582],[2275],[56],{"id":2398,"slug":2399,"identity":2400,"label":2401,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2402,"versions":2403,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2404},"package:pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai-af29742c","pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai",[582],[2275],[56],{"id":2406,"slug":2407,"identity":2408,"label":2409,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2410,"versions":2411,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2412},"package:pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama-2cbe8996","pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama",[582],[2275],[56],{"id":2414,"slug":2415,"identity":2416,"label":2417,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2418,"versions":2419,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2420},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[582],[2275],[56],{"id":2422,"slug":2423,"identity":2424,"label":2425,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2426,"versions":2427,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2428},"package:pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents-ac759c8f","pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents",[582],[2275],[56],{"id":2430,"slug":2431,"identity":2432,"label":2433,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2434,"versions":2435,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2436},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[582],[2275],[56],{"id":2438,"slug":2439,"identity":2440,"label":2441,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2442,"versions":2443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2444},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[582],[2275],[56],{"id":2446,"slug":2447,"identity":2448,"label":2449,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2450,"versions":2451,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2452},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[582],[2266],[56],{"id":2454,"slug":2455,"identity":2456,"label":2457,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2458,"versions":2459,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2460},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[582],[2275],[56],{"id":2462,"slug":2463,"identity":2464,"label":2465,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2466,"versions":2467,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2468},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[582],[2266],[56],{"id":2470,"slug":2471,"identity":2472,"label":2473,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2474,"versions":2475,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2476},"package:pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker-55be6260","pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker",[582],[2275],[56],{"id":2478,"slug":2479,"identity":2480,"label":2481,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2482,"versions":2483,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2484},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[582],[2266],[56],{"id":2486,"slug":2487,"identity":2488,"label":2489,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2490,"versions":2491,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2492},"package:pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading-8d47431d","pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading",[582],[2266],[56],{"id":2494,"slug":2495,"identity":2496,"label":2497,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2498,"versions":2499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2500},"package:pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together-e40c9610","pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together",[582],[2275],[56],{"id":2502,"slug":2503,"identity":2504,"label":2505,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2506,"versions":2507,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2508},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[582],[2275],[56],{"id":2510,"slug":2511,"identity":2512,"label":2513,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2514,"versions":2515,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2516},"package:pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3-32a4545b","pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3",[582],[2266],[56],{"id":2518,"slug":2519,"identity":2520,"label":2521,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2522,"versions":2523,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2524},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[582],[2275],[56],{"id":2526,"slug":2527,"identity":2528,"label":2529,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2530,"versions":2531,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2532},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[582],[2275],[56],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2538,"versions":2539,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2540},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[582],[2275],[56],{"id":2542,"slug":2543,"identity":2544,"label":2545,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2546,"versions":2547,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2548},"package:pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer-62ab002f","pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer",[582],[2275],[56],{"id":2550,"slug":2551,"identity":2552,"label":2553,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2554,"versions":2555,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2556},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[582],[934],[56],{"id":2558,"slug":2559,"identity":2560,"label":2561,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2562,"versions":2563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2564},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[582],[934],[56],{"id":2566,"slug":2567,"identity":2568,"label":2569,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2570,"versions":2571,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2572},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[582],[2266],[56],{"id":2574,"slug":2575,"identity":2576,"label":2577,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2578,"versions":2579,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2581},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[582],[2580],"0.4.13",[56],{"id":2583,"slug":2584,"identity":2585,"label":2586,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2587,"versions":2588,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2589},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[582],[2266],[56],{"id":2591,"slug":2592,"identity":2593,"label":2594,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2595,"versions":2597,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2599},"package:pypi:outcome","outcome-807eda1a","pypi:outcome","outcome",[2596],"Apache-2.0 OR MIT",[2598],"1.3.0.post0",[56],{"id":2601,"slug":2602,"identity":2603,"label":2604,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2605,"versions":2606,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2608},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[582],[2607],"7.7.0",[56],{"id":2610,"slug":2611,"identity":2612,"label":2613,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2614,"versions":2615,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2616},"package:pypi:oxylabs","oxylabs-2206b7c8","pypi:oxylabs","oxylabs",[615],[1236],[56],{"id":2618,"slug":2619,"identity":2620,"label":2621,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2622,"versions":2624,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2626},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2623,602],"Apache-2.0 OR BSD-2-Clause",[2625],"25.0",[56],{"id":2628,"slug":2629,"identity":2630,"label":2631,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2632,"versions":2633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2635},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[592,602],[2634],"2.2.3",[56],{"id":2637,"slug":2638,"identity":2639,"label":2640,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2641,"versions":2642,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2644},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[615],[2643],"0.8.5",[56],{"id":2646,"slug":2647,"identity":2648,"label":2649,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2650,"versions":2651,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2653},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[914],[2652],"0.12.1",[56],{"id":2655,"slug":2656,"identity":2657,"label":2658,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2659,"versions":2660,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2662},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[1558],[2661],"4.9.0",[56],{"id":2664,"slug":2665,"identity":2666,"label":2667,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2668,"versions":2669,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2670},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[615],[1512],[56],{"id":2672,"slug":2673,"identity":2674,"label":2675,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2676,"versions":2677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2679},"package:pypi:playwright","playwright-33f38203","pypi:playwright","playwright",[582],[2678],"1.55.0",[56],{"id":2681,"slug":2682,"identity":2683,"label":2684,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2685,"versions":2686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2687},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[615],[2031],[56],{"id":2689,"slug":2690,"identity":2691,"label":2692,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2693,"versions":2694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2696},"package:pypi:polyfactory","polyfactory-6f8eab4d","pypi:polyfactory","polyfactory",[615],[2695],"2.22.3",[56],{"id":2698,"slug":2699,"identity":2700,"label":2701,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2702,"versions":2703,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2705},"package:pypi:posthog","posthog-fa78df25","pypi:posthog","posthog",[615],[2704],"3.25.0",[56],{"id":2707,"slug":2708,"identity":2709,"label":2710,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2711,"versions":2712,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2714},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[615],[2713],"4.3.0",[56],{"id":2716,"slug":2717,"identity":2718,"label":2719,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2720,"versions":2721,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2723},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[592,602],[2722],"3.0.52",[56],{"id":2725,"slug":2726,"identity":2727,"label":2728,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2729,"versions":2730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2731},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[582],[675],[56],{"id":2733,"slug":2734,"identity":2735,"label":2736,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2737,"versions":2738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2740},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[592],[2739],"7.1.2",[56],{"id":2742,"slug":2743,"identity":2744,"label":2745,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2746,"versions":2747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2748},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1558],[1135],[56],{"id":2750,"slug":2751,"identity":2752,"label":2753,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2754,"versions":2755,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2756},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[615],[1308],[56],{"id":2758,"slug":2759,"identity":2760,"label":2761,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2762,"versions":2763,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2765},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[615],[2764],"1.3.0.post6",[56],{"id":2767,"slug":2768,"identity":2769,"label":2770,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2771,"versions":2772,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2774},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[615],[2773],"2.14.0",[56],{"id":2776,"slug":2777,"identity":2778,"label":2779,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2780,"versions":2781,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2783},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[592],[2782],"2.23",[56],{"id":2785,"slug":2786,"identity":2787,"label":2788,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2789,"versions":2790,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2792},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[615],[2791],"2.12.3",[56],{"id":2794,"slug":2795,"identity":2796,"label":2797,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2798,"versions":2799,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2801},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[615],[2800],"2.41.4",[56],{"id":2803,"slug":2804,"identity":2805,"label":2806,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2807,"versions":2808,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2810},"package:pypi:pyee","pyee-885d20c2","pypi:pyee","pyee",[615],[2809],"13.0.0",[56],{"id":2812,"slug":2813,"identity":2814,"label":2815,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2816,"versions":2817,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2818},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[615],[1245],[56],{"id":2820,"slug":2821,"identity":2822,"label":2823,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2824,"versions":2825,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2827},"package:pypi:pylance","pylance-da7c006a","pypi:pylance","pylance",[602],[2826],"0.38.3",[56],{"id":2829,"slug":2830,"identity":2831,"label":2832,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2833,"versions":2834,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2836},"package:pypi:pylatexenc","pylatexenc-e20f6acb","pypi:pylatexenc","pylatexenc",[615],[2835],"2.10",[56],{"id":2838,"slug":2839,"identity":2840,"label":2841,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2842,"versions":2843,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2845},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[615],[2844],"12.0",[56],{"id":2847,"slug":2848,"identity":2849,"label":2850,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2851,"versions":2852,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2853},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[615],[2844],[56],{"id":2855,"slug":2856,"identity":2857,"label":2858,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2859,"versions":2860,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2861},"package:pypi:pyobjc-framework-coreml","pyobjc-framework-coreml-5e7c3b2a","pypi:pyobjc-framework-coreml","pyobjc-framework-coreml",[615],[2844],[56],{"id":2863,"slug":2864,"identity":2865,"label":2866,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2867,"versions":2868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2869},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[615],[2844],[56],{"id":2871,"slug":2872,"identity":2873,"label":2874,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2875,"versions":2876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2877},"package:pypi:pyobjc-framework-vision","pyobjc-framework-vision-7145bcee","pypi:pyobjc-framework-vision","pyobjc-framework-vision",[615],[2844],[56],{"id":2879,"slug":2880,"identity":2881,"label":2882,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2883,"versions":2884,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2886},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[602],[2885],"4.30.0",[56],{"id":2888,"slug":2889,"identity":2890,"label":2891,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2892,"versions":2893,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2895},"package:pypi:pysocks","pysocks-7cd576a7","pypi:pysocks","pysocks",[602],[2894],"1.7.1",[56],{"id":2897,"slug":2898,"identity":2899,"label":2900,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2901,"versions":2902,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2903},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[582],[1503],[56],{"id":2905,"slug":2906,"identity":2907,"label":2908,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2909,"versions":2910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2912},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[602],[2911],"2.9.0.post0",[56],{"id":2914,"slug":2915,"identity":2916,"label":2917,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2918,"versions":2919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2920},"package:pypi:python-docx","python-docx-734c6d0d","pypi:python-docx","python-docx",[615],[1503],[56],{"id":2922,"slug":2923,"identity":2924,"label":2925,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2926,"versions":2927,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2929},"package:pypi:python-pptx","python-pptx-8826554c","pypi:python-pptx","python-pptx",[615],[2928],"1.0.2",[56],{"id":2931,"slug":2932,"identity":2933,"label":2934,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2935,"versions":2936,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2938},"package:pypi:pytokens","pytokens-4f13eeb2","pypi:pytokens","pytokens",[615],[2937],"0.2.0",[56],{"id":2940,"slug":2941,"identity":2942,"label":2943,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2944,"versions":2945,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2947},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[615],[2946],"2025.2",[56],{"id":2949,"slug":2950,"identity":2951,"label":2952,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2953,"versions":2954,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2956},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2955],"311",[56],{"id":2958,"slug":2959,"identity":2960,"label":2961,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2962,"versions":2963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2965},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[615],[2964],"6.0.3",[56],{"id":2967,"slug":2968,"identity":2969,"label":2970,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2971,"versions":2972,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2974},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[592],[2973],"27.1.0",[56],{"id":2976,"slug":2977,"identity":2978,"label":2979,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2980,"versions":2981,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2983},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[615],[2982],"3.14.1",[56],{"id":2985,"slug":2986,"identity":2987,"label":2988,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2989,"versions":2990,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2992},"package:pypi:rapidocr","rapidocr-452b83bd","pypi:rapidocr","rapidocr",[582],[2991],"3.4.2",[56],{"id":2994,"slug":2995,"identity":2996,"label":2997,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":2998,"versions":2999,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3001},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[615],[3000],"0.37.0",[56],{"id":3003,"slug":3004,"identity":3005,"label":3006,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3007,"versions":3009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3011},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[582,3008],"Apache-2.0 AND CNRI-Python",[3010],"2025.10.23",[56],{"id":3013,"slug":3014,"identity":3015,"label":3016,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3017,"versions":3018,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3019},"package:pypi:requests-file","requests-file-706ecfac","pypi:requests-file","requests-file",[582],[1052],[56],{"id":3021,"slug":3022,"identity":3023,"label":3024,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3025,"versions":3026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3028},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[615],[3027],"14.2.0",[56],{"id":3030,"slug":3031,"identity":3032,"label":3033,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3034,"versions":3035,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3037},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[615],[3036],"0.28.0",[56],{"id":3039,"slug":3040,"identity":3041,"label":3042,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3043,"versions":3044,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3046},"package:pypi:rtree","rtree-0efed1c9","pypi:rtree","rtree",[615],[3045],"1.4.1",[56],{"id":3048,"slug":3049,"identity":3050,"label":3051,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3052,"versions":3053,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3055},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[615],[3054],"0.14.2",[56],{"id":3057,"slug":3058,"identity":3059,"label":3060,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3061,"versions":3062,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3064},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[602],[3063],"0.6.2",[56],{"id":3066,"slug":3067,"identity":3068,"label":3069,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3070,"versions":3071,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3073},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[602],[3072],"1.16.3",[56],{"id":3075,"slug":3076,"identity":3077,"label":3078,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3079,"versions":3080,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3082},"package:pypi:selenium","selenium-e3f15a24","pypi:selenium","selenium",[582],[3081],"4.38.0",[56],{"id":3084,"slug":3085,"identity":3086,"label":3087,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3088,"versions":3089,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3091},"package:pypi:semchunk","semchunk-c2c8e504","pypi:semchunk","semchunk",[615],[3090],"2.2.2",[56],{"id":3093,"slug":3094,"identity":3095,"label":3096,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3097,"versions":3098,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3099},"package:pypi:sgmllib3k","sgmllib3k-c3d7a6ca","pypi:sgmllib3k","sgmllib3k",[602],[2208],[56],{"id":3101,"slug":3102,"identity":3103,"label":3104,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3105,"versions":3106,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3108},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[592],[3107],"2.1.2",[56],{"id":3110,"slug":3111,"identity":3112,"label":3113,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3114,"versions":3115,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3117},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[1558],[3116],"1.5.4",[56],{"id":3119,"slug":3120,"identity":3121,"label":3122,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3123,"versions":3124,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3125},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[615],[1748],[56],{"id":3127,"slug":3128,"identity":3129,"label":3130,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3131,"versions":3132,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3134},"package:pypi:six","six-3c3888bd","pypi:six","six",[615],[3133],"1.17.0",[56],{"id":3136,"slug":3137,"identity":3138,"label":3139,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3140,"versions":3141,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3143},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2596],[3142],"1.3.1",[56],{"id":3145,"slug":3146,"identity":3147,"label":3148,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3149,"versions":3150,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3152},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[582],[3151],"2.4.0",[56],{"id":3154,"slug":3155,"identity":3156,"label":3157,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3158,"versions":3159,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3161},"package:pypi:spider-client","spider-client-04bbfc07","pypi:spider-client","spider-client",[615],[3160],"0.0.27",[56],{"id":3163,"slug":3164,"identity":3165,"label":3166,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3167,"versions":3168,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3170},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[615],[3169],"2.0.44",[56],{"id":3172,"slug":3173,"identity":3174,"label":3175,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3176,"versions":3177,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3179},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[592],[3178],"3.0.2",[56],{"id":3181,"slug":3182,"identity":3183,"label":3184,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3185,"versions":3186,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3188},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[615],[3187],"0.6.3",[56],{"id":3190,"slug":3191,"identity":3192,"label":3193,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3194,"versions":3195,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3197},"package:pypi:striprtf","striprtf-bb61a6b5","pypi:striprtf","striprtf",[592],[3196],"0.0.26",[56],{"id":3199,"slug":3200,"identity":3201,"label":3202,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3203,"versions":3204,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3206},"package:pypi:structlog","structlog-2a5a47ec","pypi:structlog","structlog",[2596],[3205],"25.5.0",[56],{"id":3208,"slug":3209,"identity":3210,"label":3211,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3212,"versions":3213,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3214},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[592,615,602],[1560],[56],{"id":3216,"slug":3217,"identity":3218,"label":3219,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3220,"versions":3221,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3223},"package:pypi:syncer","syncer-7ac13616","pypi:syncer","syncer",[615],[3222],"2.0.3",[56],{"id":3225,"slug":3226,"identity":3227,"label":3228,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3229,"versions":3230,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3232},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[615],[3231],"0.9.0",[56],{"id":3234,"slug":3235,"identity":3236,"label":3237,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3238,"versions":3239,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3241},"package:pypi:tantivy","tantivy-b8e058c3","pypi:tantivy","tantivy",[615],[3240],"0.25.0",[56],{"id":3243,"slug":3244,"identity":3245,"label":3246,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3247,"versions":3248,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3250},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[582],[3249],"9.1.2",[56],{"id":3252,"slug":3253,"identity":3254,"label":3255,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3256,"versions":3257,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3258},"package:pypi:thefuzz","thefuzz-77e9a0e0","pypi:thefuzz","thefuzz",[615],[638],[56],{"id":3260,"slug":3261,"identity":3262,"label":3263,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3264,"versions":3265,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3267},"package:pypi:tinysegmenter","tinysegmenter-eaea99bf","pypi:tinysegmenter","tinysegmenter",[602],[3266],"0.3",[56],{"id":3269,"slug":3270,"identity":3271,"label":3272,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3273,"versions":3274,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3276},"package:pypi:tldextract","tldextract-ed3c967e","pypi:tldextract","tldextract",[592],[3275],"5.3.0",[56],{"id":3278,"slug":3279,"identity":3280,"label":3281,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3282,"versions":3283,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3284},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[615],[1658],[56],{"id":3286,"slug":3287,"identity":3288,"label":3289,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3290,"versions":3291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3293},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[592],[3292],"0.24.0",[56],{"id":3295,"slug":3296,"identity":3297,"label":3298,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3299,"versions":3300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3301},"package:pypi:traceloop-sdk","traceloop-sdk-64e27d1c","pypi:traceloop-sdk","traceloop-sdk",[582],[2275],[56],{"id":3303,"slug":3304,"identity":3305,"label":3306,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3307,"versions":3308,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3309},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[592],[1079],[56],{"id":3311,"slug":3312,"identity":3313,"label":3314,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3315,"versions":3316,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3318},"package:pypi:trio","trio-5952fcdf","pypi:trio","trio",[2596],[3317],"0.31.0",[56],{"id":3320,"slug":3321,"identity":3322,"label":3323,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3324,"versions":3325,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3327},"package:pypi:trio-websocket","trio-websocket-71803d22","pypi:trio-websocket","trio-websocket",[615],[3326],"0.12.2",[56],{"id":3329,"slug":3330,"identity":3331,"label":3332,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3333,"versions":3334,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3336},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[615],[3335],"3.5.0",[56],{"id":3338,"slug":3339,"identity":3340,"label":3341,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3342,"versions":3343,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3344},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[615],[1703],[56],{"id":73,"slug":74,"identity":3346,"label":75,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3347,"versions":3348,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3350},"pypi:typing-extensions",[1106,602],[3349],"4.15.0",[56],{"id":3352,"slug":3353,"identity":3354,"label":3355,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3356,"versions":3357,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3358},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[615],[3231],[56],{"id":3360,"slug":3361,"identity":3362,"label":3363,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3364,"versions":3365,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3366},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[615],[1887],[56],{"id":3368,"slug":3369,"identity":3370,"label":3371,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3372,"versions":3373,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3374},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[582],[2946],[56],{"id":3376,"slug":3377,"identity":3378,"label":3379,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3380,"versions":3381,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3383},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[615],[3382],"5.3.1",[56],{"id":3385,"slug":3386,"identity":3387,"label":3388,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3389,"versions":3390,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3392},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[592],[3391],"0.38.0",[56],{"id":3394,"slug":3395,"identity":3396,"label":3397,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3398,"versions":3399,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3400},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[615],[3292],[56],{"id":3402,"slug":3403,"identity":3404,"label":3405,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3406,"versions":3407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3409},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[615],[3408],"0.2.14",[56],{"id":3411,"slug":3412,"identity":3413,"label":3414,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3415,"versions":3416,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3417},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[582],[1415],[56],{"id":3419,"slug":3420,"identity":3421,"label":3422,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3423,"versions":3424,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3426},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[592],[3425],"15.0.1",[56],{"id":3428,"slug":3429,"identity":3430,"label":3431,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3432,"versions":3433,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3435},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[1041,602],[3434],"1.17.3",[56],{"id":3437,"slug":3438,"identity":3439,"label":3440,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3441,"versions":3442,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3443},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[615],[1503],[56],{"id":3445,"slug":3446,"identity":3447,"label":3448,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3449,"versions":3450,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3452},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[1041],[3451],"3.2.9",[56],{"id":3454,"slug":3455,"identity":3456,"label":3457,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3458,"versions":3459,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3461},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[582],[3460],"1.22.0",[56],{"id":3463,"slug":3464,"identity":3465,"label":3466,"aiRelevant":47,"provider":84,"advisoryCount":39,"licenseExpressions":3467,"versions":3468,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3470},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[615],[3469],"3.23.0",[56],[3472,3511,3544,3575,3610,3634,3656,3680,3724,3758,3791,3825,3858,3901,3931,3962,3989,4015,4040,4066,4102,4124,4151,4193,4219,4245,4292,4323,4347,4375,4404,4434,4463,4496,4526,4552,4575,4597,4624,4647,4672,4696,4723,4749,4771,4807,4833,4854,4878,4905,4925,4961,4986,5011,5029,5058,5082,5106,5128,5161,5187,5216,5240,5258,5297,5323,5349,5374,5403,5432,5455,5482,5509,5545,5568,5591,5618,5645,5668,5691,5719,5751,5776,5800,5827,5865,5891,5928,5952,5975,5999,6039,6057,6081,6104,6131,6152,6180,6202,6232,6282,6309,6328,6352,6378,6404,6425,6448,6480,6503,6529,6555,6576,6596,6617,6646,6669,6691,6714,6750,6776,6799,6822,6845,6882,6910,6941,6962,6984,7008,7037,7061,7086,7118,7140,7180,7207,7236,7256,7279,7308,7335,7354,7375,7398,7432,7460,7511,7537,7574,7606,7633,7656,7678,7717,7745,7763,7794,7816,7839,7863,7888,7917,7941,7963,7990,8013,8040,8062,8088,8117,8155,8181,8206,8232,8259,8285,8306,8335,8359,8386,8406,8436,8456,8476,8498,8527,8552,8584,8606,8627,8650,8675,8728,8750,8774,8796,8818,8842,8867,8891,8921,8944,8976,9003,9024,9054,9077,9105,9125,9146,9170,9201,9222,9249,9282,9302,9334,9363,9388,9409,9433,9460,9480,9506,9531,9560,9582,9603,9626,9663,9687,9710,9738,9764,9790,9817,9839,9862,9888,9907,9932,9956,9989,10014,10039,10066,10092,10117,10144,10167,10188,10212,10237,10260,10280,10308,10331,10355,10378,10399,10433,10466,10493,10515,10537,10560,10587,10606,10633,10661,10681,10706,10736,10757,10778,10802,10828,10850,10874,10901,10932,10953,10975,10998,11026,11053,11078,11107,11126,11149,11176,11197,11229,11250,11268,11294,11318,11341,11374,11402,11428,11452,11471,11500,11521,11558,11579,11609,11631,11659,11680,11703,11728,11753,11778,11801,11824,11846,11874,11898,11927,11953,11974,12002,12025,12053,12075,12098,12122,12149,12174,12198,12225,12246,12270,12291,12315,12330,12357,12383,12400,12428,12450,12476,12496,12515,12548,12566,12592,12618,12645,12669,12694,12721,12748,12770,12802,12829,12852,12874,12900,12931,12955,12983,13010,13035,13057,13079,13109,13139,13173,13202,13227,13253,13285,13305,13331,13352,13376,13399,13427,13455,13482,13509,13536,13564,13590,13608,13630,13654,13680,13704,13726,13749,13777,13803,13827,13847,13877,13899,13925,13977,14002,14025,14050,14069,14103,14128,14153,14176,14201,14224,14256,14278,14306,14325,14352,14379,14407,14432,14460,14479,14502,14523,14550,14573,14593,14614,14639,14660,14686,14716,14736,14752,14772,14789,14808,14825,14846,14862,14877,14894,14909,14926,14943,14960,14973,14986,14999,15012,15025,15038,15051,15064,15086,15102,15117],{"id":107,"slug":3473,"dossier":91,"summary":3474,"aliases":3475,"sourceIds":3478,"published":3479,"modified":3480,"checkedAt":7,"severity":3481,"references":3485,"versionKeys":3499,"packageCount":32,"repositoryCount":3510},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[3476,3477],"BIT-pillow-2026-112390","CVE-2026-112390",[107],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[3482],{"type":3483,"score":3484},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3486,3489,3492,3494,3497],{"type":3487,"url":3488},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":3490,"url":3491},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":3487,"url":3493},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":3495,"url":3496},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3487,"url":3498},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",19,{"id":108,"slug":3512,"dossier":47,"summary":3513,"aliases":3514,"sourceIds":3517,"published":3518,"modified":3519,"checkedAt":7,"severity":3520,"references":3523,"versionKeys":3540,"packageCount":32,"repositoryCount":885},"ghsa-23w6-3w8w-8484-7e1b73d9","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving outlines",[3515,3516],"CVE-2026-84310","PYSEC-2026-3910",[108,3516],"2026-09-01T21:28:37Z","2026-09-10T12:25:45.197931157Z",[3521],{"type":3483,"score":3522},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3524,3526,3528,3530,3532,3534,3536,3538],{"type":3487,"url":3525},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3487,"url":3527},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3966",{"type":3487,"url":3529},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd91ab705fd81ed1a9cec175c6958600dea1a4942",{"type":3495,"url":3531},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3487,"url":3533},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.1",{"type":3495,"url":3535},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3490,"url":3537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3490,"url":3539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84310",[3541,3542,3543],"pypi:pypdf@5.1.0","pypi:pypdf@6.1.3","pypi:pypdf@6.14.2",{"id":109,"slug":3545,"dossier":47,"summary":3546,"aliases":3547,"sourceIds":3550,"published":3551,"modified":3552,"checkedAt":7,"severity":3553,"references":3559,"versionKeys":3574,"packageCount":32,"repositoryCount":105},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3548,3549],"CVE-2026-48156","PYSEC-2026-3004",[109,3549],"2026-06-12T18:29:59Z","2026-09-10T03:51:07.304973624Z",[3554,3557],{"type":3555,"score":3556},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3483,"score":3558},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3560,3562,3564,3566,3568,3569,3571,3572],{"type":3487,"url":3561},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3490,"url":3563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3487,"url":3565},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3487,"url":3567},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3495,"url":3531},{"type":3487,"url":3570},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3495,"url":3535},{"type":3490,"url":3573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3541,3542],{"id":110,"slug":3576,"dossier":47,"summary":3577,"aliases":3578,"sourceIds":3581,"published":3582,"modified":3583,"checkedAt":7,"severity":3584,"references":3587,"versionKeys":3608,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3579,3580],"CVE-2024-39689","PYSEC-2024-230",[110,3580],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[3585],{"type":3555,"score":3586},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3588,3590,3592,3595,3597,3599,3602,3604,3606],{"type":3490,"url":3589},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3490,"url":3591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3593,"url":3594},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3495,"url":3596},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3487,"url":3598},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3600,"url":3601},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3487,"url":3603},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3490,"url":3605},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3490,"url":3607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3609],"pypi:certifi@2024.6.2",{"id":111,"slug":3611,"dossier":91,"summary":3612,"aliases":3613,"sourceIds":3616,"published":3617,"modified":3618,"checkedAt":7,"severity":3619,"references":3622,"versionKeys":3633,"packageCount":32,"repositoryCount":3510},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[3614,3615],"BIT-pillow-2026-96638","CVE-2026-96638",[111],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[3620],{"type":3555,"score":3621},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3623,3625,3627,3629,3631,3632],{"type":3487,"url":3624},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":3490,"url":3626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":3487,"url":3628},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":3487,"url":3630},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":112,"slug":3635,"dossier":91,"summary":3636,"aliases":3637,"sourceIds":3640,"published":3641,"modified":3642,"checkedAt":7,"severity":3643,"references":3646,"versionKeys":3655,"packageCount":32,"repositoryCount":3510},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[3638,3639],"BIT-pillow-2026-112391","CVE-2026-112391",[112],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[3644],{"type":3483,"score":3645},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3647,3649,3651,3653,3654],{"type":3487,"url":3648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":3490,"url":3650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":3487,"url":3652},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":113,"slug":3657,"dossier":91,"summary":3658,"aliases":3659,"sourceIds":3663,"published":3664,"modified":3665,"checkedAt":7,"severity":3666,"references":3670,"versionKeys":3679,"packageCount":32,"repositoryCount":3510},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[3660,3661,3662],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[113,3662],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[3667,3668],{"type":3483,"score":3484},{"type":3555,"score":3669},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3671,3673,3675,3677,3678],{"type":3593,"url":3672},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":3490,"url":3674},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":3593,"url":3676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":114,"slug":3681,"dossier":47,"summary":3682,"aliases":3683,"sourceIds":3686,"published":3687,"modified":3688,"checkedAt":7,"severity":3689,"references":3692,"versionKeys":3713,"packageCount":32,"repositoryCount":3723},"ghsa-27vj-qcqg-25rc-06b922e9","fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution",[3684,3685],"CVE-2026-104851","PYSEC-2026-4217",[114,3685],"2026-10-05T22:53:22Z","2026-10-15T14:56:18.658408345Z",[3690],{"type":3555,"score":3691},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3693,3695,3697,3699,3701,3703,3705,3707,3709,3711],{"type":3487,"url":3694},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fsecurity\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",{"type":3490,"url":3696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104851",{"type":3487,"url":3698},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2029",{"type":3487,"url":3700},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2039",{"type":3487,"url":3702},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002F86438783f93b1398ef245b92f0e6063b445b611c",{"type":3487,"url":3704},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002Fa1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",{"type":3495,"url":3706},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec",{"type":3487,"url":3708},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Freleases\u002Ftag\u002F2026.6.0",{"type":3495,"url":3710},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffsspec",{"type":3490,"url":3712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",[3714,3715,3716,3717,3718,3719,3720,3721,3722],"pypi:fsspec@2024.9.0","pypi:fsspec@2025.10.0","pypi:fsspec@2025.3.0","pypi:fsspec@2025.3.2","pypi:fsspec@2025.5.0","pypi:fsspec@2025.9.0","pypi:fsspec@2026.1.0","pypi:fsspec@2026.2.0","pypi:fsspec@2026.3.0",15,{"id":115,"slug":3725,"dossier":47,"summary":3726,"aliases":3727,"sourceIds":3730,"published":3731,"modified":3732,"checkedAt":7,"severity":3733,"references":3736,"versionKeys":3748,"packageCount":32,"repositoryCount":66},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[3728,3729],"CVE-2026-4372","PYSEC-2026-2289",[115,3729],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[3734],{"type":3555,"score":3735},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3737,3739,3741,3743,3746],{"type":3490,"url":3738},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":3593,"url":3740},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":3495,"url":3742},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":3744,"url":3745},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":3490,"url":3747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[3749,3750,3751,3752,3753,3754,3755,3756,3757],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":116,"slug":3759,"dossier":47,"summary":3760,"aliases":3761,"sourceIds":3764,"published":3765,"modified":3766,"checkedAt":7,"severity":3767,"references":3770,"versionKeys":3787,"packageCount":32,"repositoryCount":857},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3762,3763],"CVE-2025-54121","PYSEC-2026-1941",[116,3763],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[3768],{"type":3555,"score":3769},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3771,3773,3775,3777,3779,3781,3783,3785],{"type":3487,"url":3772},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3490,"url":3774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3593,"url":3776},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3495,"url":3778},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3487,"url":3780},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3487,"url":3782},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3495,"url":3784},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3490,"url":3786},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3788,3789,3790],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":117,"slug":3792,"dossier":47,"summary":3793,"aliases":3794,"sourceIds":3797,"published":3798,"modified":3799,"checkedAt":7,"severity":3800,"references":3804,"versionKeys":3815,"packageCount":32,"repositoryCount":66},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3795,3796],"CVE-2026-54279","PYSEC-2026-2112",[117,3796],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[3801,3802],{"type":3555,"score":3669},{"type":3483,"score":3803},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[3805,3807,3809,3811,3813],{"type":3490,"url":3806},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3490,"url":3808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":3593,"url":3810},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":3495,"url":3812},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3487,"url":3814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[3816,3817,3818,3819,3820,3821,3822,3823,3824],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":118,"slug":3826,"dossier":47,"summary":3827,"aliases":3828,"sourceIds":3831,"published":3832,"modified":3833,"checkedAt":7,"severity":3834,"references":3839,"versionKeys":3856,"packageCount":32,"repositoryCount":32},"ghsa-2g59-m95p-pgfq-b960a1a2","Chainlit contain a server-side request forgery (SSRF) vulnerability",[3829,3830],"CVE-2026-22219","PYSEC-2026-1237",[118,3830],"2026-01-20T00:30:28Z","2026-07-07T17:57:22.370684872Z",[3835,3837],{"type":3555,"score":3836},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":3483,"score":3838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[3840,3842,3844,3846,3848,3850,3852,3854],{"type":3490,"url":3841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22219",{"type":3487,"url":3843},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002Fffc3cce648b343b933e10e85ee5805c7e02ab3bf",{"type":3495,"url":3845},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit",{"type":3487,"url":3847},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.9.4",{"type":3487,"url":3849},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-sqlalchemy-data-layer-ssrf-via-project-element",{"type":3487,"url":3851},"https:\u002F\u002Fwww.zafran.io\u002Fresources\u002Fchainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",{"type":3495,"url":3853},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchainlit",{"type":3490,"url":3855},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g59-m95p-pgfq",[3857],"pypi:chainlit@2.8.3",{"id":119,"slug":3859,"dossier":47,"summary":3860,"aliases":3861,"sourceIds":3863,"published":3864,"modified":3865,"checkedAt":7,"severity":3866,"references":3869,"versionKeys":3897,"packageCount":32,"repositoryCount":3900},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[3862],"CVE-2026-123817",[119],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[3867],{"type":3483,"score":3868},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3870,3872,3874,3876,3878,3880,3882,3884,3886,3888,3890,3892,3894,3895],{"type":3487,"url":3871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":3487,"url":3873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":3487,"url":3875},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":3487,"url":3877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":3487,"url":3879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":3487,"url":3881},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":3487,"url":3883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":3487,"url":3885},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":3487,"url":3887},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":3487,"url":3889},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":3487,"url":3891},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":3487,"url":3893},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":3495,"url":3812},{"type":3487,"url":3896},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":120,"slug":3902,"dossier":47,"summary":3903,"aliases":3904,"sourceIds":3907,"published":3908,"modified":3909,"checkedAt":7,"severity":3910,"references":3912,"versionKeys":3927,"packageCount":32,"repositoryCount":857},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[3905,3906],"CVE-2026-101917","PYSEC-2026-4140",[120,3906],"2026-09-29T23:11:51Z","2026-10-01T17:56:20.150726241Z",[3911],{"type":3555,"score":3769},[3913,3915,3917,3919,3921,3923,3925],{"type":3487,"url":3914},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":3490,"url":3916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":3487,"url":3918},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":3495,"url":3920},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3487,"url":3922},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",{"type":3495,"url":3924},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyjwt",{"type":3490,"url":3926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",[3928,3929,3930],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":121,"slug":3932,"dossier":47,"summary":3933,"aliases":3934,"sourceIds":3937,"published":3938,"modified":3939,"checkedAt":7,"severity":3940,"references":3943,"versionKeys":3959,"packageCount":32,"repositoryCount":857},"ghsa-2jhm-w3mp-jcwr-97c80e03","NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts",[3935,3936],"CVE-2026-12372","PYSEC-2026-3955",[121,3936],"2026-08-09T23:16:35.793Z","2026-10-15T14:45:08.355892144Z",[3941],{"type":3555,"score":3942},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3944,3946,3948,3950,3952,3954,3957],{"type":3490,"url":3945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12372",{"type":3487,"url":3947},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F4a820afa58810cd05049b6c6eae306694d6cfe65",{"type":3495,"url":3949},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3487,"url":3951},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.0",{"type":3487,"url":3953},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3955.yaml",{"type":3955,"url":3956},"REPORT","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2911b643-571c-42e4-b0c2-9a1fa6f491db",{"type":3490,"url":3958},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2jhm-w3mp-jcwr",[3960,3961],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":122,"slug":3963,"dossier":47,"summary":3964,"aliases":3965,"sourceIds":3968,"published":3969,"modified":3970,"checkedAt":7,"severity":3971,"references":3973,"versionKeys":3988,"packageCount":32,"repositoryCount":105},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3966,3967],"CVE-2026-24688","PYSEC-2026-1827",[122,3967],"2026-01-26T23:37:57Z","2026-09-10T03:50:32.300137224Z",[3972],{"type":3483,"score":3558},[3974,3976,3978,3980,3982,3983,3985,3986],{"type":3487,"url":3975},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3490,"url":3977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3487,"url":3979},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3487,"url":3981},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3495,"url":3531},{"type":3487,"url":3984},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3495,"url":3535},{"type":3490,"url":3987},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3541,3542],{"id":123,"slug":3990,"dossier":47,"summary":3991,"aliases":3992,"sourceIds":3995,"published":3996,"modified":3997,"checkedAt":7,"severity":3998,"references":4001,"versionKeys":4014,"packageCount":32,"repositoryCount":105},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3993,3994],"CVE-2026-27628","PYSEC-2026-3005",[123,3994],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3999],{"type":3483,"score":4000},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4002,4004,4006,4008,4010,4011,4012],{"type":3487,"url":4003},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3490,"url":4005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3487,"url":4007},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3487,"url":4009},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3495,"url":3531},{"type":3495,"url":3535},{"type":3490,"url":4013},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3541,3542],{"id":124,"slug":4016,"dossier":47,"summary":4017,"aliases":4018,"sourceIds":4021,"published":4022,"modified":4023,"checkedAt":7,"severity":4024,"references":4029,"versionKeys":4039,"packageCount":32,"repositoryCount":781},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[4019,4020],"CVE-2026-34514","PYSEC-2026-2096",[124,4020],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[4025,4027],{"type":3483,"score":4026},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":4028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4030,4032,4034,4036,4037],{"type":3593,"url":4031},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3490,"url":4033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3593,"url":4035},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3495,"url":3812},{"type":3490,"url":4038},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3816,3817,3818,3819,3820,3821,3822,3823],{"id":125,"slug":4041,"dossier":47,"summary":4042,"aliases":4043,"sourceIds":4046,"published":4047,"modified":4048,"checkedAt":7,"severity":4049,"references":4051,"versionKeys":4062,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[4044,4045],"CVE-2026-49476","PYSEC-2026-3071",[125,4045],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[4050],{"type":3555,"score":3669},[4052,4054,4056,4058,4060],{"type":3487,"url":4053},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3495,"url":4055},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3495,"url":4057},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3490,"url":4059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3490,"url":4061},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[4063,4064,4065],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":126,"slug":4067,"dossier":47,"summary":4068,"aliases":4069,"sourceIds":4072,"published":4073,"modified":4074,"checkedAt":7,"severity":4075,"references":4078,"versionKeys":4095,"packageCount":32,"repositoryCount":4101},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[4070,4071],"CVE-2025-66471","PYSEC-2026-1994",[126,4071],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[4076],{"type":3483,"score":4077},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[4079,4081,4083,4085,4087,4089,4091,4093],{"type":3487,"url":4080},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3490,"url":4082},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3593,"url":4084},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3487,"url":4086},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":3490,"url":4088},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3487,"url":4090},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":3495,"url":4092},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3495,"url":4094},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[4096,4097,4098,4099,4100],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":127,"slug":4103,"dossier":91,"summary":4104,"aliases":4105,"sourceIds":4108,"published":4109,"modified":4110,"checkedAt":7,"severity":4111,"references":4114,"versionKeys":4123,"packageCount":32,"repositoryCount":3510},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[4106,4107],"BIT-pillow-2026-112393","CVE-2026-112393",[127],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[4112],{"type":3483,"score":4113},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4115,4117,4119,4121,4122],{"type":3487,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":3490,"url":4118},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":3487,"url":4120},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":128,"slug":4125,"dossier":47,"summary":4126,"aliases":4127,"sourceIds":4130,"published":4131,"modified":4132,"checkedAt":7,"severity":4133,"references":4136,"versionKeys":4149,"packageCount":32,"repositoryCount":105},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[4128,4129],"CVE-2025-30167","PYSEC-2026-1477",[128,4129],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[4134],{"type":3555,"score":4135},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4137,4139,4141,4143,4145,4147],{"type":3487,"url":4138},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3490,"url":4140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3487,"url":4142},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3495,"url":4144},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3495,"url":4146},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3490,"url":4148},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[4150],"pypi:jupyter-core@5.7.2",{"id":129,"slug":4152,"dossier":47,"summary":4153,"aliases":4154,"sourceIds":4158,"published":4159,"modified":4160,"checkedAt":7,"severity":4161,"references":4168,"versionKeys":4189,"packageCount":32,"repositoryCount":885},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[4155,4156,4157],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[129,4157],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[4162,4164,4166],{"type":3555,"score":4163},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3483,"score":4165},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3555,"score":4167},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4169,4171,4173,4175,4177,4179,4181,4183,4185,4187],{"type":3490,"url":4170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3955,"url":4172},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3955,"url":4174},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":3487,"url":4176},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":3495,"url":4178},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":3487,"url":4180},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3955,"url":4182},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":3490,"url":4184},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":3490,"url":4186},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":3490,"url":4188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[4190,4191,4192],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":130,"slug":4194,"dossier":47,"summary":4195,"aliases":4196,"sourceIds":4199,"published":4200,"modified":4201,"checkedAt":7,"severity":4202,"references":4204,"versionKeys":4218,"packageCount":32,"repositoryCount":885},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[4197,4198],"CVE-2025-3933","PYSEC-2026-1977",[130,4198],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[4203],{"type":3555,"score":3769},[4205,4207,4209,4211,4212,4214,4216],{"type":3490,"url":4206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":3487,"url":4208},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":3487,"url":4210},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":3495,"url":3742},{"type":3487,"url":4213},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":3495,"url":4215},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":3490,"url":4217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[3749,3750,3751],{"id":131,"slug":4220,"dossier":47,"summary":4221,"aliases":4222,"sourceIds":4225,"published":4226,"modified":4227,"checkedAt":7,"severity":4228,"references":4231,"versionKeys":4244,"packageCount":32,"repositoryCount":4101},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[4223,4224],"CVE-2026-21441","PYSEC-2026-1996",[131,4224],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[4229,4230],{"type":3555,"score":3669},{"type":3483,"score":4077},[4232,4234,4236,4238,4239,4241,4242],{"type":3487,"url":4233},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3490,"url":4235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3593,"url":4237},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3495,"url":4092},{"type":3487,"url":4240},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3495,"url":4094},{"type":3490,"url":4243},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[4096,4097,4098,4099,4100],{"id":132,"slug":4246,"dossier":47,"summary":4247,"aliases":4248,"sourceIds":4251,"published":4252,"modified":4253,"checkedAt":7,"severity":4254,"references":4258,"versionKeys":4289,"packageCount":32,"repositoryCount":105},"ghsa-3936-cmfr-pm3m-b8e96095","Black: Arbitrary file writes from unsanitized user input in cache file name",[4249,4250],"CVE-2026-32274","PYSEC-2026-2121",[132,4250],"2026-03-12T18:33:10Z","2026-09-10T03:50:36.703011526Z",[4255,4256],{"type":3555,"score":3586},{"type":3483,"score":4257},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4259,4261,4263,4265,4267,4269,4271,4273,4275,4277,4279,4281,4283,4285,4287],{"type":3490,"url":4260},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":3490,"url":4262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32274",{"type":3487,"url":4264},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F4176",{"type":3593,"url":4266},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",{"type":3593,"url":4268},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":3487,"url":4270},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fed770ba4dd50c419148a0fca2b43937a7447e1f9",{"type":3490,"url":4272},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3490,"url":4274},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3490,"url":4276},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3487,"url":4278},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":3955,"url":4280},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":3495,"url":4282},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":3490,"url":4284},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":3487,"url":4286},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2026-2121.yaml",{"type":3487,"url":4288},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",[4290,4291],"pypi:black@23.12.1","pypi:black@25.9.0",{"id":133,"slug":4293,"dossier":47,"summary":4294,"aliases":4295,"sourceIds":4298,"published":4299,"modified":4300,"checkedAt":7,"severity":4301,"references":4304,"versionKeys":4317,"packageCount":32,"repositoryCount":800},"ghsa-394h-qwmc-48pf-2e9bb5ce","virtualenv: Xonsh activation literals depend on the script decoding codec",[4296,4297],"BIT-virtualenv-2026-113718","CVE-2026-113718",[133],"2026-10-23T22:24:43Z","2026-10-29T10:55:57.228294866Z",[4302],{"type":3483,"score":4303},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4305,4307,4309,4311,4313,4315],{"type":3487,"url":4306},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-394h-qwmc-48pf",{"type":3490,"url":4308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113718",{"type":3487,"url":4310},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3432",{"type":3487,"url":4312},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe5fc2e6e189a877ff559af288919e3525d13e5e0",{"type":3495,"url":4314},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":3487,"url":4316},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.9",[4318,4319,4320,4321,4322],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.32.0","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":134,"slug":4324,"dossier":47,"summary":4325,"aliases":4326,"sourceIds":4328,"published":4329,"modified":4330,"checkedAt":7,"severity":4331,"references":4334,"versionKeys":4346,"packageCount":32,"repositoryCount":885},"ghsa-39mj-jf6j-2qj3-9b85a94b","pypdf: Possible infinite loop when hitting EOF in standard xref table",[4327],"CVE-2026-113794",[134],"2026-10-21T16:54:44Z","2026-10-21T17:00:26.618873039Z",[4332],{"type":3483,"score":4333},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4335,4337,4339,4341,4343,4344],{"type":3487,"url":4336},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-39mj-jf6j-2qj3",{"type":3487,"url":4338},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F4169",{"type":3487,"url":4340},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4170",{"type":3487,"url":4342},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F37e1cd681744bac38b159f7e1c614eee8d639c58",{"type":3495,"url":3531},{"type":3487,"url":4345},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.20.0",[3541,3542,3543],{"id":135,"slug":4348,"dossier":47,"summary":4349,"aliases":4350,"sourceIds":4354,"published":4355,"modified":4356,"checkedAt":7,"severity":4357,"references":4360,"versionKeys":4373,"packageCount":32,"repositoryCount":32},"ghsa-3cr3-8m4c-fpxw-0b16529f","Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)",[4351,4352,4353],"CVE-2026-105747","PYSEC-2026-4194","PYSEC-2026-4209",[135,4352],"2026-10-05T22:16:57.633Z","2026-10-15T14:56:00.401934996Z",[4358],{"type":3555,"score":4359},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4361,4363,4365,4367,4369,4371],{"type":3593,"url":4362},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-3cr3-8m4c-fpxw",{"type":3490,"url":4364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105747",{"type":3593,"url":4366},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4412",{"type":3593,"url":4368},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Febae65cd71c37c88b36185b406a449b92d8f7ffa",{"type":3495,"url":4370},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling",{"type":3490,"url":4372},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.131.0",[4374],"pypi:docling@2.58.0",{"id":136,"slug":4376,"dossier":47,"summary":4377,"aliases":4378,"sourceIds":4381,"published":4382,"modified":4383,"checkedAt":7,"severity":4384,"references":4388,"versionKeys":4403,"packageCount":32,"repositoryCount":105},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[4379,4380],"CVE-2026-40260","PYSEC-2026-3006",[136,4380],"2026-04-10T20:59:36Z","2026-09-10T03:50:42.398553260Z",[4385,4386],{"type":3555,"score":3769},{"type":3483,"score":4387},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4389,4391,4393,4395,4397,4398,4400,4401],{"type":3487,"url":4390},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3490,"url":4392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3487,"url":4394},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3487,"url":4396},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3495,"url":3531},{"type":3487,"url":4399},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3495,"url":3535},{"type":3490,"url":4402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3541,3542],{"id":137,"slug":4405,"dossier":47,"summary":4406,"aliases":4407,"sourceIds":4410,"published":4411,"modified":4412,"checkedAt":7,"severity":4413,"references":4418,"versionKeys":4432,"packageCount":32,"repositoryCount":847},"ghsa-3gq4-3j92-5w49-897f59b8","NLTK: Corpus Reader Sandbox Bypass",[4408,4409],"CVE-2026-79674","PYSEC-2026-3736",[137,4409],"2026-08-25T16:17:27.873Z","2026-09-08T17:15:03.431037417Z",[4414,4416],{"type":3483,"score":4415},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":4417},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4419,4421,4423,4425,4426,4428,4430],{"type":3744,"url":4420},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gq4-3j92-5w49",{"type":3490,"url":4422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79674",{"type":3487,"url":4424},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbc007200d123c1a98d74c2eb230f5e06c53886b8",{"type":3495,"url":3949},{"type":3487,"url":4427},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.3",{"type":3487,"url":4429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3736.yaml",{"type":3490,"url":4431},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-corpus-reader-constructors",[4433,3960,3961],"pypi:nltk@3.10.0",{"id":138,"slug":4435,"dossier":47,"summary":4436,"aliases":4437,"sourceIds":4440,"published":4441,"modified":4442,"checkedAt":7,"severity":4443,"references":4448,"versionKeys":4462,"packageCount":32,"repositoryCount":857},"ghsa-3gqm-fcw5-w839-cc39684a","NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure",[4438,4439],"CVE-2026-63311","PYSEC-2026-3723",[138,4439],"2026-08-22T15:16:19.233Z","2026-09-02T16:00:17.562331221Z",[4444,4446],{"type":3483,"score":4445},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3483,"score":4447},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4449,4451,4453,4455,4456,4457,4458,4460],{"type":3744,"url":4450},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gqm-fcw5-w839",{"type":3490,"url":4452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63311",{"type":3487,"url":4454},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3582",{"type":3487,"url":3947},{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":4459},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3723.yaml",{"type":3490,"url":4461},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-via-dns-resolution-failure",[3960,3961],{"id":139,"slug":4464,"dossier":47,"summary":4465,"aliases":4466,"sourceIds":4469,"published":4470,"modified":4471,"checkedAt":7,"severity":4472,"references":4479,"versionKeys":4495,"packageCount":32,"repositoryCount":32},"ghsa-3hhw-38pf-pxj6-71b22ab9","NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely",[4467,4468],"CVE-2026-62383","PYSEC-2026-3726",[139,4468],"2026-08-22T15:16:17.883Z","2026-09-08T16:45:03.602432270Z",[4473,4475,4477],{"type":3555,"score":4474},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3483,"score":4476},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":4478},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4480,4482,4484,4486,4488,4489,4491,4493],{"type":3744,"url":4481},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3hhw-38pf-pxj6",{"type":3490,"url":4483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62383",{"type":3487,"url":4485},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3727",{"type":3487,"url":4487},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fee1a42e51982c4dce6ad3ee77ff1ac43894288ab",{"type":3495,"url":3949},{"type":3487,"url":4490},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.2",{"type":3487,"url":4492},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3726.yaml",{"type":3490,"url":4494},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-ipipancorpusreader-symlink-arbitrary-file-read",[4433],{"id":140,"slug":4497,"dossier":47,"summary":4498,"aliases":4499,"sourceIds":4501,"published":4502,"modified":4503,"checkedAt":7,"severity":4504,"references":4506,"versionKeys":4519,"packageCount":32,"repositoryCount":66},"ghsa-3hv7-mjh2-fv65-5be6c7b0","Tornado: Unbounded query-string argument count allows event-loop-stalling DoS",[4500],"CVE-2026-103261",[140],"2026-09-30T23:49:25Z","2026-10-02T03:56:09.601689224Z",[4505],{"type":3555,"score":3769},[4507,4509,4511,4513,4515,4517],{"type":3487,"url":4508},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3hv7-mjh2-fv65",{"type":3487,"url":4510},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3719",{"type":3487,"url":4512},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F03945136ea9746eccf61caf88edae39642e59c93",{"type":3487,"url":4514},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8a61dd6005f42733015160f3c23a2bcffe200542",{"type":3495,"url":4516},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3487,"url":4518},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.9",[4520,4521,4522,4523,4524,4525],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5","pypi:tornado@6.5.7",{"id":141,"slug":4527,"dossier":91,"summary":4528,"aliases":4529,"sourceIds":4533,"published":4534,"modified":4535,"checkedAt":7,"severity":4536,"references":4540,"versionKeys":4551,"packageCount":32,"repositoryCount":3510},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[4530,4531,4532],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[141,4532],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[4537,4539],{"type":3483,"score":4538},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":3621},[4541,4543,4545,4547,4549,4550],{"type":3490,"url":4542},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":3490,"url":4544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":3955,"url":4546},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":3593,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":142,"slug":4553,"dossier":47,"summary":4554,"aliases":4555,"sourceIds":4558,"published":4559,"modified":4560,"checkedAt":7,"severity":4561,"references":4565,"versionKeys":4574,"packageCount":32,"repositoryCount":781},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[4556,4557],"CVE-2026-34517","PYSEC-2026-2099",[142,4557],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[4562,4564],{"type":3483,"score":4563},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":3769},[4566,4568,4570,4572,4573],{"type":3593,"url":4567},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3490,"url":4569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3593,"url":4571},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":143,"slug":4576,"dossier":47,"summary":4577,"aliases":4578,"sourceIds":4581,"published":4582,"modified":4583,"checkedAt":7,"severity":4584,"references":4586,"versionKeys":4596,"packageCount":32,"repositoryCount":781},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[4579,4580],"CVE-2026-49853","PYSEC-2026-3387",[143,4580],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[4585],{"type":3555,"score":3836},[4587,4589,4590,4592,4594],{"type":3487,"url":4588},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3495,"url":4516},{"type":3495,"url":4591},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3490,"url":4593},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3490,"url":4595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[4520,4521,4522,4523,4524],{"id":144,"slug":4598,"dossier":47,"summary":4599,"aliases":4600,"sourceIds":4603,"published":4604,"modified":4605,"checkedAt":7,"severity":4606,"references":4608,"versionKeys":4621,"packageCount":32,"repositoryCount":885},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[4601,4602],"CVE-2025-68480","PYSEC-2026-1605",[144,4602],"2025-12-22T20:20:07Z","2026-09-10T03:50:31.208550852Z",[4607],{"type":3555,"score":3769},[4609,4611,4613,4615,4617,4619],{"type":3487,"url":4610},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3490,"url":4612},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3487,"url":4614},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3495,"url":4616},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3495,"url":4618},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3490,"url":4620},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[4622,4623],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":145,"slug":4625,"dossier":47,"summary":4626,"aliases":4627,"sourceIds":4629,"published":4630,"modified":4631,"checkedAt":7,"severity":4632,"references":4634,"versionKeys":4646,"packageCount":32,"repositoryCount":885},"ghsa-42gh-23hr-vphw-953693c4","pypdf has possible long runtimes when retrieving page labels",[4628],"CVE-2026-119206",[145],"2026-10-30T23:08:55Z","2026-10-30T23:15:05.410552661Z",[4633],{"type":3483,"score":4538},[4635,4637,4639,4641,4643,4644],{"type":3487,"url":4636},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-42gh-23hr-vphw",{"type":3490,"url":4638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119206",{"type":3487,"url":4640},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4251",{"type":3487,"url":4642},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb891fef37000cd86baa6e9848a3387d080b3b03e",{"type":3495,"url":3531},{"type":3487,"url":4645},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.3",[3541,3542,3543],{"id":146,"slug":4648,"dossier":47,"summary":4649,"aliases":4650,"sourceIds":4653,"published":4654,"modified":4655,"checkedAt":7,"severity":4656,"references":4658,"versionKeys":4671,"packageCount":32,"repositoryCount":857},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[4651,4652],"CVE-2026-101918","PYSEC-2026-4141",[146,4652],"2026-09-30T15:41:05Z","2026-10-01T17:56:09.538835697Z",[4657],{"type":3555,"score":3769},[4659,4661,4663,4665,4666,4668,4669],{"type":3487,"url":4660},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":3490,"url":4662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":3487,"url":4664},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":3495,"url":3920},{"type":3487,"url":4667},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",{"type":3495,"url":3924},{"type":3490,"url":4670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",[3928,3929,3930],{"id":147,"slug":4673,"dossier":47,"summary":4674,"aliases":4675,"sourceIds":4678,"published":4679,"modified":4680,"checkedAt":7,"severity":4681,"references":4684,"versionKeys":4695,"packageCount":32,"repositoryCount":800},"ghsa-43mp-35q3-x3fq-895b1d20","virtualenv: Deletion recovery can change a symlink target's mode",[4676,4677],"BIT-virtualenv-2026-113724","CVE-2026-113724",[147],"2026-10-21T21:31:34Z","2026-10-29T10:55:47.691444554Z",[4682],{"type":3555,"score":4683},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4685,4687,4689,4691,4693,4694],{"type":3487,"url":4686},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-43mp-35q3-x3fq",{"type":3490,"url":4688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113724",{"type":3487,"url":4690},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3427",{"type":3487,"url":4692},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":148,"slug":4697,"dossier":91,"summary":4698,"aliases":4699,"sourceIds":4703,"published":4704,"modified":4705,"checkedAt":7,"severity":4706,"references":4711,"versionKeys":4722,"packageCount":32,"repositoryCount":3510},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[4700,4701,4702],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[148,4702],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[4707,4709],{"type":3483,"score":4708},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":4710},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[4712,4714,4716,4718,4720,4721],{"type":3744,"url":4713},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":3490,"url":4715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":3487,"url":4717},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":3593,"url":4719},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":149,"slug":4724,"dossier":47,"summary":4725,"aliases":4726,"sourceIds":4730,"published":4731,"modified":4732,"checkedAt":7,"severity":4733,"references":4735,"versionKeys":4747,"packageCount":32,"repositoryCount":4748},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[4727,4728,4729],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[149,4729],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[4734],{"type":3555,"score":3669},[4736,4738,4740,4742,4744,4745],{"type":3744,"url":4737},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3490,"url":4739},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3593,"url":4741},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3487,"url":4743},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3495,"url":3496},{"type":3490,"url":4746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3500,3501,3502,3503,3504,3505,3506,3507,3508],18,{"id":150,"slug":4750,"dossier":91,"summary":4751,"aliases":4752,"sourceIds":4755,"published":4756,"modified":4757,"checkedAt":7,"severity":4758,"references":4761,"versionKeys":4770,"packageCount":32,"repositoryCount":3510},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[4753,4754],"BIT-pillow-2026-112395","CVE-2026-112395",[150],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[4759],{"type":3555,"score":4760},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[4762,4764,4766,4768,4769],{"type":3487,"url":4763},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":3490,"url":4765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":3487,"url":4767},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":151,"slug":4772,"dossier":47,"summary":4773,"aliases":4774,"sourceIds":4777,"published":4778,"modified":4779,"checkedAt":7,"severity":4780,"references":4783,"versionKeys":4806,"packageCount":32,"repositoryCount":857},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[4775,4776],"CVE-2026-33236","PYSEC-2026-2237",[151,4776],"2026-03-19T12:42:42Z","2026-11-04T03:30:49.216144352Z",[4781],{"type":3555,"score":4782},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4784,4786,4788,4790,4791,4793,4795,4797,4799,4801,4802,4804],{"type":3744,"url":4785},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3490,"url":4787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3593,"url":4789},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3490,"url":4272},{"type":3490,"url":4792},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3490,"url":4794},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3487,"url":4796},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3487,"url":4798},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3955,"url":4800},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",{"type":3495,"url":3949},{"type":3487,"url":4803},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2237.yaml",{"type":3487,"url":4805},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",[3960,3961],{"id":152,"slug":4808,"dossier":47,"summary":4809,"aliases":4810,"sourceIds":4813,"published":4814,"modified":4815,"checkedAt":7,"severity":4816,"references":4819,"versionKeys":4832,"packageCount":32,"repositoryCount":800},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[4811,4812],"CVE-2025-50182","PYSEC-2026-1997",[152,4812],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[4817],{"type":3555,"score":4818},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4820,4822,4824,4826,4827,4829,4830],{"type":3487,"url":4821},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3490,"url":4823},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3593,"url":4825},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3495,"url":4092},{"type":3487,"url":4828},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3495,"url":4094},{"type":3490,"url":4831},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[4096,4097,4098,4099],{"id":153,"slug":4834,"dossier":47,"summary":4835,"aliases":4836,"sourceIds":4838,"published":4839,"modified":4840,"checkedAt":7,"severity":4841,"references":4844,"versionKeys":4853,"packageCount":32,"repositoryCount":3900},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[4837],"CVE-2026-111063",[153],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[4842],{"type":3483,"score":4843},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4845,4847,4849,4851,4852],{"type":3487,"url":4846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":3490,"url":4848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":3487,"url":4850},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":154,"slug":4855,"dossier":47,"summary":4856,"aliases":4857,"sourceIds":4860,"published":4861,"modified":4862,"checkedAt":7,"severity":4863,"references":4866,"versionKeys":4877,"packageCount":32,"repositoryCount":800},"ghsa-494p-63j8-28p3-74531279","virtualenv: Downloaded wheel selection and caching precede verification",[4858,4859],"BIT-virtualenv-2026-113714","CVE-2026-113714",[154],"2026-10-23T22:25:22Z","2026-10-29T10:55:43.999222952Z",[4864],{"type":3483,"score":4865},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4867,4869,4871,4873,4875,4876],{"type":3487,"url":4868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-494p-63j8-28p3",{"type":3490,"url":4870},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113714",{"type":3487,"url":4872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3430",{"type":3487,"url":4874},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F7babec66e043e1cc8bc66869a063653898719d96",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":155,"slug":4879,"dossier":47,"summary":4880,"aliases":4881,"sourceIds":4884,"published":4885,"modified":4886,"checkedAt":7,"severity":4887,"references":4889,"versionKeys":4904,"packageCount":32,"repositoryCount":105},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[4882,4883],"CVE-2026-22691","PYSEC-2026-1828",[155,4883],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[4888],{"type":3483,"score":4563},[4890,4892,4894,4896,4898,4899,4901,4902],{"type":3487,"url":4891},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3490,"url":4893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3487,"url":4895},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3487,"url":4897},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3495,"url":3531},{"type":3487,"url":4900},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3495,"url":3535},{"type":3490,"url":4903},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3541,3542],{"id":156,"slug":4906,"dossier":47,"summary":4907,"aliases":4908,"sourceIds":4911,"published":4912,"modified":4913,"checkedAt":7,"severity":4914,"references":4918,"versionKeys":4924,"packageCount":32,"repositoryCount":66},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[4909,4910],"CVE-2026-54273","PYSEC-2026-2107",[156,4910],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[4915,4917],{"type":3483,"score":4916},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":3669},[4919,4921,4923],{"type":3490,"url":4920},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3593,"url":4922},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":157,"slug":4926,"dossier":47,"summary":4927,"aliases":4928,"sourceIds":4931,"published":4932,"modified":4933,"checkedAt":7,"severity":4934,"references":4939,"versionKeys":4956,"packageCount":32,"repositoryCount":857},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[4929,4930],"CVE-2026-69112","PYSEC-2026-3804",[157,4930],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[4935,4937],{"type":3555,"score":4936},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":3483,"score":4938},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4940,4942,4944,4946,4948,4950,4952,4954],{"type":3490,"url":4941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":3487,"url":4943},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":3487,"url":4945},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":3487,"url":4947},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":3495,"url":4949},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":3487,"url":4951},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":3495,"url":4953},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":3490,"url":4955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[4957,4958,4959,4960],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":158,"slug":4962,"dossier":47,"summary":4963,"aliases":4964,"sourceIds":4966,"published":4967,"modified":4968,"checkedAt":7,"severity":4969,"references":4971,"versionKeys":4983,"packageCount":32,"repositoryCount":800},"ghsa-4j63-6c4x-wfg4-adb542fd","Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time",[4965],"CVE-2026-126192",[158],"2026-11-13T00:45:18Z","2026-11-13T01:00:06.040402597Z",[4970],{"type":3483,"score":3645},[4972,4974,4976,4978,4980,4981],{"type":3487,"url":4973},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-4j63-6c4x-wfg4",{"type":3490,"url":4975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126192",{"type":3487,"url":4977},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F304",{"type":3487,"url":4979},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fffb88cca745c591224f74a8e86414a85e8f35fc0",{"type":3495,"url":4055},{"type":3487,"url":4982},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.10",[4063,4064,4065,4984,4985],"pypi:soupsieve@2.8.4","pypi:soupsieve@2.9.1",{"id":159,"slug":4987,"dossier":47,"summary":4988,"aliases":4989,"sourceIds":4992,"published":4993,"modified":4994,"checkedAt":7,"severity":4995,"references":4998,"versionKeys":5009,"packageCount":32,"repositoryCount":32},"ghsa-4jhm-jv67-739f-fdb585fa","`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes",[4990,4991],"CVE-2026-49825","PYSEC-2026-2614",[159,4991],"2026-07-08T20:23:22Z","2026-07-13T16:42:41.379452174Z",[4996],{"type":3555,"score":4997},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[4999,5001,5003,5005,5007],{"type":3487,"url":5000},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3495,"url":5002},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean",{"type":3495,"url":5004},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flxml-html-clean",{"type":3490,"url":5006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3490,"url":5008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49825",[5010],"pypi:lxml-html-clean@0.4.3",{"id":160,"slug":5012,"dossier":47,"summary":5013,"aliases":5014,"sourceIds":5017,"published":5018,"modified":5019,"checkedAt":7,"severity":5020,"references":5024,"versionKeys":5028,"packageCount":32,"repositoryCount":66},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[5015,5016],"CVE-2026-54275","PYSEC-2026-237",[160,5016],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[5021,5023],{"type":3483,"score":5022},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":3669},[5025,5027],{"type":3490,"url":5026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":161,"slug":5030,"dossier":47,"summary":5031,"aliases":5032,"sourceIds":5035,"published":5036,"modified":5037,"checkedAt":7,"severity":5038,"references":5042,"versionKeys":5057,"packageCount":32,"repositoryCount":105},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[5033,5034],"CVE-2026-41313","PYSEC-2026-3007",[161,5034],"2026-04-16T21:30:12Z","2026-09-10T03:50:42.729754195Z",[5039,5040],{"type":3555,"score":3621},{"type":3483,"score":5041},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5043,5045,5047,5049,5051,5052,5054,5055],{"type":3487,"url":5044},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3490,"url":5046},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3487,"url":5048},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3487,"url":5050},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3495,"url":3531},{"type":3487,"url":5053},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3495,"url":3535},{"type":3490,"url":5056},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3541,3542],{"id":162,"slug":5059,"dossier":91,"summary":5060,"aliases":5061,"sourceIds":5065,"published":5066,"modified":5067,"checkedAt":7,"severity":5068,"references":5070,"versionKeys":5081,"packageCount":32,"repositoryCount":3510},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[5062,5063,5064],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[162,5064],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[5069],{"type":3555,"score":3621},[5071,5073,5075,5077,5079,5080],{"type":3490,"url":5072},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":3490,"url":5074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":3955,"url":5076},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":3593,"url":5078},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":163,"slug":5083,"dossier":47,"summary":5084,"aliases":5085,"sourceIds":5089,"published":5090,"modified":5091,"checkedAt":7,"severity":5092,"references":5096,"versionKeys":5105,"packageCount":32,"repositoryCount":66},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[5086,5087,5088],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[163,5088],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[5093,5095],{"type":3555,"score":5094},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3555,"score":3669},[5097,5099,5101,5103,5104],{"type":3744,"url":5098},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":3490,"url":5100},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":3593,"url":5102},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":3495,"url":3496},{"type":3490,"url":3498},[3504,3505,3506,3507,3508,3509],{"id":164,"slug":5107,"dossier":47,"summary":5108,"aliases":5109,"sourceIds":5111,"published":5112,"modified":5113,"checkedAt":7,"severity":5114,"references":5116,"versionKeys":5127,"packageCount":32,"repositoryCount":885},"ghsa-4vqv-7265-gm2w-2b71b418","pypdf has possible large memory usage for exceptions in strict mode",[5110],"CVE-2026-119207",[164],"2026-10-30T23:08:39Z","2026-10-30T23:15:07.229853114Z",[5115],{"type":3483,"score":4538},[5117,5119,5121,5123,5125,5126],{"type":3487,"url":5118},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vqv-7265-gm2w",{"type":3490,"url":5120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119207",{"type":3487,"url":5122},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4265",{"type":3487,"url":5124},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F64270258c0eced720f7960aecf8cef31afd39f8d",{"type":3495,"url":3531},{"type":3487,"url":4645},[3541,3542,3543],{"id":165,"slug":5129,"dossier":47,"summary":5130,"aliases":5131,"sourceIds":5135,"published":5136,"modified":5137,"checkedAt":7,"severity":5138,"references":5141,"versionKeys":5159,"packageCount":32,"repositoryCount":105},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[5132,5133,5134],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[165,5133],"2023-06-30T20:33:57Z","2026-09-10T03:50:01.918644849Z",[5139],{"type":3555,"score":5140},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[5142,5144,5146,5148,5150,5152,5153,5155,5157],{"type":3487,"url":5143},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":3490,"url":5145},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":3487,"url":5147},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":3487,"url":5149},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":3593,"url":5151},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":3495,"url":3531},{"type":3487,"url":5154},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":3495,"url":5156},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":3490,"url":5158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[5160],"pypi:pypdf2@3.0.1",{"id":166,"slug":5162,"dossier":47,"summary":5163,"aliases":5164,"sourceIds":5167,"published":5168,"modified":5169,"checkedAt":7,"severity":5170,"references":5173,"versionKeys":5186,"packageCount":32,"repositoryCount":857},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[5165,5166],"CVE-2025-6921","PYSEC-2026-1980",[166,5166],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[5171],{"type":3555,"score":5172},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5174,5176,5178,5180,5181,5183,5184],{"type":3490,"url":5175},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":3487,"url":5177},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":3487,"url":5179},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":3495,"url":3742},{"type":3487,"url":5182},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":3495,"url":4215},{"type":3490,"url":5185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[3749,3750,3751,3752],{"id":167,"slug":5188,"dossier":47,"summary":5189,"aliases":5190,"sourceIds":5194,"published":5195,"modified":5196,"checkedAt":7,"severity":5197,"references":5200,"versionKeys":5215,"packageCount":32,"repositoryCount":4748},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[5191,5192,5193],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[167,5193],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[5198],{"type":3555,"score":5199},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[5201,5203,5205,5207,5209,5211,5213,5214],{"type":3744,"url":5202},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3490,"url":5204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3593,"url":5206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3593,"url":5208},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3593,"url":5210},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3487,"url":5212},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3495,"url":3496},{"type":3490,"url":4746},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":168,"slug":5217,"dossier":47,"summary":5218,"aliases":5219,"sourceIds":5222,"published":5223,"modified":5224,"checkedAt":7,"severity":5225,"references":5227,"versionKeys":5239,"packageCount":32,"repositoryCount":105},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[5220,5221],"CVE-2026-22690","PYSEC-2026-1829",[168,5221],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[5226],{"type":3483,"score":4563},[5228,5230,5232,5233,5234,5235,5236,5237],{"type":3487,"url":5229},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3490,"url":5231},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3487,"url":4895},{"type":3487,"url":4897},{"type":3495,"url":3531},{"type":3487,"url":4900},{"type":3495,"url":3535},{"type":3490,"url":5238},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3541,3542],{"id":169,"slug":5241,"dossier":47,"summary":5242,"aliases":5243,"sourceIds":5245,"published":5246,"modified":5247,"checkedAt":7,"severity":5248,"references":5251,"versionKeys":5256,"packageCount":32,"repositoryCount":105},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[5244],"CVE-2026-58203",[169],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[5249],{"type":3555,"score":5250},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[5252,5254],{"type":3487,"url":5253},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3495,"url":5255},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[5257],"pypi:pydantic-settings@2.12.0",{"id":170,"slug":5259,"dossier":47,"summary":5260,"aliases":5261,"sourceIds":5264,"published":5265,"modified":5266,"checkedAt":7,"severity":5267,"references":5270,"versionKeys":5293,"packageCount":32,"repositoryCount":5296},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[5262,5263],"CVE-2026-4539","PYSEC-2026-2987",[170,5263],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[5268,5269],{"type":3555,"score":4163},{"type":3483,"score":4165},[5271,5273,5275,5277,5279,5281,5283,5285,5287,5289,5291],{"type":3490,"url":5272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3487,"url":5274},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3487,"url":5276},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3487,"url":5278},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3495,"url":5280},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3487,"url":5282},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3487,"url":5284},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3487,"url":5286},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3487,"url":5288},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3495,"url":5290},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3490,"url":5292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[5294,5295],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":171,"slug":5298,"dossier":47,"summary":5299,"aliases":5300,"sourceIds":5303,"published":5304,"modified":5305,"checkedAt":7,"severity":5306,"references":5309,"versionKeys":5322,"packageCount":32,"repositoryCount":105},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[5301,5302],"CVE-2026-54530","PYSEC-2026-3009",[171,5302],"2026-06-16T14:05:40Z","2026-09-10T03:50:48.282377637Z",[5307],{"type":3483,"score":5308},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5310,5312,5314,5315,5317,5318,5320],{"type":3487,"url":5311},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3487,"url":5313},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3495,"url":3531},{"type":3487,"url":5316},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3495,"url":3535},{"type":3490,"url":5319},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3490,"url":5321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3541,3542],{"id":172,"slug":5324,"dossier":47,"summary":5325,"aliases":5326,"sourceIds":5330,"published":5331,"modified":5332,"checkedAt":7,"severity":5333,"references":5338,"versionKeys":5348,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[5327,5328,5329],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[172,5329],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[5334,5336],{"type":3483,"score":5335},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":5337},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5339,5341,5343,5345,5347],{"type":3490,"url":5340},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":3490,"url":5342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":3487,"url":5344},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":3487,"url":5346},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":3495,"url":4178},[4190],{"id":173,"slug":5350,"dossier":47,"summary":5351,"aliases":5352,"sourceIds":5355,"published":5356,"modified":5357,"checkedAt":7,"severity":5358,"references":5361,"versionKeys":5373,"packageCount":32,"repositoryCount":800},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[5353,5354],"CVE-2025-69226","PYSEC-2026-1097",[173,5354],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[5359],{"type":3483,"score":5360},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5362,5364,5366,5368,5369,5371],{"type":3487,"url":5363},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3490,"url":5365},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3593,"url":5367},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3495,"url":3812},{"type":3495,"url":5370},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3490,"url":5372},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3816,3817,3818,3819,3820,3821,3822],{"id":174,"slug":5375,"dossier":47,"summary":5376,"aliases":5377,"sourceIds":5380,"published":5381,"modified":5382,"checkedAt":7,"severity":5383,"references":5385,"versionKeys":5400,"packageCount":32,"repositoryCount":800},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[5378,5379],"CVE-2026-104874","PYSEC-2026-4244",[174,5379],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[5384],{"type":3555,"score":3769},[5386,5388,5390,5392,5394,5396,5398],{"type":3487,"url":5387},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":3490,"url":5389},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":3487,"url":5391},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":3495,"url":5393},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":3487,"url":5395},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":3495,"url":5397},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":3490,"url":5399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[5401,5402],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":175,"slug":5404,"dossier":47,"summary":5405,"aliases":5406,"sourceIds":5409,"published":5410,"modified":5411,"checkedAt":7,"severity":5412,"references":5413,"versionKeys":5430,"packageCount":32,"repositoryCount":105},"ghsa-556j-vv39-8rqv-cc0c446a","Banks: Symlink traversal and arbitrary file disclosure\u002Foverwrite in DirectoryPromptRegistry",[5407,5408],"CVE-2026-107716","PYSEC-2026-4201",[175,5408],"2026-10-08T22:10:07Z","2026-10-15T14:55:55.950976679Z",[],[5414,5416,5418,5420,5422,5424,5426,5428],{"type":3487,"url":5415},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-556j-vv39-8rqv",{"type":3487,"url":5417},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F79",{"type":3487,"url":5419},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002F23ed13e50b4e217693fa5f9c30943fac8a41582f",{"type":3495,"url":5421},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":3487,"url":5423},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.5.1",{"type":3495,"url":5425},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":3490,"url":5427},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-556j-vv39-8rqv",{"type":3490,"url":5429},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-107716",[5431],"pypi:banks@2.2.0",{"id":176,"slug":5433,"dossier":47,"summary":5434,"aliases":5435,"sourceIds":5438,"published":5439,"modified":5440,"checkedAt":7,"severity":5441,"references":5443,"versionKeys":5454,"packageCount":32,"repositoryCount":800},"ghsa-558c-9hv2-4prj-1ba67416","virtualenv: Generated files can follow existing destination links",[5436,5437],"BIT-virtualenv-2026-113721","CVE-2026-113721",[176],"2026-10-22T17:03:12Z","2026-10-29T10:55:51.822936662Z",[5442],{"type":3555,"score":4683},[5444,5446,5448,5450,5452,5453],{"type":3487,"url":5445},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-558c-9hv2-4prj",{"type":3490,"url":5447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113721",{"type":3487,"url":5449},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3431",{"type":3487,"url":5451},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd25f28699eefb1fc34a251e5adf2b5de844c36cd",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":177,"slug":5456,"dossier":47,"summary":5457,"aliases":5458,"sourceIds":5461,"published":5462,"modified":5463,"checkedAt":7,"severity":5464,"references":5466,"versionKeys":5481,"packageCount":32,"repositoryCount":105},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[5459,5460],"CVE-2026-59937","PYSEC-2026-3610",[177,5460],"2026-07-23T15:07:33Z","2026-09-10T03:50:12.272620075Z",[5465],{"type":3483,"score":4387},[5467,5469,5471,5473,5475,5476,5478,5479],{"type":3487,"url":5468},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3490,"url":5470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3487,"url":5472},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3487,"url":5474},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3495,"url":3531},{"type":3487,"url":5477},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3495,"url":3535},{"type":3490,"url":5480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3541,3542],{"id":178,"slug":5483,"dossier":47,"summary":5484,"aliases":5485,"sourceIds":5487,"published":5488,"modified":5489,"checkedAt":7,"severity":5490,"references":5493,"versionKeys":5504,"packageCount":32,"repositoryCount":847},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[5486],"CVE-2026-112907",[178],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[5491],{"type":3555,"score":5492},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5494,5496,5498,5500,5502],{"type":3487,"url":5495},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":3487,"url":5497},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":3487,"url":5499},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":3495,"url":5501},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3487,"url":5503},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[5505,5506,5507,5508],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":179,"slug":5510,"dossier":47,"summary":5511,"aliases":5512,"sourceIds":5515,"published":5516,"modified":5517,"checkedAt":7,"severity":5518,"references":5525,"versionKeys":5544,"packageCount":32,"repositoryCount":857},"ghsa-568f-pv23-39p4-570af882","NLTK: Stable FrameNet and NKJP readers parse outside-root XML",[5513,5514],"CVE-2026-62385","PYSEC-2026-3728",[179,5514],"2026-08-22T15:16:18.833Z","2026-09-08T16:45:03.600943920Z",[5519,5521,5523],{"type":3555,"score":5520},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3483,"score":5522},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":5524},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5526,5528,5530,5532,5534,5536,5538,5539,5540,5542],{"type":3744,"url":5527},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-568f-pv23-39p4",{"type":3490,"url":5529},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62385",{"type":3487,"url":5531},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3579",{"type":3487,"url":5533},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3581",{"type":3487,"url":5535},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7d1389d0789c1eca56bd0ed444089e0a3972e3ed",{"type":3487,"url":5537},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbf3bf32786791394a1008258b4917a7f2d4dbcda",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":5541},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3728.yaml",{"type":3490,"url":5543},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-framenet-and-nkjp-readers",[3960,3961],{"id":180,"slug":5546,"dossier":47,"summary":5547,"aliases":5548,"sourceIds":5550,"published":5551,"modified":5552,"checkedAt":7,"severity":5553,"references":5555,"versionKeys":5567,"packageCount":32,"repositoryCount":885},"ghsa-5849-834g-hvw5-69c92c16","pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search",[5549],"CVE-2026-119203",[180],"2026-10-30T23:13:16Z","2026-10-30T23:30:04.101910128Z",[5554],{"type":3483,"score":4538},[5556,5558,5560,5562,5564,5565],{"type":3487,"url":5557},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5849-834g-hvw5",{"type":3490,"url":5559},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119203",{"type":3487,"url":5561},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4289",{"type":3487,"url":5563},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F06593f993789a4b573dd955730c1a7051128bb2a",{"type":3495,"url":3531},{"type":3487,"url":5566},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.4",[3541,3542,3543],{"id":181,"slug":5569,"dossier":91,"summary":5570,"aliases":5571,"sourceIds":5575,"published":5576,"modified":5577,"checkedAt":7,"severity":5578,"references":5581,"versionKeys":5590,"packageCount":32,"repositoryCount":3510},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[5572,5573,5574],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[181,5574],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[5579,5580],{"type":3483,"score":3868},{"type":3555,"score":3669},[5582,5584,5586,5588,5589],{"type":3744,"url":5583},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":3490,"url":5585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":3593,"url":5587},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":182,"slug":5592,"dossier":47,"summary":5593,"aliases":5594,"sourceIds":5598,"published":5599,"modified":5600,"checkedAt":7,"severity":5601,"references":5603,"versionKeys":5617,"packageCount":32,"repositoryCount":800},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[5595,5596,5597],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[182,5597],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[5602],{"type":3555,"score":4683},[5604,5606,5608,5610,5612,5613,5615],{"type":3487,"url":5605},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":3490,"url":5607},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":3487,"url":5609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":3593,"url":5611},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":3495,"url":4314},{"type":3495,"url":5614},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":3490,"url":5616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[4318,4319,4320,4321,4322],{"id":183,"slug":5619,"dossier":47,"summary":5620,"aliases":5621,"sourceIds":5624,"published":5625,"modified":5626,"checkedAt":7,"severity":5627,"references":5630,"versionKeys":5643,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[5622,5623],"CVE-2024-53981","PYSEC-2026-1851",[183,5623],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[5628,5629],{"type":3555,"score":3669},{"type":3483,"score":3868},[5631,5633,5635,5637,5639,5641],{"type":3487,"url":5632},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3490,"url":5634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3487,"url":5636},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3495,"url":5638},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3495,"url":5640},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3490,"url":5642},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[5644],"pypi:python-multipart@0.0.9",{"id":184,"slug":5646,"dossier":47,"summary":5647,"aliases":5648,"sourceIds":5651,"published":5652,"modified":5653,"checkedAt":7,"severity":5654,"references":5656,"versionKeys":5667,"packageCount":32,"repositoryCount":857},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[5649,5650],"CVE-2025-6638","PYSEC-2026-1981",[184,5650],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[5655],{"type":3555,"score":5172},[5657,5659,5660,5661,5662,5664,5665],{"type":3490,"url":5658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":3487,"url":5177},{"type":3487,"url":5179},{"type":3495,"url":3742},{"type":3487,"url":5663},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":3495,"url":4215},{"type":3490,"url":5666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[3749,3750,3751,3752],{"id":185,"slug":5669,"dossier":47,"summary":5670,"aliases":5671,"sourceIds":5673,"published":5674,"modified":5675,"checkedAt":7,"severity":5676,"references":5679,"versionKeys":5689,"packageCount":32,"repositoryCount":42},"ghsa-5cjw-f85j-cv6r-1c54e04a","Tornado: Open redirect via triple-slash redirect paths",[5672],"CVE-2026-126347",[185],"2026-11-13T20:31:22Z","2026-11-13T20:45:03.690595670Z",[5677],{"type":3555,"score":5678},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[5680,5682,5684,5686,5687],{"type":3487,"url":5681},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-5cjw-f85j-cv6r",{"type":3490,"url":5683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126347",{"type":3487,"url":5685},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fc503241622c0efe7c40110d89834ce8b7fead1e4",{"type":3495,"url":4516},{"type":3487,"url":5688},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.6.1",[4520,4521,4522,4523,4524,4525,5690],"pypi:tornado@6.6",{"id":186,"slug":5692,"dossier":47,"summary":5693,"aliases":5694,"sourceIds":5697,"published":5698,"modified":5699,"checkedAt":7,"severity":5700,"references":5704,"versionKeys":5718,"packageCount":32,"repositoryCount":32},"ghsa-5gh2-94qg-qppq-247161cc","NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution",[5695,5696],"CVE-2026-71513","PYSEC-2026-3867",[186,5696],"2026-08-22T15:31:03Z","2026-09-10T12:25:33.900504877Z",[5701,5702],{"type":3555,"score":3691},{"type":3483,"score":5703},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5705,5707,5709,5710,5712,5714,5716],{"type":3490,"url":5706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71513",{"type":3487,"url":5708},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fc3e37113742a1ebeeb4f2ca58941f320f98805ea",{"type":3495,"url":3949},{"type":3487,"url":5711},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fpicklesec.py#L119-L124",{"type":3487,"url":5713},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass",{"type":3495,"url":5715},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3490,"url":5717},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gh2-94qg-qppq",[4433],{"id":187,"slug":5720,"dossier":47,"summary":5721,"aliases":5722,"sourceIds":5724,"published":5725,"modified":5726,"checkedAt":7,"severity":5727,"references":5729,"versionKeys":5746,"packageCount":32,"repositoryCount":857},"ghsa-5h93-6whr-6q8j-24a4ef90","Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies",[5723],"CVE-2026-116685",[187],"2026-10-27T21:05:34Z","2026-10-27T21:15:03.819223133Z",[5728],{"type":3555,"score":5520},[5730,5732,5734,5736,5738,5740,5742,5744],{"type":3487,"url":5731},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-5h93-6whr-6q8j",{"type":3487,"url":5733},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3397",{"type":3487,"url":5735},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3448",{"type":3487,"url":5737},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F2106335745563b2321b8c73fef2c12903d00aa6e",{"type":3487,"url":5739},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fc6762e821c527925f0b617db216d00fbd1d0bf99",{"type":3495,"url":5741},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3487,"url":5743},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.30.0",{"type":3487,"url":5745},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv2.2.0",[5747,5748,5749,5750],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0","pypi:mcp@1.28.1",{"id":188,"slug":5752,"dossier":47,"summary":5753,"aliases":5754,"sourceIds":5757,"published":5758,"modified":5759,"checkedAt":7,"severity":5760,"references":5762,"versionKeys":5775,"packageCount":32,"repositoryCount":105},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[5755,5756],"CVE-2026-49460","PYSEC-2026-3010",[188,5756],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[5761],{"type":3483,"score":3558},[5763,5765,5767,5768,5770,5771,5773],{"type":3487,"url":5764},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3487,"url":5766},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3495,"url":3531},{"type":3487,"url":5769},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3495,"url":3535},{"type":3490,"url":5772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3490,"url":5774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3541,3542],{"id":189,"slug":5777,"dossier":47,"summary":5778,"aliases":5779,"sourceIds":5781,"published":5782,"modified":5783,"checkedAt":7,"severity":5784,"references":5787,"versionKeys":5799,"packageCount":32,"repositoryCount":885},"ghsa-5hx5-vpf9-5wcv-7c309475","pypdf: Unvalidated JPEG image data loading",[5780],"CVE-2026-113786",[189],"2026-10-21T19:58:10Z","2026-10-21T20:15:04.178781594Z",[5785],{"type":3483,"score":5786},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5788,5790,5792,5794,5796,5797],{"type":3487,"url":5789},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hx5-vpf9-5wcv",{"type":3490,"url":5791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113786",{"type":3487,"url":5793},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4222",{"type":3487,"url":5795},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F512d8eb94eb04be1d1c90504e6da2dcef8679e07",{"type":3495,"url":3531},{"type":3487,"url":5798},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.1",[3541,3542,3543],{"id":190,"slug":5801,"dossier":47,"summary":5802,"aliases":5803,"sourceIds":5806,"published":5807,"modified":5808,"checkedAt":7,"severity":5809,"references":5811,"versionKeys":5826,"packageCount":32,"repositoryCount":885},"ghsa-5jq2-8x83-x246-3e30f00a","pypdf: Possible long runtimes\u002Flarge memory usage when parsing indirect objects",[5804,5805],"CVE-2026-102994","PYSEC-2026-4153",[190,5805],"2026-10-01T15:05:53Z","2026-10-01T17:55:50.646603075Z",[5810],{"type":3483,"score":3868},[5812,5814,5816,5818,5820,5821,5823,5824],{"type":3487,"url":5813},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5jq2-8x83-x246",{"type":3490,"url":5815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102994",{"type":3487,"url":5817},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4055",{"type":3487,"url":5819},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F82501d2993c6387833c4949d205caeb188f8bb9e",{"type":3495,"url":3531},{"type":3487,"url":5822},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.18.0",{"type":3495,"url":3535},{"type":3490,"url":5825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jq2-8x83-x246",[3541,3542,3543],{"id":191,"slug":5828,"dossier":47,"summary":5829,"aliases":5830,"sourceIds":5833,"published":5834,"modified":5835,"checkedAt":7,"severity":5836,"references":5839,"versionKeys":5856,"packageCount":32,"repositoryCount":5296},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[5831,5832],"CVE-2026-64847","PYSEC-2026-4024",[191,5832],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[5837],{"type":3483,"score":5838},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5840,5842,5844,5846,5848,5850,5852,5854],{"type":3487,"url":5841},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3487,"url":5843},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":3487,"url":5845},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":3495,"url":5847},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":3487,"url":5849},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":3495,"url":5851},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":3490,"url":5853},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3490,"url":5855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[5857,5858,5859,5860,5861,5862,5863,5864],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":192,"slug":5866,"dossier":47,"summary":5867,"aliases":5868,"sourceIds":5871,"published":5872,"modified":5873,"checkedAt":7,"severity":5874,"references":5876,"versionKeys":5890,"packageCount":32,"repositoryCount":105},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[5869,5870],"CVE-2026-59938","PYSEC-2026-3611",[192,5870],"2026-07-23T15:06:58Z","2026-09-10T03:51:10.495417380Z",[5875],{"type":3483,"score":4387},[5877,5879,5881,5883,5885,5886,5887,5888],{"type":3487,"url":5878},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3490,"url":5880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3487,"url":5882},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3487,"url":5884},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3495,"url":3531},{"type":3487,"url":5477},{"type":3495,"url":3535},{"type":3490,"url":5889},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3541,3542],{"id":193,"slug":5892,"dossier":47,"summary":5893,"aliases":5894,"sourceIds":5898,"published":5899,"modified":5900,"checkedAt":7,"severity":5901,"references":5906,"versionKeys":5923,"packageCount":32,"repositoryCount":857},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[5895,5896,5897],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[193,5897],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[5902,5904],{"type":3483,"score":5903},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3555,"score":5905},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5907,5909,5911,5913,5915,5917,5919,5921],{"type":3744,"url":5908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3490,"url":5910},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3955,"url":5912},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3593,"url":5914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3487,"url":5916},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3495,"url":5918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3487,"url":5920},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3600,"url":5922},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[5924,5925,5926,5927],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":194,"slug":5929,"dossier":47,"summary":5930,"aliases":5931,"sourceIds":5934,"published":5935,"modified":5936,"checkedAt":7,"severity":5937,"references":5939,"versionKeys":5948,"packageCount":32,"repositoryCount":828},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[5932,5933],"CVE-2026-53539","PYSEC-2026-3036",[194,5933],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[5938],{"type":3555,"score":3669},[5940,5942,5943,5944,5946],{"type":3487,"url":5941},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3495,"url":5638},{"type":3495,"url":5640},{"type":3490,"url":5945},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3490,"url":5947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[5949,5950,5951,5644],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":195,"slug":5953,"dossier":47,"summary":5954,"aliases":5955,"sourceIds":5958,"published":5959,"modified":5960,"checkedAt":7,"severity":5961,"references":5964,"versionKeys":5974,"packageCount":32,"repositoryCount":800},"ghsa-5vjq-rrrf-7h2q-86d7b4a3","virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST",[5956,5957],"BIT-virtualenv-2026-113726","CVE-2026-113726",[195],"2026-10-21T16:46:23Z","2026-10-29T10:55:33.825448161Z",[5962],{"type":3555,"score":5963},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5965,5967,5969,5971,5972],{"type":3487,"url":5966},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-5vjq-rrrf-7h2q",{"type":3490,"url":5968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113726",{"type":3487,"url":5970},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5b915367da82bd024b2a0d28d2f98007034b4aa2",{"type":3495,"url":4314},{"type":3487,"url":5973},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.4",[4318,4319,4320,4321,4322],{"id":196,"slug":5976,"dossier":47,"summary":5977,"aliases":5978,"sourceIds":5981,"published":5982,"modified":5983,"checkedAt":7,"severity":5984,"references":5986,"versionKeys":5997,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[5979,5980],"CVE-2026-48804","PYSEC-2026-3042",[196,5980],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[5985],{"type":3555,"score":3669},[5987,5989,5991,5993,5995],{"type":3487,"url":5988},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3495,"url":5990},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":3495,"url":5992},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":3490,"url":5994},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3490,"url":5996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[5998],"pypi:python-socketio@5.14.3",{"id":197,"slug":6000,"dossier":47,"summary":6001,"aliases":6002,"sourceIds":6008,"published":6009,"modified":6010,"checkedAt":7,"severity":6011,"references":6018,"versionKeys":6038,"packageCount":32,"repositoryCount":857},"ghsa-5wp5-5229-5g6q-fd7d105f","NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection",[6003,6004,6005,6006,6007],"CVE-2026-12259","CVE-2026-63310","GHSA-gf32-cmjh-8m9v","PYSEC-2026-3729","PYSEC-2026-4318",[197,6006,6007],"2026-08-03T08:17:17.880Z","2026-10-16T10:56:05.808390648Z",[6012,6014,6016],{"type":3555,"score":6013},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3555,"score":6015},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",{"type":3555,"score":6017},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6019,6021,6023,6025,6027,6028,6030,6032,6034,6036],{"type":3744,"url":6020},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",{"type":3490,"url":6022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12259",{"type":3487,"url":6024},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3449",{"type":3487,"url":6026},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0e26734a61094b628d93e26dc18dd7302567ac46",{"type":3495,"url":3949},{"type":3487,"url":6029},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3487,"url":6031},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3729.yaml",{"type":3955,"url":6033},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F659ccf6d-12d4-4d4a-84c0-078633c35a5d",{"type":3490,"url":6035},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-missing-post-download-integrity-verification",{"type":3490,"url":6037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",[3960,3961],{"id":198,"slug":6040,"dossier":47,"summary":6041,"aliases":6042,"sourceIds":6044,"published":6045,"modified":6046,"checkedAt":7,"severity":6047,"references":6049,"versionKeys":6056,"packageCount":32,"repositoryCount":3900},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[6043],"CVE-2026-111064",[198],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[6048],{"type":3483,"score":3484},[6050,6052,6054,6055],{"type":3487,"url":6051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":3487,"url":6053},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":199,"slug":6058,"dossier":91,"summary":6059,"aliases":6060,"sourceIds":6064,"published":6065,"modified":6066,"checkedAt":7,"severity":6067,"references":6071,"versionKeys":6080,"packageCount":32,"repositoryCount":3510},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[6061,6062,6063],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[199,6063],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[6068,6070],{"type":3483,"score":6069},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":5337},[6072,6074,6076,6078,6079],{"type":3744,"url":6073},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":3490,"url":6075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":3593,"url":6077},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":200,"slug":6082,"dossier":47,"summary":6083,"aliases":6084,"sourceIds":6088,"published":6089,"modified":6090,"checkedAt":7,"severity":6091,"references":6093,"versionKeys":6103,"packageCount":32,"repositoryCount":4748},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[6085,6086,6087],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[200,6087],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[6092],{"type":3555,"score":3669},[6094,6096,6098,6099,6101,6102],{"type":3744,"url":6095},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3490,"url":6097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3593,"url":4741},{"type":3487,"url":6100},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3495,"url":3496},{"type":3490,"url":4746},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":201,"slug":6105,"dossier":47,"summary":6106,"aliases":6107,"sourceIds":6110,"published":6111,"modified":6112,"checkedAt":7,"severity":6113,"references":6115,"versionKeys":6130,"packageCount":32,"repositoryCount":105},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[6108,6109],"CVE-2026-59936","PYSEC-2026-3612",[201,6109],"2026-07-23T16:36:41Z","2026-09-10T03:51:10.501615101Z",[6114],{"type":3483,"score":3868},[6116,6118,6120,6122,6124,6125,6127,6128],{"type":3487,"url":6117},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3490,"url":6119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3487,"url":6121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3487,"url":6123},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3495,"url":3531},{"type":3487,"url":6126},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3495,"url":3535},{"type":3490,"url":6129},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3541,3542],{"id":202,"slug":6132,"dossier":91,"summary":6133,"aliases":6134,"sourceIds":6137,"published":6138,"modified":6139,"checkedAt":7,"severity":6140,"references":6142,"versionKeys":6151,"packageCount":32,"repositoryCount":3510},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[6135,6136],"BIT-pillow-2026-112399","CVE-2026-112399",[202],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[6141],{"type":3483,"score":3868},[6143,6145,6147,6149,6150],{"type":3487,"url":6144},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":3490,"url":6146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":3487,"url":6148},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":203,"slug":6153,"dossier":47,"summary":6154,"aliases":6155,"sourceIds":6159,"published":6160,"modified":6161,"checkedAt":7,"severity":6162,"references":6165,"versionKeys":6179,"packageCount":32,"repositoryCount":3900},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[6156,6157,6158],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[203,6158],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[6163,6164],{"type":3555,"score":4167},{"type":3483,"score":3558},[6166,6168,6170,6172,6174,6176,6177],{"type":3490,"url":6167},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3490,"url":6169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3487,"url":6171},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":3487,"url":6173},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":3487,"url":6175},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":3495,"url":3496},{"type":3490,"url":6178},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3503,3504,3505,3506,3507],{"id":204,"slug":6181,"dossier":47,"summary":6182,"aliases":6183,"sourceIds":6185,"published":6186,"modified":6187,"checkedAt":7,"severity":6188,"references":6190,"versionKeys":6201,"packageCount":32,"repositoryCount":885},"ghsa-62m5-6wh8-28x7-ed6d2edf","pypdf has possible long runtimes\u002Flarge memory usage for encrypted PDF files",[6184],"CVE-2026-119208",[204],"2026-10-30T23:08:24Z","2026-10-30T23:15:05.408554649Z",[6189],{"type":3483,"score":4538},[6191,6193,6195,6197,6199,6200],{"type":3487,"url":6192},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-62m5-6wh8-28x7",{"type":3490,"url":6194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119208",{"type":3487,"url":6196},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4270",{"type":3487,"url":6198},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F82b91951dc74496bb3efe6465434f041bb6a5e6b",{"type":3495,"url":3531},{"type":3487,"url":4645},[3541,3542,3543],{"id":205,"slug":6203,"dossier":47,"summary":6204,"aliases":6205,"sourceIds":6209,"published":6210,"modified":6211,"checkedAt":7,"severity":6212,"references":6215,"versionKeys":6231,"packageCount":32,"repositoryCount":4748},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[6206,6207,6208],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[205,6208],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[6213],{"type":3483,"score":6214},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6216,6218,6220,6222,6224,6225,6227,6229],{"type":3487,"url":6217},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3490,"url":6219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3487,"url":6221},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3487,"url":6223},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3495,"url":3496},{"type":3487,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3495,"url":6228},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3490,"url":6230},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":206,"slug":6233,"dossier":47,"summary":6234,"aliases":6235,"sourceIds":6240,"published":6241,"modified":6242,"checkedAt":7,"severity":6243,"references":6245,"versionKeys":6273,"packageCount":32,"repositoryCount":6281},"ghsa-63cw-57p8-fm3p-01ac35c7","PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files",[6236,6237,6238,6239],"BIT-pytorch-2026-24747","CVE-2026-24747","PYSEC-2026-1856","PYSEC-2026-2286",[206,6239],"2026-01-27T20:10:54Z","2026-11-04T03:15:10.870748916Z",[6244],{"type":3555,"score":3691},[6246,6248,6250,6252,6254,6256,6258,6260,6262,6264,6265,6267,6269,6271],{"type":3490,"url":6247},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3490,"url":6249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24747",{"type":3955,"url":6251},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":3490,"url":6253},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3487,"url":6255},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":3955,"url":6257},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3490,"url":6259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3487,"url":6261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch\u002FPYSEC-2026-1856.yaml",{"type":3487,"url":6263},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2026-2286.yaml",{"type":3495,"url":4178},{"type":3593,"url":6266},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",{"type":3490,"url":6268},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":3487,"url":6270},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytorch",{"type":3487,"url":6272},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",[4190,4191,4192,6274,6275,6276,6277,6278,6279,6280],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu","pypi:torch@2.9.1+cu128",14,{"id":207,"slug":6283,"dossier":47,"summary":6284,"aliases":6285,"sourceIds":6288,"published":6289,"modified":6290,"checkedAt":7,"severity":6291,"references":6297,"versionKeys":6308,"packageCount":32,"repositoryCount":781},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[6286,6287],"CVE-2026-34520","PYSEC-2026-2102",[207,6287],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[6292,6294,6295],{"type":3555,"score":6293},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3483,"score":4026},{"type":3483,"score":6296},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6298,6300,6302,6304,6305,6306],{"type":3593,"url":6299},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3490,"url":6301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3593,"url":6303},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3495,"url":3812},{"type":3490,"url":4038},{"type":3487,"url":6307},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3816,3817,3818,3819,3820,3821,3822,3823],{"id":208,"slug":6310,"dossier":47,"summary":6311,"aliases":6312,"sourceIds":6315,"published":6316,"modified":6317,"checkedAt":7,"severity":6318,"references":6321,"versionKeys":6327,"packageCount":32,"repositoryCount":66},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[6313,6314],"CVE-2026-54277","PYSEC-2026-2110",[208,6314],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[6319,6320],{"type":3483,"score":4916},{"type":3555,"score":3669},[6322,6324,6326],{"type":3490,"url":6323},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3593,"url":6325},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":209,"slug":6329,"dossier":47,"summary":6330,"aliases":6331,"sourceIds":6333,"published":6334,"modified":6335,"checkedAt":7,"severity":6336,"references":6339,"versionKeys":6351,"packageCount":32,"repositoryCount":105},"ghsa-64vx-6h2c-rjh7-b0a1de43","Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE",[6332],"CVE-2026-61536",[209],"2026-11-05T17:51:02Z","2026-11-05T18:00:04.136442249Z",[6337],{"type":3555,"score":6338},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6340,6342,6344,6346,6348,6349],{"type":3487,"url":6341},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-64vx-6h2c-rjh7",{"type":3490,"url":6343},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-61536",{"type":3487,"url":6345},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F75",{"type":3487,"url":6347},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fe443f112b80a20ac24438afe4eb8f8a746a8396d",{"type":3495,"url":5421},{"type":3487,"url":6350},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.3",[5431],{"id":210,"slug":6353,"dossier":47,"summary":6354,"aliases":6355,"sourceIds":6359,"published":6360,"modified":6361,"checkedAt":7,"severity":6362,"references":6366,"versionKeys":6377,"packageCount":32,"repositoryCount":3723},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[6356,6357,6358],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[210,6358],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[6363,6364],{"type":3483,"score":4843},{"type":3555,"score":6365},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6367,6369,6371,6373,6375,6376],{"type":3490,"url":6368},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":3490,"url":6370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":3955,"url":6372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":3593,"url":6374},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":3495,"url":3496},{"type":3490,"url":3498},[3503,3504,3505,3506,3507,3508,3509],{"id":211,"slug":6379,"dossier":91,"summary":6380,"aliases":6381,"sourceIds":6384,"published":6385,"modified":6386,"checkedAt":7,"severity":6387,"references":6390,"versionKeys":6399,"packageCount":32,"repositoryCount":742},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[6382,6383],"CVE-2026-45409","PYSEC-2026-215",[211,6383],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[6388,6389],{"type":3555,"score":3769},{"type":3483,"score":4387},[6391,6393,6395,6397],{"type":3490,"url":6392},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3490,"url":6394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3495,"url":6396},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3487,"url":6398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[6400,6401,6402,6403],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",{"id":212,"slug":6405,"dossier":91,"summary":6406,"aliases":6407,"sourceIds":6410,"published":6411,"modified":6412,"checkedAt":7,"severity":6413,"references":6415,"versionKeys":6424,"packageCount":32,"repositoryCount":3510},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[6408,6409],"BIT-pillow-2026-112400","CVE-2026-112400",[212],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[6414],{"type":3483,"score":3868},[6416,6418,6420,6422,6423],{"type":3487,"url":6417},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":3490,"url":6419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":3487,"url":6421},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":213,"slug":6426,"dossier":47,"summary":6427,"aliases":6428,"sourceIds":6430,"published":6431,"modified":6432,"checkedAt":7,"severity":6433,"references":6435,"versionKeys":6447,"packageCount":32,"repositoryCount":800},"ghsa-6655-6qjp-jx7x-ff241ef7","Soup Sieve: Exponential ReDoS in selector compilation via \\9-run in CSS_ESCAPES\u002FIDENTIFIER",[6429],"CVE-2026-126191",[213],"2026-11-13T16:39:43Z","2026-11-13T16:45:03.387641194Z",[6434],{"type":3555,"score":3669},[6436,6438,6440,6442,6444,6445],{"type":3487,"url":6437},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-6655-6qjp-jx7x",{"type":3490,"url":6439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126191",{"type":3487,"url":6441},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F300",{"type":3487,"url":6443},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fdbfa2854ff31a863326bd6660d4e55c6f068db9e",{"type":3495,"url":4055},{"type":3487,"url":6446},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F3.0",[4063,4064,4065,4984,4985],{"id":214,"slug":6449,"dossier":47,"summary":6450,"aliases":6451,"sourceIds":6454,"published":6455,"modified":6456,"checkedAt":7,"severity":6457,"references":6461,"versionKeys":6479,"packageCount":32,"repositoryCount":857},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[6452,6453],"CVE-2026-0847","PYSEC-2026-98",[214,6453],"2026-03-04T19:16:10.683Z","2026-11-04T03:30:09.539281506Z",[6458,6460],{"type":3555,"score":6459},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3555,"score":5524},[6462,6464,6465,6466,6468,6470,6471,6473,6475,6477],{"type":3490,"url":6463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3487,"url":4272},{"type":3487,"url":4792},{"type":3487,"url":6467},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-0847",{"type":3487,"url":6469},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444608",{"type":3495,"url":3949},{"type":3487,"url":6472},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3744,"url":6474},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3487,"url":6476},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-0847.json",{"type":3490,"url":6478},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3960,3961],{"id":215,"slug":6481,"dossier":47,"summary":6482,"aliases":6483,"sourceIds":6486,"published":6487,"modified":6488,"checkedAt":7,"severity":6489,"references":6491,"versionKeys":6502,"packageCount":32,"repositoryCount":800},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[6484,6485],"CVE-2025-69224","PYSEC-2026-1099",[215,6485],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[6490],{"type":3483,"score":4026},[6492,6494,6496,6498,6499,6500],{"type":3487,"url":6493},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3490,"url":6495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3593,"url":6497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":6501},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3816,3817,3818,3819,3820,3821,3822],{"id":216,"slug":6504,"dossier":91,"summary":6505,"aliases":6506,"sourceIds":6508,"published":6509,"modified":6510,"checkedAt":7,"severity":6511,"references":6514,"versionKeys":6523,"packageCount":32,"repositoryCount":3510},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[6507],"CVE-2026-112909",[216],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[6512],{"type":3555,"score":6513},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[6515,6517,6519,6520,6521,6522],{"type":3487,"url":6516},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":3490,"url":6518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":3487,"url":5497},{"type":3487,"url":5499},{"type":3495,"url":5501},{"type":3487,"url":5503},[6524,6525,6526,6527,6528,5505,5506,5507,5508],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":217,"slug":6530,"dossier":47,"summary":6531,"aliases":6532,"sourceIds":6535,"published":6536,"modified":6537,"checkedAt":7,"severity":6538,"references":6542,"versionKeys":6554,"packageCount":32,"repositoryCount":66},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[6533,6534],"CVE-2026-1839","PYSEC-2026-2288",[217,6534],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[6539,6541],{"type":3555,"score":6540},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":3555,"score":5963},[6543,6545,6547,6548,6550,6552],{"type":3490,"url":6544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":3593,"url":6546},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":3495,"url":3742},{"type":3487,"url":6549},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":3744,"url":6551},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":3490,"url":6553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[3749,3750,3751,3752,3753,3754,3755,3756,3757],{"id":218,"slug":6556,"dossier":47,"summary":6557,"aliases":6558,"sourceIds":6560,"published":6561,"modified":6562,"checkedAt":7,"severity":6563,"references":6565,"versionKeys":6575,"packageCount":32,"repositoryCount":885},"ghsa-6c7f-9265-g8fw-8ae34bdf","pypdf: Possible long runtimes for repeated references to the same missing object",[6559],"CVE-2026-115572",[218],"2026-10-23T20:55:15Z","2026-10-23T21:00:06.235957799Z",[6564],{"type":3483,"score":4538},[6566,6568,6570,6572,6573],{"type":3487,"url":6567},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-6c7f-9265-g8fw",{"type":3487,"url":6569},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4240",{"type":3487,"url":6571},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F68a0e5046cc9e14a6c24a21a713f3c7fbde18b4b",{"type":3495,"url":3531},{"type":3487,"url":6574},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.2",[3541,3542,3543],{"id":219,"slug":6577,"dossier":47,"summary":6578,"aliases":6579,"sourceIds":6581,"published":6582,"modified":6583,"checkedAt":7,"severity":6584,"references":6586,"versionKeys":6595,"packageCount":32,"repositoryCount":3900},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[6580],"CVE-2026-111065",[219],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[6585],{"type":3483,"score":4387},[6587,6589,6591,6593,6594],{"type":3487,"url":6588},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":3490,"url":6590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":3487,"url":6592},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":220,"slug":6597,"dossier":47,"summary":6598,"aliases":6599,"sourceIds":6602,"published":6603,"modified":6604,"checkedAt":7,"severity":6605,"references":6607,"versionKeys":6616,"packageCount":32,"repositoryCount":857},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[6600,6601],"CVE-2026-12072","PYSEC-2026-3581",[220,6601],"2026-07-31T16:50:55Z","2026-09-10T03:51:10.746883878Z",[6606],{"type":3555,"score":5524},[6608,6610,6611,6612,6614],{"type":3487,"url":6609},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3495,"url":3949},{"type":3495,"url":5715},{"type":3490,"url":6613},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3490,"url":6615},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3960,3961],{"id":221,"slug":6618,"dossier":47,"summary":6619,"aliases":6620,"sourceIds":6623,"published":6624,"modified":6625,"checkedAt":7,"severity":6626,"references":6631,"versionKeys":6645,"packageCount":32,"repositoryCount":847},"ghsa-6hwm-xvph-95vm-a4237eb0","NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary",[6621,6622],"CVE-2026-78680","PYSEC-2026-3868",[221,6622],"2026-09-01T20:27:20Z","2026-09-10T12:25:25.368160026Z",[6627,6629],{"type":3555,"score":6628},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3483,"score":6630},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6632,6634,6636,6638,6639,6640,6642,6643],{"type":3487,"url":6633},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",{"type":3490,"url":6635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78680",{"type":3487,"url":6637},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1a3cd1764ab3deb084fb66d0ffb4873717659538",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":6641},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-code-execution-via-graphviz-dot-binary",{"type":3495,"url":5715},{"type":3490,"url":6644},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",[4433,3960,3961],{"id":222,"slug":6647,"dossier":47,"summary":6648,"aliases":6649,"sourceIds":6652,"published":6653,"modified":6654,"checkedAt":7,"severity":6655,"references":6657,"versionKeys":6668,"packageCount":32,"repositoryCount":800},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[6650,6651],"CVE-2025-69228","PYSEC-2026-1100",[222,6651],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[6656],{"type":3483,"score":4916},[6658,6660,6662,6664,6665,6666],{"type":3487,"url":6659},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3490,"url":6661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3593,"url":6663},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":6667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3816,3817,3818,3819,3820,3821,3822],{"id":223,"slug":6670,"dossier":47,"summary":6671,"aliases":6672,"sourceIds":6675,"published":6676,"modified":6677,"checkedAt":7,"severity":6678,"references":6681,"versionKeys":6690,"packageCount":32,"repositoryCount":828},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[6673,6674],"CVE-2026-53538","PYSEC-2026-3037",[223,6674],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[6679],{"type":3555,"score":6680},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[6682,6684,6685,6686,6688],{"type":3487,"url":6683},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3495,"url":5638},{"type":3495,"url":5640},{"type":3490,"url":6687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3490,"url":6689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[5949,5950,5951,5644],{"id":224,"slug":6692,"dossier":47,"summary":6693,"aliases":6694,"sourceIds":6697,"published":6698,"modified":6699,"checkedAt":7,"severity":6700,"references":6702,"versionKeys":6713,"packageCount":32,"repositoryCount":800},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[6695,6696],"CVE-2025-69223","PYSEC-2026-1101",[224,6696],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[6701],{"type":3555,"score":3669},[6703,6705,6707,6709,6710,6711],{"type":3487,"url":6704},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3490,"url":6706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3593,"url":6708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":6712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3816,3817,3818,3819,3820,3821,3822],{"id":225,"slug":6715,"dossier":91,"summary":6716,"aliases":6717,"sourceIds":6719,"published":6720,"modified":6721,"checkedAt":7,"severity":6722,"references":6725,"versionKeys":6737,"packageCount":32,"repositoryCount":6749},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[6718],"PYSEC-2026-4320",[225,6718],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[6723],{"type":3483,"score":6724},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6726,6728,6730,6732,6733,6735],{"type":3487,"url":6727},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":3487,"url":6729},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":3487,"url":6731},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":3495,"url":3596},{"type":3495,"url":6734},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":3490,"url":6736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[6738,3609,6739,6740,6741,6742,6743,6744,6745,6746,6747,6748],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":226,"slug":6751,"dossier":47,"summary":6752,"aliases":6753,"sourceIds":6757,"published":6758,"modified":6759,"checkedAt":7,"severity":6760,"references":6762,"versionKeys":6775,"packageCount":32,"repositoryCount":4748},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[6754,6755,6756],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[226,6756],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[6761],{"type":3555,"score":3669},[6763,6765,6767,6769,6771,6773,6774],{"type":3744,"url":6764},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3490,"url":6766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3593,"url":6768},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3593,"url":6770},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3487,"url":6772},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3495,"url":3496},{"type":3490,"url":6226},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":227,"slug":6777,"dossier":47,"summary":6778,"aliases":6779,"sourceIds":6782,"published":6783,"modified":6784,"checkedAt":7,"severity":6785,"references":6787,"versionKeys":6798,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[6780,6781],"CVE-2024-12720","PYSEC-2026-1982",[227,6781],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[6786],{"type":3555,"score":5172},[6788,6790,6792,6793,6795,6796],{"type":3490,"url":6789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":3487,"url":6791},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":3495,"url":3742},{"type":3487,"url":6794},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":3495,"url":4215},{"type":3490,"url":6797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[3749],{"id":228,"slug":6800,"dossier":47,"summary":6801,"aliases":6802,"sourceIds":6804,"published":6805,"modified":6806,"checkedAt":7,"severity":6807,"references":6809,"versionKeys":6821,"packageCount":32,"repositoryCount":885},"ghsa-6vvc-x485-93v7-1b4b7434","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving form fields",[6803],"CVE-2026-113789",[228],"2026-10-22T16:49:56Z","2026-10-22T17:00:04.207149781Z",[6808],{"type":3483,"score":4333},[6810,6812,6814,6816,6818,6819],{"type":3487,"url":6811},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-6vvc-x485-93v7",{"type":3490,"url":6813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113789",{"type":3487,"url":6815},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4219",{"type":3487,"url":6817},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5ef728f0e16d225c853e89f861ba0a67402fe3f2",{"type":3495,"url":3531},{"type":3487,"url":6820},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.0",[3541,3542,3543],{"id":229,"slug":6823,"dossier":47,"summary":6824,"aliases":6825,"sourceIds":6828,"published":6829,"modified":6830,"checkedAt":7,"severity":6831,"references":6833,"versionKeys":6844,"packageCount":32,"repositoryCount":800},"ghsa-6w3r-xr62-4xcp-69d1732a","virtualenv: Bash prompt values can change meaning under older compatibility modes",[6826,6827],"BIT-virtualenv-2026-113723","CVE-2026-113723",[229],"2026-10-23T22:21:57Z","2026-10-29T10:55:32.039209236Z",[6832],{"type":3483,"score":4303},[6834,6836,6838,6840,6842,6843],{"type":3487,"url":6835},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-6w3r-xr62-4xcp",{"type":3490,"url":6837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113723",{"type":3487,"url":6839},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3418",{"type":3487,"url":6841},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5f48d711731311428aebfae61d46957762155b22",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":230,"slug":6846,"dossier":47,"summary":6847,"aliases":6848,"sourceIds":6851,"published":6852,"modified":6853,"checkedAt":7,"severity":6854,"references":6857,"versionKeys":6876,"packageCount":32,"repositoryCount":800},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[6849,6850],"CVE-2025-71176","PYSEC-2026-1845",[230,6850],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[6855],{"type":3555,"score":6856},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[6858,6860,6862,6864,6866,6868,6870,6872,6874],{"type":3490,"url":6859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3487,"url":6861},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3487,"url":6863},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3487,"url":6865},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3495,"url":6867},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3487,"url":6869},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3487,"url":6871},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3495,"url":6873},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3490,"url":6875},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[6877,6878,6879,6880,6881],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":231,"slug":6883,"dossier":47,"summary":6884,"aliases":6885,"sourceIds":6888,"published":6889,"modified":6890,"checkedAt":7,"severity":6891,"references":6896,"versionKeys":6909,"packageCount":32,"repositoryCount":847},"ghsa-6ww7-3frv-cqxh-c6d40b97","NLTK: pathsec SSRF protection can be bypassed when a proxy is configured",[6886,6887],"CVE-2026-78682","PYSEC-2026-3733",[231,6887],"2026-08-25T02:16:52.890Z","2026-09-08T16:45:04.147588108Z",[6892,6894],{"type":3483,"score":6893},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":6895},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6897,6899,6901,6903,6904,6905,6907],{"type":3744,"url":6898},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6ww7-3frv-cqxh",{"type":3490,"url":6900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78682",{"type":3487,"url":6902},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F767333a005a1cd3d82d2029215f2dbe66a5844d9",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":6906},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3733.yaml",{"type":3490,"url":6908},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-protection-bypass-via-proxy",[4433,3960,3961],{"id":232,"slug":6911,"dossier":47,"summary":6912,"aliases":6913,"sourceIds":6916,"published":6917,"modified":6918,"checkedAt":7,"severity":6919,"references":6924,"versionKeys":6940,"packageCount":32,"repositoryCount":857},"ghsa-72r2-7mfr-5xr9-919ee5d0","NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:\u002F\u002F protocol",[6914,6915],"CVE-2026-65915","PYSEC-2026-3731",[232,6915],"2026-08-22T15:16:19.500Z","2026-09-08T15:46:56.329043767Z",[6920,6922],{"type":3555,"score":6921},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3483,"score":6923},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6925,6927,6929,6931,6933,6934,6936,6938],{"type":3744,"url":6926},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-72r2-7mfr-5xr9",{"type":3490,"url":6928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-65915",{"type":3487,"url":6930},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3522",{"type":3487,"url":6932},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F69db9911fdba914ceeaca7aec6e892d1b14586a9",{"type":3495,"url":3949},{"type":3487,"url":6935},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3731.yaml",{"type":3487,"url":6937},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa510de7b-ffaf-4a83-9bf8-fa7e63f4bd2d",{"type":3490,"url":6939},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-file-read-via-filesystempathpointer",[3960,3961],{"id":233,"slug":6942,"dossier":91,"summary":6943,"aliases":6944,"sourceIds":6947,"published":6948,"modified":6949,"checkedAt":7,"severity":6950,"references":6952,"versionKeys":6961,"packageCount":32,"repositoryCount":3510},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[6945,6946],"BIT-pillow-2026-112401","CVE-2026-112401",[233],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[6951],{"type":3483,"score":4387},[6953,6955,6957,6959,6960],{"type":3487,"url":6954},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":3490,"url":6956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":3487,"url":6958},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":234,"slug":6963,"dossier":47,"summary":6964,"aliases":6965,"sourceIds":6968,"published":6969,"modified":6970,"checkedAt":7,"severity":6971,"references":6973,"versionKeys":6983,"packageCount":32,"repositoryCount":885},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[6966,6967],"CVE-2026-32597","PYSEC-2026-120",[234,6967],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[6972],{"type":3555,"score":3586},[6974,6976,6978,6979,6981],{"type":3744,"url":6975},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3490,"url":6977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3495,"url":3920},{"type":3487,"url":6980},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3487,"url":6982},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[3928,3930],{"id":235,"slug":6985,"dossier":47,"summary":6986,"aliases":6987,"sourceIds":6990,"published":6991,"modified":6992,"checkedAt":7,"severity":6993,"references":6995,"versionKeys":7007,"packageCount":32,"repositoryCount":885},"ghsa-763m-79hh-57f2-630348b0","pypdf: Possible long runtimes\u002Flarge memory usage when extracting XForm objects",[6988,6989],"CVE-2026-84311","PYSEC-2026-3911",[235,6989],"2026-09-01T21:27:22Z","2026-09-10T12:26:04.098858222Z",[6994],{"type":3483,"score":3522},[6996,6998,6999,7000,7001,7002,7003,7005],{"type":3487,"url":6997},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3487,"url":3527},{"type":3487,"url":3529},{"type":3495,"url":3531},{"type":3487,"url":3533},{"type":3495,"url":3535},{"type":3490,"url":7004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3490,"url":7006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84311",[3541,3542,3543],{"id":236,"slug":7009,"dossier":47,"summary":7010,"aliases":7011,"sourceIds":7015,"published":7016,"modified":7017,"checkedAt":7,"severity":7018,"references":7024,"versionKeys":7036,"packageCount":32,"repositoryCount":781},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[7012,7013,7014],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[236,7013,7014],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[7019,7021,7023],{"type":3555,"score":7020},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3555,"score":7022},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3555,"score":4028},[7025,7027,7029,7030,7032,7034],{"type":3490,"url":7026},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3487,"url":7028},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3495,"url":4516},{"type":3487,"url":7031},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3490,"url":7033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3490,"url":7035},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[4520,4521,4522,4523],{"id":237,"slug":7038,"dossier":47,"summary":7039,"aliases":7040,"sourceIds":7041,"published":7042,"modified":7043,"checkedAt":7,"severity":7044,"references":7047,"versionKeys":7060,"packageCount":32,"repositoryCount":4101},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[237],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[7045],{"type":3555,"score":7046},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[7048,7050,7052,7054,7056,7057,7058],{"type":3487,"url":7049},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":3487,"url":7051},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":3487,"url":7053},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":3487,"url":7055},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":3495,"url":3496},{"type":3487,"url":3498},{"type":3487,"url":7059},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[3502,3503,3504,3505,3506,3507,3508,3509],{"id":238,"slug":7062,"dossier":47,"summary":7063,"aliases":7064,"sourceIds":7067,"published":7068,"modified":7069,"checkedAt":7,"severity":7070,"references":7072,"versionKeys":7085,"packageCount":32,"repositoryCount":105},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[7065,7066],"CVE-2025-47287","PYSEC-2026-1974",[238,7066],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[7071],{"type":3555,"score":3669},[7073,7075,7077,7079,7080,7082,7083],{"type":3487,"url":7074},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3490,"url":7076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3487,"url":7078},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3495,"url":4516},{"type":3487,"url":7081},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3495,"url":4591},{"type":3490,"url":7084},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[4520],{"id":239,"slug":7087,"dossier":47,"summary":7088,"aliases":7089,"sourceIds":7092,"published":7093,"modified":7094,"checkedAt":7,"severity":7095,"references":7097,"versionKeys":7114,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[7090,7091],"CVE-2025-62727","PYSEC-2026-1942",[239,7091],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[7096],{"type":3555,"score":3669},[7098,7100,7102,7104,7107,7109,7111,7112],{"type":3487,"url":7099},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3490,"url":7101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3593,"url":7103},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":7105,"url":7106},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3495,"url":7108},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3487,"url":7110},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3495,"url":3784},{"type":3490,"url":7113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3789,3790,7115,7116,7117],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":240,"slug":7119,"dossier":47,"summary":7120,"aliases":7121,"sourceIds":7123,"published":7124,"modified":7125,"checkedAt":7,"severity":7126,"references":7128,"versionKeys":7139,"packageCount":32,"repositoryCount":800},"ghsa-7g44-g9rc-x53w-58fa7733","Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack",[7122],"CVE-2026-126193",[240],"2026-11-13T16:34:59Z","2026-11-13T16:45:03.468864320Z",[7127],{"type":3555,"score":3769},[7129,7131,7133,7135,7137,7138],{"type":3487,"url":7130},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-7g44-g9rc-x53w",{"type":3490,"url":7132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126193",{"type":3487,"url":7134},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F306",{"type":3487,"url":7136},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002F52de12f157a373614ad0f486d434551c5a4378ee",{"type":3495,"url":4055},{"type":3487,"url":6446},[4063,4064,4065,4984,4985],{"id":241,"slug":7141,"dossier":47,"summary":7142,"aliases":7143,"sourceIds":7146,"published":7147,"modified":7148,"checkedAt":7,"severity":7149,"references":7152,"versionKeys":7169,"packageCount":32,"repositoryCount":3900},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[7144,7145],"CVE-2026-0994","PYSEC-2026-1805",[241,7145],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[7150],{"type":3483,"score":7151},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[7153,7155,7157,7159,7161,7163,7165,7167],{"type":3490,"url":7154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3487,"url":7156},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3487,"url":7158},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3487,"url":7160},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3487,"url":7162},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3495,"url":7164},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3495,"url":7166},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3490,"url":7168},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[7170,7171,7172,7173,7174,7175,7176,7177,7178,7179],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":242,"slug":7181,"dossier":47,"summary":7182,"aliases":7183,"sourceIds":7186,"published":7187,"modified":7188,"checkedAt":7,"severity":7189,"references":7192,"versionKeys":7206,"packageCount":32,"repositoryCount":105},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[7184,7185],"CVE-2026-41312","PYSEC-2026-3011",[242,7185],"2026-04-16T21:30:00Z","2026-09-10T03:50:43.750842855Z",[7190,7191],{"type":3555,"score":3621},{"type":3483,"score":5041},[7193,7195,7197,7199,7201,7202,7203,7204],{"type":3487,"url":7194},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3490,"url":7196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3487,"url":7198},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3487,"url":7200},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3495,"url":3531},{"type":3487,"url":5053},{"type":3495,"url":3535},{"type":3490,"url":7205},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3541,3542],{"id":243,"slug":7208,"dossier":47,"summary":7209,"aliases":7210,"sourceIds":7213,"published":7214,"modified":7215,"checkedAt":7,"severity":7216,"references":7218,"versionKeys":7235,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[7211,7212],"CVE-2025-55197","PYSEC-2026-1830",[243,7212],"2025-08-13T19:51:24Z","2026-09-10T03:50:26.651449913Z",[7217],{"type":3483,"score":4916},[7219,7221,7223,7225,7227,7228,7230,7232,7233],{"type":3487,"url":7220},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3490,"url":7222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3487,"url":7224},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3487,"url":7226},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3495,"url":3531},{"type":3487,"url":7229},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3487,"url":7231},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3495,"url":3535},{"type":3490,"url":7234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3541],{"id":244,"slug":7237,"dossier":47,"summary":7238,"aliases":7239,"sourceIds":7241,"published":7242,"modified":7243,"checkedAt":7,"severity":7244,"references":7246,"versionKeys":7255,"packageCount":32,"repositoryCount":885},"ghsa-7mh2-4gg2-979f-931d5391","pypdf: Possible large memory usage for streams with multiple filters",[7240],"CVE-2026-113795",[244],"2026-10-21T16:48:30Z","2026-10-21T17:00:06.161656397Z",[7245],{"type":3483,"score":4333},[7247,7249,7251,7253,7254],{"type":3487,"url":7248},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7mh2-4gg2-979f",{"type":3487,"url":7250},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4173",{"type":3487,"url":7252},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F80a84d4be6022d910874ccb0d2365400f3f0e185",{"type":3495,"url":3531},{"type":3487,"url":4345},[3541,3542,3543],{"id":245,"slug":7257,"dossier":91,"summary":7258,"aliases":7259,"sourceIds":7263,"published":7264,"modified":7265,"checkedAt":7,"severity":7266,"references":7269,"versionKeys":7278,"packageCount":32,"repositoryCount":3510},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[7260,7261,7262],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[245,7262],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[7267,7268],{"type":3483,"score":3868},{"type":3555,"score":3669},[7270,7272,7274,7276,7277],{"type":3593,"url":7271},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":3490,"url":7273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":3593,"url":7275},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":246,"slug":7280,"dossier":47,"summary":7281,"aliases":7282,"sourceIds":7285,"published":7286,"modified":7287,"checkedAt":7,"severity":7288,"references":7291,"versionKeys":7307,"packageCount":32,"repositoryCount":857},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[7283,7284],"CVE-2025-14009","PYSEC-2026-96",[246,7284],"2026-02-18T18:24:19.410Z","2026-09-10T03:50:34.416389229Z",[7289],{"type":3555,"score":7290},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7292,7294,7296,7298,7299,7301,7303,7305],{"type":3490,"url":7293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3487,"url":7295},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3487,"url":7297},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3495,"url":3949},{"type":3487,"url":7300},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3487,"url":7302},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3744,"url":7304},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3490,"url":7306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3960,3961],{"id":247,"slug":7309,"dossier":47,"summary":7310,"aliases":7311,"sourceIds":7314,"published":7315,"modified":7316,"checkedAt":7,"severity":7317,"references":7320,"versionKeys":7334,"packageCount":32,"repositoryCount":5296},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[7312,7313],"CVE-2026-63374","PYSEC-2026-4025",[247,7313],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[7318],{"type":3483,"score":7319},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7321,7323,7325,7327,7328,7329,7330,7332],{"type":3487,"url":7322},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3487,"url":7324},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":3487,"url":7326},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":3495,"url":5847},{"type":3487,"url":5849},{"type":3495,"url":5851},{"type":3490,"url":7331},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3490,"url":7333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[5857,5858,5859,5860,5861,5862,5863,5864],{"id":248,"slug":7336,"dossier":47,"summary":7337,"aliases":7338,"sourceIds":7341,"published":7342,"modified":7343,"checkedAt":7,"severity":7344,"references":7346,"versionKeys":7350,"packageCount":32,"repositoryCount":781},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[7339,7340],"CVE-2026-54283","PYSEC-2026-249",[248,7340],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[7345],{"type":3555,"score":3669},[7347,7349],{"type":3490,"url":7348},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3495,"url":7108},[3788,3789,3790,7115,7116,7117,7351,7352,7353],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":249,"slug":7355,"dossier":47,"summary":7356,"aliases":7357,"sourceIds":7360,"published":7361,"modified":7362,"checkedAt":7,"severity":7363,"references":7365,"versionKeys":7374,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[7358,7359],"CVE-2026-49477","PYSEC-2026-3072",[249,7359],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[7364],{"type":3555,"score":3669},[7366,7368,7369,7370,7372],{"type":3487,"url":7367},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3495,"url":4055},{"type":3495,"url":4057},{"type":3490,"url":7371},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3490,"url":7373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[4063,4064,4065],{"id":250,"slug":7376,"dossier":47,"summary":7377,"aliases":7378,"sourceIds":7380,"published":7381,"modified":7382,"checkedAt":7,"severity":7383,"references":7385,"versionKeys":7397,"packageCount":32,"repositoryCount":66},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[7379],"CVE-2026-91990",[250],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[7384],{"type":3483,"score":4387},[7386,7388,7390,7392,7394,7395],{"type":3487,"url":7387},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":3487,"url":7389},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":3487,"url":7391},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":3487,"url":7393},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":3495,"url":4516},{"type":3487,"url":7396},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[4520,4521,4522,4523,4524,4525],{"id":251,"slug":7399,"dossier":47,"summary":7400,"aliases":7401,"sourceIds":7404,"published":7405,"modified":7406,"checkedAt":7,"severity":7407,"references":7412,"versionKeys":7431,"packageCount":32,"repositoryCount":857},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[7402,7403],"CVE-2025-71408","PYSEC-2026-3657",[251,7403],"2026-07-24T22:16:50.063Z","2026-08-19T12:15:03.319052318Z",[7408,7409,7410],{"type":3555,"score":6628},{"type":3483,"score":6630},{"type":3483,"score":7411},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7413,7415,7417,7419,7421,7422,7423,7425,7427,7429],{"type":3490,"url":7414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3593,"url":7416},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3593,"url":7418},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3487,"url":7420},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3495,"url":3949},{"type":3490,"url":6029},{"type":3487,"url":7424},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3593,"url":7426},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3744,"url":7428},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",{"type":3490,"url":7430},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-848c-c2cx-j7qx",[3960,3961],{"id":252,"slug":7433,"dossier":47,"summary":7434,"aliases":7435,"sourceIds":7437,"published":7438,"modified":7439,"checkedAt":7,"severity":7440,"references":7443,"versionKeys":7459,"packageCount":32,"repositoryCount":857},"ghsa-84m7-p3x7-pcfv-fb980c8b","MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion",[7436],"CVE-2026-59951",[252],"2026-10-15T20:13:13Z","2026-10-15T20:30:08.565001293Z",[7441,7442],{"type":3555,"score":3669},{"type":3483,"score":4387},[7444,7446,7448,7450,7452,7454,7456,7457,7458],{"type":3487,"url":7445},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-84m7-p3x7-pcfv",{"type":3490,"url":7447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59951",{"type":3487,"url":7449},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3395",{"type":3487,"url":7451},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3426",{"type":3487,"url":7453},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F92120b4b0f50385af096592d7cee932fc1d994e7",{"type":3487,"url":7455},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd2290ca3434731b68ea3e2270bc06a6e6575931b",{"type":3495,"url":5741},{"type":3487,"url":5743},{"type":3487,"url":5745},[5747,5748,5749,5750],{"id":253,"slug":7461,"dossier":47,"summary":7462,"aliases":7463,"sourceIds":7467,"published":7468,"modified":7469,"checkedAt":7,"severity":7470,"references":7473,"versionKeys":7510,"packageCount":32,"repositoryCount":781},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[7464,7465,7466],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[253,7465],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[7471],{"type":3555,"score":7472},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7474,7476,7478,7480,7482,7484,7486,7488,7490,7492,7493,7495,7498,7500,7502,7504,7506,7508],{"type":3490,"url":7475},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3490,"url":7477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3593,"url":7479},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3487,"url":7481},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3600,"url":7483},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3487,"url":7485},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3487,"url":7487},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3487,"url":7489},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3487,"url":7491},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3495,"url":7108},{"type":3487,"url":7494},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":7496,"url":7497},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3487,"url":7499},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3487,"url":7501},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":3487,"url":7503},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3487,"url":7505},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3600,"url":7507},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3490,"url":7509},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3788,3789,3790,7115,7116,7117,7351,7352,7353],{"id":254,"slug":7512,"dossier":47,"summary":7513,"aliases":7514,"sourceIds":7517,"published":7518,"modified":7519,"checkedAt":7,"severity":7520,"references":7523,"versionKeys":7536,"packageCount":32,"repositoryCount":105},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[7515,7516],"CVE-2026-33699","PYSEC-2026-3012",[254,7516],"2026-03-25T20:05:22Z","2026-09-10T03:51:00.069856672Z",[7521],{"type":3483,"score":7522},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7524,7526,7528,7530,7531,7533,7534],{"type":3487,"url":7525},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3490,"url":7527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3487,"url":7529},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3495,"url":3531},{"type":3487,"url":7532},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3495,"url":3535},{"type":3490,"url":7535},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3541,3542],{"id":255,"slug":7538,"dossier":47,"summary":7539,"aliases":7540,"sourceIds":7544,"published":7545,"modified":7546,"checkedAt":7,"severity":7547,"references":7551,"versionKeys":7573,"packageCount":32,"repositoryCount":800},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[7541,7542,7543],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[255,7543],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[7548,7549],{"type":3555,"score":4163},{"type":3483,"score":7550},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[7552,7554,7556,7558,7560,7562,7563,7565,7567,7569,7571],{"type":3490,"url":7553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":3487,"url":7555},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":3487,"url":7557},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":3487,"url":7559},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":3487,"url":7561},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":3495,"url":4178},{"type":3487,"url":7564},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":3487,"url":7566},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":3487,"url":7568},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":3495,"url":7570},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":3490,"url":7572},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[4190,4191,4192,6274,6275],{"id":256,"slug":7575,"dossier":91,"summary":7576,"aliases":7577,"sourceIds":7580,"published":7581,"modified":7582,"checkedAt":7,"severity":7583,"references":7586,"versionKeys":7603,"packageCount":32,"repositoryCount":742},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[7578,7579],"CVE-2026-97687","PYSEC-2026-4175",[256,7579],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[7584],{"type":3483,"score":7585},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7587,7589,7591,7593,7595,7597,7598,7600,7601],{"type":3487,"url":7588},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":3490,"url":7590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":3487,"url":7592},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":3487,"url":7594},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":3487,"url":7596},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":3495,"url":4092},{"type":3487,"url":7599},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":3495,"url":4094},{"type":3490,"url":7602},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[4096,4097,4098,4099,4100,7604,7605],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":257,"slug":7607,"dossier":47,"summary":7608,"aliases":7609,"sourceIds":7611,"published":7612,"modified":7613,"checkedAt":7,"severity":7614,"references":7616,"versionKeys":7632,"packageCount":32,"repositoryCount":847},"ghsa-89p3-fcch-88ph-d678b528","NLTK: Quadratic-time CPU denial of service in CCG lexicon parser (fromstring) on wide bracket bodies and operator chains",[7610],"CVE-2026-126299",[257],"2026-11-14T00:08:50Z","2026-11-14T00:15:03.205829962Z",[7615],{"type":3555,"score":3669},[7617,7619,7621,7623,7625,7627,7628,7630],{"type":3487,"url":7618},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-89p3-fcch-88ph",{"type":3490,"url":7620},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126299",{"type":3487,"url":7622},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3944",{"type":3487,"url":7624},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0bb5b947bd235b950cf2f90e893a498e16da0fe3",{"type":3487,"url":7626},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcf12a5e6a",{"type":3495,"url":3949},{"type":3487,"url":7629},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.4",{"type":3487,"url":7631},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.4-quadratic-time-denial-of-service-via-ccg-lexicon-fromstring",[4433,3960,3961],{"id":258,"slug":7634,"dossier":47,"summary":7635,"aliases":7636,"sourceIds":7638,"published":7639,"modified":7640,"checkedAt":7,"severity":7641,"references":7643,"versionKeys":7655,"packageCount":32,"repositoryCount":847},"ghsa-8fx7-8jr8-84rv-df15c964","NLTK: Unbounded CPU consumption in SteppingRecursiveDescentParser.parse() with ambiguous or self-embedding grammars",[7637],"CVE-2026-126303",[258],"2026-11-13T21:02:19Z","2026-11-13T21:15:14.552241935Z",[7642],{"type":3555,"score":3669},[7644,7646,7648,7650,7652,7653],{"type":3487,"url":7645},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8fx7-8jr8-84rv",{"type":3490,"url":7647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126303",{"type":3487,"url":7649},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3895",{"type":3487,"url":7651},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe20c40e26ec9306de885703f6e53250695f1f49b",{"type":3495,"url":3949},{"type":3487,"url":7654},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.4-denial-of-service-via-steppingrecursivedescentparser-parse",[4433,3960,3961],{"id":259,"slug":7657,"dossier":47,"summary":7658,"aliases":7659,"sourceIds":7663,"published":7664,"modified":7665,"checkedAt":7,"severity":7666,"references":7669,"versionKeys":7677,"packageCount":32,"repositoryCount":3510},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[7660,7661,7662],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[259,7662],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[7667,7668],{"type":3483,"score":6069},{"type":3555,"score":5337},[7670,7672,7674,7675,7676],{"type":3744,"url":7671},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":3490,"url":7673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":3593,"url":6077},{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":260,"slug":7679,"dossier":47,"summary":7680,"aliases":7681,"sourceIds":7684,"published":7685,"modified":7686,"checkedAt":7,"severity":7687,"references":7694,"versionKeys":7716,"packageCount":32,"repositoryCount":847},"ghsa-8mgp-746c-j5xp-7f3a80b8","NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots",[7682,7683],"CVE-2026-81726","PYSEC-2026-3740",[260,7683],"2026-08-27T17:21:03.387Z","2026-11-02T22:15:04.414504485Z",[7688,7690,7692],{"type":3555,"score":7689},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3483,"score":7691},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":7693},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7695,7697,7699,7701,7703,7705,7707,7709,7711,7712,7714],{"type":3744,"url":7696},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mgp-746c-j5xp",{"type":3490,"url":7698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81726",{"type":3487,"url":7700},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3757",{"type":3487,"url":7702},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3759",{"type":3487,"url":7704},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3813",{"type":3487,"url":7706},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2a92b71827d754ae8920261e7ed0c4bb283ab2d7",{"type":3487,"url":7708},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fa44a7af69bca87e92d9c4a701fcbbe4512e8d450",{"type":3487,"url":7710},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcbc98458b43de5f792f0382583c16df39e5c5117",{"type":3495,"url":3949},{"type":3487,"url":7713},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3740.yaml",{"type":3490,"url":7715},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-3.10.3-path-traversal-via-model-artifact-apis",[4433,3960,3961],{"id":261,"slug":7718,"dossier":47,"summary":7719,"aliases":7720,"sourceIds":7723,"published":7724,"modified":7725,"checkedAt":7,"severity":7726,"references":7731,"versionKeys":7744,"packageCount":32,"repositoryCount":847},"ghsa-8mpw-7fpc-4gqj-e47ea3c3","NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks",[7721,7722],"CVE-2026-81725","PYSEC-2026-3752",[261,7722],"2026-08-27T17:21:03.247Z","2026-09-08T20:45:04.346016767Z",[7727,7729],{"type":3483,"score":7728},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":7730},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7732,7734,7736,7738,7739,7740,7742],{"type":3744,"url":7733},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpw-7fpc-4gqj",{"type":3490,"url":7735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81725",{"type":3487,"url":7737},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7808692d451b962711005d954859bb83aabcf8fa",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":7741},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3752.yaml",{"type":3490,"url":7743},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-regular-expression-denial-of-service-via-pl196xcorpusreader",[4433,3960,3961],{"id":262,"slug":7746,"dossier":47,"summary":7747,"aliases":7748,"sourceIds":7750,"published":7751,"modified":7752,"checkedAt":7,"severity":7753,"references":7755,"versionKeys":7762,"packageCount":32,"repositoryCount":3510},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[7749],"CVE-2026-112910",[262],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[7754],{"type":3555,"score":5250},[7756,7758,7759,7760,7761],{"type":3487,"url":7757},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":3487,"url":5497},{"type":3487,"url":5499},{"type":3495,"url":5501},{"type":3487,"url":5503},[6524,6525,6526,6527,6528,5505,5506,5507,5508],{"id":263,"slug":7764,"dossier":47,"summary":7765,"aliases":7766,"sourceIds":7769,"published":7770,"modified":7771,"checkedAt":7,"severity":7772,"references":7774,"versionKeys":7793,"packageCount":32,"repositoryCount":885},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[7767,7768],"CVE-2025-4565","PYSEC-2026-1806",[263,7768],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[7773],{"type":3483,"score":3484},[7775,7777,7779,7781,7783,7784,7786,7788,7790,7791],{"type":3487,"url":7776},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3487,"url":7778},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3490,"url":7780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3487,"url":7782},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3495,"url":7164},{"type":3487,"url":7785},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3487,"url":7787},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3487,"url":7789},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3495,"url":7166},{"type":3490,"url":7792},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[7170,7172,7173],{"id":264,"slug":7795,"dossier":47,"summary":7796,"aliases":7797,"sourceIds":7800,"published":7801,"modified":7802,"checkedAt":7,"severity":7803,"references":7805,"versionKeys":7815,"packageCount":32,"repositoryCount":800},"ghsa-8rjx-v5ww-45pp-d32996f1","virtualenv activation scripts run code from a path that contains a placeholder name",[7798,7799],"BIT-virtualenv-2026-113776","CVE-2026-113776",[264],"2026-10-21T16:39:38Z","2026-10-29T10:55:59.336337258Z",[7804],{"type":3555,"score":5963},[7806,7808,7810,7812,7813],{"type":3487,"url":7807},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-8rjx-v5ww-45pp",{"type":3490,"url":7809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113776",{"type":3487,"url":7811},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F602b26623a724827ff171bf11fef4ad186d01f74",{"type":3495,"url":4314},{"type":3487,"url":7814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.2",[4318,4319,4320,4321,4322],{"id":265,"slug":7817,"dossier":47,"summary":7818,"aliases":7819,"sourceIds":7823,"published":7824,"modified":7825,"checkedAt":7,"severity":7826,"references":7828,"versionKeys":7838,"packageCount":32,"repositoryCount":4748},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[7820,7821,7822],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[265,7822],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[7827],{"type":3555,"score":3669},[7829,7831,7833,7834,7836,7837],{"type":3744,"url":7830},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3490,"url":7832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3593,"url":4741},{"type":3487,"url":7835},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3495,"url":3496},{"type":3490,"url":4746},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":266,"slug":7840,"dossier":47,"summary":7841,"aliases":7842,"sourceIds":7845,"published":7846,"modified":7847,"checkedAt":7,"severity":7848,"references":7850,"versionKeys":7862,"packageCount":32,"repositoryCount":32},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[7843,7844],"CVE-2026-102265","PYSEC-2026-4142",[266,7844],"2026-09-29T23:43:06Z","2026-10-01T17:55:45.157085612Z",[7849],{"type":3555,"score":3769},[7851,7853,7855,7857,7858,7859,7860],{"type":3487,"url":7852},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":3490,"url":7854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":3487,"url":7856},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":7861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",[3929],{"id":267,"slug":7864,"dossier":47,"summary":7865,"aliases":7866,"sourceIds":7869,"published":7870,"modified":7871,"checkedAt":7,"severity":7872,"references":7874,"versionKeys":7887,"packageCount":32,"repositoryCount":857},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[7867,7868],"CVE-2025-5197","PYSEC-2026-1983",[267,7868],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[7873],{"type":3555,"score":5172},[7875,7877,7879,7881,7882,7884,7885],{"type":3490,"url":7876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":3487,"url":7878},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":3487,"url":7880},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":3495,"url":3742},{"type":3487,"url":7883},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":3495,"url":4215},{"type":3490,"url":7886},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[3749,3750,3751,3752],{"id":268,"slug":7889,"dossier":47,"summary":7890,"aliases":7891,"sourceIds":7895,"published":7896,"modified":7897,"checkedAt":7,"severity":7898,"references":7901,"versionKeys":7916,"packageCount":32,"repositoryCount":800},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[7892,7893,7894],"BIT-virtualenv-2026-102930","CVE-2026-102930","PYSEC-2026-4011",[268,7894],"2026-09-18T01:41:45Z","2026-10-06T15:26:06.490658879Z",[7899],{"type":3483,"score":7900},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7902,7904,7906,7908,7910,7912,7913,7915],{"type":3487,"url":7903},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":3490,"url":7905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":3487,"url":7907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":3593,"url":7909},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":3487,"url":7911},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":3495,"url":4314},{"type":3487,"url":7914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":3495,"url":5614},[4318,4319,4320,4321,4322],{"id":269,"slug":7918,"dossier":47,"summary":7919,"aliases":7920,"sourceIds":7923,"published":7924,"modified":7925,"checkedAt":7,"severity":7926,"references":7929,"versionKeys":7940,"packageCount":32,"repositoryCount":857},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[7921,7922],"CVE-2025-53643","PYSEC-2026-1104",[269,7922],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[7927],{"type":3483,"score":7928},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7930,7932,7934,7936,7937,7938],{"type":3487,"url":7931},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3490,"url":7933},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3593,"url":7935},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":7939},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3816,3817,3818,3819],{"id":270,"slug":7942,"dossier":47,"summary":7943,"aliases":7944,"sourceIds":7947,"published":7948,"modified":7949,"checkedAt":7,"severity":7950,"references":7953,"versionKeys":7962,"packageCount":32,"repositoryCount":781},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[7945,7946],"CVE-2026-34518","PYSEC-2026-2100",[270,7946],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[7951,7952],{"type":3555,"score":6365},{"type":3483,"score":5360},[7954,7956,7958,7960,7961],{"type":3593,"url":7955},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3490,"url":7957},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3593,"url":7959},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":271,"slug":7964,"dossier":47,"summary":7965,"aliases":7966,"sourceIds":7969,"published":7970,"modified":7971,"checkedAt":7,"severity":7972,"references":7976,"versionKeys":7989,"packageCount":32,"repositoryCount":847},"ghsa-97qj-x29f-37w7-98509369","NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses",[7967,7968],"CVE-2026-78681","PYSEC-2026-3748",[271,7968],"2026-08-25T02:16:52.750Z","2026-09-08T16:45:04.193148017Z",[7973,7974],{"type":3483,"score":3868},{"type":3483,"score":7975},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7977,7979,7981,7983,7984,7985,7987],{"type":3744,"url":7978},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-97qj-x29f-37w7",{"type":3490,"url":7980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78681",{"type":3487,"url":7982},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe91789c9a043296ad04912ce171c22776d45963b",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":7986},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3748.yaml",{"type":3490,"url":7988},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-entity-expansion-dos-via-elementtree",[4433,3960,3961],{"id":272,"slug":7991,"dossier":47,"summary":7992,"aliases":7993,"sourceIds":7996,"published":7997,"modified":7998,"checkedAt":7,"severity":7999,"references":8002,"versionKeys":8012,"packageCount":32,"repositoryCount":885},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[7994,7995],"CVE-2026-48522","PYSEC-2026-175",[272,7995],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[8000],{"type":3555,"score":8001},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[8003,8005,8007,8009,8010],{"type":3744,"url":8004},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3490,"url":8006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3487,"url":8008},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3495,"url":3920},{"type":3487,"url":8011},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[3928,3930],{"id":273,"slug":8014,"dossier":47,"summary":8015,"aliases":8016,"sourceIds":8019,"published":8020,"modified":8021,"checkedAt":7,"severity":8022,"references":8024,"versionKeys":8039,"packageCount":32,"repositoryCount":105},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[8017,8018],"CVE-2026-27024","PYSEC-2026-3013",[273,8018],"2026-02-18T22:40:49Z","2026-09-10T03:50:34.616221084Z",[8023],{"type":3483,"score":5308},[8025,8027,8029,8031,8033,8034,8036,8037],{"type":3487,"url":8026},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3490,"url":8028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3487,"url":8030},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3487,"url":8032},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3495,"url":3531},{"type":3487,"url":8035},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3495,"url":3535},{"type":3490,"url":8038},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3541,3542],{"id":274,"slug":8041,"dossier":47,"summary":8042,"aliases":8043,"sourceIds":8046,"published":8047,"modified":8048,"checkedAt":7,"severity":8049,"references":8051,"versionKeys":8061,"packageCount":32,"repositoryCount":32},"ghsa-9f4q-q82q-4359-c9ca91c1","Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks",[8044,8045],"CVE-2026-31248","PYSEC-2026-2454",[274,8045],"2026-05-11T18:31:44Z","2026-07-13T16:43:41.210892318Z",[8050],{"type":3555,"score":3669},[8052,8054,8055,8057,8059],{"type":3490,"url":8053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31248",{"type":3495,"url":4370},{"type":3487,"url":8056},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31248-35d1e1393188818585b2ce3b9ce24686",{"type":3495,"url":8058},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling",{"type":3490,"url":8060},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9f4q-q82q-4359",[4374],{"id":275,"slug":8063,"dossier":47,"summary":8064,"aliases":8065,"sourceIds":8068,"published":8069,"modified":8070,"checkedAt":7,"severity":8071,"references":8073,"versionKeys":8087,"packageCount":32,"repositoryCount":885},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[8066,8067],"CVE-2025-66416","PYSEC-2026-1617",[275,8067],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[8072],{"type":3483,"score":7585},[8074,8076,8078,8080,8082,8083,8085],{"type":3487,"url":8075},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3490,"url":8077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3487,"url":8079},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3490,"url":8081},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3495,"url":5741},{"type":3487,"url":8084},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3495,"url":8086},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5747,5748,5749],{"id":276,"slug":8089,"dossier":47,"summary":8090,"aliases":8091,"sourceIds":8095,"published":8096,"modified":8097,"checkedAt":7,"severity":8098,"references":8101,"versionKeys":8116,"packageCount":32,"repositoryCount":800},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[8092,8093,8094],"BIT-virtualenv-2026-102938","CVE-2026-102938","PYSEC-2026-4012",[276,8094],"2026-09-17T16:42:47Z","2026-10-06T15:25:56.172772842Z",[8099],{"type":3483,"score":8100},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8102,8104,8106,8108,8110,8112,8113,8115],{"type":3487,"url":8103},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":3490,"url":8105},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":3487,"url":8107},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":3593,"url":8109},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":3487,"url":8111},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":3495,"url":4314},{"type":3487,"url":8114},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":3495,"url":5614},[4318,4319,4320,4321,4322],{"id":277,"slug":8118,"dossier":47,"summary":8119,"aliases":8120,"sourceIds":8123,"published":8124,"modified":8125,"checkedAt":7,"severity":8126,"references":8129,"versionKeys":8152,"packageCount":32,"repositoryCount":800},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[8121,8122],"CVE-2024-47081","PYSEC-2026-1872",[277,8122],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[8127],{"type":3555,"score":8128},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8130,8132,8134,8136,8138,8140,8142,8144,8146,8148,8150],{"type":3487,"url":8131},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3490,"url":8133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3487,"url":8135},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3593,"url":8137},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3490,"url":8139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3495,"url":8141},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3487,"url":8143},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":3487,"url":8145},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":3495,"url":8147},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3487,"url":8149},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3487,"url":8151},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[8153,8154],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":278,"slug":8156,"dossier":47,"summary":8157,"aliases":8158,"sourceIds":8162,"published":8163,"modified":8164,"checkedAt":7,"severity":8165,"references":8167,"versionKeys":8180,"packageCount":32,"repositoryCount":4748},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[8159,8160,8161],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[278,8161],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[8166],{"type":3555,"score":3669},[8168,8170,8172,8174,8176,8178,8179],{"type":3744,"url":8169},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3490,"url":8171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3593,"url":8173},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3593,"url":8175},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3487,"url":8177},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3495,"url":3496},{"type":3490,"url":6226},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":279,"slug":8182,"dossier":47,"summary":8183,"aliases":8184,"sourceIds":8187,"published":8188,"modified":8189,"checkedAt":7,"severity":8190,"references":8193,"versionKeys":8205,"packageCount":32,"repositoryCount":32},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[8185,8186],"CVE-2026-102266","PYSEC-2026-4143",[279,8186],"2026-09-29T23:43:19Z","2026-10-01T17:56:01.035847258Z",[8191],{"type":3555,"score":8192},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8194,8196,8198,8200,8201,8202,8203],{"type":3487,"url":8195},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":3490,"url":8197},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":3487,"url":8199},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":8204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",[3929],{"id":280,"slug":8207,"dossier":47,"summary":8208,"aliases":8209,"sourceIds":8213,"published":8214,"modified":8215,"checkedAt":7,"severity":8216,"references":8220,"versionKeys":8231,"packageCount":32,"repositoryCount":32},"ghsa-9jxx-vjrv-h2rq-33761f15","Docling imports plugin entry points before the allow_external_plugins check",[8210,8211,8212],"CVE-2026-105745","PYSEC-2026-4192","PYSEC-2026-4210",[280,8211],"2026-10-05T22:16:57.330Z","2026-10-15T14:55:41.958960612Z",[8217,8219],{"type":3555,"score":8218},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3555,"score":5963},[8221,8223,8225,8227,8229,8230],{"type":3593,"url":8222},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-9jxx-vjrv-h2rq",{"type":3490,"url":8224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105745",{"type":3593,"url":8226},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4413",{"type":3593,"url":8228},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002F0f443b3786e98688a2da3b7c8f56fe5e46af876c",{"type":3495,"url":4370},{"type":3490,"url":4372},[4374],{"id":281,"slug":8233,"dossier":47,"summary":8234,"aliases":8235,"sourceIds":8238,"published":8239,"modified":8240,"checkedAt":7,"severity":8241,"references":8243,"versionKeys":8258,"packageCount":32,"repositoryCount":105},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[8236,8237],"CVE-2026-28804","PYSEC-2026-3014",[281,8237],"2026-03-02T22:03:45Z","2026-09-10T03:50:38.603469156Z",[8242],{"type":3483,"score":4387},[8244,8246,8248,8250,8252,8253,8255,8256],{"type":3487,"url":8245},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3490,"url":8247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3487,"url":8249},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3487,"url":8251},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3495,"url":3531},{"type":3487,"url":8254},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3495,"url":3535},{"type":3490,"url":8257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3541,3542],{"id":282,"slug":8260,"dossier":47,"summary":8261,"aliases":8262,"sourceIds":8265,"published":8266,"modified":8267,"checkedAt":7,"severity":8268,"references":8270,"versionKeys":8284,"packageCount":32,"repositoryCount":105},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[8263,8264],"CVE-2026-27026","PYSEC-2026-3015",[282,8264],"2026-02-18T22:41:24Z","2026-09-10T03:50:34.680998937Z",[8269],{"type":3483,"score":5308},[8271,8273,8275,8277,8279,8280,8281,8282],{"type":3487,"url":8272},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3490,"url":8274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3487,"url":8276},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3487,"url":8278},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3495,"url":3531},{"type":3487,"url":8035},{"type":3495,"url":3535},{"type":3490,"url":8283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3541,3542],{"id":283,"slug":8286,"dossier":47,"summary":8287,"aliases":8288,"sourceIds":8290,"published":8291,"modified":8292,"checkedAt":7,"severity":8293,"references":8295,"versionKeys":8305,"packageCount":32,"repositoryCount":885},"ghsa-9mx8-4j7g-633p-2c309d32","pypdf: Possible infinite loop when removing tree items",[8289],"CVE-2026-113793",[283],"2026-10-21T16:55:10Z","2026-10-21T17:00:06.245541968Z",[8294],{"type":3483,"score":4333},[8296,8298,8300,8302,8303],{"type":3487,"url":8297},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mx8-4j7g-633p",{"type":3487,"url":8299},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4188",{"type":3487,"url":8301},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9c35b4471c2eb5fe078094f6c816e69d4ed25a0",{"type":3495,"url":3531},{"type":3487,"url":8304},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.20.1",[3541,3542,3543],{"id":284,"slug":8307,"dossier":47,"summary":8308,"aliases":8309,"sourceIds":8312,"published":8313,"modified":8314,"checkedAt":7,"severity":8315,"references":8317,"versionKeys":8334,"packageCount":32,"repositoryCount":857},"ghsa-9r6g-266r-89x4-a39a43aa","NLTK Stanford wrapper classes execute untrusted JAR files without verification",[8310,8311],"CVE-2026-12252","PYSEC-2026-2085",[284,8311],"2026-07-04T02:16:23.603Z","2026-10-15T14:45:11.790616373Z",[8316],{"type":3555,"score":3735},[8318,8320,8322,8324,8326,8327,8328,8330,8332],{"type":3490,"url":8319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12252",{"type":3487,"url":8321},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3743",{"type":3487,"url":8323},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F006f4b83d430147b067b81e2cddd226d6fa405c8",{"type":3487,"url":8325},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F24777f0cb8c33ed2839d16e0f8169a3c312a6806",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":8329},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2085.yaml",{"type":3744,"url":8331},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",{"type":3490,"url":8333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9r6g-266r-89x4",[3960,3961],{"id":285,"slug":8336,"dossier":47,"summary":8337,"aliases":8338,"sourceIds":8341,"published":8342,"modified":8343,"checkedAt":7,"severity":8344,"references":8346,"versionKeys":8358,"packageCount":32,"repositoryCount":857},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[8339,8340],"CVE-2026-102267","PYSEC-2026-4144",[285,8340],"2026-09-29T23:15:00Z","2026-10-01T17:56:19.395032954Z",[8345],{"type":3555,"score":8192},[8347,8349,8351,8353,8354,8355,8356],{"type":3487,"url":8348},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":3490,"url":8350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":3487,"url":8352},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":8357},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",[3928,3929,3930],{"id":286,"slug":8360,"dossier":47,"summary":8361,"aliases":8362,"sourceIds":8366,"published":8367,"modified":8368,"checkedAt":7,"severity":8369,"references":8374,"versionKeys":8385,"packageCount":32,"repositoryCount":3510},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[8363,8364,8365],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[286,8365],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[8370,8372],{"type":3483,"score":8371},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":8373},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8375,8377,8379,8381,8383,8384],{"type":3490,"url":8376},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":3490,"url":8378},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":3955,"url":8380},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":3593,"url":8382},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":287,"slug":8387,"dossier":47,"summary":8388,"aliases":8389,"sourceIds":8391,"published":8392,"modified":8393,"checkedAt":7,"severity":8394,"references":8396,"versionKeys":8405,"packageCount":32,"repositoryCount":847},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[8390],"CVE-2026-112913",[287],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[8395],{"type":3555,"score":4163},[8397,8399,8401,8403,8404],{"type":3487,"url":8398},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":3487,"url":8400},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":3487,"url":8402},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":3495,"url":5501},{"type":3487,"url":5503},[5505,5506,5507,5508],{"id":288,"slug":8407,"dossier":47,"summary":8408,"aliases":8409,"sourceIds":8412,"published":8413,"modified":8414,"checkedAt":7,"severity":8415,"references":8418,"versionKeys":8435,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[8410,8411],"CVE-2024-35195","PYSEC-2026-1873",[288,8411],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[8416],{"type":3555,"score":8417},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8419,8421,8423,8425,8427,8428,8430,8432,8433],{"type":3487,"url":8420},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3490,"url":8422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3487,"url":8424},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3593,"url":8426},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3495,"url":8141},{"type":3487,"url":8429},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3487,"url":8431},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3495,"url":8147},{"type":3490,"url":8434},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[8153],{"id":289,"slug":8437,"dossier":47,"summary":8438,"aliases":8439,"sourceIds":8442,"published":8443,"modified":8444,"checkedAt":7,"severity":8445,"references":8449,"versionKeys":8455,"packageCount":32,"repositoryCount":66},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[8440,8441],"CVE-2026-54280","PYSEC-2026-2113",[289,8441],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[8446,8448],{"type":3483,"score":8447},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":3669},[8450,8452,8454],{"type":3490,"url":8451},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3593,"url":8453},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":290,"slug":8457,"dossier":47,"summary":8458,"aliases":8459,"sourceIds":8461,"published":8462,"modified":8463,"checkedAt":7,"severity":8464,"references":8466,"versionKeys":8475,"packageCount":32,"repositoryCount":3900},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[8460],"CVE-2026-111066",[290],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[8465],{"type":3483,"score":3484},[8467,8469,8471,8473,8474],{"type":3487,"url":8468},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":3490,"url":8470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":3487,"url":8472},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":291,"slug":8477,"dossier":47,"summary":8478,"aliases":8479,"sourceIds":8481,"published":8482,"modified":8483,"checkedAt":7,"severity":8484,"references":8487,"versionKeys":8497,"packageCount":32,"repositoryCount":66},"ghsa-c2m8-h5v5-343r-dd3a7510","Tornado: StaticFileHandler follows symlinks outside static root (path traversal)",[8480],"CVE-2026-103263",[291],"2026-09-30T23:48:55Z","2026-10-02T03:56:10.964622908Z",[8485],{"type":3483,"score":8486},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8488,8490,8491,8493,8495,8496],{"type":3487,"url":8489},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c2m8-h5v5-343r",{"type":3487,"url":4510},{"type":3487,"url":8492},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F437ab5f76565403b3403438d2e555d11f8128d32",{"type":3487,"url":8494},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Ff9f50b8bab265a2abf9f2415a3d2da6264a5450b",{"type":3495,"url":4516},{"type":3487,"url":4518},[4520,4521,4522,4523,4524,4525],{"id":292,"slug":8499,"dossier":47,"summary":8500,"aliases":8501,"sourceIds":8504,"published":8505,"modified":8506,"checkedAt":7,"severity":8507,"references":8511,"versionKeys":8526,"packageCount":32,"repositoryCount":32},"ghsa-c39v-8hrw-h448-85b2a8cc","Chainlit contains a session hijacking vulnerability",[8502,8503],"CVE-2026-56104","PYSEC-2026-4028",[292,8503],"2026-06-22T18:34:16Z","2026-10-01T17:56:10.751822436Z",[8508,8509],{"type":3555,"score":8192},{"type":3483,"score":8510},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8512,8514,8516,8518,8519,8521,8523,8524],{"type":3490,"url":8513},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-56104",{"type":3487,"url":8515},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2857",{"type":3487,"url":8517},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F5effb664f1e0af4a4f0a42fe63ea979676039a7f",{"type":3495,"url":3845},{"type":3487,"url":8520},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.10.1",{"type":3487,"url":8522},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-session-hijacking-via-websocket-session-restoration",{"type":3495,"url":3853},{"type":3490,"url":8525},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c39v-8hrw-h448",[3857],{"id":293,"slug":8528,"dossier":47,"summary":8529,"aliases":8530,"sourceIds":8533,"published":8534,"modified":8535,"checkedAt":7,"severity":8536,"references":8540,"versionKeys":8551,"packageCount":32,"repositoryCount":781},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[8531,8532],"CVE-2026-34525","PYSEC-2026-2103",[293,8532],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[8537,8539],{"type":3483,"score":8538},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3555,"score":4028},[8541,8543,8545,8547,8549,8550],{"type":3593,"url":8542},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3490,"url":8544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3593,"url":8546},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3593,"url":8548},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":294,"slug":8553,"dossier":47,"summary":8554,"aliases":8555,"sourceIds":8559,"published":8560,"modified":8561,"checkedAt":7,"severity":8562,"references":8567,"versionKeys":8583,"packageCount":32,"repositoryCount":105},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[8556,8557,8558],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[294],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[8563,8565],{"type":3555,"score":8564},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3483,"score":8566},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8568,8570,8572,8574,8575,8577,8579,8581],{"type":3490,"url":8569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":3487,"url":8571},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":3487,"url":8573},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":3495,"url":4178},{"type":3487,"url":8576},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":3487,"url":8578},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":3487,"url":8580},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":3487,"url":8582},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[4190,4191],{"id":295,"slug":8585,"dossier":47,"summary":8586,"aliases":8587,"sourceIds":8590,"published":8591,"modified":8592,"checkedAt":7,"severity":8593,"references":8596,"versionKeys":8605,"packageCount":32,"repositoryCount":3510},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[8588,8589],"BIT-pillow-2026-112404","CVE-2026-112404",[295],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[8594],{"type":3483,"score":8595},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8597,8599,8601,8603,8604],{"type":3487,"url":8598},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":3490,"url":8600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":3487,"url":8602},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":296,"slug":8607,"dossier":47,"summary":8608,"aliases":8609,"sourceIds":8612,"published":8613,"modified":8614,"checkedAt":7,"severity":8615,"references":8617,"versionKeys":8626,"packageCount":32,"repositoryCount":800},"ghsa-c947-3pg5-gm8q-45da7664","virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote",[8610,8611],"BIT-virtualenv-2026-113732","CVE-2026-113732",[296],"2026-10-21T16:39:58Z","2026-10-29T10:55:30.348006947Z",[8616],{"type":3555,"score":5963},[8618,8620,8622,8624,8625],{"type":3487,"url":8619},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c947-3pg5-gm8q",{"type":3490,"url":8621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113732",{"type":3487,"url":8623},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F3bddeaf8d02c3ee7f576503efb082f8f494cfcab",{"type":3495,"url":4314},{"type":3487,"url":7814},[4318,4319,4320,4321,4322],{"id":297,"slug":8628,"dossier":47,"summary":8629,"aliases":8630,"sourceIds":8633,"published":8634,"modified":8635,"checkedAt":7,"severity":8636,"references":8638,"versionKeys":8649,"packageCount":32,"repositoryCount":800},"ghsa-c978-59m8-c77v-420aeea3","virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax",[8631,8632],"BIT-virtualenv-2026-113722","CVE-2026-113722",[297],"2026-10-21T21:30:12Z","2026-10-29T10:55:46.719521464Z",[8637],{"type":3555,"score":5963},[8639,8641,8643,8645,8647,8648],{"type":3487,"url":8640},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c978-59m8-c77v",{"type":3490,"url":8642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113722",{"type":3487,"url":8644},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3417",{"type":3487,"url":8646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2519941bed33ee0d3ac99277f67913e439e476a9",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":298,"slug":8651,"dossier":47,"summary":8652,"aliases":8653,"sourceIds":8656,"published":8657,"modified":8658,"checkedAt":7,"severity":8659,"references":8661,"versionKeys":8673,"packageCount":32,"repositoryCount":8674},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[8654,8655],"CVE-2025-67725","PYSEC-2025-266",[298,8655],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[8660],{"type":3555,"score":3669},[8662,8664,8666,8668,8670,8671],{"type":3490,"url":8663},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3490,"url":8665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3593,"url":8667},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3487,"url":8669},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3495,"url":4516},{"type":3490,"url":8672},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[4520,4521,4522],9,{"id":299,"slug":8676,"dossier":47,"summary":8677,"aliases":8678,"sourceIds":8682,"published":8683,"modified":8684,"checkedAt":7,"severity":8685,"references":8689,"versionKeys":8727,"packageCount":32,"repositoryCount":5296},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[8679,8680,8681],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[299,8681],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[8686,8688],{"type":3483,"score":8687},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":3669},[8690,8692,8694,8696,8698,8700,8701,8703,8705,8707,8708,8710,8712,8714,8715,8717,8719,8721,8723,8725],{"type":3487,"url":8691},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3490,"url":8693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3487,"url":8695},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3487,"url":8697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3487,"url":8699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3495,"url":3496},{"type":3487,"url":8702},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3487,"url":8704},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3487,"url":8706},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3490,"url":4272},{"type":3490,"url":8709},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3490,"url":8711},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3490,"url":8713},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3490,"url":4792},{"type":3490,"url":8716},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3490,"url":8718},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3490,"url":8720},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3490,"url":8722},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3490,"url":8724},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3490,"url":8726},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3500,3501,3502,3503,3504,3505,3506],{"id":300,"slug":8729,"dossier":47,"summary":8730,"aliases":8731,"sourceIds":8733,"published":8734,"modified":8735,"checkedAt":7,"severity":8736,"references":8739,"versionKeys":8749,"packageCount":32,"repositoryCount":105},"ghsa-cg8m-r9f2-5wm2-26f00a73","Black: GitHub Action installs unvalidated required-version from pyproject.toml",[8732],"CVE-2026-114134",[300],"2026-10-22T16:18:57Z","2026-10-22T16:30:30.132713769Z",[8737],{"type":3483,"score":8738},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8740,8742,8744,8746,8747],{"type":3487,"url":8741},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-cg8m-r9f2-5wm2",{"type":3487,"url":8743},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5510",{"type":3487,"url":8745},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fac1f71563aeccf73cf13ece00f231d9d6c66a514",{"type":3495,"url":4282},{"type":3487,"url":8748},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.10.1",[4290,4291],{"id":301,"slug":8751,"dossier":47,"summary":8752,"aliases":8753,"sourceIds":8757,"published":8758,"modified":8759,"checkedAt":7,"severity":8760,"references":8762,"versionKeys":8773,"packageCount":32,"repositoryCount":32},"ghsa-cgc7-9qp3-86m3-24202aa4","Docling: Unbounded table rowspan\u002Fcolspan in HTML, JATS, ODS and BoxNote backends causes CPU\u002Fmemory exhaustion",[8754,8755,8756],"CVE-2026-105749","PYSEC-2026-4195","PYSEC-2026-4211",[301,8755],"2026-10-05T22:16:57.943Z","2026-10-15T14:55:59.208989812Z",[8761],{"type":3555,"score":3621},[8763,8765,8767,8769,8771,8772],{"type":3593,"url":8764},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cgc7-9qp3-86m3",{"type":3490,"url":8766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105749",{"type":3593,"url":8768},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4414",{"type":3593,"url":8770},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Fc5b4429cc6500a344c13edeb22e67610c2159b09",{"type":3495,"url":4370},{"type":3490,"url":4372},[4374],{"id":302,"slug":8775,"dossier":47,"summary":8776,"aliases":8777,"sourceIds":8779,"published":8780,"modified":8781,"checkedAt":7,"severity":8782,"references":8784,"versionKeys":8795,"packageCount":32,"repositoryCount":885},"ghsa-cgf9-327m-v77c-ec8a6a91","pypdf: Possible large memory usage when parsing content streams",[8778],"CVE-2026-113791",[302],"2026-10-22T16:49:22Z","2026-10-22T17:00:04.215115256Z",[8783],{"type":3483,"score":4333},[8785,8787,8789,8791,8793,8794],{"type":3487,"url":8786},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cgf9-327m-v77c",{"type":3490,"url":8788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113791",{"type":3487,"url":8790},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4218",{"type":3487,"url":8792},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F18bd2981a74479483a0b9507602c58a63d6c9b12",{"type":3495,"url":3531},{"type":3487,"url":6820},[3541,3542,3543],{"id":303,"slug":8797,"dossier":47,"summary":8798,"aliases":8799,"sourceIds":8801,"published":8802,"modified":8803,"checkedAt":7,"severity":8804,"references":8806,"versionKeys":8817,"packageCount":32,"repositoryCount":885},"ghsa-cggf-277g-3q54-8f03fc41","pypdf has possible large memory usage when parsing page tree",[8800],"CVE-2026-119204",[303],"2026-10-30T23:13:01Z","2026-10-30T23:30:04.096691081Z",[8805],{"type":3483,"score":4538},[8807,8809,8811,8813,8815,8816],{"type":3487,"url":8808},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cggf-277g-3q54",{"type":3490,"url":8810},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119204",{"type":3487,"url":8812},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4290",{"type":3487,"url":8814},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fea4ac663133f1b3de1d7a8f2e6fa239802fde79e",{"type":3495,"url":3531},{"type":3487,"url":5566},[3541,3542,3543],{"id":304,"slug":8819,"dossier":47,"summary":8820,"aliases":8821,"sourceIds":8824,"published":8825,"modified":8826,"checkedAt":7,"severity":8827,"references":8829,"versionKeys":8840,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[8822,8823],"CVE-2026-48802","PYSEC-2026-3032",[304,8823],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[8828],{"type":3555,"score":3669},[8830,8832,8834,8836,8838],{"type":3487,"url":8831},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3495,"url":8833},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":3495,"url":8835},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":3490,"url":8837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3490,"url":8839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[8841],"pypi:python-engineio@4.12.3",{"id":305,"slug":8843,"dossier":47,"summary":8844,"aliases":8845,"sourceIds":8847,"published":8848,"modified":8849,"checkedAt":7,"severity":8850,"references":8852,"versionKeys":8866,"packageCount":32,"repositoryCount":66},"ghsa-chx6-46f5-w4vp-dd54bdb8","tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM",[8846],"CVE-2026-103262",[305],"2026-09-30T23:49:13Z","2026-10-02T03:56:11.819291984Z",[8851],{"type":3555,"score":3669},[8853,8855,8856,8858,8860,8862,8864,8865],{"type":3487,"url":8854},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-chx6-46f5-w4vp",{"type":3487,"url":4510},{"type":3487,"url":8857},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F15f056080d8e456f92cca8ad0c33e5a5480414ac",{"type":3487,"url":8859},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6564e0a0922c16f239d3a18adccd04736e380c89",{"type":3487,"url":8861},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Faa2eb0d989716ac00fe8d7a9919b81c1eccd6ec4",{"type":3487,"url":8863},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fe412435febba4569c552c5c9054f1bf92bd171a9",{"type":3495,"url":4516},{"type":3487,"url":4518},[4520,4521,4522,4523,4524,4525],{"id":306,"slug":8868,"dossier":47,"summary":8869,"aliases":8870,"sourceIds":8873,"published":8874,"modified":8875,"checkedAt":7,"severity":8876,"references":8878,"versionKeys":8890,"packageCount":32,"repositoryCount":105},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[8871,8872],"CVE-2026-48155","PYSEC-2026-3016",[306,8872],"2026-06-12T18:29:15Z","2026-09-10T03:51:08.468487559Z",[8877],{"type":3483,"score":3522},[8879,8881,8883,8885,8886,8887,8888],{"type":3487,"url":8880},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3490,"url":8882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3487,"url":8884},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3495,"url":3531},{"type":3487,"url":3570},{"type":3495,"url":3535},{"type":3490,"url":8889},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3541,3542],{"id":307,"slug":8892,"dossier":47,"summary":8893,"aliases":8894,"sourceIds":8897,"published":8898,"modified":8899,"checkedAt":7,"severity":8900,"references":8903,"versionKeys":8920,"packageCount":32,"repositoryCount":32},"ghsa-cjqg-rq2h-2fvj-04722096","Docling: Unsafe Zip Extraction in EasyOCR Model Download",[8895,8896],"CVE-2026-44017","PYSEC-2026-2143",[307,8896],"2026-06-03T20:02:42Z","2026-08-28T18:45:06.860507459Z",[8901],{"type":3555,"score":8902},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8904,8906,8908,8909,8911,8913,8914,8916,8918],{"type":3593,"url":8905},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cjqg-rq2h-2fvj",{"type":3490,"url":8907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44017",{"type":3487,"url":7501},{"type":3487,"url":8910},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44017",{"type":3955,"url":8912},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492448",{"type":3495,"url":4370},{"type":3490,"url":8915},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.91.0",{"type":3487,"url":8917},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2143.yaml",{"type":3487,"url":8919},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44017.json",[4374],{"id":308,"slug":8922,"dossier":47,"summary":8923,"aliases":8924,"sourceIds":8928,"published":8929,"modified":8930,"checkedAt":7,"severity":8931,"references":8934,"versionKeys":8943,"packageCount":32,"repositoryCount":828},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[8925,8926,8927],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[308,8927],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[8932,8933],{"type":3483,"score":3868},{"type":3555,"score":3669},[8935,8937,8939,8941,8942],{"type":3744,"url":8936},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":3490,"url":8938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":3593,"url":8940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":3495,"url":3496},{"type":3490,"url":3498},[3505,3506,3507,3508,3509],{"id":309,"slug":8945,"dossier":47,"summary":8946,"aliases":8947,"sourceIds":8950,"published":8951,"modified":8952,"checkedAt":7,"severity":8953,"references":8956,"versionKeys":8973,"packageCount":32,"repositoryCount":105},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[8948,8949],"CVE-2025-27516","PYSEC-2026-1471",[309,8949],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[8954],{"type":3483,"score":8955},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8957,8959,8961,8963,8965,8967,8969,8971],{"type":3487,"url":8958},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3490,"url":8960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3593,"url":8962},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3495,"url":8964},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3487,"url":8966},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3487,"url":8968},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3495,"url":8970},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3490,"url":8972},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[8974,8975],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":310,"slug":8977,"dossier":47,"summary":8978,"aliases":8979,"sourceIds":8982,"published":8983,"modified":8984,"checkedAt":7,"severity":8985,"references":8987,"versionKeys":9002,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[8980,8981],"CVE-2026-69244","PYSEC-2026-3545",[310,8981],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[8986],{"type":3483,"score":4538},[8988,8990,8992,8994,8995,8997,8998,9000],{"type":3487,"url":8989},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3487,"url":8991},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3487,"url":8993},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3495,"url":3812},{"type":3487,"url":8996},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3495,"url":5370},{"type":3490,"url":8999},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3490,"url":9001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898],{"id":311,"slug":9004,"dossier":47,"summary":9005,"aliases":9006,"sourceIds":9009,"published":9010,"modified":9011,"checkedAt":7,"severity":9012,"references":9014,"versionKeys":9023,"packageCount":32,"repositoryCount":32},"ghsa-cr42-rg2m-mq4q-72336d81","Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks",[9007,9008],"CVE-2026-31247","PYSEC-2026-2455",[311,9008],"2026-05-11T18:31:43Z","2026-07-13T16:43:07.440539926Z",[9013],{"type":3555,"score":3669},[9015,9017,9018,9020,9021],{"type":3490,"url":9016},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31247",{"type":3495,"url":4370},{"type":3487,"url":9019},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31247-35d1e1393188818fa654c116c6a470bb",{"type":3495,"url":8058},{"type":3490,"url":9022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cr42-rg2m-mq4q",[4374],{"id":312,"slug":9025,"dossier":47,"summary":9026,"aliases":9027,"sourceIds":9030,"published":9031,"modified":9032,"checkedAt":7,"severity":9033,"references":9040,"versionKeys":9053,"packageCount":32,"repositoryCount":32},"ghsa-cv22-g7mw-8v73-34774163","NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure",[9028,9029],"CVE-2026-71514","PYSEC-2026-3790",[312,9029],"2026-08-22T14:16:33.560Z","2026-09-10T11:15:08.990306396Z",[9034,9036,9038],{"type":3555,"score":9035},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3483,"score":9037},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":9039},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[9041,9043,9045,9046,9048,9049,9051],{"type":3490,"url":9042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71514",{"type":3593,"url":9044},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F10d34b3f4fe3fec74b76527a409eb0acbac2e8ab",{"type":3495,"url":3949},{"type":3593,"url":9047},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fcorpus\u002Freader\u002Fcrubadan.py#L90-L98",{"type":3487,"url":4427},{"type":3490,"url":9050},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-path-traversal-via-crubadancorpusreader-pathsec-bypass",{"type":3490,"url":9052},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cv22-g7mw-8v73",[4433],{"id":313,"slug":9055,"dossier":47,"summary":9056,"aliases":9057,"sourceIds":9060,"published":9061,"modified":9062,"checkedAt":7,"severity":9063,"references":9065,"versionKeys":9076,"packageCount":32,"repositoryCount":800},"ghsa-cw65-gx24-rc82-d2d30a51","virtualenv: Builtin creation follows linked environment directories",[9058,9059],"BIT-virtualenv-2026-113716","CVE-2026-113716",[313],"2026-10-21T21:35:56Z","2026-10-29T10:55:59.838026441Z",[9064],{"type":3555,"score":4683},[9066,9068,9070,9072,9074,9075],{"type":3487,"url":9067},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cw65-gx24-rc82",{"type":3490,"url":9069},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113716",{"type":3487,"url":9071},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3429",{"type":3487,"url":9073},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F554d9f9d4f7758f5cf53f993031e29787f1f74c5",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":314,"slug":9078,"dossier":47,"summary":9079,"aliases":9080,"sourceIds":9083,"published":9084,"modified":9085,"checkedAt":7,"severity":9086,"references":9091,"versionKeys":9104,"packageCount":32,"repositoryCount":847},"ghsa-cw6x-m8jw-qmrh-dd458a88","NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input",[9081,9082],"CVE-2026-81724","PYSEC-2026-3739",[314,9082],"2026-08-27T17:21:03.100Z","2026-09-10T03:51:15.361788366Z",[9087,9088,9089],{"type":3555,"score":3769},{"type":3483,"score":4387},{"type":3483,"score":9090},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9092,9094,9096,9098,9099,9100,9102],{"type":3744,"url":9093},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-cw6x-m8jw-qmrh",{"type":3490,"url":9095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81724",{"type":3487,"url":9097},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43c7b78cc8ea37e5cd3a129e27e32c415ea21cf1",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":9101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3739.yaml",{"type":3490,"url":9103},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-denial-of-service-via-uncontrolled-recursion",[4433,3960,3961],{"id":315,"slug":9106,"dossier":47,"summary":9107,"aliases":9108,"sourceIds":9110,"published":9111,"modified":9112,"checkedAt":7,"severity":9113,"references":9115,"versionKeys":9124,"packageCount":32,"repositoryCount":847},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[9109],"CVE-2026-112915",[315],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[9114],{"type":3555,"score":4167},[9116,9118,9120,9121,9122,9123],{"type":3487,"url":9117},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":3490,"url":9119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":3487,"url":8400},{"type":3487,"url":8402},{"type":3495,"url":5501},{"type":3487,"url":5503},[5505,5506,5507,5508],{"id":316,"slug":9126,"dossier":47,"summary":9127,"aliases":9128,"sourceIds":9131,"published":9132,"modified":9133,"checkedAt":7,"severity":9134,"references":9136,"versionKeys":9145,"packageCount":32,"repositoryCount":800},"ghsa-cx28-75q4-x26q-bb017595","virtualenv: Pip seeding with download omits wheel digest verification",[9129,9130],"BIT-virtualenv-2026-113717","CVE-2026-113717",[316],"2026-10-23T22:26:04Z","2026-10-29T10:55:56.839709622Z",[9135],{"type":3483,"score":4865},[9137,9139,9141,9142,9143,9144],{"type":3487,"url":9138},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cx28-75q4-x26q",{"type":3490,"url":9140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113717",{"type":3487,"url":4872},{"type":3487,"url":4874},{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":317,"slug":9147,"dossier":47,"summary":9148,"aliases":9149,"sourceIds":9152,"published":9153,"modified":9154,"checkedAt":7,"severity":9155,"references":9158,"versionKeys":9169,"packageCount":32,"repositoryCount":781},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[9150,9151],"CVE-2026-49854","PYSEC-2026-3388",[317,9151],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[9156],{"type":3555,"score":9157},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[9159,9161,9162,9164,9165,9167],{"type":3487,"url":9160},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3495,"url":4516},{"type":3487,"url":9163},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3495,"url":4591},{"type":3490,"url":9166},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3490,"url":9168},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[4520,4521,4522,4523,4524],{"id":318,"slug":9171,"dossier":47,"summary":9172,"aliases":9173,"sourceIds":9177,"published":9178,"modified":9179,"checkedAt":7,"severity":9180,"references":9184,"versionKeys":9200,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[9174,9175,9176],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[318,9176],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[9181,9182],{"type":3555,"score":3691},{"type":3483,"score":9183},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9185,9187,9189,9191,9192,9194,9196,9198],{"type":3490,"url":9186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3487,"url":9188},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3487,"url":9190},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3495,"url":5918},{"type":3487,"url":9193},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3487,"url":9195},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3495,"url":9197},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3490,"url":9199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[5924],{"id":319,"slug":9202,"dossier":47,"summary":9203,"aliases":9204,"sourceIds":9207,"published":9208,"modified":9209,"checkedAt":7,"severity":9210,"references":9212,"versionKeys":9221,"packageCount":32,"repositoryCount":3510},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[9205,9206],"BIT-pillow-2026-112406","CVE-2026-112406",[319],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[9211],{"type":3483,"score":3868},[9213,9215,9217,9219,9220],{"type":3487,"url":9214},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":3490,"url":9216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":3487,"url":9218},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":320,"slug":9223,"dossier":47,"summary":9224,"aliases":9225,"sourceIds":9228,"published":9229,"modified":9230,"checkedAt":7,"severity":9231,"references":9233,"versionKeys":9248,"packageCount":32,"repositoryCount":105},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[9226,9227],"CVE-2026-28351","PYSEC-2026-3017",[320,9227],"2026-02-28T02:46:10Z","2026-09-10T03:50:34.825129703Z",[9232],{"type":3483,"score":4387},[9234,9236,9238,9240,9242,9243,9245,9246],{"type":3487,"url":9235},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3490,"url":9237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3487,"url":9239},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3487,"url":9241},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3495,"url":3531},{"type":3487,"url":9244},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3495,"url":3535},{"type":3490,"url":9247},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3541,3542],{"id":321,"slug":9250,"dossier":47,"summary":9251,"aliases":9252,"sourceIds":9256,"published":9257,"modified":9258,"checkedAt":7,"severity":9259,"references":9263,"versionKeys":9281,"packageCount":32,"repositoryCount":105},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[9253,9254,9255],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[321],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[9260,9261],{"type":3555,"score":5250},{"type":3483,"score":9262},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9264,9266,9268,9270,9272,9274,9275,9277,9279],{"type":3490,"url":9265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":3487,"url":9267},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":3487,"url":9269},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":3487,"url":9271},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":3487,"url":9273},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":3495,"url":4178},{"type":3487,"url":9276},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":3487,"url":9278},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":3487,"url":9280},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[4190,4191],{"id":322,"slug":9283,"dossier":47,"summary":9284,"aliases":9285,"sourceIds":9287,"published":9288,"modified":9289,"checkedAt":7,"severity":9290,"references":9292,"versionKeys":9301,"packageCount":32,"repositoryCount":885},"ghsa-f54x-cmq8-qg57-7f4861f9","pypdf: Possible large memory usage when parsing arrays and dictionaries",[9286],"CVE-2026-113790",[322],"2026-10-22T16:49:40Z","2026-10-22T17:00:04.224392742Z",[9291],{"type":3483,"score":4333},[9293,9295,9297,9298,9299,9300],{"type":3487,"url":9294},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f54x-cmq8-qg57",{"type":3490,"url":9296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113790",{"type":3487,"url":8790},{"type":3487,"url":8792},{"type":3495,"url":3531},{"type":3487,"url":6820},[3541,3542,3543],{"id":323,"slug":9303,"dossier":47,"summary":9304,"aliases":9305,"sourceIds":9308,"published":9309,"modified":9310,"checkedAt":7,"severity":9311,"references":9318,"versionKeys":9333,"packageCount":32,"repositoryCount":847},"ghsa-f794-5jv7-7672-f614e21f","NLTK: Downloader.download follows hardlinks and overwrites outside-root files",[9306,9307],"CVE-2026-81727","PYSEC-2026-3741",[323,9307],"2026-08-27T17:21:03.533Z","2026-09-10T03:51:15.298800760Z",[9312,9314,9316],{"type":3555,"score":9313},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3483,"score":9315},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":9317},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9319,9321,9323,9325,9327,9328,9329,9331],{"type":3744,"url":9320},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f794-5jv7-7672",{"type":3490,"url":9322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81727",{"type":3487,"url":9324},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3797",{"type":3487,"url":9326},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9e6d5f05902b9aaa1221a0a565448d17a9c9b3e8",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":9330},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3741.yaml",{"type":3490,"url":9332},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-hardlink-file-overwrite-via-downloader",[4433,3960,3961],{"id":324,"slug":9335,"dossier":47,"summary":9336,"aliases":9337,"sourceIds":9340,"published":9341,"modified":9342,"checkedAt":7,"severity":9343,"references":9347,"versionKeys":9362,"packageCount":32,"repositoryCount":32},"ghsa-f833-7jw8-xwrv-24f4d846","NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)",[9338,9339],"CVE-2026-62384","PYSEC-2026-3789",[324,9339],"2026-08-22T15:16:18.700Z","2026-09-08T16:45:03.613881599Z",[9344,9345,9346],{"type":3555,"score":5524},{"type":3483,"score":6893},{"type":3483,"score":6895},[9348,9350,9352,9354,9356,9357,9358,9360],{"type":3744,"url":9349},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f833-7jw8-xwrv",{"type":3490,"url":9351},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62384",{"type":3487,"url":9353},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3726",{"type":3487,"url":9355},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F736d3212a47de2005b85b785dde6720556d3925d",{"type":3495,"url":3949},{"type":3487,"url":4490},{"type":3487,"url":9359},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3789.yaml",{"type":3490,"url":9361},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-framenetcorpusreader-symlink-sandbox-bypass-before",[4433],{"id":325,"slug":9364,"dossier":47,"summary":9365,"aliases":9366,"sourceIds":9369,"published":9370,"modified":9371,"checkedAt":7,"severity":9372,"references":9376,"versionKeys":9387,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[9367,9368],"CVE-2024-47874","PYSEC-2026-1943",[325,9368],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[9373,9375],{"type":3555,"score":9374},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3483,"score":3868},[9377,9379,9381,9383,9384,9385],{"type":3487,"url":9378},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3490,"url":9380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3593,"url":9382},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3495,"url":3778},{"type":3495,"url":3784},{"type":3490,"url":9386},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3788],{"id":326,"slug":9389,"dossier":47,"summary":9390,"aliases":9391,"sourceIds":9393,"published":9394,"modified":9395,"checkedAt":7,"severity":9396,"references":9399,"versionKeys":9408,"packageCount":32,"repositoryCount":3900},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[9392],"CVE-2026-111748",[326],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[9397],{"type":3483,"score":9398},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9400,9402,9404,9406,9407],{"type":3487,"url":9401},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":3490,"url":9403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":3487,"url":9405},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":327,"slug":9410,"dossier":47,"summary":9411,"aliases":9412,"sourceIds":9415,"published":9416,"modified":9417,"checkedAt":7,"severity":9418,"references":9421,"versionKeys":9432,"packageCount":32,"repositoryCount":800},"ghsa-fc2g-4w5p-6whm-f875e0d2","virtualenv: Seeded files retain permissions from an older cache",[9413,9414],"BIT-virtualenv-2026-113720","CVE-2026-113720",[327],"2026-10-23T22:23:11Z","2026-10-29T10:55:56.743073990Z",[9419],{"type":3483,"score":9420},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9422,9424,9426,9428,9430,9431],{"type":3487,"url":9423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-fc2g-4w5p-6whm",{"type":3490,"url":9425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113720",{"type":3487,"url":9427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3425",{"type":3487,"url":9429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F35f0b33562790176dd186d0a3c517af3acc7a0e1",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":328,"slug":9434,"dossier":47,"summary":9435,"aliases":9436,"sourceIds":9439,"published":9440,"modified":9441,"checkedAt":7,"severity":9442,"references":9444,"versionKeys":9459,"packageCount":32,"repositoryCount":885},"ghsa-fc8x-2rww-xw9m-a14a13c8","pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace",[9437,9438],"CVE-2026-82398","PYSEC-2026-3912",[328,9438],"2026-09-02T14:38:12Z","2026-09-10T12:25:53.327187326Z",[9443],{"type":3483,"score":4387},[9445,9447,9449,9451,9453,9454,9456,9457],{"type":3487,"url":9446},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",{"type":3490,"url":9448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82398",{"type":3487,"url":9450},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3947",{"type":3487,"url":9452},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F4959848e057e37c218dccad7465259210923faaa",{"type":3495,"url":3531},{"type":3487,"url":9455},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3495,"url":3535},{"type":3490,"url":9458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",[3541,3542,3543],{"id":329,"slug":9461,"dossier":47,"summary":9462,"aliases":9463,"sourceIds":9466,"published":9467,"modified":9468,"checkedAt":7,"severity":9469,"references":9471,"versionKeys":9479,"packageCount":32,"repositoryCount":3510},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[9464,9465],"BIT-pillow-2026-112891","CVE-2026-112891",[329],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[9470],{"type":3483,"score":4387},[9472,9474,9476,9477,9478],{"type":3487,"url":9473},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":3490,"url":9475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":3487,"url":6958},{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":330,"slug":9481,"dossier":47,"summary":9482,"aliases":9483,"sourceIds":9486,"published":9487,"modified":9488,"checkedAt":7,"severity":9489,"references":9491,"versionKeys":9505,"packageCount":32,"repositoryCount":847},"ghsa-ff5c-cp5c-9wjf-c6e516dd","NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars",[9484,9485],"CVE-2026-12876","PYSEC-2026-3869",[330,9485],"2026-09-02T14:33:38Z","2026-09-10T12:25:59.672261950Z",[9490],{"type":3483,"score":4387},[9492,9494,9496,9498,9499,9500,9501,9503],{"type":3487,"url":9493},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3487,"url":9495},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3649",{"type":3487,"url":9497},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43aaca1b9024138421c97f970bf13ee19ac8129d",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3495,"url":5715},{"type":3490,"url":9502},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3490,"url":9504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12876",[4433,3960,3961],{"id":331,"slug":9507,"dossier":47,"summary":9508,"aliases":9509,"sourceIds":9512,"published":9513,"modified":9514,"checkedAt":7,"severity":9515,"references":9518,"versionKeys":9530,"packageCount":32,"repositoryCount":857},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[9510,9511],"CVE-2026-102268","PYSEC-2026-4145",[331,9511],"2026-09-29T23:17:33Z","2026-10-01T17:55:42.096970476Z",[9516],{"type":3555,"score":9517},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9519,9521,9523,9525,9526,9527,9528],{"type":3487,"url":9520},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":3490,"url":9522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":3487,"url":9524},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":9529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",[3928,3929,3930],{"id":332,"slug":9532,"dossier":47,"summary":9533,"aliases":9534,"sourceIds":9537,"published":9538,"modified":9539,"checkedAt":7,"severity":9540,"references":9544,"versionKeys":9559,"packageCount":32,"repositoryCount":857},"ghsa-ffj6-66c4-86gw-4a1cce88","NLTK downloader allows cross-package resource and model poisoning",[9535,9536],"CVE-2026-12261","PYSEC-2026-3954",[332,9536],"2026-08-07T07:16:26.377Z","2026-10-15T14:45:11.781131372Z",[9541,9543],{"type":3555,"score":9542},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3555,"score":6017},[9545,9547,9549,9551,9552,9553,9555,9557],{"type":3490,"url":9546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12261",{"type":3487,"url":9548},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3625",{"type":3487,"url":9550},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7a5740af89feeb739193db766e11e85dfe78339c",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":9554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3954.yaml",{"type":3955,"url":9556},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8b8c381e-08a8-4e4f-bb46-a320c96a364f",{"type":3490,"url":9558},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffj6-66c4-86gw",[3960,3961],{"id":333,"slug":9561,"dossier":47,"summary":9562,"aliases":9563,"sourceIds":9565,"published":9566,"modified":9567,"checkedAt":7,"severity":9568,"references":9570,"versionKeys":9581,"packageCount":32,"repositoryCount":847},"ghsa-ffr9-mgrr-wcvr-b7894c36","NLTK: Quadratic CPU exhaustion in TreebankWordTokenizer.span_tokenize via list.pop(0) in quote-restore loop",[9564],"CVE-2026-126300",[333],"2026-11-13T21:08:55Z","2026-11-13T21:15:14.554118302Z",[9569],{"type":3555,"score":3769},[9571,9573,9575,9576,9577,9578,9579],{"type":3487,"url":9572},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ffr9-mgrr-wcvr",{"type":3490,"url":9574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126300",{"type":3487,"url":7649},{"type":3487,"url":7651},{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":9580},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-from-3.2.5-before-3.10.4-cpu-exhaustion-via-treebankwordtokenizer-span-tokenize",[4433,3960,3961],{"id":334,"slug":9583,"dossier":47,"summary":9584,"aliases":9585,"sourceIds":9588,"published":9589,"modified":9590,"checkedAt":7,"severity":9591,"references":9593,"versionKeys":9602,"packageCount":32,"repositoryCount":857},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[9586,9587],"CVE-2026-12061","PYSEC-2026-3582",[334,9587],"2026-07-31T16:51:09Z","2026-09-10T03:50:51.940502717Z",[9592],{"type":3555,"score":3669},[9594,9596,9597,9598,9600],{"type":3487,"url":9595},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3495,"url":3949},{"type":3495,"url":5715},{"type":3490,"url":9599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3490,"url":9601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3960,3961],{"id":335,"slug":9604,"dossier":47,"summary":9605,"aliases":9606,"sourceIds":9608,"published":9609,"modified":9610,"checkedAt":7,"severity":9611,"references":9614,"versionKeys":9625,"packageCount":32,"repositoryCount":32},"ghsa-fg9w-wfp5-j933-cc0384f3","NLTK: BllipParser passes caller-supplied model paths to the bllipparser C extension with no pathsec check, enabling arbitrary read",[9607],"CVE-2026-126295",[335],"2026-11-13T23:20:56Z","2026-11-13T23:30:03.782609768Z",[9612],{"type":3555,"score":9613},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[9615,9617,9619,9621,9622,9623],{"type":3487,"url":9616},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg9w-wfp5-j933",{"type":3490,"url":9618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126295",{"type":3487,"url":9620},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ffdde6d9ebf5fd612e817b49ec7fecd752802c268",{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":9624},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.0-before-3.10.4-arbitrary-file-read-via-bllipparser-model-paths",[4433],{"id":336,"slug":9627,"dossier":47,"summary":9628,"aliases":9629,"sourceIds":9632,"published":9633,"modified":9634,"checkedAt":7,"severity":9635,"references":9640,"versionKeys":9662,"packageCount":32,"repositoryCount":66},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[9630,9631],"CVE-2026-5241","PYSEC-2026-2290",[336,9631],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[9636,9638],{"type":3555,"score":9637},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":3555,"score":9639},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9641,9643,9645,9647,9648,9649,9651,9653,9654,9656,9658,9660],{"type":3490,"url":9642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":3593,"url":9644},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":3490,"url":9646},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3490,"url":4794},{"type":3487,"url":4796},{"type":3487,"url":9650},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3955,"url":9652},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":3495,"url":3742},{"type":3487,"url":9655},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":3744,"url":9657},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":3487,"url":9659},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":3490,"url":9661},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[3749,3750,3751,3752,3753,3754,3755,3756,3757],{"id":337,"slug":9664,"dossier":47,"summary":9665,"aliases":9666,"sourceIds":9669,"published":9670,"modified":9671,"checkedAt":7,"severity":9672,"references":9675,"versionKeys":9686,"packageCount":32,"repositoryCount":800},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[9667,9668],"CVE-2025-69230","PYSEC-2026-1105",[337,9668],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[9673],{"type":3483,"score":9674},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[9676,9678,9680,9682,9683,9684],{"type":3487,"url":9677},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3490,"url":9679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3593,"url":9681},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":9685},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3816,3817,3818,3819,3820,3821,3822],{"id":338,"slug":9688,"dossier":47,"summary":9689,"aliases":9690,"sourceIds":9693,"published":9694,"modified":9695,"checkedAt":7,"severity":9696,"references":9699,"versionKeys":9709,"packageCount":32,"repositoryCount":885},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[9691,9692],"CVE-2026-48524","PYSEC-2026-177",[338,9692],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[9697],{"type":3555,"score":9698},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[9700,9702,9704,9706,9707],{"type":3490,"url":9701},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3490,"url":9703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3487,"url":9705},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3495,"url":3920},{"type":3487,"url":9708},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[3928,3930],{"id":339,"slug":9711,"dossier":47,"summary":9712,"aliases":9713,"sourceIds":9717,"published":9718,"modified":9719,"checkedAt":7,"severity":9720,"references":9723,"versionKeys":9737,"packageCount":32,"repositoryCount":4748},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[9714,9715,9716],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[339,9716],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[9721],{"type":3555,"score":9722},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[9724,9726,9728,9730,9732,9733,9734,9735],{"type":3487,"url":9725},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3490,"url":9727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3487,"url":9729},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3487,"url":9731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3495,"url":3496},{"type":3487,"url":6226},{"type":3495,"url":6228},{"type":3490,"url":9736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":340,"slug":9739,"dossier":47,"summary":9740,"aliases":9741,"sourceIds":9744,"published":9745,"modified":9746,"checkedAt":7,"severity":9747,"references":9749,"versionKeys":9763,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[9742,9743],"CVE-2024-21503","PYSEC-2024-48",[340,9743],"2024-03-19T05:15:00Z","2026-09-10T03:50:10.486429507Z",[9748],{"type":3555,"score":3769},[9750,9752,9754,9755,9757,9759,9761],{"type":3490,"url":9751},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":3593,"url":9753},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":3495,"url":4282},{"type":3487,"url":9756},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":3487,"url":9758},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":3487,"url":9760},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":3490,"url":9762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[4290],{"id":341,"slug":9765,"dossier":47,"summary":9766,"aliases":9767,"sourceIds":9770,"published":9771,"modified":9772,"checkedAt":7,"severity":9773,"references":9775,"versionKeys":9789,"packageCount":32,"repositoryCount":885},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[9768,9769],"CVE-2026-71870","PYSEC-2026-3655",[341,9769],"2026-08-07T19:29:09Z","2026-09-10T03:51:13.982103349Z",[9774],{"type":3483,"score":3522},[9776,9778,9780,9782,9783,9784,9785,9787],{"type":3487,"url":9777},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3487,"url":9779},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3487,"url":9781},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3495,"url":3531},{"type":3487,"url":9455},{"type":3495,"url":3535},{"type":3490,"url":9786},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3490,"url":9788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3541,3542,3543],{"id":342,"slug":9791,"dossier":47,"summary":9792,"aliases":9793,"sourceIds":9796,"published":9797,"modified":9798,"checkedAt":7,"severity":9799,"references":9801,"versionKeys":9816,"packageCount":32,"repositoryCount":885},"ghsa-fp3h-c4fm-7vvf-cd1c6049","pypdf: Possible large memory usage for large \u002FToUnicode streams (Follow-up 2)",[9794,9795],"CVE-2026-102995","PYSEC-2026-4154",[342,9795],"2026-10-01T15:06:04Z","2026-10-01T17:56:15.156271717Z",[9800],{"type":3483,"score":3868},[9802,9804,9806,9808,9810,9811,9813,9814],{"type":3487,"url":9803},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3h-c4fm-7vvf",{"type":3490,"url":9805},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102995",{"type":3487,"url":9807},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4071",{"type":3487,"url":9809},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F319d0b823ce2c311a2435e9fd93c13994d32bb51",{"type":3495,"url":3531},{"type":3487,"url":9812},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.18.1",{"type":3495,"url":3535},{"type":3490,"url":9815},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3h-c4fm-7vvf",[3541,3542,3543],{"id":343,"slug":9818,"dossier":47,"summary":6778,"aliases":9819,"sourceIds":9822,"published":9823,"modified":9824,"checkedAt":7,"severity":9825,"references":9827,"versionKeys":9838,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[9820,9821],"CVE-2025-1194","PYSEC-2026-1984",[343,9821],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[9826],{"type":3555,"score":4359},[9828,9830,9832,9833,9835,9836],{"type":3490,"url":9829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":3487,"url":9831},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":3495,"url":3742},{"type":3487,"url":9834},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":3495,"url":4215},{"type":3490,"url":9837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[3749],{"id":344,"slug":9840,"dossier":47,"summary":9841,"aliases":9842,"sourceIds":9844,"published":9845,"modified":9846,"checkedAt":7,"severity":9847,"references":9850,"versionKeys":9861,"packageCount":32,"repositoryCount":847},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[9843],"CVE-2026-112935",[344],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[9848],{"type":3555,"score":9849},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[9851,9853,9855,9857,9859,9860],{"type":3487,"url":9852},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":3490,"url":9854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":3487,"url":9856},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":3487,"url":9858},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":3495,"url":5501},{"type":3487,"url":5503},[5505,5506,5507,5508],{"id":345,"slug":9863,"dossier":47,"summary":9864,"aliases":9865,"sourceIds":9868,"published":9869,"modified":9870,"checkedAt":7,"severity":9871,"references":9873,"versionKeys":9887,"packageCount":32,"repositoryCount":885},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[9866,9867],"CVE-2026-71852","PYSEC-2026-3656",[345,9867],"2026-08-07T18:54:00Z","2026-09-10T03:51:13.932861945Z",[9872],{"type":3483,"score":3522},[9874,9876,9878,9880,9881,9882,9883,9885],{"type":3487,"url":9875},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3487,"url":9877},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3487,"url":9879},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3495,"url":3531},{"type":3487,"url":9455},{"type":3495,"url":3535},{"type":3490,"url":9884},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3490,"url":9886},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3541,3542,3543],{"id":346,"slug":9889,"dossier":47,"summary":9890,"aliases":9891,"sourceIds":9894,"published":9895,"modified":9896,"checkedAt":7,"severity":9897,"references":9900,"versionKeys":9906,"packageCount":32,"repositoryCount":66},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[9892,9893],"CVE-2026-54278","PYSEC-2026-2111",[346,9893],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[9898,9899],{"type":3483,"score":4916},{"type":3555,"score":3669},[9901,9903,9904],{"type":3490,"url":9902},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3495,"url":3812},{"type":3593,"url":9905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":347,"slug":9908,"dossier":47,"summary":9909,"aliases":9910,"sourceIds":9914,"published":9915,"modified":9916,"checkedAt":7,"severity":9917,"references":9920,"versionKeys":9931,"packageCount":32,"repositoryCount":4101},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[9911,9912,9913],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[347,9913],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[9918,9919],{"type":3483,"score":4538},{"type":3555,"score":3621},[9921,9923,9925,9927,9929,9930],{"type":3490,"url":9922},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":3490,"url":9924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":3955,"url":9926},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":3593,"url":9928},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":3495,"url":3496},{"type":3490,"url":3498},[3502,3503,3504,3505,3506,3507,3508,3509],{"id":348,"slug":9933,"dossier":47,"summary":9934,"aliases":9935,"sourceIds":9938,"published":9939,"modified":9940,"checkedAt":7,"severity":9941,"references":9944,"versionKeys":9955,"packageCount":32,"repositoryCount":3510},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[9936,9937],"BIT-pillow-2026-96778","CVE-2026-96778",[348],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[9942],{"type":3483,"score":9943},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9945,9947,9949,9951,9953,9954],{"type":3487,"url":9946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":3490,"url":9948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":3487,"url":9950},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":3487,"url":9952},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":349,"slug":9957,"dossier":47,"summary":9958,"aliases":9959,"sourceIds":9962,"published":9963,"modified":9964,"checkedAt":7,"severity":9965,"references":9968,"versionKeys":9987,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[9960,9961],"CVE-2024-34062","PYSEC-2026-1976",[349,9961],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[9966],{"type":3555,"score":9967},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[9969,9971,9973,9975,9977,9979,9981,9983,9985],{"type":3487,"url":9970},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3490,"url":9972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3487,"url":9974},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3495,"url":9976},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3487,"url":9978},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3487,"url":9980},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3487,"url":9982},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3495,"url":9984},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3490,"url":9986},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[9988],"pypi:tqdm@4.66.2",{"id":350,"slug":9990,"dossier":47,"summary":9991,"aliases":9992,"sourceIds":9996,"published":9997,"modified":9998,"checkedAt":7,"severity":9999,"references":10002,"versionKeys":10013,"packageCount":32,"repositoryCount":3510},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[9993,9994,9995],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[350,9995],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[10000,10001],{"type":3483,"score":4538},{"type":3555,"score":3621},[10003,10005,10007,10009,10011,10012],{"type":3490,"url":10004},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":3490,"url":10006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":3955,"url":10008},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":3593,"url":10010},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":351,"slug":10015,"dossier":47,"summary":10016,"aliases":10017,"sourceIds":10020,"published":10021,"modified":10022,"checkedAt":7,"severity":10023,"references":10025,"versionKeys":10038,"packageCount":32,"repositoryCount":800},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[10018,10019],"CVE-2025-69229","PYSEC-2026-1106",[351,10019],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[10024],{"type":3483,"score":4916},[10026,10028,10030,10032,10034,10035,10036],{"type":3487,"url":10027},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3490,"url":10029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3487,"url":10031},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3487,"url":10033},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":10037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3816,3817,3818,3819,3820,3821,3822],{"id":352,"slug":10040,"dossier":47,"summary":10041,"aliases":10042,"sourceIds":10045,"published":10046,"modified":10047,"checkedAt":7,"severity":10048,"references":10050,"versionKeys":10065,"packageCount":32,"repositoryCount":105},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[10043,10044],"CVE-2026-59935","PYSEC-2026-3613",[352,10044],"2026-07-23T16:37:07Z","2026-09-10T03:50:51.957724392Z",[10049],{"type":3483,"score":3868},[10051,10053,10055,10057,10059,10060,10062,10063],{"type":3487,"url":10052},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3490,"url":10054},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3487,"url":10056},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3487,"url":10058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3495,"url":3531},{"type":3487,"url":10061},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3495,"url":3535},{"type":3490,"url":10064},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3541,3542],{"id":353,"slug":10067,"dossier":47,"summary":10068,"aliases":10069,"sourceIds":10072,"published":10073,"modified":10074,"checkedAt":7,"severity":10075,"references":10077,"versionKeys":10091,"packageCount":32,"repositoryCount":885},"ghsa-g9cg-prrw-2r8q-3855e24a","pypdf: Possible large memory usage when parsing font data",[10070,10071],"CVE-2026-102996","PYSEC-2026-4155",[353,10071],"2026-10-01T15:06:13Z","2026-10-01T17:55:49.593652911Z",[10076],{"type":3483,"score":3868},[10078,10080,10082,10084,10086,10087,10088,10089],{"type":3487,"url":10079},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9cg-prrw-2r8q",{"type":3490,"url":10081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102996",{"type":3487,"url":10083},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4072",{"type":3487,"url":10085},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5",{"type":3495,"url":3531},{"type":3487,"url":9812},{"type":3495,"url":3535},{"type":3490,"url":10090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9cg-prrw-2r8q",[3541,3542,3543],{"id":354,"slug":10093,"dossier":47,"summary":10094,"aliases":10095,"sourceIds":10098,"published":10099,"modified":10100,"checkedAt":7,"severity":10101,"references":10103,"versionKeys":10116,"packageCount":32,"repositoryCount":105},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[10096,10097],"CVE-2026-54651","PYSEC-2026-3018",[354,10097],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[10102],{"type":3483,"score":5308},[10104,10106,10108,10110,10111,10113,10114],{"type":3487,"url":10105},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3490,"url":10107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3487,"url":10109},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3495,"url":3531},{"type":3487,"url":10112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3495,"url":3535},{"type":3490,"url":10115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3541,3542],{"id":355,"slug":10118,"dossier":47,"summary":10119,"aliases":10120,"sourceIds":10123,"published":10124,"modified":10125,"checkedAt":7,"severity":10126,"references":10131,"versionKeys":10141,"packageCount":32,"repositoryCount":3510},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[10121,10122],"CVE-2026-25645","PYSEC-2026-2275",[355,10122],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[10127,10129],{"type":3555,"score":10128},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3555,"score":10130},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[10132,10134,10136,10138,10139],{"type":3490,"url":10133},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3490,"url":10135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3593,"url":10137},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3495,"url":8141},{"type":3490,"url":10140},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[8153,8154,10142,10143],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":356,"slug":10145,"dossier":47,"summary":10146,"aliases":10147,"sourceIds":10150,"published":10151,"modified":10152,"checkedAt":7,"severity":10153,"references":10156,"versionKeys":10166,"packageCount":32,"repositoryCount":857},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[10148,10149],"CVE-2026-33230","PYSEC-2026-2235",[356,10149],"2026-03-18T20:23:33Z","2026-09-10T03:50:39.207692385Z",[10154],{"type":3555,"score":10155},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[10157,10159,10161,10163,10165],{"type":3744,"url":10158},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3490,"url":10160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3593,"url":10162},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3593,"url":10164},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3495,"url":3949},[3960,3961],{"id":357,"slug":10168,"dossier":47,"summary":10169,"aliases":10170,"sourceIds":10173,"published":10174,"modified":10175,"checkedAt":7,"severity":10176,"references":10178,"versionKeys":10187,"packageCount":32,"repositoryCount":3510},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[10171,10172],"BIT-pillow-2026-112892","CVE-2026-112892",[357],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[10177],{"type":3483,"score":3868},[10179,10181,10183,10185,10186],{"type":3487,"url":10180},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":3490,"url":10182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":3487,"url":10184},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":358,"slug":10189,"dossier":47,"summary":10190,"aliases":10191,"sourceIds":10194,"published":10195,"modified":10196,"checkedAt":7,"severity":10197,"references":10199,"versionKeys":10211,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[10192,10193],"CVE-2026-97688","PYSEC-2026-4176",[358,10193],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[10198],{"type":3483,"score":4387},[10200,10202,10204,10206,10207,10208,10209],{"type":3487,"url":10201},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":3490,"url":10203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":3487,"url":10205},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":3495,"url":4092},{"type":3487,"url":7599},{"type":3495,"url":4094},{"type":3490,"url":10210},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[7604,7605],{"id":359,"slug":10213,"dossier":47,"summary":10214,"aliases":10215,"sourceIds":10218,"published":10219,"modified":10220,"checkedAt":7,"severity":10221,"references":10223,"versionKeys":10236,"packageCount":32,"repositoryCount":828},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[10216,10217],"CVE-2026-86000","PYSEC-2026-4170",[359,10217],"2026-09-17T20:32:58Z","2026-10-01T17:56:08.291385035Z",[10222],{"type":3555,"score":3769},[10224,10226,10228,10230,10231,10233,10234],{"type":3487,"url":10225},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":3490,"url":10227},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":3487,"url":10229},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":3495,"url":4055},{"type":3487,"url":10232},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",{"type":3495,"url":4057},{"type":3490,"url":10235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",[4063,4064,4065,4984],{"id":360,"slug":10238,"dossier":47,"summary":10239,"aliases":10240,"sourceIds":10243,"published":10244,"modified":10245,"checkedAt":7,"severity":10246,"references":10248,"versionKeys":10259,"packageCount":32,"repositoryCount":4101},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[10241,10242],"CVE-2025-66418","PYSEC-2026-1998",[360,10242],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[10247],{"type":3483,"score":4077},[10249,10251,10253,10255,10256,10257],{"type":3487,"url":10250},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3490,"url":10252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3593,"url":10254},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3495,"url":4092},{"type":3495,"url":4094},{"type":3490,"url":10258},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[4096,4097,4098,4099,4100],{"id":361,"slug":10261,"dossier":47,"summary":10262,"aliases":10263,"sourceIds":10265,"published":10266,"modified":10267,"checkedAt":7,"severity":10268,"references":10270,"versionKeys":10279,"packageCount":32,"repositoryCount":885},"ghsa-gmh7-3g9r-mjh5-299279ac","pypdf: Possible long runtimes for large xref table header limits",[10264],"CVE-2026-115580",[361],"2026-10-23T20:54:12Z","2026-10-23T21:00:05.293776771Z",[10269],{"type":3483,"score":4538},[10271,10273,10275,10277,10278],{"type":3487,"url":10272},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-gmh7-3g9r-mjh5",{"type":3487,"url":10274},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4239",{"type":3487,"url":10276},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fa3061e34b169d34478d520f5f049c53cfb1482b2",{"type":3495,"url":3531},{"type":3487,"url":6574},[3541,3542,3543],{"id":362,"slug":10281,"dossier":47,"summary":10282,"aliases":10283,"sourceIds":10286,"published":10287,"modified":10288,"checkedAt":7,"severity":10289,"references":10292,"versionKeys":10307,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[10284,10285],"CVE-2024-56201","PYSEC-2026-1472",[362,10285],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[10290,10291],{"type":3555,"score":5905},{"type":3483,"score":8955},[10293,10295,10297,10299,10301,10302,10304,10305],{"type":3487,"url":10294},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3490,"url":10296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3487,"url":10298},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3593,"url":10300},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3495,"url":8964},{"type":3487,"url":10303},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3495,"url":8970},{"type":3490,"url":10306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[8974],{"id":363,"slug":10309,"dossier":47,"summary":10310,"aliases":10311,"sourceIds":10314,"published":10315,"modified":10316,"checkedAt":7,"severity":10317,"references":10319,"versionKeys":10330,"packageCount":32,"repositoryCount":105},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[10312,10313],"CVE-2026-44209","PYSEC-2026-2390",[363,10313],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[10318],{"type":3555,"score":8902},[10320,10322,10324,10326,10327,10328],{"type":3487,"url":10321},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":3490,"url":10323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":3487,"url":10325},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":3495,"url":5421},{"type":3495,"url":5425},{"type":3490,"url":10329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[5431],{"id":364,"slug":10332,"dossier":47,"summary":10333,"aliases":10334,"sourceIds":10336,"published":10337,"modified":10338,"checkedAt":7,"severity":10339,"references":10341,"versionKeys":10354,"packageCount":32,"repositoryCount":847},"ghsa-gpwc-27cw-rh9r-9c4c7d74","NLTK: Quadratic CPU exhaustion in LegalitySyllableTokenizer.tokenize via unguarded onset reversal loop",[10335],"CVE-2026-126301",[364],"2026-11-13T21:16:34Z","2026-11-14T02:56:15.317495274Z",[10340],{"type":3555,"score":3769},[10342,10344,10346,10347,10349,10350,10351,10352],{"type":3487,"url":10343},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gpwc-27cw-rh9r",{"type":3490,"url":10345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126301",{"type":3487,"url":7649},{"type":3487,"url":10348},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F78781ba4575d536fb1540897f27baca0fb40617c",{"type":3487,"url":7651},{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":10353},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-from-3.6-before-3.10.4-quadratic-cpu-exhaustion-via-legalitysyllabletokenizer-tokenize",[4433,3960,3961],{"id":365,"slug":10356,"dossier":47,"summary":10357,"aliases":10358,"sourceIds":10361,"published":10362,"modified":10363,"checkedAt":7,"severity":10364,"references":10366,"versionKeys":10377,"packageCount":32,"repositoryCount":32},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[10359,10360],"CVE-2026-103001","PYSEC-2026-4146",[365,10360],"2026-09-30T23:53:17Z","2026-10-01T17:55:53.001409325Z",[10365],{"type":3555,"score":6015},[10367,10369,10371,10372,10373,10375],{"type":3487,"url":10368},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":3487,"url":10370},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":3495,"url":3920},{"type":3495,"url":3924},{"type":3490,"url":10374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":3490,"url":10376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103001",[3929],{"id":366,"slug":10379,"dossier":47,"summary":10380,"aliases":10381,"sourceIds":10383,"published":10384,"modified":10385,"checkedAt":7,"severity":10386,"references":10389,"versionKeys":10398,"packageCount":32,"repositoryCount":3900},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[10382],"CVE-2026-111749",[366],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[10387],{"type":3483,"score":10388},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10390,10392,10394,10396,10397],{"type":3487,"url":10391},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":3490,"url":10393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":3487,"url":10395},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":367,"slug":10400,"dossier":47,"summary":10401,"aliases":10402,"sourceIds":10406,"published":10407,"modified":10408,"checkedAt":7,"severity":10409,"references":10412,"versionKeys":10424,"packageCount":32,"repositoryCount":3510},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[10403,10404,10405],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[367,10405],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[10410],{"type":3555,"score":10411},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[10413,10415,10417,10419,10421,10422],{"type":3744,"url":10414},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3490,"url":10416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3593,"url":10418},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3487,"url":10420},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3495,"url":5918},{"type":3490,"url":10423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[5924,5925,5926,5927,10425,10426,10427,10428,10429,10430,10431,10432],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":368,"slug":10434,"dossier":47,"summary":10435,"aliases":10436,"sourceIds":10439,"published":10440,"modified":10441,"checkedAt":7,"severity":10442,"references":10444,"versionKeys":10465,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[10437,10438],"CVE-2024-34064","PYSEC-2026-1474",[368,10438],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[10443],{"type":3555,"score":7020},[10445,10447,10449,10451,10452,10454,10456,10458,10460,10462,10463],{"type":3487,"url":10446},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3490,"url":10448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3593,"url":10450},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3495,"url":8964},{"type":3487,"url":10453},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3487,"url":10455},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3487,"url":10457},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3487,"url":10459},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3487,"url":10461},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3495,"url":8970},{"type":3490,"url":10464},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[8974],{"id":369,"slug":10467,"dossier":47,"summary":10468,"aliases":10469,"sourceIds":10472,"published":10473,"modified":10474,"checkedAt":7,"severity":10475,"references":10478,"versionKeys":10492,"packageCount":32,"repositoryCount":857},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[10470,10471],"CVE-2026-0846","PYSEC-2026-97",[369,10471],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[10476,10477],{"type":3555,"score":6459},{"type":3555,"score":5524},[10479,10481,10483,10485,10486,10488,10490],{"type":3490,"url":10480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3487,"url":10482},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3487,"url":10484},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3495,"url":3949},{"type":3487,"url":10487},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3744,"url":10489},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3490,"url":10491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3960,3961],{"id":370,"slug":10494,"dossier":47,"summary":10495,"aliases":10496,"sourceIds":10499,"published":10500,"modified":10501,"checkedAt":7,"severity":10502,"references":10505,"versionKeys":10514,"packageCount":32,"repositoryCount":781},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[10497,10498],"CVE-2026-34513","PYSEC-2026-2095",[370,10498],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[10503,10504],{"type":3483,"score":4563},{"type":3555,"score":3669},[10506,10508,10510,10512,10513],{"type":3593,"url":10507},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3490,"url":10509},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3593,"url":10511},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":371,"slug":10516,"dossier":47,"summary":10517,"aliases":10518,"sourceIds":10521,"published":10522,"modified":10523,"checkedAt":7,"severity":10524,"references":10528,"versionKeys":10536,"packageCount":32,"repositoryCount":66},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[10519,10520],"CVE-2026-47265","PYSEC-2026-2105",[371,10520],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[10525,10527],{"type":3483,"score":10526},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3555,"score":5524},[10529,10531,10533,10535],{"type":3593,"url":10530},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3490,"url":10532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3593,"url":10534},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":372,"slug":10538,"dossier":47,"summary":10539,"aliases":10540,"sourceIds":10543,"published":10544,"modified":10545,"checkedAt":7,"severity":10546,"references":10548,"versionKeys":10559,"packageCount":32,"repositoryCount":800},"ghsa-hhxq-47xx-j5xx-b7469e94","virtualenv: Seed replacement does not contain metadata deletion paths",[10541,10542],"BIT-virtualenv-2026-113719","CVE-2026-113719",[372],"2026-10-23T22:19:15Z","2026-10-29T10:56:02.747342068Z",[10547],{"type":3555,"score":4683},[10549,10551,10553,10555,10557,10558],{"type":3487,"url":10550},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-hhxq-47xx-j5xx",{"type":3490,"url":10552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113719",{"type":3487,"url":10554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3428",{"type":3487,"url":10556},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe3cea6fa10a50fa29cf1fdddd772458fba076d5f",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":373,"slug":10561,"dossier":47,"summary":10562,"aliases":10563,"sourceIds":10566,"published":10567,"modified":10568,"checkedAt":7,"severity":10569,"references":10571,"versionKeys":10586,"packageCount":32,"repositoryCount":105},"ghsa-hmq2-7hp6-7crh-ef370495","Banks: User-controlled prompt input can be parsed as privileged chat messages",[10564,10565],"CVE-2026-107717","PYSEC-2026-4202",[373,10565],"2026-10-08T22:10:01Z","2026-10-15T14:56:15.712699415Z",[10570],{"type":3555,"score":7472},[10572,10574,10576,10578,10579,10581,10582,10584],{"type":3487,"url":10573},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-7hp6-7crh",{"type":3487,"url":10575},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F78",{"type":3487,"url":10577},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002F02172b816fb84f6a824cc09a8aca7416f53c12cb",{"type":3495,"url":5421},{"type":3487,"url":10580},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.5.0",{"type":3495,"url":5425},{"type":3490,"url":10583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hmq2-7hp6-7crh",{"type":3490,"url":10585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-107717",[5431],{"id":374,"slug":10588,"dossier":47,"summary":10589,"aliases":10590,"sourceIds":10593,"published":10594,"modified":10595,"checkedAt":7,"severity":10596,"references":10599,"versionKeys":10605,"packageCount":32,"repositoryCount":66},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[10591,10592],"CVE-2026-54276","PYSEC-2026-2109",[374,10592],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[10597,10598],{"type":3483,"score":4843},{"type":3555,"score":10155},[10600,10602,10604],{"type":3490,"url":10601},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3593,"url":10603},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":375,"slug":10607,"dossier":47,"summary":10608,"aliases":10609,"sourceIds":10612,"published":10613,"modified":10614,"checkedAt":7,"severity":10615,"references":10617,"versionKeys":10632,"packageCount":32,"repositoryCount":105},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[10610,10611],"CVE-2026-31826","PYSEC-2026-3019",[375,10611],"2026-03-11T00:14:02Z","2026-09-10T03:50:39.503255117Z",[10616],{"type":3483,"score":5041},[10618,10620,10622,10624,10626,10627,10629,10630],{"type":3487,"url":10619},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3490,"url":10621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3487,"url":10623},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3487,"url":10625},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3495,"url":3531},{"type":3487,"url":10628},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3495,"url":3535},{"type":3490,"url":10631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3541,3542],{"id":376,"slug":10634,"dossier":47,"summary":10635,"aliases":10636,"sourceIds":10640,"published":10641,"modified":10642,"checkedAt":7,"severity":10643,"references":10645,"versionKeys":10660,"packageCount":32,"repositoryCount":32},"ghsa-hvfh-5mj3-5f3j-627daf3f","Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access",[10637,10638,10639],"CVE-2026-120492","CVE-2026-45019","PYSEC-2026-3811",[376,10639],"2026-08-25T19:21:40Z","2026-11-03T02:55:55.261817313Z",[10644],{"type":3555,"score":7022},[10646,10648,10650,10651,10653,10655,10656,10658],{"type":3487,"url":10647},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3487,"url":10649},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F0565fd0eccb915fce159929598b053ed79f6e0c9",{"type":3495,"url":3845},{"type":3487,"url":10652},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fblob\u002F2.12.0\u002Fdocs\u002Fsecurity-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse",{"type":3487,"url":10654},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.12.0",{"type":3495,"url":3853},{"type":3490,"url":10657},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3490,"url":10659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45019",[3857],{"id":377,"slug":10662,"dossier":47,"summary":10663,"aliases":10664,"sourceIds":10667,"published":10668,"modified":10669,"checkedAt":7,"severity":10670,"references":10672,"versionKeys":10680,"packageCount":32,"repositoryCount":32},"ghsa-hw26-mmpg-fqfg-673c67e1","lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes",[10665,10666],"CVE-2026-28348","PYSEC-2026-2201",[377,10666],"2026-03-02T19:19:15Z","2026-09-10T03:50:39.674211658Z",[10671],{"type":3555,"score":10155},[10673,10675,10677,10679],{"type":3744,"url":10674},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-hw26-mmpg-fqfg",{"type":3490,"url":10676},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28348",{"type":3593,"url":10678},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F2ef732667ddbc74ea59847bcf24b75809aaeed3b",{"type":3495,"url":5002},[5010],{"id":378,"slug":10682,"dossier":47,"summary":10683,"aliases":10684,"sourceIds":10687,"published":10688,"modified":10689,"checkedAt":7,"severity":10690,"references":10693,"versionKeys":10705,"packageCount":32,"repositoryCount":857},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[10685,10686],"CVE-2026-102269","PYSEC-2026-4147",[378,10686],"2026-09-29T23:17:55Z","2026-10-01T17:55:59.204638768Z",[10691],{"type":3555,"score":10692},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[10694,10696,10698,10700,10701,10702,10703],{"type":3487,"url":10695},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":3490,"url":10697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":3487,"url":10699},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":10704},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",[3928,3929,3930],{"id":379,"slug":10707,"dossier":47,"summary":10708,"aliases":10709,"sourceIds":10712,"published":10713,"modified":10714,"checkedAt":7,"severity":10715,"references":10719,"versionKeys":10735,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[10710,10711],"CVE-2024-11394","PYSEC-2024-229",[379,10711],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[10716,10718],{"type":3555,"score":10717},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3555,"score":3691},[10720,10722,10724,10726,10727,10729,10731,10733],{"type":3490,"url":10721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":3487,"url":10723},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":3487,"url":10725},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":3495,"url":3742},{"type":3487,"url":10728},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":3487,"url":10730},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":3490,"url":10732},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":3490,"url":10734},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[3749],{"id":380,"slug":10737,"dossier":47,"summary":10738,"aliases":10739,"sourceIds":10741,"published":10742,"modified":10743,"checkedAt":7,"severity":10744,"references":10747,"versionKeys":10756,"packageCount":32,"repositoryCount":847},"ghsa-j456-xh4h-cpf2-d53c5278","NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment",[10740],"CVE-2026-109956",[380],"2026-10-27T14:50:30Z","2026-10-27T15:00:05.453940749Z",[10745],{"type":3555,"score":10746},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[10748,10750,10752,10754,10755],{"type":3487,"url":10749},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-j456-xh4h-cpf2",{"type":3487,"url":10751},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3863",{"type":3487,"url":10753},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F6a17606293fe9d3ea1006f99dd3fed2e2b25d519",{"type":3495,"url":3949},{"type":3487,"url":7629},[4433,3960,3961],{"id":381,"slug":10758,"dossier":47,"summary":10759,"aliases":10760,"sourceIds":10763,"published":10764,"modified":10765,"checkedAt":7,"severity":10766,"references":10768,"versionKeys":10777,"packageCount":32,"repositoryCount":3510},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[10761,10762],"BIT-pillow-2026-112893","CVE-2026-112893",[381],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[10767],{"type":3483,"score":3484},[10769,10771,10773,10775,10776],{"type":3487,"url":10770},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":3490,"url":10772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":3487,"url":10774},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":382,"slug":10779,"dossier":47,"summary":10780,"aliases":10781,"sourceIds":10784,"published":10785,"modified":10786,"checkedAt":7,"severity":10787,"references":10789,"versionKeys":10801,"packageCount":32,"repositoryCount":105},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[10782,10783],"CVE-2026-49461","PYSEC-2026-3020",[382,10783],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[10788],{"type":3483,"score":5308},[10790,10792,10794,10795,10796,10797,10799],{"type":3487,"url":10791},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3487,"url":10793},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3495,"url":3531},{"type":3487,"url":5769},{"type":3495,"url":3535},{"type":3490,"url":10798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3490,"url":10800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3541,3542],{"id":383,"slug":10803,"dossier":47,"summary":10804,"aliases":10805,"sourceIds":10808,"published":10809,"modified":10810,"checkedAt":7,"severity":10811,"references":10813,"versionKeys":10826,"packageCount":32,"repositoryCount":32},"ghsa-j5xp-7m2f-49jv-d5b13248","Docling Core: Insufficient validation of image reference URIs",[10806,10807],"CVE-2026-44019","PYSEC-2026-2456",[383,10807],"2026-06-03T21:15:31Z","2026-07-13T16:43:49.284243969Z",[10812],{"type":3555,"score":8373},[10814,10816,10818,10820,10822,10824],{"type":3487,"url":10815},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3495,"url":10817},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core",{"type":3487,"url":10819},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Freleases\u002Ftag\u002Fv2.74.1",{"type":3495,"url":10821},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling-core",{"type":3490,"url":10823},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3490,"url":10825},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44019",[10827],"pypi:docling-core@2.49.0",{"id":384,"slug":10829,"dossier":47,"summary":10830,"aliases":10831,"sourceIds":10833,"published":10834,"modified":10835,"checkedAt":7,"severity":10836,"references":10839,"versionKeys":10849,"packageCount":32,"repositoryCount":847},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[10832],"CVE-2026-112936",[384],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[10837],{"type":3555,"score":10838},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[10840,10842,10844,10846,10847],{"type":3487,"url":10841},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":3490,"url":10843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":3487,"url":10845},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":3495,"url":5501},{"type":3487,"url":10848},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[5505,5506,5507,5508],{"id":385,"slug":10851,"dossier":47,"summary":10852,"aliases":10853,"sourceIds":10856,"published":10857,"modified":10858,"checkedAt":7,"severity":10859,"references":10861,"versionKeys":10873,"packageCount":32,"repositoryCount":828},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[10854,10855],"CVE-2026-85999","PYSEC-2026-4171",[385,10855],"2026-09-17T20:32:53Z","2026-10-01T17:56:03.541286563Z",[10860],{"type":3555,"score":3769},[10862,10864,10866,10868,10869,10870,10871],{"type":3487,"url":10863},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":3490,"url":10865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":3487,"url":10867},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":3495,"url":4055},{"type":3487,"url":10232},{"type":3495,"url":4057},{"type":3490,"url":10872},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",[4063,4064,4065,4984],{"id":386,"slug":10875,"dossier":47,"summary":10876,"aliases":10877,"sourceIds":10880,"published":10881,"modified":10882,"checkedAt":7,"severity":10883,"references":10885,"versionKeys":10900,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[10878,10879],"CVE-2025-62708","PYSEC-2026-1831",[386,10879],"2025-10-22T19:40:50Z","2026-09-10T03:50:29.885611595Z",[10884],{"type":3483,"score":4916},[10886,10888,10890,10892,10894,10895,10897,10898],{"type":3487,"url":10887},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3490,"url":10889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3487,"url":10891},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3487,"url":10893},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3495,"url":3531},{"type":3487,"url":10896},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3495,"url":3535},{"type":3490,"url":10899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3541],{"id":387,"slug":10902,"dossier":47,"summary":10903,"aliases":10904,"sourceIds":10907,"published":10908,"modified":10909,"checkedAt":7,"severity":10910,"references":10914,"versionKeys":10931,"packageCount":32,"repositoryCount":66},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[10905,10906],"CVE-2026-34993","PYSEC-2026-2104",[387,10906],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[10911,10913],{"type":3555,"score":10912},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3555,"score":4135},[10915,10917,10919,10921,10922,10924,10926,10927,10928,10929],{"type":3593,"url":10916},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3490,"url":10918},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3593,"url":10920},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3495,"url":3812},{"type":3487,"url":10923},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3487,"url":10925},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3490,"url":6253},{"type":3490,"url":9646},{"type":3490,"url":4794},{"type":3955,"url":10930},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":388,"slug":10933,"dossier":47,"summary":10934,"aliases":10935,"sourceIds":10938,"published":10939,"modified":10940,"checkedAt":7,"severity":10941,"references":10943,"versionKeys":10952,"packageCount":32,"repositoryCount":3510},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[10936,10937],"BIT-pillow-2026-112894","CVE-2026-112894",[388],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[10942],{"type":3483,"score":3868},[10944,10946,10948,10950,10951],{"type":3487,"url":10945},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":3490,"url":10947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":3487,"url":10949},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":389,"slug":10954,"dossier":47,"summary":10955,"aliases":10956,"sourceIds":10959,"published":10960,"modified":10961,"checkedAt":7,"severity":10962,"references":10964,"versionKeys":10974,"packageCount":32,"repositoryCount":8674},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[10957,10958],"CVE-2025-67726","PYSEC-2025-267",[389,10958],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[10963],{"type":3555,"score":3669},[10965,10967,10969,10970,10972,10973],{"type":3490,"url":10966},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3490,"url":10968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3593,"url":8667},{"type":3487,"url":10971},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3495,"url":4516},{"type":3490,"url":8672},[4520,4521,4522],{"id":390,"slug":10976,"dossier":47,"summary":10977,"aliases":10978,"sourceIds":10981,"published":10982,"modified":10983,"checkedAt":7,"severity":10984,"references":10986,"versionKeys":10997,"packageCount":32,"repositoryCount":800},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[10979,10980],"CVE-2025-69227","PYSEC-2026-1107",[390,10980],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[10985],{"type":3483,"score":4916},[10987,10989,10991,10993,10994,10995],{"type":3487,"url":10988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3490,"url":10990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3487,"url":10992},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":10996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3816,3817,3818,3819,3820,3821,3822],{"id":391,"slug":10999,"dossier":47,"summary":11000,"aliases":11001,"sourceIds":11004,"published":11005,"modified":11006,"checkedAt":7,"severity":11007,"references":11010,"versionKeys":11025,"packageCount":32,"repositoryCount":105},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[11002,11003],"CVE-2026-41168","PYSEC-2026-3021",[391,11003],"2026-04-15T19:43:09Z","2026-09-10T03:50:44.569518277Z",[11008,11009],{"type":3555,"score":3769},{"type":3483,"score":3522},[11011,11013,11015,11017,11019,11020,11022,11023],{"type":3487,"url":11012},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3490,"url":11014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3487,"url":11016},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3487,"url":11018},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3495,"url":3531},{"type":3487,"url":11021},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3495,"url":3535},{"type":3490,"url":11024},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3541,3542],{"id":392,"slug":11027,"dossier":47,"summary":11028,"aliases":11029,"sourceIds":11033,"published":11034,"modified":11035,"checkedAt":7,"severity":11036,"references":11038,"versionKeys":11052,"packageCount":32,"repositoryCount":4748},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[11030,11031,11032],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[392,11032],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[11037],{"type":3555,"score":3669},[11039,11041,11043,11045,11047,11048,11049,11050],{"type":3487,"url":11040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3490,"url":11042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3487,"url":11044},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3487,"url":11046},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3495,"url":3496},{"type":3487,"url":6226},{"type":3495,"url":6228},{"type":3490,"url":11051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":393,"slug":11054,"dossier":47,"summary":11055,"aliases":11056,"sourceIds":11059,"published":11060,"modified":11061,"checkedAt":7,"severity":11062,"references":11064,"versionKeys":11077,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[11057,11058],"CVE-2025-3264","PYSEC-2026-1985",[393,11058],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[11063],{"type":3555,"score":5172},[11065,11067,11069,11071,11072,11074,11075],{"type":3490,"url":11066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":3487,"url":11068},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":3487,"url":11070},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":3495,"url":3742},{"type":3487,"url":11073},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":3495,"url":4215},{"type":3490,"url":11076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[3749],{"id":394,"slug":11079,"dossier":47,"summary":11080,"aliases":11081,"sourceIds":11084,"published":11085,"modified":11086,"checkedAt":7,"severity":11087,"references":11089,"versionKeys":11106,"packageCount":32,"repositoryCount":857},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[11082,11083],"CVE-2026-33231","PYSEC-2026-2236",[394,11083],"2026-03-19T12:42:20Z","2026-09-10T03:50:39.952342228Z",[11088],{"type":3555,"score":3669},[11090,11092,11094,11096,11097,11099,11101,11102,11103,11104],{"type":3744,"url":11091},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3490,"url":11093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3593,"url":11095},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3495,"url":3949},{"type":3487,"url":11098},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3487,"url":11100},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3490,"url":4792},{"type":3490,"url":6253},{"type":3490,"url":4794},{"type":3955,"url":11105},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3960,3961],{"id":395,"slug":11108,"dossier":47,"summary":11109,"aliases":11110,"sourceIds":11112,"published":11113,"modified":11114,"checkedAt":7,"severity":11115,"references":11117,"versionKeys":11125,"packageCount":32,"repositoryCount":105},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[11111],"CVE-2026-57204",[395],"2026-06-18T14:28:49Z","2026-09-10T03:51:08.790625588Z",[11116],{"type":3483,"score":5308},[11118,11120,11122,11123],{"type":3487,"url":11119},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3487,"url":11121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3495,"url":3531},{"type":3487,"url":11124},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3541,3542],{"id":396,"slug":11127,"dossier":47,"summary":11128,"aliases":11129,"sourceIds":11132,"published":11133,"modified":11134,"checkedAt":7,"severity":11135,"references":11138,"versionKeys":11148,"packageCount":32,"repositoryCount":32},"ghsa-jmmv-h3mp-59v8-f42633c7","Docling Core: Unsafe remote filename resolution",[11130,11131],"CVE-2026-44023","PYSEC-2026-2457",[396,11131],"2026-06-03T21:16:25Z","2026-07-13T16:43:42.701865915Z",[11136],{"type":3555,"score":11137},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[11139,11141,11142,11143,11144,11146],{"type":3487,"url":11140},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3495,"url":10817},{"type":3487,"url":10819},{"type":3495,"url":10821},{"type":3490,"url":11145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3490,"url":11147},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44023",[10827],{"id":397,"slug":11150,"dossier":47,"summary":11151,"aliases":11152,"sourceIds":11155,"published":11156,"modified":11157,"checkedAt":7,"severity":11158,"references":11160,"versionKeys":11175,"packageCount":32,"repositoryCount":885},"ghsa-jp53-mhqp-8xcg-b1841e34","pypdf: Possible infinite loop for TreeObject.insert_child",[11153,11154],"CVE-2026-84309","PYSEC-2026-3913",[397,11154],"2026-09-01T21:20:20Z","2026-09-10T12:25:36.667036932Z",[11159],{"type":3483,"score":5308},[11161,11163,11165,11167,11168,11170,11171,11173],{"type":3487,"url":11162},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3487,"url":11164},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3964",{"type":3487,"url":11166},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9ba557d565d57c53a0b3a0be06c0a4c29b0559b",{"type":3495,"url":3531},{"type":3487,"url":11169},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.0",{"type":3495,"url":3535},{"type":3490,"url":11172},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3490,"url":11174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84309",[3541,3542,3543],{"id":398,"slug":11177,"dossier":47,"summary":11178,"aliases":11179,"sourceIds":11182,"published":11183,"modified":11184,"checkedAt":7,"severity":11185,"references":11188,"versionKeys":11196,"packageCount":32,"repositoryCount":781},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[11180,11181],"CVE-2026-54282","PYSEC-2026-248",[398,11181],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[11186,11187],{"type":3555,"score":6680},{"type":3555,"score":4028},[11189,11191,11193,11194],{"type":3490,"url":11190},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3490,"url":11192},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3495,"url":7108},{"type":3487,"url":11195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3788,3789,3790,7115,7116,7117,7351,7352,7353],{"id":399,"slug":11198,"dossier":47,"summary":11199,"aliases":11200,"sourceIds":11203,"published":11204,"modified":11205,"checkedAt":7,"severity":11206,"references":11209,"versionKeys":11228,"packageCount":32,"repositoryCount":885},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[11201,11202],"CVE-2026-52869","PYSEC-2026-3482",[399,11202],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[11207],{"type":3555,"score":11208},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[11210,11212,11214,11216,11218,11220,11222,11223,11225,11226],{"type":3487,"url":11211},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3490,"url":11213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3487,"url":11215},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3487,"url":11217},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3487,"url":11219},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3487,"url":11221},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3495,"url":5741},{"type":3487,"url":11224},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3495,"url":8086},{"type":3490,"url":11227},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[5747,5748,5749],{"id":400,"slug":11230,"dossier":47,"summary":11231,"aliases":11232,"sourceIds":11235,"published":11236,"modified":11237,"checkedAt":7,"severity":11238,"references":11241,"versionKeys":11249,"packageCount":32,"repositoryCount":885},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[11233,11234],"CVE-2026-48523","PYSEC-2026-176",[400,11234],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[11239],{"type":3555,"score":11240},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[11242,11244,11246,11247],{"type":3744,"url":11243},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3490,"url":11245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3495,"url":3920},{"type":3487,"url":11248},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[3928,3930],{"id":401,"slug":11251,"dossier":47,"summary":11252,"aliases":11253,"sourceIds":11255,"published":11256,"modified":11257,"checkedAt":7,"severity":11258,"references":11260,"versionKeys":11267,"packageCount":32,"repositoryCount":885},"ghsa-jr96-gvgh-j3r4-059bd7d6","pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)",[11254],"CVE-2026-115585",[401],"2026-10-23T20:54:27Z","2026-10-23T21:00:06.090706376Z",[11259],{"type":3483,"score":4538},[11261,11263,11264,11265,11266],{"type":3487,"url":11262},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jr96-gvgh-j3r4",{"type":3487,"url":6569},{"type":3487,"url":6571},{"type":3495,"url":3531},{"type":3487,"url":6574},[3541,3542,3543],{"id":402,"slug":11269,"dossier":47,"summary":11270,"aliases":11271,"sourceIds":11274,"published":11275,"modified":11276,"checkedAt":7,"severity":11277,"references":11279,"versionKeys":11293,"packageCount":32,"repositoryCount":885},"ghsa-jw7q-gvrg-4vj3-00454a63","pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)",[11272,11273],"CVE-2026-102997","PYSEC-2026-4156",[402,11273],"2026-10-01T15:06:33Z","2026-10-01T17:56:11.608019455Z",[11278],{"type":3483,"score":3868},[11280,11282,11284,11286,11288,11289,11290,11291],{"type":3487,"url":11281},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jw7q-gvrg-4vj3",{"type":3490,"url":11283},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102997",{"type":3487,"url":11285},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4073",{"type":3487,"url":11287},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd9d38cf99b115deb562d3b68f36c33027bc04f79",{"type":3495,"url":3531},{"type":3487,"url":9812},{"type":3495,"url":3535},{"type":3490,"url":11292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw7q-gvrg-4vj3",[3541,3542,3543],{"id":403,"slug":11295,"dossier":47,"summary":11296,"aliases":11297,"sourceIds":11300,"published":11301,"modified":11302,"checkedAt":7,"severity":11303,"references":11306,"versionKeys":11317,"packageCount":32,"repositoryCount":857},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[11298,11299],"CVE-2026-102270","PYSEC-2026-4148",[403,11299],"2026-09-30T14:40:25Z","2026-10-01T17:55:44.209063147Z",[11304],{"type":3555,"score":11305},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[11307,11309,11311,11312,11313,11314,11315],{"type":3487,"url":11308},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":3490,"url":11310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":3487,"url":9524},{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":11316},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",[3928,3929,3930],{"id":404,"slug":11319,"dossier":47,"summary":11320,"aliases":11321,"sourceIds":11324,"published":11325,"modified":11326,"checkedAt":7,"severity":11327,"references":11329,"versionKeys":11340,"packageCount":32,"repositoryCount":105},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[11322,11323],"CVE-2026-54531","PYSEC-2026-3022",[404,11323],"2026-06-16T14:05:57Z","2026-09-10T03:51:08.924739649Z",[11328],{"type":3483,"score":5308},[11330,11332,11333,11334,11335,11336,11338],{"type":3487,"url":11331},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3487,"url":5313},{"type":3495,"url":3531},{"type":3487,"url":5316},{"type":3495,"url":3535},{"type":3490,"url":11337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3490,"url":11339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3541,3542],{"id":405,"slug":11342,"dossier":47,"summary":11343,"aliases":11344,"sourceIds":11347,"published":11348,"modified":11349,"checkedAt":7,"severity":11350,"references":11354,"versionKeys":11373,"packageCount":32,"repositoryCount":857},"ghsa-m42h-3232-vpv3-b30ccceb","nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences",[11345,11346],"CVE-2026-12243","PYSEC-2026-597",[405,11346],"2026-06-30T01:16:29.063Z","2026-08-19T12:15:03.321869900Z",[11351,11352],{"type":3555,"score":5524},{"type":3555,"score":11353},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11355,11357,11359,11361,11362,11364,11365,11367,11369,11371],{"type":3487,"url":11356},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",{"type":3490,"url":11358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12243",{"type":3487,"url":11360},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3504",{"type":3487,"url":6930},{"type":3487,"url":11363},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Faec4fce1b84ad725b8975f7365b23a4f626572a9",{"type":3495,"url":3949},{"type":3487,"url":11366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-597.yaml",{"type":3744,"url":11368},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",{"type":3487,"url":11370},"https:\u002F\u002Fsecurityinfinity.com\u002Fresearch\u002Fpath-traversal-in-nltks-nltk-data-load-via-percent-encoded-sequences",{"type":3490,"url":11372},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",[3960,3961],{"id":406,"slug":11375,"dossier":47,"summary":11376,"aliases":11377,"sourceIds":11380,"published":11381,"modified":11382,"checkedAt":7,"severity":11383,"references":11385,"versionKeys":11401,"packageCount":32,"repositoryCount":105},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[11378,11379],"CVE-2025-66019","PYSEC-2026-1832",[406,11379],"2025-11-24T22:42:07Z","2026-09-10T03:50:31.107367078Z",[11384],{"type":3483,"score":4916},[11386,11387,11389,11391,11393,11395,11396,11398,11399],{"type":3487,"url":10887},{"type":3487,"url":11388},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3490,"url":11390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3487,"url":11392},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3487,"url":11394},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3495,"url":3531},{"type":3487,"url":11397},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3495,"url":3535},{"type":3490,"url":11400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3541,3542],{"id":407,"slug":11403,"dossier":47,"summary":11404,"aliases":11405,"sourceIds":11408,"published":11409,"modified":11410,"checkedAt":7,"severity":11411,"references":11416,"versionKeys":11427,"packageCount":32,"repositoryCount":847},"ghsa-m4rf-3fr8-xwx3-ed835593","NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)",[11406,11407],"CVE-2026-79675","PYSEC-2026-3749",[407,11407],"2026-08-25T16:17:28.013Z","2026-09-10T03:51:15.444696867Z",[11412,11413,11414],{"type":3555,"score":5337},{"type":3483,"score":5335},{"type":3483,"score":11415},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11417,11419,11421,11423,11424,11425],{"type":3744,"url":11418},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m4rf-3fr8-xwx3",{"type":3490,"url":11420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79675",{"type":3487,"url":11422},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F8fa9650b6009aacfdebbc33d2a08d32c0858ea6c",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3490,"url":11426},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-jvm-argument-injection-via-per-call-options",[4433,3960,3961],{"id":408,"slug":11429,"dossier":47,"summary":11430,"aliases":11431,"sourceIds":11434,"published":11435,"modified":11436,"checkedAt":7,"severity":11437,"references":11442,"versionKeys":11451,"packageCount":32,"repositoryCount":781},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[11432,11433],"CVE-2026-34516","PYSEC-2026-2098",[408,11433],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[11438,11439,11440],{"type":3555,"score":3669},{"type":3483,"score":4916},{"type":3483,"score":11441},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11443,11445,11447,11449,11450],{"type":3593,"url":11444},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3490,"url":11446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3593,"url":11448},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":409,"slug":11453,"dossier":47,"summary":11454,"aliases":11455,"sourceIds":11458,"published":11459,"modified":11460,"checkedAt":7,"severity":11461,"references":11464,"versionKeys":11470,"packageCount":32,"repositoryCount":66},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[11456,11457],"CVE-2026-50269","PYSEC-2026-2106",[409,11457],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[11462,11463],{"type":3483,"score":4026},{"type":3555,"score":3669},[11465,11467,11469],{"type":3490,"url":11466},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3593,"url":11468},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3495,"url":3812},[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":410,"slug":11472,"dossier":47,"summary":11473,"aliases":11474,"sourceIds":11477,"published":11478,"modified":11479,"checkedAt":7,"severity":11480,"references":11482,"versionKeys":11499,"packageCount":32,"repositoryCount":32},"ghsa-m88r-rg27-5xfg-642aa3a1","Docling: Unsafe XML Entity Expansion in USPTO Patent Backend",[11475,11476],"CVE-2026-44020","PYSEC-2026-240",[410,11476],"2026-06-03T21:14:15Z","2026-08-28T18:45:06.829347750Z",[11481],{"type":3555,"score":3669},[11483,11485,11487,11488,11490,11492,11493,11495,11497],{"type":3593,"url":11484},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-m88r-rg27-5xfg",{"type":3490,"url":11486},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44020",{"type":3487,"url":7501},{"type":3487,"url":11489},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44020",{"type":3487,"url":11491},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492456",{"type":3495,"url":4370},{"type":3487,"url":11494},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.74.0",{"type":3487,"url":11496},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-240.yaml",{"type":3487,"url":11498},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44020.json",[4374],{"id":411,"slug":11501,"dossier":47,"summary":11502,"aliases":11503,"sourceIds":11506,"published":11507,"modified":11508,"checkedAt":7,"severity":11509,"references":11511,"versionKeys":11520,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[11504,11505],"CVE-2026-48809","PYSEC-2026-3033",[411,11505],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[11510],{"type":3555,"score":3669},[11512,11514,11515,11516,11518],{"type":3487,"url":11513},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3495,"url":8833},{"type":3495,"url":8835},{"type":3490,"url":11517},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3490,"url":11519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[8841],{"id":412,"slug":11522,"dossier":47,"summary":11523,"aliases":11524,"sourceIds":11526,"published":11527,"modified":11528,"checkedAt":7,"severity":11529,"references":11531,"versionKeys":11548,"packageCount":32,"repositoryCount":781},"ghsa-mf5v-w3w3-f6cg-b8bbc3e6","OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing",[11525],"CVE-2026-126360",[412],"2026-11-13T16:43:18Z","2026-11-13T17:00:03.925479166Z",[11530],{"type":3555,"score":3769},[11532,11534,11536,11538,11540,11542,11544,11546],{"type":3487,"url":11533},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-mf5v-w3w3-f6cg",{"type":3490,"url":11535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126360",{"type":3487,"url":11537},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5818",{"type":3487,"url":11539},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5856",{"type":3487,"url":11541},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002F78123a2755c907c602e02352aebed4be86aa5350",{"type":3487,"url":11543},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Ffaa72dae511ae64a7bf8ca63eff9ad4387d0b939",{"type":3495,"url":11545},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":3487,"url":11547},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.2",[11549,11550,11551,11552,11553,11554,11555,11556,11557],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0","pypi:opentelemetry-api@1.45.1",{"id":413,"slug":11559,"dossier":47,"summary":11560,"aliases":11561,"sourceIds":11564,"published":11565,"modified":11566,"checkedAt":7,"severity":11567,"references":11570,"versionKeys":11578,"packageCount":32,"repositoryCount":885},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[11562,11563],"CVE-2026-44432","PYSEC-2026-142",[413,11563],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[11568,11569],{"type":3555,"score":3669},{"type":3483,"score":4077},[11571,11573,11575,11577],{"type":3490,"url":11572},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3490,"url":11574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3487,"url":11576},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3495,"url":4092},[7604],{"id":414,"slug":11580,"dossier":47,"summary":11581,"aliases":11582,"sourceIds":11585,"published":11586,"modified":11587,"checkedAt":7,"severity":11588,"references":11591,"versionKeys":11604,"packageCount":32,"repositoryCount":3900},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[11583,11584],"CVE-2026-28684","PYSEC-2026-2270",[414,11584],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[11589],{"type":3555,"score":11590},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[11592,11594,11596,11598,11600,11602],{"type":3593,"url":11593},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3490,"url":11595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3593,"url":11597},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3487,"url":11599},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3495,"url":11601},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3490,"url":11603},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[11605,11606,11607,11608],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":415,"slug":11610,"dossier":47,"summary":11611,"aliases":11612,"sourceIds":11614,"published":11615,"modified":11616,"checkedAt":7,"severity":11617,"references":11619,"versionKeys":11630,"packageCount":32,"repositoryCount":885},"ghsa-mfr5-77xh-9j7h-62910128","pypdf has possible infinite loop when cloning dictionaries",[11613],"CVE-2026-119205",[415],"2026-10-30T23:12:20Z","2026-10-30T23:30:04.094971776Z",[11618],{"type":3483,"score":4538},[11620,11622,11624,11626,11628,11629],{"type":3487,"url":11621},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-mfr5-77xh-9j7h",{"type":3490,"url":11623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119205",{"type":3487,"url":11625},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4288",{"type":3487,"url":11627},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff176db1a1f7f9af3e472e69a843ef1175653b044",{"type":3495,"url":3531},{"type":3487,"url":5566},[3541,3542,3543],{"id":416,"slug":11632,"dossier":47,"summary":11633,"aliases":11634,"sourceIds":11637,"published":11638,"modified":11639,"checkedAt":7,"severity":11640,"references":11643,"versionKeys":11658,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[11635,11636],"CVE-2026-69243","PYSEC-2026-3546",[416,11636],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[11641],{"type":3483,"score":11642},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[11644,11646,11648,11650,11651,11653,11654,11656],{"type":3487,"url":11645},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3487,"url":11647},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3487,"url":11649},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3495,"url":3812},{"type":3487,"url":11652},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3495,"url":5370},{"type":3490,"url":11655},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3490,"url":11657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898],{"id":417,"slug":11660,"dossier":47,"summary":11661,"aliases":11662,"sourceIds":11665,"published":11666,"modified":11667,"checkedAt":7,"severity":11668,"references":11670,"versionKeys":11679,"packageCount":32,"repositoryCount":781},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[11663,11664],"CVE-2026-49855","PYSEC-2026-3389",[417,11664],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[11669],{"type":3555,"score":3669},[11671,11673,11674,11675,11677],{"type":3487,"url":11672},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3495,"url":4516},{"type":3495,"url":4591},{"type":3490,"url":11676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3490,"url":11678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[4520,4521,4522,4523,4524],{"id":418,"slug":11681,"dossier":47,"summary":11682,"aliases":11683,"sourceIds":11686,"published":11687,"modified":11688,"checkedAt":7,"severity":11689,"references":11691,"versionKeys":11702,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[11684,11685],"CVE-2026-40347","PYSEC-2026-3038",[418,11685],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[11690],{"type":3555,"score":3769},[11692,11694,11696,11697,11699,11700],{"type":3487,"url":11693},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3490,"url":11695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3495,"url":5638},{"type":3487,"url":11698},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3495,"url":5640},{"type":3490,"url":11701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[5949,5950,5644],{"id":419,"slug":11704,"dossier":47,"summary":11705,"aliases":11706,"sourceIds":11708,"published":11709,"modified":11710,"checkedAt":7,"severity":11711,"references":11713,"versionKeys":11725,"packageCount":32,"repositoryCount":781},"ghsa-mmhr-3c5m-f64f-7eb4b3d2","Soup Sieve: Polynomial-time denial of service in the descendant combinator",[11707],"CVE-2026-126190",[419],"2026-11-13T00:49:46Z","2026-11-13T01:00:06.052455117Z",[11712],{"type":3555,"score":3669},[11714,11716,11718,11720,11722,11723],{"type":3487,"url":11715},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-mmhr-3c5m-f64f",{"type":3490,"url":11717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126190",{"type":3487,"url":11719},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fpull\u002F351",{"type":3487,"url":11721},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fff1a5ce7e5addc31626d7b6053511fecdb4f6320",{"type":3495,"url":4055},{"type":3487,"url":11724},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F4.0",[4063,4064,4065,4984,4985,11726,11727],"pypi:soupsieve@3.0.3","pypi:soupsieve@3.0.4",{"id":420,"slug":11729,"dossier":47,"summary":11730,"aliases":11731,"sourceIds":11734,"published":11735,"modified":11736,"checkedAt":7,"severity":11737,"references":11739,"versionKeys":11752,"packageCount":32,"repositoryCount":66},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[11732,11733],"CVE-2026-82397","PYSEC-2026-3928",[420,11733],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[11738],{"type":3555,"score":3669},[11740,11742,11744,11745,11747,11748,11749,11750],{"type":3487,"url":11741},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":3490,"url":11743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":3487,"url":7389},{"type":3487,"url":11746},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":3495,"url":4516},{"type":3487,"url":7396},{"type":3495,"url":4591},{"type":3490,"url":11751},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[4520,4521,4522,4523,4524,4525],{"id":421,"slug":11754,"dossier":47,"summary":11755,"aliases":11756,"sourceIds":11759,"published":11760,"modified":11761,"checkedAt":7,"severity":11762,"references":11764,"versionKeys":11777,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[11757,11758],"CVE-2026-59881","PYSEC-2026-3547",[421,11758],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[11763],{"type":3483,"score":4387},[11765,11767,11769,11771,11773,11774,11775],{"type":3487,"url":11766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3490,"url":11768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3487,"url":11770},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3487,"url":11772},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":11776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898],{"id":422,"slug":11779,"dossier":47,"summary":11780,"aliases":11781,"sourceIds":11784,"published":11785,"modified":11786,"checkedAt":7,"severity":11787,"references":11789,"versionKeys":11800,"packageCount":32,"repositoryCount":800},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[11782,11783],"CVE-2025-69225","PYSEC-2026-1109",[422,11783],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[11788],{"type":3483,"score":4026},[11790,11792,11794,11796,11797,11798],{"type":3487,"url":11791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3490,"url":11793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3593,"url":11795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3495,"url":3812},{"type":3495,"url":5370},{"type":3490,"url":11799},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3816,3817,3818,3819,3820,3821,3822],{"id":423,"slug":11802,"dossier":47,"summary":11803,"aliases":11804,"sourceIds":11807,"published":11808,"modified":11809,"checkedAt":7,"severity":11810,"references":11812,"versionKeys":11823,"packageCount":32,"repositoryCount":3510},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[11805,11806],"BIT-pillow-2026-96640","CVE-2026-96640",[423],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[11811],{"type":3483,"score":3484},[11813,11815,11817,11819,11821,11822],{"type":3487,"url":11814},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":3490,"url":11816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":3487,"url":11818},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":3487,"url":11820},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":424,"slug":11825,"dossier":47,"summary":11826,"aliases":11827,"sourceIds":11830,"published":11831,"modified":11832,"checkedAt":7,"severity":11833,"references":11836,"versionKeys":11845,"packageCount":32,"repositoryCount":781},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[11828,11829],"CVE-2026-34519","PYSEC-2026-2101",[424,11829],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[11834,11835],{"type":3483,"score":4026},{"type":3555,"score":4028},[11837,11839,11841,11843,11844],{"type":3593,"url":11838},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3490,"url":11840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3593,"url":11842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":425,"slug":11847,"dossier":47,"summary":11848,"aliases":11849,"sourceIds":11852,"published":11853,"modified":11854,"checkedAt":7,"severity":11855,"references":11858,"versionKeys":11873,"packageCount":32,"repositoryCount":857},"ghsa-p3m8-78j2-g5p3-4d7419c0","NLTK: Default ENFORCE=False Disables All pathsec Security Controls",[11850,11851],"CVE-2026-62388","PYSEC-2026-3722",[425,11851],"2026-08-22T15:16:18.967Z","2026-09-02T16:00:17.572328596Z",[11856,11857],{"type":3483,"score":6893},{"type":3483,"score":6895},[11859,11861,11863,11865,11867,11868,11869,11871],{"type":3744,"url":11860},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p3m8-78j2-g5p3",{"type":3490,"url":11862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62388",{"type":3487,"url":11864},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3593",{"type":3487,"url":11866},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F155e40343cff0bf50d233e274a12e04d1428b1d9",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":11870},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3722.yaml",{"type":3490,"url":11872},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-insecure-default-configuration-pathsec",[3960,3961],{"id":426,"slug":11875,"dossier":47,"summary":11876,"aliases":11877,"sourceIds":11880,"published":11881,"modified":11882,"checkedAt":7,"severity":11883,"references":11885,"versionKeys":11897,"packageCount":32,"repositoryCount":857},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[11878,11879],"CVE-2026-102271","PYSEC-2026-4149",[426,11879],"2026-09-29T23:14:33Z","2026-10-01T17:55:49.051187883Z",[11884],{"type":3555,"score":8192},[11886,11888,11890,11892,11893,11894,11895],{"type":3487,"url":11887},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":3490,"url":11889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":3487,"url":11891},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":11896},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",[3928,3929,3930],{"id":427,"slug":11899,"dossier":47,"summary":11900,"aliases":11901,"sourceIds":11904,"published":11905,"modified":11906,"checkedAt":7,"severity":11907,"references":11909,"versionKeys":11926,"packageCount":32,"repositoryCount":857},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[11902,11903],"CVE-2026-54293","PYSEC-2026-2078",[427,11903],"2026-06-16T14:34:15Z","2026-09-10T03:51:09.128527813Z",[11908],{"type":3555,"score":5524},[11910,11912,11914,11916,11917,11919,11921,11922,11924],{"type":3744,"url":11911},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3490,"url":11913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3593,"url":11915},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3487,"url":4796},{"type":3487,"url":11918},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3955,"url":11920},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3495,"url":3949},{"type":3487,"url":11923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3487,"url":11925},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3960,3961],{"id":428,"slug":11928,"dossier":47,"summary":11929,"aliases":11930,"sourceIds":11933,"published":11934,"modified":11935,"checkedAt":7,"severity":11936,"references":11940,"versionKeys":11952,"packageCount":32,"repositoryCount":847},"ghsa-p4rw-rvv2-7xwr-ad10f74d","NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement",[11931,11932],"CVE-2026-79676","PYSEC-2026-3737",[428,11932],"2026-08-25T16:17:28.177Z","2026-09-08T17:00:04.101709807Z",[11937,11938],{"type":3483,"score":5522},{"type":3483,"score":11939},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11941,11943,11945,11946,11947,11948,11950],{"type":3744,"url":11942},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4rw-rvv2-7xwr",{"type":3490,"url":11944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79676",{"type":3487,"url":9044},{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":11949},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3737.yaml",{"type":3490,"url":11951},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-path-traversal-via-symlink-bypass",[4433,3960,3961],{"id":429,"slug":11954,"dossier":47,"summary":11955,"aliases":11956,"sourceIds":11959,"published":11960,"modified":11961,"checkedAt":7,"severity":11962,"references":11964,"versionKeys":11973,"packageCount":32,"repositoryCount":3510},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[11957,11958],"BIT-pillow-2026-112895","CVE-2026-112895",[429],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[11963],{"type":3483,"score":3868},[11965,11967,11969,11971,11972],{"type":3487,"url":11966},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":3490,"url":11968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":3487,"url":11970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":430,"slug":11975,"dossier":47,"summary":11976,"aliases":11977,"sourceIds":11981,"published":11982,"modified":11983,"checkedAt":7,"severity":11984,"references":11986,"versionKeys":12001,"packageCount":32,"repositoryCount":800},"ghsa-p58f-9548-mpm2-3c2c8280","virtualenv bash and fish activation scripts execute commands embedded in paths",[11978,11979,11980],"BIT-virtualenv-2026-102925","CVE-2026-102925","PYSEC-2026-4013",[430,11980],"2026-09-18T04:37:14Z","2026-10-06T15:25:40.633713827Z",[11985],{"type":3555,"score":5963},[11987,11989,11991,11993,11995,11997,11998,12000],{"type":3487,"url":11988},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":3490,"url":11990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102925",{"type":3487,"url":11992},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":3593,"url":11994},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":3487,"url":11996},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4013.yaml",{"type":3495,"url":4314},{"type":3487,"url":11999},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":3495,"url":5614},[4318,4319,4320,4321,4322],{"id":431,"slug":12003,"dossier":47,"summary":12004,"aliases":12005,"sourceIds":12009,"published":12010,"modified":12011,"checkedAt":7,"severity":12012,"references":12014,"versionKeys":12024,"packageCount":32,"repositoryCount":3510},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[12006,12007,12008],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[431,12008],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[12013],{"type":3555,"score":3621},[12015,12017,12019,12021,12022,12023],{"type":3490,"url":12016},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":3490,"url":12018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":3955,"url":12020},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":3593,"url":6148},{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":432,"slug":12026,"dossier":47,"summary":12027,"aliases":12028,"sourceIds":12032,"published":12033,"modified":12034,"checkedAt":7,"severity":12035,"references":12038,"versionKeys":12052,"packageCount":32,"repositoryCount":32},"ghsa-p944-4xh2-x776-59be8a40","Docling: Crafted DoclingDocument JSON embeds local image files into converted output",[12029,12030,12031],"CVE-2026-105748","PYSEC-2026-4208","PYSEC-2026-4213",[432,12030],"2026-10-07T20:41:08Z","2026-10-15T14:55:52.070332506Z",[12036],{"type":3555,"score":12037},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[12039,12041,12043,12045,12047,12048,12049,12050],{"type":3487,"url":12040},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-p944-4xh2-x776",{"type":3490,"url":12042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105748",{"type":3487,"url":12044},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4417",{"type":3487,"url":12046},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Fd4bb776884aba9aa3132f54773f420853cf7afe4",{"type":3495,"url":4370},{"type":3487,"url":4372},{"type":3495,"url":8058},{"type":3490,"url":12051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p944-4xh2-x776",[4374],{"id":433,"slug":12054,"dossier":47,"summary":12055,"aliases":12056,"sourceIds":12059,"published":12060,"modified":12061,"checkedAt":7,"severity":12062,"references":12065,"versionKeys":12074,"packageCount":32,"repositoryCount":781},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[12057,12058],"CVE-2026-34515","PYSEC-2026-2097",[433,12058],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[12063,12064],{"type":3483,"score":10526},{"type":3555,"score":5524},[12066,12068,12070,12072,12073],{"type":3593,"url":12067},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3490,"url":12069},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3593,"url":12071},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":434,"slug":12076,"dossier":47,"summary":12077,"aliases":12078,"sourceIds":12080,"published":12081,"modified":12082,"checkedAt":7,"severity":12083,"references":12085,"versionKeys":12097,"packageCount":32,"repositoryCount":66},"ghsa-pcg2-g6cj-q92c-613600e5","Tornado: Quadratic CPU usage when parsing HTTP headers with line folding",[12079],"CVE-2026-116577",[434],"2026-10-28T22:43:41Z","2026-10-28T23:00:04.070057045Z",[12084],{"type":3555,"score":3769},[12086,12088,12090,12092,12094,12095],{"type":3487,"url":12087},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pcg2-g6cj-q92c",{"type":3490,"url":12089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116577",{"type":3487,"url":12091},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3765",{"type":3487,"url":12093},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F1b7a1dc9f340f52de929852e8125aa12f25297c9",{"type":3495,"url":4516},{"type":3487,"url":12096},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.6.0",[4520,4521,4522,4523,4524,4525],{"id":435,"slug":12099,"dossier":47,"summary":12100,"aliases":12101,"sourceIds":12105,"published":12106,"modified":12107,"checkedAt":7,"severity":12108,"references":12112,"versionKeys":12121,"packageCount":32,"repositoryCount":3510},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[12102,12103,12104],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[435,12104],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[12109,12110],{"type":3483,"score":8595},{"type":3555,"score":12111},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[12113,12115,12117,12119,12120],{"type":3744,"url":12114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":3490,"url":12116},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":3593,"url":12118},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":436,"slug":12123,"dossier":47,"summary":12124,"aliases":12125,"sourceIds":12129,"published":12130,"modified":12131,"checkedAt":7,"severity":12132,"references":12135,"versionKeys":12148,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[12126,12127,12128],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[436,12128],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[12133,12134],{"type":3555,"score":3769},{"type":3555,"score":3669},[12136,12138,12140,12142,12144,12146,12147],{"type":3744,"url":12137},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3490,"url":12139},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3593,"url":12141},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3593,"url":12143},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3487,"url":12145},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3495,"url":3496},{"type":3490,"url":6226},[3505,3506,3507,3508],{"id":437,"slug":12150,"dossier":47,"summary":12151,"aliases":12152,"sourceIds":12155,"published":11060,"modified":12156,"checkedAt":7,"severity":12157,"references":12160,"versionKeys":12173,"packageCount":32,"repositoryCount":885},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[12153,12154],"CVE-2025-3777","PYSEC-2026-1986",[437,12154],"2026-09-10T03:50:26.198077196Z",[12158],{"type":3555,"score":12159},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[12161,12163,12165,12166,12168,12170,12171],{"type":3490,"url":12162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":3487,"url":12164},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":3495,"url":3742},{"type":3487,"url":12167},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":3487,"url":12169},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":3495,"url":4215},{"type":3490,"url":12172},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[3749,3750,3751],{"id":438,"slug":12175,"dossier":47,"summary":12176,"aliases":12177,"sourceIds":12181,"published":12182,"modified":12183,"checkedAt":7,"severity":12184,"references":12186,"versionKeys":12197,"packageCount":32,"repositoryCount":4748},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[12178,12179,12180],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[438,12180],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[12185],{"type":3555,"score":3669},[12187,12189,12191,12193,12195,12196],{"type":3744,"url":12188},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3490,"url":12190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3593,"url":12192},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3487,"url":12194},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3495,"url":3496},{"type":3490,"url":4746},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":439,"slug":12199,"dossier":47,"summary":12200,"aliases":12201,"sourceIds":12204,"published":12205,"modified":12206,"checkedAt":7,"severity":12207,"references":12209,"versionKeys":12224,"packageCount":32,"repositoryCount":885},"ghsa-php9-fj8v-98fj-fa6380ff","pypdf: Possible long runtimes when generating appearance streams",[12202,12203],"CVE-2026-102998","PYSEC-2026-4157",[439,12203],"2026-10-01T15:07:21Z","2026-10-01T17:55:51.350316142Z",[12208],{"type":3483,"score":3868},[12210,12212,12214,12216,12218,12219,12221,12222],{"type":3487,"url":12211},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-php9-fj8v-98fj",{"type":3490,"url":12213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102998",{"type":3487,"url":12215},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4087",{"type":3487,"url":12217},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F959467a9b95be83e2dc5ae873ece5f371263ede7",{"type":3495,"url":3531},{"type":3487,"url":12220},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.19.0",{"type":3495,"url":3535},{"type":3490,"url":12223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-php9-fj8v-98fj",[3541,3542,3543],{"id":440,"slug":12226,"dossier":47,"summary":12227,"aliases":12228,"sourceIds":12231,"published":12232,"modified":12233,"checkedAt":7,"severity":12234,"references":12236,"versionKeys":12245,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[12229,12230],"CVE-2026-42561","PYSEC-2026-3039",[440,12230],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[12235],{"type":3555,"score":3669},[12237,12239,12241,12242,12243],{"type":3487,"url":12238},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3490,"url":12240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3495,"url":5638},{"type":3495,"url":5640},{"type":3490,"url":12244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[5949,5950,5644],{"id":441,"slug":12247,"dossier":47,"summary":12248,"aliases":12249,"sourceIds":12252,"published":12253,"modified":12254,"checkedAt":7,"severity":12255,"references":12257,"versionKeys":12269,"packageCount":32,"repositoryCount":800},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[12250,12251],"CVE-2025-50181","PYSEC-2026-1999",[441,12251],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[12256],{"type":3555,"score":4818},[12258,12260,12262,12264,12265,12266,12267],{"type":3487,"url":12259},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3490,"url":12261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3593,"url":12263},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3495,"url":4092},{"type":3487,"url":4828},{"type":3495,"url":4094},{"type":3490,"url":12268},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[4096,4097,4098,4099],{"id":442,"slug":12271,"dossier":47,"summary":12272,"aliases":12273,"sourceIds":12275,"published":12276,"modified":12277,"checkedAt":7,"severity":12278,"references":12281,"versionKeys":12290,"packageCount":32,"repositoryCount":3900},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[12274],"CVE-2026-111750",[442],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[12279],{"type":3483,"score":12280},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[12282,12284,12286,12288,12289],{"type":3487,"url":12283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":3490,"url":12285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":3487,"url":12287},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":3495,"url":3812},{"type":3487,"url":3896},[3816,3817,3818,3819,3820,3821,3822,3823,3824,3898,3899],{"id":443,"slug":12292,"dossier":47,"summary":12293,"aliases":12294,"sourceIds":12297,"published":12298,"modified":12299,"checkedAt":7,"severity":12300,"references":12303,"versionKeys":12314,"packageCount":32,"repositoryCount":8674},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[12295,12296],"CVE-2025-67724","PYSEC-2025-265",[443,12296],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[12301,12302],{"type":3555,"score":7020},{"type":3555,"score":10155},[12304,12306,12308,12310,12312,12313],{"type":3490,"url":12305},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3490,"url":12307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3593,"url":12309},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3487,"url":12311},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3495,"url":4516},{"type":3490,"url":8672},[4520,4521,4522],{"id":444,"slug":12316,"dossier":47,"summary":12317,"aliases":12318,"sourceIds":12320,"published":12321,"modified":12322,"checkedAt":7,"severity":12323,"references":12325,"versionKeys":12329,"packageCount":32,"repositoryCount":781},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[12319],"CVE-2026-91992",[444],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[12324],{"type":3555,"score":5520},[12326,12328],{"type":3487,"url":12327},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3495,"url":4516},[4520,4521,4522,4523,4524],{"id":445,"slug":12331,"dossier":47,"summary":12332,"aliases":12333,"sourceIds":12335,"published":12336,"modified":12337,"checkedAt":7,"severity":12338,"references":12341,"versionKeys":12356,"packageCount":32,"repositoryCount":66},"ghsa-pw9p-v7r6-gx4p-86e36276","Tornado: Open redirect in RedirectHandler via protocol-relative URLs",[12334],"CVE-2026-116578",[445],"2026-10-28T22:43:45Z","2026-10-28T23:00:04.066537287Z",[12339],{"type":3483,"score":12340},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12342,12344,12346,12348,12350,12352,12354,12355],{"type":3487,"url":12343},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw9p-v7r6-gx4p",{"type":3490,"url":12345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116578",{"type":3487,"url":12347},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3786",{"type":3487,"url":12349},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F940ea725bdd9bc68231d68a105eef17ea6e11233",{"type":3487,"url":12351},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fcc75ab0eb3af459c714895a49f682ad354f50117",{"type":3487,"url":12353},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fccb6a2e5482f17997efd4a74b8200d5b4babc035",{"type":3495,"url":4516},{"type":3487,"url":12096},[4520,4521,4522,4523,4524,4525],{"id":446,"slug":12358,"dossier":47,"summary":12359,"aliases":12360,"sourceIds":12364,"published":12365,"modified":12366,"checkedAt":7,"severity":12367,"references":12370,"versionKeys":12382,"packageCount":32,"repositoryCount":4101},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[12361,12362,12363],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[446,12363],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[12368,12369],{"type":3483,"score":8687},{"type":3555,"score":5963},[12371,12372,12374,12376,12378,12380,12381],{"type":3487,"url":8691},{"type":3593,"url":12373},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3490,"url":12375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3593,"url":12377},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3593,"url":12379},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3495,"url":3496},{"type":3490,"url":6178},[3500,3501,3502,3503,3504,3505,3506,3507],{"id":447,"slug":12384,"dossier":47,"summary":12385,"aliases":12386,"sourceIds":12387,"published":12388,"modified":12389,"checkedAt":7,"severity":12390,"references":12392,"versionKeys":12399,"packageCount":32,"repositoryCount":857},"ghsa-pxh4-856f-4h89-682cbd7f","PyJWT: HS256\u002F384\u002F512 verify accepts empty HMAC key via oct JWK (PyJWK\u002FPyJWKClient) enabling token forgery",[],[447],"2026-10-22T15:48:04Z","2026-10-22T16:00:09.127222029Z",[12391],{"type":3555,"score":8192},[12393,12395,12397,12398],{"type":3487,"url":12394},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-pxh4-856f-4h89",{"type":3487,"url":12396},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Faf8181ca0bec5e6b372fbba9afbe23702b787ceb",{"type":3495,"url":3920},{"type":3487,"url":3922},[3928,3929,3930],{"id":448,"slug":12401,"dossier":47,"summary":12402,"aliases":12403,"sourceIds":12406,"published":12407,"modified":12408,"checkedAt":7,"severity":12409,"references":12412,"versionKeys":12427,"packageCount":32,"repositoryCount":32},"ghsa-q29v-xc37-wh5m-9bf51ff7","Docling: Unsafe URI and Path Handling in HTML Backend",[12404,12405],"CVE-2026-47214","PYSEC-2026-2146",[448,12405],"2026-06-03T21:15:02Z","2026-10-19T20:00:04.717120532Z",[12410],{"type":3555,"score":12411},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[12413,12415,12417,12419,12421,12422,12423,12425],{"type":3593,"url":12414},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-q29v-xc37-wh5m",{"type":3490,"url":12416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47214",{"type":3487,"url":12418},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F3400",{"type":3487,"url":12420},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F3407",{"type":3495,"url":4370},{"type":3487,"url":8915},{"type":3593,"url":12424},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.94.0",{"type":3487,"url":12426},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2146.yaml",[4374],{"id":449,"slug":12429,"dossier":47,"summary":12430,"aliases":12431,"sourceIds":12434,"published":11060,"modified":12435,"checkedAt":7,"severity":12436,"references":12438,"versionKeys":12449,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[12432,12433],"CVE-2025-3263","PYSEC-2026-1987",[449,12433],"2026-07-07T17:56:57.889099913Z",[12437],{"type":3555,"score":5172},[12439,12441,12442,12443,12444,12446,12447],{"type":3490,"url":12440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":3487,"url":11068},{"type":3487,"url":11070},{"type":3495,"url":3742},{"type":3487,"url":12445},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":3495,"url":4215},{"type":3490,"url":12448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[3749],{"id":450,"slug":12451,"dossier":47,"summary":12452,"aliases":12453,"sourceIds":12456,"published":12457,"modified":12458,"checkedAt":7,"severity":12459,"references":12462,"versionKeys":12475,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[12454,12455],"CVE-2024-56326","PYSEC-2026-1475",[450,12455],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[12460,12461],{"type":3555,"score":6628},{"type":3483,"score":8955},[12463,12465,12467,12469,12470,12471,12472,12473],{"type":3487,"url":12464},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3490,"url":12466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3593,"url":12468},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3495,"url":8964},{"type":3487,"url":10303},{"type":3487,"url":8966},{"type":3495,"url":8970},{"type":3490,"url":12474},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[8974],{"id":451,"slug":12477,"dossier":47,"summary":12478,"aliases":12479,"sourceIds":12482,"published":12483,"modified":12484,"checkedAt":7,"severity":12485,"references":12487,"versionKeys":12495,"packageCount":32,"repositoryCount":3510},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[12480,12481],"BIT-pillow-2026-112897","CVE-2026-112897",[451],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[12486],{"type":3483,"score":6893},[12488,12490,12492,12493,12494],{"type":3487,"url":12489},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":3490,"url":12491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":3487,"url":8602},{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":452,"slug":12497,"dossier":47,"summary":12498,"aliases":12499,"sourceIds":12502,"published":12503,"modified":12504,"checkedAt":7,"severity":12505,"references":12508,"versionKeys":12514,"packageCount":32,"repositoryCount":3510},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[12500,12501],"CVE-2026-44431","PYSEC-2026-141",[452,12501],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[12506,12507],{"type":3555,"score":6365},{"type":3483,"score":8486},[12509,12511,12513],{"type":3490,"url":12510},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3490,"url":12512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3495,"url":4092},[4096,4097,4098,4099,4100,7604],{"id":453,"slug":12516,"dossier":47,"summary":12517,"aliases":12518,"sourceIds":12522,"published":12523,"modified":12524,"checkedAt":7,"severity":12525,"references":12529,"versionKeys":12547,"packageCount":32,"repositoryCount":6281},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[12519,12520,12521],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[453],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[12526,12527],{"type":3555,"score":5250},{"type":3483,"score":12528},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[12530,12532,12534,12536,12538,12540,12541,12543,12545],{"type":3490,"url":12531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":3487,"url":12533},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":3487,"url":12535},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":3487,"url":12537},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":3487,"url":12539},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":3495,"url":4178},{"type":3487,"url":12542},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":3487,"url":12544},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":3487,"url":12546},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[4190,4191,4192,6274,6275,6276,6277,6278,6279,6280],{"id":454,"slug":12549,"dossier":47,"summary":12550,"aliases":12551,"sourceIds":12553,"published":12554,"modified":12555,"checkedAt":7,"severity":12556,"references":12558,"versionKeys":12565,"packageCount":32,"repositoryCount":885},"ghsa-qfv9-64jg-mh7p-d1cf78d0","pypdf: Possible infinite loop in PdfWriter.find_outline_item",[12552],"CVE-2026-113792",[454],"2026-10-21T16:55:35Z","2026-10-21T17:00:06.238658983Z",[12557],{"type":3483,"score":4333},[12559,12561,12562,12563,12564],{"type":3487,"url":12560},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qfv9-64jg-mh7p",{"type":3487,"url":8299},{"type":3487,"url":8301},{"type":3495,"url":3531},{"type":3487,"url":8304},[3541,3542,3543],{"id":455,"slug":12567,"dossier":47,"summary":12568,"aliases":12569,"sourceIds":12571,"published":12572,"modified":12573,"checkedAt":7,"severity":12574,"references":12576,"versionKeys":12591,"packageCount":32,"repositoryCount":32},"ghsa-qg35-44qx-7vrr-950bffa8","NLTK: Symlink escape in YCOECorpusReader lets a psd\u002Fpos directory symlink read files outside the corpus root within the data sandbox",[12570],"CVE-2026-126304",[455],"2026-11-13T20:55:16Z","2026-11-13T21:15:14.544338378Z",[12575],{"type":3555,"score":5524},[12577,12579,12581,12583,12585,12587,12588,12589],{"type":3487,"url":12578},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qg35-44qx-7vrr",{"type":3490,"url":12580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126304",{"type":3487,"url":12582},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3888",{"type":3487,"url":12584},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2c563b13f9dce7c15eefd4b03463e1b69b64f1f3",{"type":3487,"url":12586},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F68434c0427f8d296f3adfddb518525038d1f7bfa",{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":12590},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.0-before-3.10.4-symlink-escape-in-ycoecorpusreader",[4433],{"id":456,"slug":12593,"dossier":47,"summary":12594,"aliases":12595,"sourceIds":12598,"published":12599,"modified":12600,"checkedAt":7,"severity":12601,"references":12604,"versionKeys":12617,"packageCount":32,"repositoryCount":781},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[12596,12597],"CVE-2026-31958","PYSEC-2026-140",[456,12597],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[12602,12603],{"type":3555,"score":3669},{"type":3483,"score":3868},[12605,12607,12609,12611,12613,12614,12615],{"type":3490,"url":12606},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3490,"url":12608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3487,"url":12610},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3487,"url":12612},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3495,"url":4516},{"type":3487,"url":7031},{"type":3487,"url":12616},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[4520,4521,4522,4523],{"id":457,"slug":12619,"dossier":47,"summary":12620,"aliases":12621,"sourceIds":12624,"published":12625,"modified":12626,"checkedAt":7,"severity":12627,"references":12630,"versionKeys":12644,"packageCount":32,"repositoryCount":6281},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[12622,12623],"CVE-2026-22701","PYSEC-2026-1374",[457,12623],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[12628],{"type":3555,"score":12629},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[12631,12633,12635,12637,12639,12640,12642],{"type":3487,"url":12632},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3490,"url":12634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3487,"url":12636},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3487,"url":12638},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3495,"url":5501},{"type":3495,"url":12641},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3490,"url":12643},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[6524,6525,6526,6527],{"id":458,"slug":12646,"dossier":47,"summary":12647,"aliases":12648,"sourceIds":12651,"published":12652,"modified":12653,"checkedAt":7,"severity":12654,"references":12657,"versionKeys":12668,"packageCount":32,"repositoryCount":800},"ghsa-qmx5-4p3x-wvqf-aef88856","virtualenv: Venv configuration readback can reinterpret path boundaries",[12649,12650],"BIT-virtualenv-2026-113715","CVE-2026-113715",[458],"2026-10-23T22:20:43Z","2026-10-29T10:55:39.718166145Z",[12655],{"type":3483,"score":12656},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[12658,12660,12662,12664,12666,12667],{"type":3487,"url":12659},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-qmx5-4p3x-wvqf",{"type":3490,"url":12661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113715",{"type":3487,"url":12663},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3426",{"type":3487,"url":12665},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fb0008a58885ded9227faf8f910c6c402712c750a",{"type":3495,"url":4314},{"type":3487,"url":4316},[4318,4319,4320,4321,4322],{"id":459,"slug":12670,"dossier":47,"summary":12671,"aliases":12672,"sourceIds":12675,"published":12676,"modified":12677,"checkedAt":7,"severity":12678,"references":12680,"versionKeys":12693,"packageCount":32,"repositoryCount":105},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[12673,12674],"CVE-2026-33123","PYSEC-2026-3023",[459,12674],"2026-03-18T16:17:31Z","2026-09-10T03:51:00.643708515Z",[12679],{"type":3483,"score":3558},[12681,12683,12685,12687,12688,12690,12691],{"type":3487,"url":12682},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3490,"url":12684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3487,"url":12686},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3495,"url":3531},{"type":3487,"url":12689},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3495,"url":3535},{"type":3490,"url":12692},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3541,3542],{"id":460,"slug":12695,"dossier":47,"summary":12696,"aliases":12697,"sourceIds":12700,"published":12701,"modified":12702,"checkedAt":7,"severity":12703,"references":12706,"versionKeys":12720,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[12698,12699],"CVE-2025-2099","PYSEC-2025-40",[460,12699],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[12704,12705],{"type":3555,"score":5172},{"type":3555,"score":3669},[12707,12709,12711,12713,12714,12716,12718],{"type":3490,"url":12708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":3487,"url":12710},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":3593,"url":12712},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":3495,"url":3742},{"type":3487,"url":12715},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":3487,"url":12717},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":3490,"url":12719},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[3749],{"id":461,"slug":12722,"dossier":47,"summary":12723,"aliases":12724,"sourceIds":12727,"published":12728,"modified":12729,"checkedAt":7,"severity":12730,"references":12732,"versionKeys":12747,"packageCount":32,"repositoryCount":885},"ghsa-qv6h-rv94-w285-29ac1d93","pypdf: Possible large memory usage when retrieving Roman page labels",[12725,12726],"CVE-2026-102993","PYSEC-2026-4158",[461,12726],"2026-10-01T15:03:45Z","2026-10-01T17:56:17.149212800Z",[12731],{"type":3483,"score":3868},[12733,12735,12737,12739,12741,12742,12744,12745],{"type":3487,"url":12734},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qv6h-rv94-w285",{"type":3490,"url":12736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102993",{"type":3487,"url":12738},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4047",{"type":3487,"url":12740},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F89db7c4fe9315ecc964bfdf05a4e8c4b94175163",{"type":3495,"url":3531},{"type":3487,"url":12743},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.17.0",{"type":3495,"url":3535},{"type":3490,"url":12746},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qv6h-rv94-w285",[3541,3542,3543],{"id":462,"slug":12749,"dossier":47,"summary":12750,"aliases":12751,"sourceIds":12754,"published":12755,"modified":12756,"checkedAt":7,"severity":12757,"references":12760,"versionKeys":12769,"packageCount":32,"repositoryCount":857},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[12752,12753],"CVE-2026-12075","PYSEC-2026-3583",[462,12753],"2026-07-31T16:51:29Z","2026-09-10T03:50:53.081739885Z",[12758],{"type":3555,"score":12759},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[12761,12763,12764,12765,12767],{"type":3487,"url":12762},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3495,"url":3949},{"type":3495,"url":5715},{"type":3490,"url":12766},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3490,"url":12768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3960,3961],{"id":463,"slug":12771,"dossier":47,"summary":12772,"aliases":12773,"sourceIds":12776,"published":12777,"modified":12778,"checkedAt":7,"severity":12779,"references":12782,"versionKeys":12801,"packageCount":32,"repositoryCount":847},"ghsa-qx2g-xrx7-vfh8-91db951d","NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking",[12774,12775],"CVE-2026-72818","PYSEC-2026-3870",[463,12775],"2026-08-21T00:31:23Z","2026-09-10T12:25:44.300334208Z",[12780,12781],{"type":3555,"score":3669},{"type":3483,"score":3868},[12783,12785,12787,12789,12791,12792,12794,12796,12798,12799],{"type":3490,"url":12784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-72818",{"type":3487,"url":12786},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3704",{"type":3487,"url":12788},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3701",{"type":3487,"url":12790},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe092ed52eccae642304448bffc8d23cb301f85c1",{"type":3495,"url":3949},{"type":3487,"url":12793},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F3.9.4\u002Fnltk\u002Ftokenize\u002Fcasual.py",{"type":3487,"url":12795},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.1",{"type":3487,"url":12797},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input",{"type":3495,"url":5715},{"type":3490,"url":12800},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qx2g-xrx7-vfh8",[4433,3960,3961],{"id":464,"slug":12803,"dossier":47,"summary":10708,"aliases":12804,"sourceIds":12807,"published":12808,"modified":12809,"checkedAt":7,"severity":12810,"references":12814,"versionKeys":12828,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[12805,12806],"CVE-2024-11392","PYSEC-2024-227",[464,12806],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[12811,12813],{"type":3555,"score":12812},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3555,"score":3691},[12815,12817,12818,12819,12820,12822,12824,12826],{"type":3490,"url":12816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":3487,"url":10723},{"type":3487,"url":10725},{"type":3495,"url":3742},{"type":3487,"url":12821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":3487,"url":12823},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":3490,"url":12825},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":3490,"url":12827},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[3749],{"id":465,"slug":12830,"dossier":47,"summary":12831,"aliases":12832,"sourceIds":12835,"published":12836,"modified":12837,"checkedAt":7,"severity":12838,"references":12842,"versionKeys":12851,"packageCount":32,"repositoryCount":32},"ghsa-r3xg-rg9j-67fv-878d1feb","Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend",[12833,12834],"CVE-2026-44018","PYSEC-2026-2144",[465,12834],"2026-06-03T21:13:32Z","2026-07-21T15:15:50.260072276Z",[12839,12841],{"type":3555,"score":12840},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3555,"score":4936},[12843,12845,12847,12848,12849],{"type":3593,"url":12844},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-r3xg-rg9j-67fv",{"type":3490,"url":12846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44018",{"type":3495,"url":4370},{"type":3490,"url":8915},{"type":3487,"url":12850},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2144.yaml",[4374],{"id":466,"slug":12853,"dossier":47,"summary":12854,"aliases":12855,"sourceIds":12857,"published":12858,"modified":12859,"checkedAt":7,"severity":12860,"references":12862,"versionKeys":12873,"packageCount":32,"repositoryCount":66},"ghsa-r4j5-9xpp-3985-880dec7e","Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks",[12856],"CVE-2026-115927",[466],"2026-10-28T22:43:50Z","2026-10-28T23:00:04.082411607Z",[12861],{"type":3555,"score":3769},[12863,12865,12867,12869,12871,12872],{"type":3487,"url":12864},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-r4j5-9xpp-3985",{"type":3490,"url":12866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-115927",{"type":3487,"url":12868},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3773",{"type":3487,"url":12870},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fceab33581489751a66fba8566ad6d5960d4b01c8",{"type":3495,"url":4516},{"type":3487,"url":12096},[4520,4521,4522,4523,4524,4525],{"id":467,"slug":12875,"dossier":47,"summary":12876,"aliases":12877,"sourceIds":12879,"published":12880,"modified":12881,"checkedAt":7,"severity":12882,"references":12884,"versionKeys":12899,"packageCount":32,"repositoryCount":847},"ghsa-r53h-rw34-8h97-8b0ef42e","NLTK: Quadratic-time CPU denial of service in Tree.chomsky_normal_form right-factor binarization via list.pop(0)",[12878],"CVE-2026-126298",[467],"2026-11-14T00:07:59Z","2026-11-14T00:15:03.209174769Z",[12883],{"type":3555,"score":3669},[12885,12887,12889,12891,12893,12895,12896,12897],{"type":3487,"url":12886},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r53h-rw34-8h97",{"type":3490,"url":12888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126298",{"type":3487,"url":12890},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3909",{"type":3487,"url":12892},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F457ebe349f8dd8080224f76a64aff806dd437057",{"type":3487,"url":12894},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F677857dcafd84e4591865d976b562a27dfde566e",{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":12898},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.4-quadratic-cpu-denial-of-service-via-tree-chomsky-normal-form",[4433,3960,3961],{"id":468,"slug":12901,"dossier":47,"summary":12902,"aliases":12903,"sourceIds":12906,"published":12907,"modified":12908,"checkedAt":7,"severity":12909,"references":12915,"versionKeys":12930,"packageCount":32,"repositoryCount":857},"ghsa-r6gq-whwq-mvg9-34c83a12","NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root",[12904,12905],"CVE-2026-70626","PYSEC-2026-3732",[468,12905],"2026-08-22T15:16:21.100Z","2026-09-08T15:30:07.726015360Z",[12910,12912,12913],{"type":3555,"score":12911},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3483,"score":8687},{"type":3483,"score":12914},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[12916,12918,12920,12921,12923,12924,12926,12928],{"type":3744,"url":12917},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r6gq-whwq-mvg9",{"type":3490,"url":12919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-70626",{"type":3487,"url":6930},{"type":3487,"url":12922},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1b0e519e2324bc1a273d56edee63e44d0ad85b48",{"type":3495,"url":3949},{"type":3487,"url":12925},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.4",{"type":3487,"url":12927},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3732.yaml",{"type":3490,"url":12929},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-symlink-escape-via-corpusreader",[3960,3961],{"id":469,"slug":12932,"dossier":47,"summary":12933,"aliases":12934,"sourceIds":12937,"published":12938,"modified":12939,"checkedAt":7,"severity":12940,"references":12942,"versionKeys":12954,"packageCount":32,"repositoryCount":32},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[12935,12936],"CVE-2026-102272","PYSEC-2026-4150",[469,12936],"2026-09-29T23:14:00Z","2026-10-01T17:56:05.452379838Z",[12941],{"type":3555,"score":8192},[12943,12945,12947,12949,12950,12951,12952],{"type":3487,"url":12944},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":3490,"url":12946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":3487,"url":12948},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":12953},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r6x4-923q-g947",[3929],{"id":470,"slug":12956,"dossier":47,"summary":12957,"aliases":12958,"sourceIds":12962,"published":12963,"modified":12964,"checkedAt":7,"severity":12965,"references":12968,"versionKeys":12982,"packageCount":32,"repositoryCount":4101},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[12959,12960,12961],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[470,12961],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[12966,12967],{"type":3555,"score":4167},{"type":3483,"score":3558},[12969,12971,12973,12975,12977,12978,12979,12980],{"type":3487,"url":12970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3490,"url":12972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3487,"url":12974},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3487,"url":12976},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3495,"url":3496},{"type":3487,"url":6178},{"type":3495,"url":6228},{"type":3490,"url":12981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3500,3501,3502,3503,3504,3505,3506,3507],{"id":471,"slug":12984,"dossier":47,"summary":12985,"aliases":12986,"sourceIds":12989,"published":12990,"modified":12991,"checkedAt":7,"severity":12992,"references":12994,"versionKeys":13009,"packageCount":32,"repositoryCount":857},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[12987,12988],"CVE-2025-6051","PYSEC-2026-1988",[471,12988],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[12993],{"type":3555,"score":5172},[12995,12997,12999,13001,13003,13004,13006,13007],{"type":3490,"url":12996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":3487,"url":12998},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":3487,"url":13000},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":3487,"url":13002},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":3495,"url":3742},{"type":3487,"url":13005},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":3495,"url":4215},{"type":3490,"url":13008},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[3749,3750,3751,3752],{"id":472,"slug":13011,"dossier":47,"summary":13012,"aliases":13013,"sourceIds":13016,"published":13017,"modified":13018,"checkedAt":7,"severity":13019,"references":13022,"versionKeys":13034,"packageCount":32,"repositoryCount":857},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[13014,13015],"CVE-2026-66393","PYSEC-2026-3724",[472,13015],"2026-03-18T20:17:43Z","2026-09-10T03:50:40.818763364Z",[13020,13021],{"type":3483,"score":3558},{"type":3483,"score":7975},[13023,13025,13027,13029,13030,13032],{"type":3744,"url":13024},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3490,"url":13026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-66393",{"type":3487,"url":13028},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F00cdcd392142e6c745e7120c8d50a24127df5fad",{"type":3495,"url":3949},{"type":3487,"url":13031},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3724.yaml",{"type":3490,"url":13033},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-denial-of-service-via-jsontaggeddecoder",[3960,3961],{"id":473,"slug":13036,"dossier":47,"summary":13037,"aliases":13038,"sourceIds":13041,"published":13042,"modified":13043,"checkedAt":7,"severity":13044,"references":13047,"versionKeys":13056,"packageCount":32,"repositoryCount":3510},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[13039,13040],"BIT-pillow-2026-112898","CVE-2026-112898",[473],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[13045],{"type":3483,"score":13046},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13048,13050,13052,13054,13055],{"type":3487,"url":13049},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":3490,"url":13051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":3487,"url":13053},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":474,"slug":13058,"dossier":47,"summary":13059,"aliases":13060,"sourceIds":13062,"published":13063,"modified":13064,"checkedAt":7,"severity":13065,"references":13067,"versionKeys":13078,"packageCount":32,"repositoryCount":847},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[13061],"CVE-2026-112939",[474],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[13066],{"type":3555,"score":9849},[13068,13070,13072,13074,13076,13077],{"type":3487,"url":13069},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":3490,"url":13071},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":3487,"url":13073},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":3487,"url":13075},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":3495,"url":5501},{"type":3487,"url":5503},[5505,5506,5507,5508],{"id":475,"slug":13080,"dossier":47,"summary":13081,"aliases":13082,"sourceIds":13085,"published":13086,"modified":13087,"checkedAt":7,"severity":13088,"references":13091,"versionKeys":13104,"packageCount":32,"repositoryCount":3900},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[13083,13084],"CVE-2026-25087","PYSEC-2026-113",[475,13084],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[13089],{"type":3555,"score":13090},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[13092,13094,13096,13098,13100,13102],{"type":3490,"url":13093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":3593,"url":13095},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":3495,"url":13097},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":3487,"url":13099},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":3490,"url":13101},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":3490,"url":13103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[13105,13106,13107,13108],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":476,"slug":13110,"dossier":47,"summary":13111,"aliases":13112,"sourceIds":13115,"published":13116,"modified":13117,"checkedAt":7,"severity":13118,"references":13123,"versionKeys":13138,"packageCount":32,"repositoryCount":857},"ghsa-rhp5-r9x4-f5g2-737c7e67","NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",[13113,13114],"CVE-2026-78683","PYSEC-2026-3734",[476,13114],"2026-08-25T02:16:53.033Z","2026-09-08T16:45:04.193165862Z",[13119,13121],{"type":3483,"score":13120},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":3483,"score":13122},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[13124,13126,13128,13130,13132,13133,13134,13136],{"type":3744,"url":13125},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rhp5-r9x4-f5g2",{"type":3490,"url":13127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78683",{"type":3487,"url":13129},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3631",{"type":3487,"url":13131},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ff26b3753038d937b68145daf15e9636f8451053c",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":13135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3734.yaml",{"type":3490,"url":13137},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-remote-code-execution-via-unsafe-pickle-deserialization",[3960,3961],{"id":477,"slug":13140,"dossier":47,"summary":13141,"aliases":13142,"sourceIds":13146,"published":9257,"modified":13147,"checkedAt":7,"severity":13148,"references":13151,"versionKeys":13169,"packageCount":32,"repositoryCount":4101},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[13143,13144,13145],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[477],"2026-09-10T03:49:48.419046410Z",[13149,13150],{"type":3555,"score":5250},{"type":3483,"score":12528},[13152,13154,13156,13158,13160,13162,13163,13165,13167],{"type":3490,"url":13153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":3487,"url":13155},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":3487,"url":13157},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":3487,"url":13159},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":3487,"url":13161},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":3495,"url":4178},{"type":3487,"url":13164},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":3487,"url":13166},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":3487,"url":13168},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[13170,13171,13172,4190,4191,4192,6274,6275,6276,6277,6278,6279,6280],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":478,"slug":13174,"dossier":47,"summary":13175,"aliases":13176,"sourceIds":13179,"published":13180,"modified":13181,"checkedAt":7,"severity":13182,"references":13186,"versionKeys":13201,"packageCount":32,"repositoryCount":857},"ghsa-rrv8-h7p8-rx55-b07785af","NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions",[13177,13178],"CVE-2026-80205","PYSEC-2026-3750",[478,13178],"2026-08-26T11:16:39.950Z","2026-09-08T20:45:04.338061792Z",[13183,13184,13185],{"type":3555,"score":3669},{"type":3483,"score":3868},{"type":3483,"score":7975},[13187,13189,13191,13193,13195,13196,13197,13199],{"type":3744,"url":13188},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rrv8-h7p8-rx55",{"type":3490,"url":13190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80205",{"type":3487,"url":13192},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3674",{"type":3487,"url":13194},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fd8e47539317b571ab1422981f5b9653d5eae1249",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":13198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3750.yaml",{"type":3490,"url":13200},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.0-redos-via-text-findall-unvalidated-regex",[3960,3961],{"id":479,"slug":13203,"dossier":47,"summary":13204,"aliases":13205,"sourceIds":13207,"published":13208,"modified":13209,"checkedAt":7,"severity":13210,"references":13212,"versionKeys":13226,"packageCount":32,"repositoryCount":857},"ghsa-rwrf-2pqf-9j8j-e3036e5e","Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas",[13206],"CVE-2026-116686",[479],"2026-10-27T21:05:29Z","2026-10-27T21:15:03.830660129Z",[13211],{"type":3555,"score":3621},[13213,13215,13217,13219,13221,13223,13224,13225],{"type":3487,"url":13214},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rwrf-2pqf-9j8j",{"type":3487,"url":13216},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3394",{"type":3487,"url":13218},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3396",{"type":3487,"url":13220},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F5ebdfed4060d8e5b11b8e2348f86bad4d1fb8836",{"type":3487,"url":13222},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F6705402e246dc4eb1fcdf4d9902b78d3c9c36e1b",{"type":3495,"url":5741},{"type":3487,"url":5743},{"type":3487,"url":5745},[5747,5748,5749,5750],{"id":480,"slug":13228,"dossier":47,"summary":13229,"aliases":13230,"sourceIds":13233,"published":13234,"modified":13235,"checkedAt":7,"severity":13236,"references":13238,"versionKeys":13252,"packageCount":32,"repositoryCount":885},"ghsa-v247-6f48-mgcj-e78635c0","pypdf: Possible long runtimes with large amount of embedded files",[13231,13232],"CVE-2026-102999","PYSEC-2026-4159",[480,13232],"2026-10-01T15:07:35Z","2026-10-01T17:55:57.901958888Z",[13237],{"type":3483,"score":3868},[13239,13241,13243,13245,13247,13248,13249,13250],{"type":3487,"url":13240},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-v247-6f48-mgcj",{"type":3490,"url":13242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102999",{"type":3487,"url":13244},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4081",{"type":3487,"url":13246},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F6b10556d13609a68f9ed18bb29fdd8bba88eb2c3",{"type":3495,"url":3531},{"type":3487,"url":12220},{"type":3495,"url":3535},{"type":3490,"url":13251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v247-6f48-mgcj",[3541,3542,3543],{"id":481,"slug":13254,"dossier":47,"summary":13255,"aliases":13256,"sourceIds":13259,"published":13260,"modified":13261,"checkedAt":7,"severity":13262,"references":13267,"versionKeys":13284,"packageCount":32,"repositoryCount":32},"ghsa-v492-6xx2-p57g-b1729313","Chainlit contains an authorization bypass vulnerability",[13257,13258],"CVE-2025-68492","PYSEC-2026-1238",[481,13258],"2026-01-14T09:31:21Z","2026-07-07T17:56:13.167928474Z",[13263,13265],{"type":3555,"score":13264},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3483,"score":13266},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13268,13270,13272,13274,13275,13277,13279,13281,13282],{"type":3490,"url":13269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68492",{"type":3487,"url":13271},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2637",{"type":3487,"url":13273},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F8f1153db439eca58ae5c50c8276ba6fdd311448e",{"type":3495,"url":3845},{"type":3487,"url":13276},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases",{"type":3487,"url":13278},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.8.5",{"type":3487,"url":13280},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN34964581",{"type":3495,"url":3853},{"type":3490,"url":13283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v492-6xx2-p57g",[3857],{"id":482,"slug":13286,"dossier":47,"summary":13287,"aliases":13288,"sourceIds":13290,"published":13291,"modified":13292,"checkedAt":7,"severity":13293,"references":13295,"versionKeys":13304,"packageCount":32,"repositoryCount":847},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[13289],"CVE-2026-112940",[482],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[13294],{"type":3555,"score":9313},[13296,13298,13300,13301,13302,13303],{"type":3487,"url":13297},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":3490,"url":13299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":3487,"url":8400},{"type":3487,"url":8402},{"type":3495,"url":5501},{"type":3487,"url":5503},[5505,5506,5507,5508],{"id":483,"slug":13306,"dossier":47,"summary":13307,"aliases":13308,"sourceIds":13310,"published":13311,"modified":13312,"checkedAt":7,"severity":13313,"references":13315,"versionKeys":13330,"packageCount":32,"repositoryCount":847},"ghsa-v8f3-6phw-6mh9-911bad67","NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan",[13309],"CVE-2026-126297",[483],"2026-11-14T00:05:57Z","2026-11-14T00:15:03.202799158Z",[13314],{"type":3555,"score":3669},[13316,13318,13320,13322,13324,13326,13327,13328],{"type":3487,"url":13317},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-v8f3-6phw-6mh9",{"type":3490,"url":13319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126297",{"type":3487,"url":13321},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3933",{"type":3487,"url":13323},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7bae75fc0f7b1f057ff7d89d24c81bb5a4a0f05a",{"type":3487,"url":13325},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9cacbb95d97eaac7debb30d6e7decbe74d2c635f",{"type":3495,"url":3949},{"type":3487,"url":7629},{"type":3487,"url":13329},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.4-cpu-denial-of-service-via-conllcorpusreader-srl-instances",[4433,3960,3961],{"id":484,"slug":13332,"dossier":47,"summary":13333,"aliases":13334,"sourceIds":13337,"published":13338,"modified":13339,"checkedAt":7,"severity":13340,"references":13342,"versionKeys":13351,"packageCount":32,"repositoryCount":828},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[13335,13336],"CVE-2026-53540","PYSEC-2026-3040",[484,13336],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[13341],{"type":3555,"score":9698},[13343,13345,13346,13347,13349],{"type":3487,"url":13344},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3495,"url":5638},{"type":3495,"url":5640},{"type":3490,"url":13348},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3490,"url":13350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[5949,5950,5951,5644],{"id":485,"slug":13353,"dossier":47,"summary":13354,"aliases":13355,"sourceIds":13359,"published":13360,"modified":13361,"checkedAt":7,"severity":13362,"references":13364,"versionKeys":13375,"packageCount":32,"repositoryCount":4101},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[13356,13357,13358],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[485,13358],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[13363],{"type":3555,"score":5337},[13365,13367,13369,13371,13373,13374],{"type":3490,"url":13366},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":3490,"url":13368},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":3955,"url":13370},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":3593,"url":13372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":3495,"url":3496},{"type":3490,"url":3498},[3502,3503,3504,3505,3506,3507,3508,3509],{"id":486,"slug":13377,"dossier":47,"summary":13378,"aliases":13379,"sourceIds":13382,"published":13383,"modified":13384,"checkedAt":7,"severity":13385,"references":13387,"versionKeys":13398,"packageCount":32,"repositoryCount":828},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[13380,13381],"CVE-2026-53537","PYSEC-2026-3041",[486,13381],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[13386],{"type":3555,"score":6680},[13388,13390,13392,13393,13395,13397],{"type":3487,"url":13389},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3490,"url":13391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3495,"url":5638},{"type":3490,"url":13394},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3487,"url":13396},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3495,"url":5640},[5949,5950,5951,5644],{"id":487,"slug":13400,"dossier":47,"summary":13401,"aliases":13402,"sourceIds":13405,"published":13406,"modified":13407,"checkedAt":7,"severity":13408,"references":13410,"versionKeys":13423,"packageCount":32,"repositoryCount":34},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[13403,13404],"CVE-2026-41066","PYSEC-2026-87",[487,13404],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[13409],{"type":3555,"score":5524},[13411,13413,13415,13417,13419,13421],{"type":3490,"url":13412},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3490,"url":13414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3955,"url":13416},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3495,"url":13418},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3487,"url":13420},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3487,"url":13422},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[13424,13425,13426],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":488,"slug":13428,"dossier":47,"summary":13429,"aliases":13430,"sourceIds":13434,"published":9257,"modified":13435,"checkedAt":7,"severity":13436,"references":13439,"versionKeys":13454,"packageCount":32,"repositoryCount":66},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[13431,13432,13433],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[488],"2026-06-10T17:41:15.774477397Z",[13437,13438],{"type":3555,"score":5250},{"type":3483,"score":9262},[13440,13442,13443,13444,13445,13447,13448,13450,13452],{"type":3490,"url":13441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":3487,"url":9267},{"type":3487,"url":9269},{"type":3487,"url":9271},{"type":3487,"url":13446},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":3495,"url":4178},{"type":3487,"url":13449},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":3487,"url":13451},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":3487,"url":13453},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[4190,4191,4192,6274,6275,6276,6277],{"id":489,"slug":13456,"dossier":47,"summary":13457,"aliases":13458,"sourceIds":13461,"published":13462,"modified":13463,"checkedAt":7,"severity":13464,"references":13466,"versionKeys":13481,"packageCount":32,"repositoryCount":885},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[13459,13460],"CVE-2026-59950","PYSEC-2026-3483",[489,13460],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[13465],{"type":3483,"score":7585},[13467,13469,13471,13473,13475,13476,13478,13479],{"type":3487,"url":13468},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3490,"url":13470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3487,"url":13472},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3487,"url":13474},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3495,"url":5741},{"type":3487,"url":13477},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3495,"url":8086},{"type":3490,"url":13480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[5747,5748,5749],{"id":490,"slug":13483,"dossier":47,"summary":13484,"aliases":13485,"sourceIds":13489,"published":13490,"modified":13491,"checkedAt":7,"severity":13492,"references":13494,"versionKeys":13508,"packageCount":32,"repositoryCount":4748},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[13486,13487,13488],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[490,13488],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[13493],{"type":3483,"score":3868},[13495,13497,13499,13501,13503,13504,13505,13506],{"type":3487,"url":13496},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3490,"url":13498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3487,"url":13500},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3487,"url":13502},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3495,"url":3496},{"type":3487,"url":6226},{"type":3495,"url":6228},{"type":3490,"url":13507},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":491,"slug":13510,"dossier":47,"summary":13511,"aliases":13512,"sourceIds":13515,"published":13516,"modified":13517,"checkedAt":7,"severity":13518,"references":13522,"versionKeys":13535,"packageCount":32,"repositoryCount":847},"ghsa-vp2x-qp44-57v7-6098fc6a","NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`",[13513,13514],"CVE-2026-81723","PYSEC-2026-3871",[491,13514],"2026-09-02T14:34:11Z","2026-09-10T12:25:42.010688905Z",[13519,13520],{"type":3555,"score":9698},{"type":3483,"score":13521},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[13523,13525,13527,13528,13529,13530,13532,13533],{"type":3487,"url":13524},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",{"type":3490,"url":13526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81723",{"type":3487,"url":7737},{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":13531},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-quadratic-cpu-exhaustion-via-xmlcorpusview",{"type":3495,"url":5715},{"type":3490,"url":13534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",[4433,3960,3961],{"id":492,"slug":13537,"dossier":47,"summary":13538,"aliases":13539,"sourceIds":13542,"published":13543,"modified":13544,"checkedAt":7,"severity":13545,"references":13547,"versionKeys":13562,"packageCount":32,"repositoryCount":885},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[13540,13541],"CVE-2025-43859","PYSEC-2026-348",[492,13541],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[13546],{"type":3555,"score":9517},[13548,13550,13552,13554,13556,13558,13560],{"type":3487,"url":13549},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3490,"url":13551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3487,"url":13553},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3487,"url":13555},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":3495,"url":13557},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3495,"url":13559},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3490,"url":13561},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[13563],"pypi:h11@0.14.0",{"id":493,"slug":13565,"dossier":47,"summary":13566,"aliases":13567,"sourceIds":13570,"published":13571,"modified":13572,"checkedAt":7,"severity":13573,"references":13575,"versionKeys":13589,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[13568,13569],"CVE-2025-62707","PYSEC-2026-1833",[493,13569],"2025-10-22T19:40:47Z","2026-09-10T03:50:58.424138377Z",[13574],{"type":3483,"score":4916},[13576,13578,13580,13582,13584,13585,13586,13587],{"type":3487,"url":13577},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3490,"url":13579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3487,"url":13581},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3487,"url":13583},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3495,"url":3531},{"type":3487,"url":10896},{"type":3495,"url":3535},{"type":3490,"url":13588},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3541],{"id":494,"slug":13591,"dossier":47,"summary":13592,"aliases":13593,"sourceIds":13595,"published":13596,"modified":13597,"checkedAt":7,"severity":13598,"references":13600,"versionKeys":13607,"packageCount":32,"repositoryCount":3510},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[13594],"CVE-2026-112899",[494],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[13599],{"type":3483,"score":4387},[13601,13603,13605,13606],{"type":3487,"url":13602},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":3487,"url":13604},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":495,"slug":13609,"dossier":47,"summary":13610,"aliases":13611,"sourceIds":13614,"published":13615,"modified":13616,"checkedAt":7,"severity":13617,"references":13619,"versionKeys":13629,"packageCount":32,"repositoryCount":800},"ghsa-vxj4-q4g9-crj7-3e25d39d","virtualenv bash activate runs commands from an environment name with a backslash before $",[13612,13613],"BIT-virtualenv-2026-113725","CVE-2026-113725",[495],"2026-10-21T16:49:01Z","2026-10-29T10:55:53.696944055Z",[13618],{"type":3555,"score":5963},[13620,13622,13624,13626,13627],{"type":3487,"url":13621},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-vxj4-q4g9-crj7",{"type":3490,"url":13623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113725",{"type":3487,"url":13625},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fc3104e02474b652832a9bbaae79f6e1696296932",{"type":3495,"url":4314},{"type":3487,"url":13628},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.7",[4318,4319,4320,4321,4322],{"id":496,"slug":13631,"dossier":91,"summary":13632,"aliases":13633,"sourceIds":13636,"published":13637,"modified":13638,"checkedAt":7,"severity":13639,"references":13641,"versionKeys":13653,"packageCount":32,"repositoryCount":742},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[13634,13635],"CVE-2026-97689","PYSEC-2026-4177",[496,13635],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[13640],{"type":3483,"score":4077},[13642,13644,13646,13648,13649,13650,13651],{"type":3487,"url":13643},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":3490,"url":13645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":3487,"url":13647},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":3495,"url":4092},{"type":3487,"url":7599},{"type":3495,"url":4094},{"type":3490,"url":13652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[4096,4097,4098,4099,4100,7604,7605],{"id":497,"slug":13655,"dossier":47,"summary":13656,"aliases":13657,"sourceIds":13660,"published":13661,"modified":13662,"checkedAt":7,"severity":13663,"references":13665,"versionKeys":13679,"packageCount":32,"repositoryCount":885},"ghsa-w23x-9jrw-r45c-f75c043b","pypdf: Possible large memory usage when retrieving alphabetical page labels",[13658,13659],"CVE-2026-103000","PYSEC-2026-4160",[497,13659],"2026-10-01T15:07:08Z","2026-10-01T17:56:15.557598717Z",[13664],{"type":3483,"score":3868},[13666,13668,13670,13672,13674,13675,13676,13677],{"type":3487,"url":13667},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-w23x-9jrw-r45c",{"type":3490,"url":13669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103000",{"type":3487,"url":13671},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4096",{"type":3487,"url":13673},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F0d8b5a8832cde1ba308b5c27567b879b7b7eed4a",{"type":3495,"url":3531},{"type":3487,"url":12220},{"type":3495,"url":3535},{"type":3490,"url":13678},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w23x-9jrw-r45c",[3541,3542,3543],{"id":498,"slug":13681,"dossier":47,"summary":13682,"aliases":13683,"sourceIds":13686,"published":13687,"modified":13688,"checkedAt":7,"severity":13689,"references":13691,"versionKeys":13703,"packageCount":32,"repositoryCount":32},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[13684,13685],"CVE-2026-102273","PYSEC-2026-4151",[498,13685],"2026-09-29T23:16:55Z","2026-10-01T17:56:17.439454528Z",[13690],{"type":3555,"score":8192},[13692,13694,13696,13698,13699,13700,13701],{"type":3487,"url":13693},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":3490,"url":13695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":3487,"url":13697},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":13702},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",[3929],{"id":499,"slug":13705,"dossier":47,"summary":13706,"aliases":13707,"sourceIds":13710,"published":13711,"modified":13712,"checkedAt":7,"severity":13713,"references":13716,"versionKeys":13725,"packageCount":32,"repositoryCount":781},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[13708,13709],"CVE-2026-22815","PYSEC-2026-2094",[499,13709],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[13714,13715],{"type":3483,"score":4387},{"type":3483,"score":9090},[13717,13719,13721,13723,13724],{"type":3593,"url":13718},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3490,"url":13720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3593,"url":13722},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3495,"url":3812},{"type":3490,"url":4038},[3816,3817,3818,3819,3820,3821,3822,3823],{"id":500,"slug":13727,"dossier":47,"summary":13728,"aliases":13729,"sourceIds":13732,"published":13733,"modified":13734,"checkedAt":7,"severity":13735,"references":13737,"versionKeys":13748,"packageCount":32,"repositoryCount":32},"ghsa-w3fx-mc44-mf6j-8eb1f0ed","Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution",[13730,13731],"CVE-2026-45018","PYSEC-2026-3812",[500,13731],"2026-08-25T19:19:28Z","2026-09-10T12:26:01.565580392Z",[13736],{"type":3555,"score":5337},[13738,13740,13741,13742,13743,13744,13746],{"type":3487,"url":13739},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3487,"url":10649},{"type":3495,"url":3845},{"type":3487,"url":10654},{"type":3495,"url":3853},{"type":3490,"url":13745},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3490,"url":13747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45018",[3857],{"id":501,"slug":13750,"dossier":47,"summary":13751,"aliases":13752,"sourceIds":13755,"published":13756,"modified":13757,"checkedAt":7,"severity":13758,"references":13763,"versionKeys":13776,"packageCount":32,"repositoryCount":847},"ghsa-w3v8-gmh9-3wv7-b77729c9","NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions",[13753,13754],"CVE-2026-80206","PYSEC-2026-3751",[501,13754],"2026-08-26T11:16:40.103Z","2026-09-08T20:45:04.333988177Z",[13759,13761],{"type":3483,"score":13760},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3483,"score":13762},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[13764,13766,13768,13770,13771,13772,13774],{"type":3744,"url":13765},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-w3v8-gmh9-3wv7",{"type":3490,"url":13767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80206",{"type":3487,"url":13769},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0072ea2fb8be22e038a36e887b7061bb6b9339d9",{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":13773},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3751.yaml",{"type":3490,"url":13775},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.2-regular-expression-denial-of-service-via-tgrep",[4433,3960,3961],{"id":502,"slug":13778,"dossier":47,"summary":13779,"aliases":13780,"sourceIds":13782,"published":13783,"modified":13784,"checkedAt":7,"severity":13785,"references":13788,"versionKeys":13802,"packageCount":32,"repositoryCount":857},"ghsa-w4fh-qvv9-3v23-5d99e159","Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server",[13781],"CVE-2026-116684",[502],"2026-10-27T21:06:59Z","2026-10-27T21:15:03.825987077Z",[13786],{"type":3555,"score":13787},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[13789,13791,13793,13795,13797,13799,13800,13801],{"type":3487,"url":13790},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-w4fh-qvv9-3v23",{"type":3487,"url":13792},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3447",{"type":3487,"url":13794},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3451",{"type":3487,"url":13796},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F0c9136841ff092987a20700ff9c2c9789bda2f40",{"type":3487,"url":13798},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F8c2fa6eabacde869d75568e33b9d466b58c2f512",{"type":3495,"url":5741},{"type":3487,"url":5743},{"type":3487,"url":5745},[5747,5748,5749,5750],{"id":503,"slug":13804,"dossier":47,"summary":13805,"aliases":13806,"sourceIds":13809,"published":13810,"modified":13811,"checkedAt":7,"severity":13812,"references":13814,"versionKeys":13826,"packageCount":32,"repositoryCount":857},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[13807,13808],"CVE-2026-102274","PYSEC-2026-4152",[503,13808],"2026-09-29T18:23:01Z","2026-10-01T17:55:45.889604470Z",[13813],{"type":3555,"score":5094},[13815,13817,13819,13821,13822,13823,13824],{"type":3487,"url":13816},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":3490,"url":13818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":3487,"url":13820},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":3495,"url":3920},{"type":3487,"url":3922},{"type":3495,"url":3924},{"type":3490,"url":13825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",[3928,3929,3930],{"id":504,"slug":13828,"dossier":47,"summary":13829,"aliases":13830,"sourceIds":13833,"published":13834,"modified":13835,"checkedAt":7,"severity":13836,"references":13838,"versionKeys":13846,"packageCount":32,"repositoryCount":885},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[13831,13832],"CVE-2026-48525","PYSEC-2026-178",[504,13832],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[13837],{"type":3555,"score":3769},[13839,13841,13843,13844],{"type":3744,"url":13840},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3490,"url":13842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3495,"url":3920},{"type":3487,"url":13845},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[3928,3930],{"id":505,"slug":13848,"dossier":47,"summary":13849,"aliases":13850,"sourceIds":13853,"published":13854,"modified":13855,"checkedAt":7,"severity":13856,"references":13859,"versionKeys":13876,"packageCount":32,"repositoryCount":6281},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[13851,13852],"CVE-2025-68146","PYSEC-2026-1375",[505,13852],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[13857],{"type":3555,"score":13858},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[13860,13862,13864,13865,13867,13869,13871,13872,13874],{"type":3487,"url":13861},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3487,"url":13863},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3495,"url":5501},{"type":3487,"url":13866},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3487,"url":13868},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3487,"url":13870},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3495,"url":12641},{"type":3490,"url":13873},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3490,"url":13875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[6524,6525,6526,6527],{"id":506,"slug":13878,"dossier":47,"summary":13879,"aliases":13880,"sourceIds":13883,"published":13884,"modified":13885,"checkedAt":7,"severity":13886,"references":13889,"versionKeys":13898,"packageCount":32,"repositoryCount":3510},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[13881,13882],"BIT-pillow-2026-112900","CVE-2026-112900",[506],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[13887],{"type":3483,"score":13888},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13890,13892,13894,13896,13897],{"type":3487,"url":13891},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":3490,"url":13893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":3487,"url":13895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":507,"slug":13900,"dossier":47,"summary":13901,"aliases":13902,"sourceIds":13905,"published":13906,"modified":13907,"checkedAt":7,"severity":13908,"references":13910,"versionKeys":13924,"packageCount":32,"repositoryCount":105},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[13903,13904],"CVE-2026-27025","PYSEC-2026-3024",[507,13904],"2026-02-18T22:41:13Z","2026-09-10T03:50:36.045929384Z",[13909],{"type":3483,"score":5308},[13911,13913,13915,13917,13919,13920,13921,13922],{"type":3487,"url":13912},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3490,"url":13914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3487,"url":13916},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3487,"url":13918},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3495,"url":3531},{"type":3487,"url":8035},{"type":3495,"url":3535},{"type":3490,"url":13923},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3541,3542],{"id":508,"slug":13926,"dossier":47,"summary":13927,"aliases":13928,"sourceIds":13932,"published":13933,"modified":13934,"checkedAt":7,"severity":13935,"references":13938,"versionKeys":13976,"packageCount":32,"repositoryCount":4101},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[13929,13930,13931],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[508,13931],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[13936,13937],{"type":3555,"score":3669},{"type":3483,"score":3868},[13939,13941,13943,13945,13947,13948,13950,13952,13954,13956,13958,13960,13961,13963,13965,13967,13968,13970,13972,13974],{"type":3487,"url":13940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3490,"url":13942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3487,"url":13944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3487,"url":13946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3495,"url":3496},{"type":3487,"url":13949},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3487,"url":13951},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3487,"url":13953},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3490,"url":13955},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3490,"url":13957},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3490,"url":13959},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3490,"url":8713},{"type":3490,"url":13962},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3490,"url":13964},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3490,"url":13966},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3490,"url":4792},{"type":3490,"url":13969},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3490,"url":13971},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3490,"url":13973},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3490,"url":13975},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3500,3501,3502,3503,3504,3505,3506,3507],{"id":509,"slug":13978,"dossier":47,"summary":13979,"aliases":13980,"sourceIds":13983,"published":13984,"modified":13985,"checkedAt":7,"severity":13986,"references":13988,"versionKeys":14001,"packageCount":32,"repositoryCount":105},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[13981,13982],"CVE-2026-48735","PYSEC-2026-3025",[509,13982],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[13987],{"type":3483,"score":5308},[13989,13991,13993,13995,13996,13998,13999],{"type":3487,"url":13990},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3490,"url":13992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3487,"url":13994},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3495,"url":3531},{"type":3487,"url":13997},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3495,"url":3535},{"type":3490,"url":14000},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3541,3542],{"id":510,"slug":14003,"dossier":47,"summary":14004,"aliases":14005,"sourceIds":14009,"published":14010,"modified":14011,"checkedAt":7,"severity":14012,"references":14015,"versionKeys":14024,"packageCount":32,"repositoryCount":4101},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[14006,14007,14008],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[510,14008],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[14013,14014],{"type":3555,"score":4167},{"type":3483,"score":3558},[14016,14018,14020,14022,14023],{"type":3490,"url":14017},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3490,"url":14019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3487,"url":14021},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3495,"url":3496},{"type":3490,"url":6178},[3500,3501,3502,3503,3504,3505,3506,3507],{"id":511,"slug":14026,"dossier":47,"summary":14027,"aliases":14028,"sourceIds":14031,"published":14032,"modified":14033,"checkedAt":7,"severity":14034,"references":14036,"versionKeys":14049,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[14029,14030],"CVE-2026-24486","PYSEC-2026-1852",[511,14030],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[14035],{"type":3555,"score":10746},[14037,14039,14041,14043,14044,14046,14047],{"type":3487,"url":14038},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3490,"url":14040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3487,"url":14042},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3495,"url":5638},{"type":3487,"url":14045},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3495,"url":5640},{"type":3490,"url":14048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[5949,5950,5644],{"id":512,"slug":14051,"dossier":47,"summary":14052,"aliases":14053,"sourceIds":14055,"published":14056,"modified":14057,"checkedAt":7,"severity":14058,"references":14059,"versionKeys":14068,"packageCount":32,"repositoryCount":3510},"ghsa-wqgw-9xfh-qf2g-351c6680","Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data",[14054],"CVE-2026-128066",[512],"2026-11-12T23:35:39Z","2026-11-12T23:45:03.298534910Z",[],[14060,14062,14064,14066,14067],{"type":3487,"url":14061},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wqgw-9xfh-qf2g",{"type":3487,"url":14063},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4908edaf7f416616784c7c03d8c1a60153710ffb",{"type":3487,"url":14065},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4b63dffd8a6d980fa0e21b40832fa6cbf033eacf",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":513,"slug":14070,"dossier":47,"summary":14071,"aliases":14072,"sourceIds":14075,"published":14076,"modified":14077,"checkedAt":7,"severity":14078,"references":14080,"versionKeys":14102,"packageCount":32,"repositoryCount":781},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[14073,14074],"CVE-2026-48818","PYSEC-2026-2281",[513,14074],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[14079],{"type":3555,"score":5524},[14081,14083,14084,14086,14088,14090,14092,14094,14096,14098,14100],{"type":3490,"url":14082},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3495,"url":7108},{"type":3487,"url":14085},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3487,"url":14087},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3490,"url":14089},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3490,"url":14091},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3490,"url":14093},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3490,"url":14095},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3955,"url":14097},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3593,"url":14099},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3593,"url":14101},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3788,3789,3790,7115,7116,7117,7351,7352,7353],{"id":514,"slug":14104,"dossier":47,"summary":10708,"aliases":14105,"sourceIds":14108,"published":10713,"modified":14109,"checkedAt":7,"severity":14110,"references":14113,"versionKeys":14127,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[14106,14107],"CVE-2024-11393","PYSEC-2024-228",[514,14107],"2026-09-10T03:50:55.987633957Z",[14111,14112],{"type":3555,"score":10717},{"type":3555,"score":3691},[14114,14116,14117,14118,14119,14121,14123,14125],{"type":3490,"url":14115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":3487,"url":10723},{"type":3487,"url":10725},{"type":3495,"url":3742},{"type":3487,"url":14120},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":3487,"url":14122},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":3490,"url":14124},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":3490,"url":14126},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[3749],{"id":515,"slug":14129,"dossier":47,"summary":14130,"aliases":14131,"sourceIds":14134,"published":14135,"modified":14136,"checkedAt":7,"severity":14137,"references":14140,"versionKeys":14152,"packageCount":32,"repositoryCount":847},"ghsa-ww6m-cw3f-q94g-c2ac9639","NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'",[14132,14133],"CVE-2026-81722","PYSEC-2026-3738",[515,14133],"2026-08-27T17:21:02.800Z","2026-09-10T03:50:54.572733114Z",[14138,14139],{"type":3483,"score":4387},{"type":3483,"score":7975},[14141,14143,14145,14146,14147,14148,14150],{"type":3744,"url":14142},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ww6m-cw3f-q94g",{"type":3490,"url":14144},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81722",{"type":3487,"url":7737},{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":14149},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3738.yaml",{"type":3490,"url":14151},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-porterstemmer-before-3.10.3-quadratic-time-dos",[4433,3960,3961],{"id":516,"slug":14154,"dossier":47,"summary":14155,"aliases":14156,"sourceIds":14158,"published":14159,"modified":14160,"checkedAt":7,"severity":14161,"references":14163,"versionKeys":14175,"packageCount":32,"repositoryCount":105},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[14157],"CVE-2026-91991",[516],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[14162],{"type":3483,"score":10388},[14164,14166,14167,14169,14171,14173,14174],{"type":3487,"url":14165},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":3487,"url":7389},{"type":3487,"url":14168},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":3487,"url":14170},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":3487,"url":14172},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":3495,"url":4516},{"type":3487,"url":7396},[4524,4525],{"id":517,"slug":14177,"dossier":47,"summary":14178,"aliases":14179,"sourceIds":14182,"published":14183,"modified":14184,"checkedAt":7,"severity":14185,"references":14188,"versionKeys":14200,"packageCount":32,"repositoryCount":105},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[14180,14181],"CVE-2026-41314","PYSEC-2026-3026",[517,14181],"2026-04-16T21:30:25Z","2026-09-10T03:51:03.926113177Z",[14186,14187],{"type":3555,"score":3621},{"type":3483,"score":5041},[14189,14191,14193,14194,14195,14196,14197,14198],{"type":3487,"url":14190},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3490,"url":14192},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3487,"url":7198},{"type":3487,"url":7200},{"type":3495,"url":3531},{"type":3487,"url":5053},{"type":3495,"url":3535},{"type":3490,"url":14199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3541,3542],{"id":518,"slug":14202,"dossier":47,"summary":14203,"aliases":14204,"sourceIds":14207,"published":14208,"modified":14209,"checkedAt":7,"severity":14210,"references":14214,"versionKeys":14223,"packageCount":32,"repositoryCount":857},"ghsa-x33g-cr3x-6449-e42d7ec6","PyJWT accepts inconsistent OKP x\u002Fd JWKs, causing public\u002Fprivate key identity confusion",[14205,14206],"CVE-2026-102275","PYSEC-2026-4183",[518,14206],"2026-09-28T21:17:15.857Z","2026-10-07T10:11:04.862065390Z",[14211,14212],{"type":3555,"score":6015},{"type":3555,"score":14213},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[14215,14217,14219,14221,14222],{"type":3744,"url":14216},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-x33g-cr3x-6449",{"type":3490,"url":14218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102275",{"type":3593,"url":14220},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F3cd9ceec33ced359decbad75b413ad668ae6332c",{"type":3495,"url":3920},{"type":3490,"url":4667},[3928,3929,3930],{"id":519,"slug":14225,"dossier":47,"summary":14226,"aliases":14227,"sourceIds":14231,"published":14232,"modified":14233,"checkedAt":7,"severity":14234,"references":14239,"versionKeys":14255,"packageCount":32,"repositoryCount":105},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[14228,14229,14230],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[519],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[14235,14237],{"type":3555,"score":14236},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":3483,"score":14238},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14240,14242,14244,14246,14248,14249,14251,14253],{"type":3490,"url":14241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":3487,"url":14243},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":3487,"url":14245},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":3487,"url":14247},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":3495,"url":4178},{"type":3487,"url":14250},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":3487,"url":14252},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":3487,"url":14254},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[4190,4191],{"id":520,"slug":14257,"dossier":47,"summary":14258,"aliases":14259,"sourceIds":14261,"published":14262,"modified":14263,"checkedAt":7,"severity":14264,"references":14266,"versionKeys":14277,"packageCount":32,"repositoryCount":885},"ghsa-x3rh-gjgm-fmqc-67404c6c","pypdf has possible large memory usage when parsing cross-reference streams",[14260],"CVE-2026-119209",[520],"2026-10-30T23:07:28Z","2026-10-30T23:15:04.529631202Z",[14265],{"type":3483,"score":4538},[14267,14269,14271,14273,14275,14276],{"type":3487,"url":14268},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x3rh-gjgm-fmqc",{"type":3490,"url":14270},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119209",{"type":3487,"url":14272},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4269",{"type":3487,"url":14274},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fa93fe3a901fd00af38f0a105c3ba7175fa72dcb4",{"type":3495,"url":3531},{"type":3487,"url":4645},[3541,3542,3543],{"id":521,"slug":14279,"dossier":47,"summary":14280,"aliases":14281,"sourceIds":14284,"published":14285,"modified":14286,"checkedAt":7,"severity":14287,"references":14290,"versionKeys":14305,"packageCount":32,"repositoryCount":857},"ghsa-x5ph-mj9p-rfr8-05f43684","NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read",[14282,14283],"CVE-2026-63312","PYSEC-2026-3730",[521,14283],"2026-08-22T15:16:19.367Z","2026-09-08T15:46:56.600781081Z",[14288,14289],{"type":3483,"score":6893},{"type":3483,"score":6895},[14291,14293,14295,14297,14299,14300,14301,14303],{"type":3744,"url":14292},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x5ph-mj9p-rfr8",{"type":3490,"url":14294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63312",{"type":3487,"url":14296},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3588",{"type":3487,"url":14298},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F674ea75accdf08eca3782dee0a9c4ed7e0d0025b",{"type":3495,"url":3949},{"type":3487,"url":3951},{"type":3487,"url":14302},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3730.yaml",{"type":3490,"url":14304},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-streambackedcorpusview-bypasses-pathsec-enforce-arbitrary-file-read",[3960,3961],{"id":522,"slug":14307,"dossier":47,"summary":14308,"aliases":14309,"sourceIds":14312,"published":14313,"modified":14314,"checkedAt":7,"severity":14315,"references":14317,"versionKeys":14324,"packageCount":32,"repositoryCount":781},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[14310,14311],"CVE-2026-48817","PYSEC-2026-2280",[522,14311],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[14316],{"type":3555,"score":4028},[14318,14320,14322,14323],{"type":3490,"url":14319},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3490,"url":14321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3495,"url":7108},{"type":3490,"url":14095},[3788,3789,3790,7115,7116,7117,7351,7352,7353],{"id":523,"slug":14326,"dossier":47,"summary":14327,"aliases":14328,"sourceIds":14332,"published":7896,"modified":14333,"checkedAt":7,"severity":14334,"references":14337,"versionKeys":14351,"packageCount":32,"repositoryCount":800},"ghsa-x78j-v8h9-3j2q-0741325d","virtualenv: Command injection via --prompt in activate.bat (batch activator)",[14329,14330,14331],"BIT-virtualenv-2026-102937","CVE-2026-102937","PYSEC-2026-4014",[523,14331],"2026-10-06T15:26:00.196757436Z",[14335],{"type":3483,"score":14336},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[14338,14340,14342,14344,14346,14348,14349,14350],{"type":3487,"url":14339},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":3490,"url":14341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102937",{"type":3487,"url":14343},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":3593,"url":14345},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":3487,"url":14347},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4014.yaml",{"type":3495,"url":4314},{"type":3487,"url":7914},{"type":3495,"url":5614},[4318,4319,4320,4321,4322],{"id":524,"slug":14353,"dossier":47,"summary":14354,"aliases":14355,"sourceIds":14358,"published":14359,"modified":14360,"checkedAt":7,"severity":14361,"references":14363,"versionKeys":14378,"packageCount":32,"repositoryCount":105},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[14356,14357],"CVE-2026-27888","PYSEC-2026-3027",[524,14357],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[14362],{"type":3483,"score":4916},[14364,14366,14368,14370,14372,14373,14375,14376],{"type":3487,"url":14365},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3490,"url":14367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3487,"url":14369},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3487,"url":14371},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3495,"url":3531},{"type":3487,"url":14374},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3495,"url":3535},{"type":3490,"url":14377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3541,3542],{"id":525,"slug":14380,"dossier":47,"summary":14381,"aliases":14382,"sourceIds":14385,"published":14386,"modified":14387,"checkedAt":7,"severity":14388,"references":14391,"versionKeys":14406,"packageCount":32,"repositoryCount":105},"ghsa-x8wg-4xgc-vr54-f9dfa3b4","Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root",[14383,14384],"CVE-2026-71492","PYSEC-2026-3810",[525,14384],"2026-09-02T14:38:24Z","2026-09-10T12:25:29.001076918Z",[14389],{"type":3483,"score":14390},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14392,14394,14396,14398,14400,14401,14403,14404],{"type":3487,"url":14393},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",{"type":3490,"url":14395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71492",{"type":3487,"url":14397},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F77",{"type":3487,"url":14399},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fa215f6d779966945c56e0af5abed1ae5916fd9d3",{"type":3495,"url":5421},{"type":3487,"url":14402},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.5",{"type":3495,"url":5425},{"type":3490,"url":14405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",[5431],{"id":526,"slug":14408,"dossier":47,"summary":14409,"aliases":14410,"sourceIds":14413,"published":14414,"modified":14415,"checkedAt":7,"severity":14416,"references":14419,"versionKeys":14431,"packageCount":32,"repositoryCount":847},"ghsa-x99w-6fgc-pmfw-512b3e4e","NLTK: Allowlisted pickle loaders still permit code execution in current source",[14411,14412],"CVE-2026-79657","PYSEC-2026-3735",[526,14412],"2026-08-25T12:16:28.870Z","2026-09-08T17:00:04.111203038Z",[14417,14418],{"type":3483,"score":5335},{"type":3483,"score":11415},[14420,14422,14424,14425,14426,14427,14429],{"type":3744,"url":14421},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x99w-6fgc-pmfw",{"type":3490,"url":14423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79657",{"type":3487,"url":5708},{"type":3495,"url":3949},{"type":3487,"url":4427},{"type":3487,"url":14428},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3735.yaml",{"type":3490,"url":14430},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization",[4433,3960,3961],{"id":527,"slug":14433,"dossier":47,"summary":14434,"aliases":14435,"sourceIds":14438,"published":14439,"modified":14440,"checkedAt":7,"severity":14441,"references":14443,"versionKeys":14458,"packageCount":32,"repositoryCount":66},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[14436,14437],"CVE-2026-80047","PYSEC-2026-4174",[527,14437],"2026-09-01T15:31:13Z","2026-10-01T17:55:55.397425521Z",[14442],{"type":3555,"score":6628},[14444,14446,14448,14450,14451,14453,14455,14456],{"type":3490,"url":14445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":3487,"url":14447},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":3487,"url":14449},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":3495,"url":3742},{"type":3487,"url":14452},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":3487,"url":14454},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":3495,"url":4215},{"type":3490,"url":14457},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x9r9-c232-4q39",[3750,3751,3752,3753,3754,3755,3756,3757,14459],"pypi:transformers@5.8.0",{"id":528,"slug":14461,"dossier":47,"summary":14462,"aliases":14463,"sourceIds":14466,"published":14467,"modified":14468,"checkedAt":7,"severity":14469,"references":14472,"versionKeys":14478,"packageCount":32,"repositoryCount":66},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[14464,14465],"CVE-2026-54274","PYSEC-2026-2108",[528,14465],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[14470,14471],{"type":3483,"score":4916},{"type":3555,"score":3669},[14473,14475,14476],{"type":3490,"url":14474},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3495,"url":3812},{"type":3593,"url":14477},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3816,3817,3818,3819,3820,3821,3822,3823,3824],{"id":529,"slug":14480,"dossier":47,"summary":14481,"aliases":14482,"sourceIds":14484,"published":14485,"modified":14486,"checkedAt":7,"severity":14487,"references":14489,"versionKeys":14501,"packageCount":32,"repositoryCount":800},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[14483],"CVE-2026-114603",[529],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[14488],{"type":3555,"score":3769},[14490,14492,14494,14496,14497,14499],{"type":3487,"url":14491},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":3487,"url":14493},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":3487,"url":14495},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":3495,"url":11545},{"type":3487,"url":14498},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":3487,"url":14500},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[11549,11550,11551,11552,11553,11554,11555,11556],{"id":530,"slug":14503,"dossier":47,"summary":14504,"aliases":14505,"sourceIds":14507,"published":14508,"modified":14509,"checkedAt":7,"severity":14510,"references":14513,"versionKeys":14522,"packageCount":32,"repositoryCount":3510},"ghsa-xcvg-w56q-r89m-87c516ac","Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size",[14506],"CVE-2026-128067",[530],"2026-11-12T23:34:43Z","2026-11-12T23:45:03.322245161Z",[14511],{"type":3483,"score":14512},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[14514,14516,14518,14520,14521],{"type":3487,"url":14515},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xcvg-w56q-r89m",{"type":3487,"url":14517},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F53318b50e8e9e85a57d033d4d879e1398d97aeb1",{"type":3487,"url":14519},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fec5f1cbcf67275641abaad5c065ffb64a0a804a9",{"type":3495,"url":3496},{"type":3487,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":531,"slug":14524,"dossier":47,"summary":14525,"aliases":14526,"sourceIds":14530,"published":14531,"modified":14532,"checkedAt":7,"severity":14533,"references":14535,"versionKeys":14549,"packageCount":32,"repositoryCount":857},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[14527,14528,14529],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[531,14529],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[14534],{"type":3555,"score":9313},[14536,14538,14540,14542,14544,14546,14547],{"type":3490,"url":14537},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3490,"url":14539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3487,"url":14541},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3593,"url":14543},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3487,"url":14545},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3495,"url":3496},{"type":3487,"url":14548},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3503],{"id":532,"slug":14551,"dossier":47,"summary":14552,"aliases":14553,"sourceIds":14557,"published":14558,"modified":14559,"checkedAt":7,"severity":14560,"references":14563,"versionKeys":14572,"packageCount":32,"repositoryCount":3510},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[14554,14555,14556],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[532,14556],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[14561,14562],{"type":3483,"score":4387},{"type":3555,"score":3669},[14564,14566,14568,14570,14571],{"type":3593,"url":14565},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":3490,"url":14567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":3593,"url":14569},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":533,"slug":14574,"dossier":47,"summary":14575,"aliases":14576,"sourceIds":14579,"published":14580,"modified":14581,"checkedAt":7,"severity":14582,"references":14584,"versionKeys":14592,"packageCount":32,"repositoryCount":885},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[14577,14578],"CVE-2026-48526","PYSEC-2026-179",[533,14578],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[14583],{"type":3555,"score":8192},[14585,14587,14589,14590],{"type":3744,"url":14586},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3490,"url":14588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3495,"url":3920},{"type":3487,"url":14591},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[3928,3930],{"id":534,"slug":14594,"dossier":47,"summary":14595,"aliases":14596,"sourceIds":14599,"published":14600,"modified":14601,"checkedAt":7,"severity":14602,"references":14604,"versionKeys":14613,"packageCount":32,"repositoryCount":857},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[14597,14598],"CVE-2026-12074","PYSEC-2026-3584",[534,14598],"2026-07-31T16:50:41Z","2026-09-10T03:50:53.172593126Z",[14603],{"type":3555,"score":5524},[14605,14607,14608,14609,14611],{"type":3487,"url":14606},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3495,"url":3949},{"type":3495,"url":5715},{"type":3490,"url":14610},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3490,"url":14612},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3960,3961],{"id":535,"slug":14615,"dossier":47,"summary":14616,"aliases":14617,"sourceIds":14621,"published":14622,"modified":14623,"checkedAt":7,"severity":14624,"references":14627,"versionKeys":14638,"packageCount":32,"repositoryCount":4748},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[14618,14619,14620],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[535,14620],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[14625],{"type":3555,"score":14626},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[14628,14630,14632,14634,14636,14637],{"type":3744,"url":14629},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3490,"url":14631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3593,"url":14633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3593,"url":14635},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3495,"url":3496},{"type":3490,"url":6226},[3500,3501,3502,3503,3504,3505,3506,3507,3508],{"id":536,"slug":14640,"dossier":47,"summary":14641,"aliases":14642,"sourceIds":14643,"published":14644,"modified":14645,"checkedAt":7,"severity":14646,"references":14649,"versionKeys":14659,"packageCount":32,"repositoryCount":3510},"ghsa-xmj3-9gf7-h52w-d99c0028","setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation  Description",[],[536],"2026-10-23T21:44:11Z","2026-10-23T22:00:03.739009766Z",[14647],{"type":3483,"score":14648},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[14650,14652,14654,14656,14657],{"type":3487,"url":14651},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-xmj3-9gf7-h52w",{"type":3487,"url":14653},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F5329",{"type":3487,"url":14655},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F6d07b8d17890dda58d944ac51e58f54af92d52af",{"type":3495,"url":5918},{"type":3487,"url":14658},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv84.1.0",[5924,5925,5926,5927,10425,10426,10427,10428,10429,10430,10431,10432],{"id":537,"slug":14661,"dossier":47,"summary":14662,"aliases":14663,"sourceIds":14666,"published":14667,"modified":14668,"checkedAt":7,"severity":14669,"references":14672,"versionKeys":14685,"packageCount":32,"repositoryCount":42},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[14664,14665],"CVE-2026-9856","PYSEC-2026-3929",[537,14665],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[14670],{"type":3555,"score":14671},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[14673,14675,14677,14679,14680,14682,14683],{"type":3490,"url":14674},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":3487,"url":14676},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":3487,"url":14678},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":3495,"url":3742},{"type":3487,"url":14681},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":3495,"url":4215},{"type":3490,"url":14684},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[3749,3750,3751,3752,3753,3754,3755,3756,3757,14459],{"id":538,"slug":14687,"dossier":47,"summary":14688,"aliases":14689,"sourceIds":14692,"published":14693,"modified":14694,"checkedAt":7,"severity":14695,"references":14700,"versionKeys":14715,"packageCount":32,"repositoryCount":3510},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[14690,14691],"CVE-2026-112902","PYSEC-2026-4363",[538,14691],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[14696,14698],{"type":3483,"score":14697},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3555,"score":14699},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[14701,14703,14705,14707,14709,14711,14713,14714],{"type":3593,"url":14702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":3490,"url":14704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":3487,"url":14706},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":3593,"url":14708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":3593,"url":14710},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":3487,"url":14712},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":3495,"url":3496},{"type":3490,"url":3498},[3500,3501,3502,3503,3504,3505,3506,3507,3508,3509],{"id":539,"slug":14717,"dossier":47,"summary":14718,"aliases":14719,"sourceIds":14722,"published":14723,"modified":14724,"checkedAt":7,"severity":14725,"references":14727,"versionKeys":14735,"packageCount":32,"repositoryCount":32},"ghsa-xvp8-3mhv-424c-5f064018","lxml-html-clean has \u003Cbase> tag injection through default Cleaner configuration",[14720,14721],"CVE-2026-28350","PYSEC-2026-2202",[539,14721],"2026-03-02T19:35:52Z","2026-09-10T03:50:41.927155700Z",[14726],{"type":3555,"score":10155},[14728,14730,14732,14734],{"type":3744,"url":14729},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-xvp8-3mhv-424c",{"type":3490,"url":14731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28350",{"type":3593,"url":14733},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F9c5612ca33b941eec4178abf8a5294b103403f34",{"type":3495,"url":5002},[5010],{"id":540,"slug":14737,"dossier":47,"summary":84,"aliases":14738,"sourceIds":14740,"published":14741,"modified":14742,"checkedAt":7,"severity":14743,"references":14745,"versionKeys":14751,"packageCount":32,"repositoryCount":885},"pysec-2025-183-08217171",[14739],"CVE-2025-45768",[540],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[14744],{"type":3555,"score":13090},[14746,14748,14750],{"type":3487,"url":14747},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3955,"url":14749},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3495,"url":3920},[3928,3930],{"id":541,"slug":14753,"dossier":47,"summary":84,"aliases":14754,"sourceIds":14757,"published":14758,"modified":14759,"checkedAt":7,"severity":14760,"references":14762,"versionKeys":14771,"packageCount":32,"repositoryCount":105},"pysec-2025-198-62b25ed4",[14755,14756],"BIT-pytorch-2025-46148","CVE-2025-46148",[541],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[14761],{"type":3555,"score":6365},[14763,14765,14767,14769],{"type":3490,"url":14764},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":3490,"url":14766},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3955,"url":14768},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":3593,"url":14770},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[4190,4191],{"id":542,"slug":14773,"dossier":47,"summary":84,"aliases":14774,"sourceIds":14777,"published":14778,"modified":14779,"checkedAt":7,"severity":14780,"references":14782,"versionKeys":14788,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[14775,14776],"BIT-pytorch-2025-46149","CVE-2025-46149",[542],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[14781],{"type":3555,"score":6365},[14783,14784,14786],{"type":3490,"url":14764},{"type":3955,"url":14785},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":3593,"url":14787},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[4191],{"id":543,"slug":14790,"dossier":47,"summary":84,"aliases":14791,"sourceIds":14794,"published":14795,"modified":14796,"checkedAt":7,"severity":14797,"references":14799,"versionKeys":14807,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[14792,14793],"BIT-pytorch-2025-46150","CVE-2025-46150",[543],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[14798],{"type":3555,"score":6365},[14800,14801,14803,14805],{"type":3490,"url":14764},{"type":3955,"url":14802},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3955,"url":14804},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":3593,"url":14806},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[4191],{"id":544,"slug":14809,"dossier":47,"summary":84,"aliases":14810,"sourceIds":14813,"published":14814,"modified":14815,"checkedAt":7,"severity":14816,"references":14818,"versionKeys":14824,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[14811,14812],"BIT-pytorch-2025-46152","CVE-2025-46152",[544],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[14817],{"type":3555,"score":3769},[14819,14820,14822],{"type":3490,"url":14764},{"type":3955,"url":14821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":3593,"url":14823},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[4191],{"id":545,"slug":14826,"dossier":47,"summary":84,"aliases":14827,"sourceIds":14830,"published":14831,"modified":14832,"checkedAt":7,"severity":14833,"references":14835,"versionKeys":14845,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[14828,14829],"BIT-pytorch-2025-46153","CVE-2025-46153",[545],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[14834],{"type":3555,"score":6365},[14836,14838,14839,14841,14843],{"type":3487,"url":14837},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":3490,"url":14764},{"type":3490,"url":14840},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3955,"url":14842},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":3593,"url":14844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[4191],{"id":546,"slug":14847,"dossier":47,"summary":84,"aliases":14848,"sourceIds":14851,"published":14852,"modified":14853,"checkedAt":7,"severity":14854,"references":14856,"versionKeys":14861,"packageCount":32,"repositoryCount":8674},"pysec-2025-203-2febb201",[14849,14850],"BIT-pytorch-2025-55551","CVE-2025-55551",[546],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[14855],{"type":3555,"score":3669},[14857,14859],{"type":3490,"url":14858},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3955,"url":14860},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[4190,4191,4192,6274,6275,6276],{"id":547,"slug":14863,"dossier":47,"summary":84,"aliases":14864,"sourceIds":14867,"published":14868,"modified":14869,"checkedAt":7,"severity":14870,"references":14872,"versionKeys":14876,"packageCount":32,"repositoryCount":8674},"pysec-2025-204-cdae47da",[14865,14866],"BIT-pytorch-2025-55552","CVE-2025-55552",[547],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[14871],{"type":3555,"score":3669},[14873,14874],{"type":3490,"url":14858},{"type":3955,"url":14875},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[4190,4191,4192,6274,6275,6276],{"id":548,"slug":14878,"dossier":47,"summary":84,"aliases":14879,"sourceIds":14882,"published":14883,"modified":14884,"checkedAt":7,"severity":14885,"references":14887,"versionKeys":14893,"packageCount":32,"repositoryCount":885},"pysec-2025-205-fd5e58fd",[14880,14881],"BIT-pytorch-2025-55553","CVE-2025-55553",[548],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[14886],{"type":3555,"score":3669},[14888,14889,14891],{"type":3490,"url":14858},{"type":3955,"url":14890},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":3593,"url":14892},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[4190,4191,4192],{"id":549,"slug":14895,"dossier":47,"summary":84,"aliases":14896,"sourceIds":14899,"published":14900,"modified":14901,"checkedAt":7,"severity":14902,"references":14904,"versionKeys":14908,"packageCount":32,"repositoryCount":8674},"pysec-2025-206-58322476",[14897,14898],"BIT-pytorch-2025-55554","CVE-2025-55554",[549],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[14903],{"type":3555,"score":3769},[14905,14906],{"type":3490,"url":14858},{"type":3955,"url":14907},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[4190,4191,4192,6274,6275,6276],{"id":550,"slug":14910,"dossier":47,"summary":84,"aliases":14911,"sourceIds":14914,"published":14915,"modified":14916,"checkedAt":7,"severity":14917,"references":14919,"versionKeys":14925,"packageCount":32,"repositoryCount":885},"pysec-2025-207-2abef3fc",[14912,14913],"BIT-pytorch-2025-55557","CVE-2025-55557",[550],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[14918],{"type":3555,"score":3669},[14920,14921,14923],{"type":3490,"url":14858},{"type":3955,"url":14922},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":3593,"url":14924},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[4190,4191,4192],{"id":551,"slug":14927,"dossier":47,"summary":84,"aliases":14928,"sourceIds":14931,"published":14932,"modified":14933,"checkedAt":7,"severity":14934,"references":14936,"versionKeys":14942,"packageCount":32,"repositoryCount":885},"pysec-2025-208-6e93fe9d",[14929,14930],"BIT-pytorch-2025-55558","CVE-2025-55558",[551],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[14935],{"type":3555,"score":3669},[14937,14938,14940],{"type":3490,"url":14858},{"type":3955,"url":14939},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":3593,"url":14941},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[4190,4191,4192],{"id":552,"slug":14944,"dossier":47,"summary":84,"aliases":14945,"sourceIds":14948,"published":14949,"modified":14950,"checkedAt":7,"severity":14951,"references":14953,"versionKeys":14959,"packageCount":32,"repositoryCount":885},"pysec-2025-209-e6f352b0",[14946,14947],"BIT-pytorch-2025-55560","CVE-2025-55560",[552],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[14952],{"type":3555,"score":3669},[14954,14955,14957],{"type":3490,"url":14858},{"type":3955,"url":14956},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":3593,"url":14958},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[4190,4191,4192],{"id":553,"slug":14961,"dossier":47,"summary":84,"aliases":14962,"sourceIds":14964,"published":14965,"modified":14966,"checkedAt":7,"severity":14967,"references":14969,"versionKeys":14972,"packageCount":32,"repositoryCount":847},"pysec-2025-211-d8bd15de",[14963],"CVE-2025-14920",[553],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[14968],{"type":3555,"score":3735},[14970],{"type":3490,"url":14971},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[3749,3750,3751,3752,3753],{"id":554,"slug":14974,"dossier":47,"summary":84,"aliases":14975,"sourceIds":14977,"published":14978,"modified":14979,"checkedAt":7,"severity":14980,"references":14982,"versionKeys":14985,"packageCount":32,"repositoryCount":847},"pysec-2025-212-a011b97d",[14976],"CVE-2025-14921",[554],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[14981],{"type":3555,"score":3735},[14983],{"type":3490,"url":14984},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[3749,3750,3751,3752,3753],{"id":555,"slug":14987,"dossier":47,"summary":84,"aliases":14988,"sourceIds":14990,"published":14991,"modified":14992,"checkedAt":7,"severity":14993,"references":14995,"versionKeys":14998,"packageCount":32,"repositoryCount":847},"pysec-2025-213-9043dc9b",[14989],"CVE-2025-14924",[555],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[14994],{"type":3555,"score":3735},[14996],{"type":3490,"url":14997},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[3749,3750,3751,3752,3753],{"id":556,"slug":15000,"dossier":47,"summary":84,"aliases":15001,"sourceIds":15003,"published":15004,"modified":15005,"checkedAt":7,"severity":15006,"references":15008,"versionKeys":15011,"packageCount":32,"repositoryCount":847},"pysec-2025-214-eb241255",[15002],"CVE-2025-14926",[556],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[15007],{"type":3555,"score":3735},[15009],{"type":3490,"url":15010},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[3749,3750,3751,3752,3753],{"id":557,"slug":15013,"dossier":47,"summary":84,"aliases":15014,"sourceIds":15016,"published":15017,"modified":15018,"checkedAt":7,"severity":15019,"references":15021,"versionKeys":15024,"packageCount":32,"repositoryCount":847},"pysec-2025-215-6064f491",[15015],"CVE-2025-14927",[557],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[15020],{"type":3555,"score":3735},[15022],{"type":3490,"url":15023},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[3749,3750,3751,3752,3753],{"id":558,"slug":15026,"dossier":47,"summary":84,"aliases":15027,"sourceIds":15029,"published":15030,"modified":15031,"checkedAt":7,"severity":15032,"references":15034,"versionKeys":15037,"packageCount":32,"repositoryCount":847},"pysec-2025-216-5708ed01",[15028],"CVE-2025-14928",[558],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[15033],{"type":3555,"score":3735},[15035],{"type":3490,"url":15036},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[3749,3750,3751,3752,3753],{"id":559,"slug":15039,"dossier":47,"summary":84,"aliases":15040,"sourceIds":15042,"published":15043,"modified":15044,"checkedAt":7,"severity":15045,"references":15047,"versionKeys":15050,"packageCount":32,"repositoryCount":66},"pysec-2025-217-2c1ad388",[15041],"CVE-2025-14929",[559],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[15046],{"type":3555,"score":3735},[15048],{"type":3490,"url":15049},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[3749,3750,3751,3752,3753,3754,3755,3756,3757],{"id":560,"slug":15052,"dossier":47,"summary":84,"aliases":15053,"sourceIds":15055,"published":15056,"modified":15057,"checkedAt":7,"severity":15058,"references":15060,"versionKeys":15063,"packageCount":32,"repositoryCount":800},"pysec-2025-218-39811fc3",[15054],"CVE-2025-14930",[560],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[15059],{"type":3555,"score":3735},[15061],{"type":3490,"url":15062},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[3749,3750,3751,3752,3753,3754],{"id":561,"slug":15065,"dossier":47,"summary":84,"aliases":15066,"sourceIds":15069,"published":15070,"modified":15071,"checkedAt":7,"severity":15072,"references":15074,"versionKeys":15085,"packageCount":32,"repositoryCount":3723},"pysec-2026-139-96951ff6",[15067,15068],"BIT-pytorch-2026-4538","CVE-2026-4538",[561],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[15073],{"type":3555,"score":6628},[15075,15077,15079,15081,15083],{"type":3487,"url":15076},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":3490,"url":15078},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":3490,"url":15080},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3955,"url":15082},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":3593,"url":15084},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[13170,4190,4191,4192,6274,6275,6276,6277,6278,6279,6280],{"id":562,"slug":15087,"dossier":47,"summary":84,"aliases":15088,"sourceIds":15091,"published":15092,"modified":15093,"checkedAt":7,"severity":15094,"references":15096,"versionKeys":15101,"packageCount":32,"repositoryCount":105},"pysec-2026-2120-174938a3",[15089,15090],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[562],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[15095],{"type":3555,"score":5337},[15097,15099],{"type":3490,"url":15098},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":3593,"url":15100},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[4290,4291],{"id":563,"slug":15103,"dossier":47,"summary":84,"aliases":15104,"sourceIds":15106,"published":15107,"modified":15108,"checkedAt":7,"severity":15109,"references":15111,"versionKeys":15116,"packageCount":32,"repositoryCount":32},"pysec-2026-598-ff2a157b",[15105],"CVE-2026-22218",[563],"2026-01-20T00:15:48.910Z","2026-07-02T08:45:06.090293533Z",[15110],{"type":3555,"score":6921},[15112,15113,15115],{"type":3490,"url":3847},{"type":3490,"url":15114},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-arbitrary-file-read-via-project-element",{"type":3744,"url":3851},[3857],{"id":564,"slug":15118,"dossier":47,"summary":84,"aliases":15119,"sourceIds":15121,"published":15122,"modified":15123,"checkedAt":7,"severity":15124,"references":15126,"versionKeys":15129,"packageCount":32,"repositoryCount":857},"pysec-2026-99-2c63e84f",[15120],"CVE-2026-0848",[564],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[15125],{"type":3555,"score":7290},[15127],{"type":3744,"url":15128},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3960,3961],1794724252564]