[{"data":1,"prerenderedAt":5934},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5142":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":248,"related":252},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":108,"artifactResolvedComponentCount":108,"exactManifestPinCount":37,"packageCount":109,"ecosystems":110,"aiPackageCount":32,"licenseExpressionCount":35,"unknownLicensePackageCount":37,"advisoryIds":112,"advisoryCount":246,"providers":247},"opencode:5142","opencode-5142",5142,"strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition","1dd9cd8ca823a7998b729adce6957848cf241d54","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fcommit\u002F1dd9cd8ca823a7998b729adce6957848cf241d54","2025-05-19T12:18:40.157Z","2025-05-19T12:51:35.000Z",{"complete":89,"entryCount":90,"truncated":45},true,69,[92,100],{"path":55,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"poetry-lock","681193f56a8b37b97336b2682fc1147ac3bdab1f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fpoetry.lock","c489b7b61f52a098139ff30c50edcca0e32753b4b014f22e0b51d2e97c950433",258698,"parsed",102,{"path":101,"kind":102,"blobSha":103,"sourceUrl":104,"commitSha":84,"contentSha256":105,"byteCount":106,"state":98,"componentCount":107},"sbom.json","sbom-json","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json","4352d1512c073ad9072f4876774e7e60b4d7287e992b698284e6e3054e972883",531903,222,324,224,[111],"pypi",[113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245],"GHSA-248v-346w-9cwc","GHSA-24qx-w28j-9m6p","GHSA-2599-h6xx-hpxp","GHSA-29vq-49wr-vm6x","GHSA-2g68-c3qc-8985","GHSA-2hm2-hc3v-44h9","GHSA-2qfp-q593-8484","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-37w4-hwhx-4rc4","GHSA-38jv-5279-wg99","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4c99-qj7h-p3vg","GHSA-4j32-57v6-6g45","GHSA-4x4j-2g7c-83w6","GHSA-4xh5-x5gv-qwph","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-5789-5fc7-67v3","GHSA-58cw-g322-p94v","GHSA-58pv-8j8x-9vj2","GHSA-58qw-9mgm-455v","GHSA-597g-3phw-6986","GHSA-5mrq-x3x5-8v8f","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-6r8x-57c9-28j4","GHSA-6v7p-g79w-8964","GHSA-6vgw-5pg2-w6jp","GHSA-6w46-j5rx-g56g","GHSA-73h3-mf4w-8647","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7jqv-fw35-gmx9","GHSA-836r-79rf-4m37","GHSA-87hc-h4r5-73f7","GHSA-897w-fcg9-f6xj","GHSA-89vp-jrxv-24w8","GHSA-8c25-4j27-2rv3","GHSA-8g87-j6q8-g93x","GHSA-8mp2-v27r-99xp","GHSA-8mpj-m6qm-5qr8","GHSA-8rfp-98v4-mmr6","GHSA-8v84-f9pq-wr9x","GHSA-983w-rhvv-gwmv","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9q39-rmj3-p4r2","GHSA-9wx4-h78v-vm56","GHSA-c8j7-8cv4-2xmq","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f9vj-2wh5-fj8j","GHSA-fcw5-x6j4-ccmp","GHSA-ffq3-xpv3-j92q","GHSA-fj7v-r99m-22gq","GHSA-g6cj-pr64-35w5","GHSA-g97x-gvcm-x72h","GHSA-gc5v-m9x4-r6x2","GHSA-gj48-438w-jh9v","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gx64-gj6p-pc4c","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h5v5-8746-g7mm","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-jhhc-3hcp-qhm5","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jp4c-xjxw-mgf9","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mq26-g339-26xf","GHSA-mqcg-5x36-vfcg","GHSA-p423-j2cm-9vmq","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pppj-hq3g-57pj","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-qcq2-496w-v96p","GHSA-qfrw-5rxm-mhh2","GHSA-qh7q-6qm3-653w","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-r4rv-85jg-w4mf","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rch3-82jr-f9w9","GHSA-rgxp-2hwp-jwgg","GHSA-v87v-83h2-53w7","GHSA-vfmq-68hx-4jfw","GHSA-vjc4-5qp5-m44j","GHSA-vmhf-c436-hxj4","GHSA-vqfr-h8mv-ghfj","GHSA-vvfj-2jqx-52jm","GHSA-w853-jp5j-5j7f","GHSA-wf93-45jw-7689","GHSA-whj4-6x5x-4v2j","GHSA-whvh-wf3x-g77j","GHSA-wjx4-4jcj-g98j","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xm59-rqc7-hhvf","GHSA-xrvj-v92f-53gj","PYSEC-2026-2132","PYSEC-2026-2208","PYSEC-2026-2209","PYSEC-2026-2532","PYSEC-2026-3472",133,[],{"files":249,"occurrenceCount":108},[250,251],{"path":55,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"path":101,"kind":102,"blobSha":103,"sourceUrl":104,"commitSha":84,"contentSha256":105,"byteCount":106,"state":98,"componentCount":107},{"packages":253,"vulnerabilities":2261},[254,266,278,288,297,307,318,328,338,347,356,365,375,384,393,402,411,420,430,439,448,457,466,476,485,494,503,512,521,530,539,548,557,565,574,584,593,602,611,620,629,638,647,656,664,673,682,691,700,709,718,727,736,745,754,763,773,782,792,801,810,819,828,837,846,855,864,873,882,891,900,909,918,927,935,944,953,962,971,981,990,999,1008,1016,1025,1034,1043,1051,1060,1069,1078,1087,1096,1104,1113,1122,1131,1140,1150,1158,1166,1175,1184,1192,1201,1210,1218,1227,1236,1245,1254,1263,1271,1280,1289,1298,1307,1316,1326,1335,1344,1353,1361,1370,1379,1388,1397,1406,1415,1423,1432,1441,1450,1459,1468,1477,1486,1495,1504,1513,1522,1531,1541,1550,1558,1567,1575,1583,1592,1601,1610,1618,1627,1635,1644,1653,1663,1672,1681,1689,1698,1706,1715,1724,1733,1742,1754,1762,1771,1780,1789,1798,1807,1816,1825,1834,1843,1851,1859,1868,1877,1886,1895,1904,1913,1922,1931,1940,1949,1958,1968,1976,1984,1993,2002,2010,2018,2026,2034,2043,2052,2060,2068,2077,2086,2095,2104,2112,2121,2130,2139,2148,2157,2166,2174,2182,2190,2199,2208,2217,2226,2235,2243,2252],{"id":255,"slug":256,"identity":257,"label":258,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":259,"versions":262,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":265},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[260,261],"BSD-3-Clause","non-standard",[263],"1.6.1",2,[55,101],{"id":267,"slug":268,"identity":269,"label":270,"aiRelevant":45,"provider":82,"advisoryCount":271,"licenseExpressions":272,"versions":275,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":277},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[273,274],"HPND","MIT-CMU",[276],"11.2.1",[55,101],{"id":279,"slug":280,"identity":281,"label":282,"aiRelevant":45,"provider":82,"advisoryCount":283,"licenseExpressions":284,"versions":285,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":287},"package:pypi:mistune","mistune-883ae9a9","pypi:mistune","mistune",16,[260],[286],"3.1.3",[101],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":293,"versions":294,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":296},"package:pypi:jupyterlab","jupyterlab-da634f79","pypi:jupyterlab","jupyterlab",[261],[295],"4.4.0",[101],{"id":298,"slug":299,"identity":300,"label":301,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":302,"versions":304,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":306},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[303],"Apache-2.0",[305],"6.4.2",[101],{"id":308,"slug":309,"identity":310,"label":311,"aiRelevant":45,"provider":82,"advisoryCount":312,"licenseExpressions":313,"versions":315,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":317},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[314],"Apache-2.0 OR BSD-3-Clause",[316],"44.0.0",[101],{"id":319,"slug":320,"identity":321,"label":322,"aiRelevant":45,"provider":82,"advisoryCount":323,"licenseExpressions":324,"versions":325,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":327},"package:pypi:jupyter-server","jupyter-server-bda3ce93","pypi:jupyter-server","jupyter-server",7,[261],[326],"2.15.0",[101],{"id":329,"slug":330,"identity":331,"label":332,"aiRelevant":45,"provider":82,"advisoryCount":323,"licenseExpressions":333,"versions":335,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":337},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[334],"MIT",[336],"2.4.0",[55,101],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":45,"provider":82,"advisoryCount":64,"licenseExpressions":343,"versions":344,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":346},"package:pypi:pip","pip-2911c768","pypi:pip","pip",[334],[345],"22.0.2",[101],{"id":348,"slug":349,"identity":350,"label":351,"aiRelevant":45,"provider":82,"advisoryCount":64,"licenseExpressions":352,"versions":353,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":355},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[260,261],[354],"3.0.6",[55,101],{"id":357,"slug":358,"identity":359,"label":360,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":361,"versions":362,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":364},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[260,261],[363],"3.1.6",[55,101],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":45,"provider":82,"advisoryCount":370,"licenseExpressions":371,"versions":372,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":374},"package:pypi:nbconvert","nbconvert-a72151db","pypi:nbconvert","nbconvert",3,[261],[373],"7.16.6",[101],{"id":376,"slug":377,"identity":378,"label":379,"aiRelevant":45,"provider":82,"advisoryCount":370,"licenseExpressions":380,"versions":381,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":383},"package:pypi:notebook","notebook-9683036a","pypi:notebook","notebook",[261],[382],"7.0.7",[101],{"id":385,"slug":386,"identity":387,"label":388,"aiRelevant":45,"provider":82,"advisoryCount":370,"licenseExpressions":389,"versions":390,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":392},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[303],[391],"2.32.3",[55,101],{"id":394,"slug":395,"identity":396,"label":397,"aiRelevant":45,"provider":82,"advisoryCount":370,"licenseExpressions":398,"versions":399,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":401},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[334],[400],"80.0.1",[55,101],{"id":403,"slug":404,"identity":405,"label":406,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":407,"versions":408,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":410},"package:pypi:bleach","bleach-b1747264","pypi:bleach","bleach",[261],[409],"6.2.0",[101],{"id":412,"slug":413,"identity":414,"label":415,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":416,"versions":417,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":419},"package:pypi:dulwich","dulwich-a07208e4","pypi:dulwich","dulwich",[261],[418],"0.22.7",[101],{"id":421,"slug":422,"identity":423,"label":424,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":425,"versions":427,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":429},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[334,426],"Unlicense",[428],"3.18.0",[55,101],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":435,"versions":436,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":438},"package:pypi:poetry","poetry-b3f02d83","pypi:poetry","poetry",[334],[437],"2.0.1",[101],{"id":440,"slug":441,"identity":442,"label":443,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":444,"versions":445,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":447},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[334],[446],"2.6",[101],{"id":449,"slug":450,"identity":451,"label":452,"aiRelevant":45,"provider":82,"advisoryCount":264,"licenseExpressions":453,"versions":454,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":456},"package:pypi:weasyprint","weasyprint-637c63f5","pypi:weasyprint","weasyprint",[261],[455],"64.1",[55,101],{"id":458,"slug":459,"identity":460,"label":461,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":462,"versions":463,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":465},"package:pypi:brotli","brotli-9f215eb0","pypi:brotli","brotli",[334],[464],"1.1.0",[55,101],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":471,"versions":473,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":475},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[472],"MPL-2.0",[474],"2025.4.26",[55,101],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":481,"versions":482,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":484},"package:pypi:click","click-ef97f731","pypi:click","click",[260,261],[483],"8.1.8",[55,101],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":490,"versions":491,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":493},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[260,261],[492],"3.0.3",[55,101],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":499,"versions":500,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":502},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[334],[501],"4.57.0",[55,101],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":508,"versions":509,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":511},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[334],[510],"0.14.0",[101],{"id":513,"slug":514,"identity":515,"label":516,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":517,"versions":518,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":520},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[260,261],[519],"3.10",[55,101],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":526,"versions":527,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":529},"package:pypi:jaraco-context","jaraco-context-99c022f5","pypi:jaraco-context","jaraco-context",[334],[528],"6.0.1",[101],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":535,"versions":536,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":538},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[260,261],[537],"5.7.2",[101],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":544,"versions":545,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":547},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[260],[546],"5.4.0",[101],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":553,"versions":554,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":556},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[260],[555],"3.8",[101],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":562,"versions":563,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":564},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[303],[464],[55,101],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":570,"versions":571,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":573},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[303,261],[572],"20.0.0",[55,101],{"id":575,"slug":576,"identity":577,"label":578,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":579,"versions":581,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":583},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[580],"BSD-2-Clause",[582],"2.19.1",[55,101],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":589,"versions":590,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":592},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[334],[591],"7.4.4",[55,101],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":598,"versions":599,"dossier":89,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":601},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[334],[600],"20.30.0",[55,101],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":607,"versions":608,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":610},"package:pypi:accessible-pygments","accessible-pygments-9487de96","pypi:accessible-pygments","accessible-pygments",[260],[609],"0.0.5",[101],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":616,"versions":617,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":619},"package:pypi:adjusttext","adjusttext-93463b56","pypi:adjusttext","adjusttext",[334],[618],"1.3.0",[55,101],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":625,"versions":626,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":628},"package:pypi:alabaster","alabaster-b25f55b1","pypi:alabaster","alabaster",[261],[627],"1.0.0",[55,101],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":634,"versions":635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":637},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[334],[636],"4.9.0",[101],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":643,"versions":644,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":646},"package:pypi:argon2-cffi","argon2-cffi-0666afdc","pypi:argon2-cffi","argon2-cffi",[334],[645],"23.1.0",[101],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":652,"versions":653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":655},"package:pypi:argon2-cffi-bindings","argon2-cffi-bindings-8c6d8583","pypi:argon2-cffi-bindings","argon2-cffi-bindings",[334],[654],"21.2.0",[101],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":661,"versions":662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":663},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[261],[618],[101],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":669,"versions":670,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":672},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[303],[671],"3.0.0",[101],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":678,"versions":679,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":681},"package:pypi:async-lru","async-lru-57db467a","pypi:async-lru","async-lru",[334],[680],"2.0.5",[101],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":687,"versions":688,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":690},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[334],[689],"25.3.0",[101],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":696,"versions":697,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":699},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[260],[698],"2.17.0",[55,101],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":705,"versions":706,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":708},"package:pypi:backports-tarfile","backports-tarfile-4764d5a8","pypi:backports-tarfile","backports-tarfile",[334],[707],"1.2.0",[101],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":714,"versions":715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":717},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[334],[716],"4.13.3",[101],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":723,"versions":724,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":726},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[334],[725],"1.9.0",[55,101],{"id":728,"slug":729,"identity":730,"label":731,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":732,"versions":733,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":735},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[580],[734],"5.0",[101],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":741,"versions":742,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":744},"package:pypi:brotlicffi","brotlicffi-2b85a746","pypi:brotlicffi","brotlicffi",[334],[743],"1.1.0.0",[55],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":750,"versions":751,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":753},"package:pypi:build","build-a517ae38","pypi:build","build",[334],[752],"1.2.2.post1",[101],{"id":755,"slug":756,"identity":757,"label":758,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":759,"versions":760,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":762},"package:pypi:cachecontrol","cachecontrol-f48df14f","pypi:cachecontrol","cachecontrol",[261],[761],"0.14.2",[101],{"id":764,"slug":765,"identity":766,"label":767,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":768,"versions":770,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":772},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[334,769],"MIT-0",[771],"1.17.1",[55,101],{"id":774,"slug":775,"identity":776,"label":777,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":778,"versions":779,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":781},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[334],[780],"3.4.0",[55,101],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":787,"versions":789,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":791},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[788,261],"0BSD",[790],"5.2.0",[101],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":797,"versions":798,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":800},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[334],[799],"3.4.1",[55,101],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":806,"versions":807,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":809},"package:pypi:cleo","cleo-5786f647","pypi:cleo","cleo",[334],[808],"2.1.0",[101],{"id":811,"slug":812,"identity":813,"label":814,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":815,"versions":816,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":818},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[261],[817],"0.4.6",[55],{"id":820,"slug":821,"identity":822,"label":823,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":824,"versions":825,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":827},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[261],[826],"0.2.2",[101],{"id":829,"slug":830,"identity":831,"label":832,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":833,"versions":834,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":836},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[261],[835],"1.3.2",[55,101],{"id":838,"slug":839,"identity":840,"label":841,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":842,"versions":843,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":845},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[303],[844],"7.8.0",[55,101],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":851,"versions":852,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":854},"package:pypi:crashtest","crashtest-ae75ce65","pypi:crashtest","crashtest",[334],[853],"0.4.1",[101],{"id":856,"slug":857,"identity":858,"label":859,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":860,"versions":861,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":863},"package:pypi:cssselect2","cssselect2-87d00b2b","pypi:cssselect2","cssselect2",[261],[862],"0.8.0",[55,101],{"id":865,"slug":866,"identity":867,"label":868,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":869,"versions":870,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":872},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[261],[871],"0.12.1",[55,101],{"id":874,"slug":875,"identity":876,"label":877,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":878,"versions":879,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":881},"package:pypi:cyclonedx-bom","cyclonedx-bom-120c32c1","pypi:cyclonedx-bom","cyclonedx-bom",[303],[880],"6.0.0",[101],{"id":883,"slug":884,"identity":885,"label":886,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":887,"versions":888,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":890},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[303],[889],"10.0.0",[101],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":896,"versions":897,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":899},"package:pypi:dash","dash-e3e5697e","pypi:dash","dash",[334],[898],"2.18.2",[55,101],{"id":901,"slug":902,"identity":903,"label":904,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":905,"versions":906,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":908},"package:pypi:dash-ag-grid","dash-ag-grid-743015a6","pypi:dash-ag-grid","dash-ag-grid",[334],[907],"31.3.1",[55,101],{"id":910,"slug":911,"identity":912,"label":913,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":914,"versions":915,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":917},"package:pypi:dash-bootstrap-components","dash-bootstrap-components-88bc9fcb","pypi:dash-bootstrap-components","dash-bootstrap-components",[261],[916],"1.7.1",[55,101],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":923,"versions":924,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":926},"package:pypi:dash-core-components","dash-core-components-b991ac64","pypi:dash-core-components","dash-core-components",[334],[925],"2.0.0",[55,101],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":932,"versions":933,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":934},"package:pypi:dash-html-components","dash-html-components-e57cf97c","pypi:dash-html-components","dash-html-components",[334],[925],[55,101],{"id":936,"slug":937,"identity":938,"label":939,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":940,"versions":941,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":943},"package:pypi:dash-table","dash-table-7ee8ce01","pypi:dash-table","dash-table",[334],[942],"5.0.0",[55,101],{"id":945,"slug":946,"identity":947,"label":948,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":949,"versions":950,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":952},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[334],[951],"1.8.13",[101],{"id":954,"slug":955,"identity":956,"label":957,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":958,"versions":959,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":961},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[580,261],[960],"5.2.1",[101],{"id":963,"slug":964,"identity":965,"label":966,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":967,"versions":968,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":970},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[261],[969],"0.7.1",[101],{"id":972,"slug":973,"identity":974,"label":975,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":976,"versions":978,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":980},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[977],"PSF-2.0",[979],"0.3.9",[55,101],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":986,"versions":987,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":989},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[261],[988],"0.21.2",[55,101],{"id":991,"slug":992,"identity":993,"label":994,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":995,"versions":996,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":998},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[334],[997],"1.2.2",[55,101],{"id":1000,"slug":1001,"identity":1002,"label":1003,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1004,"versions":1005,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1007},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[334],[1006],"2.2.0",[101],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1013,"versions":1014,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1015},"package:pypi:fastexcel","fastexcel-597156fa","pypi:fastexcel","fastexcel",[334],[871],[55,101],{"id":1017,"slug":1018,"identity":1019,"label":1020,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1021,"versions":1022,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1024},"package:pypi:fastjsonschema","fastjsonschema-8288c29a","pypi:fastjsonschema","fastjsonschema",[261],[1023],"2.21.1",[101],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1030,"versions":1031,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1033},"package:pypi:fpdf","fpdf-f7cb5b3b","pypi:fpdf","fpdf",[261],[1032],"1.7.2",[101],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1039,"versions":1040,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1042},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[261],[1041],"1.5.1",[101],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1048,"versions":1049,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1050},"package:pypi:ghp-import","ghp-import-17055206","pypi:ghp-import","ghp-import",[261],[808],[101],{"id":1052,"slug":1053,"identity":1054,"label":1055,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1056,"versions":1057,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1059},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[260],[1058],"1.0.7",[101],{"id":1061,"slug":1062,"identity":1063,"label":1064,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1065,"versions":1066,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1068},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[260],[1067],"0.28.1",[101],{"id":1070,"slug":1071,"identity":1072,"label":1073,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1074,"versions":1075,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1077},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[334],[1076],"2.6.10",[55,101],{"id":1079,"slug":1080,"identity":1081,"label":1082,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1083,"versions":1084,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1086},"package:pypi:imagesize","imagesize-6607709a","pypi:imagesize","imagesize",[334],[1085],"1.4.1",[55,101],{"id":1088,"slug":1089,"identity":1090,"label":1091,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1092,"versions":1093,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1095},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[303,261],[1094],"8.7.0",[55,101],{"id":1097,"slug":1098,"identity":1099,"label":1100,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1101,"versions":1102,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1103},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[334],[808],[55,101],{"id":1105,"slug":1106,"identity":1107,"label":1108,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1109,"versions":1110,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1112},"package:pypi:installer","installer-b3de742e","pypi:installer","installer",[334],[1111],"0.7.0",[101],{"id":1114,"slug":1115,"identity":1116,"label":1117,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1118,"versions":1119,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1121},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[260,261],[1120],"6.29.5",[101],{"id":1123,"slug":1124,"identity":1125,"label":1126,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1127,"versions":1128,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1130},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[260],[1129],"8.34.0",[101],{"id":1132,"slug":1133,"identity":1134,"label":1135,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1136,"versions":1137,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1139},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[260],[1138],"8.1.5",[101],{"id":1141,"slug":1142,"identity":1143,"label":1144,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1145,"versions":1147,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1149},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[1146],"ISC",[1148],"20.11.0",[101],{"id":1151,"slug":1152,"identity":1153,"label":1154,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1155,"versions":1156,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1157},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[260,261],[1006],[55,101],{"id":1159,"slug":1160,"identity":1161,"label":1162,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1163,"versions":1164,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1165},"package:pypi:jaraco-classes","jaraco-classes-f6f93091","pypi:jaraco-classes","jaraco-classes",[334],[780],[101],{"id":1167,"slug":1168,"identity":1169,"label":1170,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1171,"versions":1172,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1174},"package:pypi:jaraco-functools","jaraco-functools-96278cbc","pypi:jaraco-functools","jaraco-functools",[334],[1173],"4.1.0",[101],{"id":1176,"slug":1177,"identity":1178,"label":1179,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1180,"versions":1181,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1183},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[334],[1182],"0.19.2",[101],{"id":1185,"slug":1186,"identity":1187,"label":1188,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1189,"versions":1190,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1191},"package:pypi:jeepney","jeepney-898410ff","pypi:jeepney","jeepney",[334],[862],[101],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1197,"versions":1198,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1200},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[260],[1199],"1.4.2",[55,101],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1206,"versions":1207,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1209},"package:pypi:json5","json5-79be3697","pypi:json5","json5",[261],[1208],"0.12.0",[101],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1215,"versions":1216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1217},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[261],[671],[101],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1223,"versions":1224,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1226},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[334],[1225],"4.23.0",[101],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1232,"versions":1233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1235},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[334],[1234],"2025.4.1",[101],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1241,"versions":1242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1244},"package:pypi:jupyter","jupyter-cfc2388a","pypi:jupyter","jupyter",[261],[1243],"1.1.1",[101],{"id":1246,"slug":1247,"identity":1248,"label":1249,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1250,"versions":1251,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1253},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[261],[1252],"8.6.3",[101],{"id":1255,"slug":1256,"identity":1257,"label":1258,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1259,"versions":1260,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1262},"package:pypi:jupyter-console","jupyter-console-fe43250b","pypi:jupyter-console","jupyter-console",[261],[1261],"6.6.3",[101],{"id":1264,"slug":1265,"identity":1266,"label":1267,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1268,"versions":1269,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1270},"package:pypi:jupyter-events","jupyter-events-f8263fc3","pypi:jupyter-events","jupyter-events",[261],[1208],[101],{"id":1272,"slug":1273,"identity":1274,"label":1275,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1276,"versions":1277,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1279},"package:pypi:jupyter-lsp","jupyter-lsp-e5008e78","pypi:jupyter-lsp","jupyter-lsp",[260],[1278],"2.2.5",[101],{"id":1281,"slug":1282,"identity":1283,"label":1284,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1285,"versions":1286,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1288},"package:pypi:jupyter-server-terminals","jupyter-server-terminals-908697b8","pypi:jupyter-server-terminals","jupyter-server-terminals",[261],[1287],"0.5.3",[101],{"id":1290,"slug":1291,"identity":1292,"label":1293,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1294,"versions":1295,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1297},"package:pypi:jupyterlab-pygments","jupyterlab-pygments-f3159f9e","pypi:jupyterlab-pygments","jupyterlab-pygments",[261],[1296],"0.3.0",[101],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1303,"versions":1304,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1306},"package:pypi:jupyterlab-server","jupyterlab-server-87bbeff5","pypi:jupyterlab-server","jupyterlab-server",[261],[1305],"2.27.3",[101],{"id":1308,"slug":1309,"identity":1310,"label":1311,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1312,"versions":1313,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1315},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[260,261],[1314],"3.0.13",[101],{"id":1317,"slug":1318,"identity":1319,"label":1320,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1321,"versions":1322,"dossier":45,"occurrenceCount":370,"directOccurrenceCount":37,"evidenceFiles":1325},"package:pypi:kaleido","kaleido-d94ddeb6","pypi:kaleido","kaleido",[334],[1323,1324],"0.1.0.post1","0.2.1",[55,101],{"id":1327,"slug":1328,"identity":1329,"label":1330,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1331,"versions":1332,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1334},"package:pypi:keyring","keyring-1f591b74","pypi:keyring","keyring",[334],[1333],"25.6.0",[101],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1340,"versions":1341,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1343},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[261],[1342],"1.4.8",[55,101],{"id":1345,"slug":1346,"identity":1347,"label":1348,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1349,"versions":1350,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1352},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[303],[1351],"30.4.1",[101],{"id":1354,"slug":1355,"identity":1356,"label":1357,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1358,"versions":1359,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1360},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[334],[671],[55,101],{"id":1362,"slug":1363,"identity":1364,"label":1365,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1366,"versions":1367,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1369},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[260,261],[1368],"3.0.2",[55,101],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1375,"versions":1376,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1378},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[261],[1377],"3.10.1",[55,101],{"id":1380,"slug":1381,"identity":1382,"label":1383,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1384,"versions":1385,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1387},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[260,261],[1386],"0.1.7",[101],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1393,"versions":1394,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1396},"package:pypi:mdit-py-plugins","mdit-py-plugins-79000951","pypi:mdit-py-plugins","mdit-py-plugins",[334],[1395],"0.4.2",[55,101],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1402,"versions":1403,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1405},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[334],[1404],"0.1.2",[55,101],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1411,"versions":1412,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1414},"package:pypi:mergedeep","mergedeep-77a23f49","pypi:mergedeep","mergedeep",[334],[1413],"1.3.4",[101],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1420,"versions":1421,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1422},"package:pypi:mkdocs","mkdocs-a74efb5d","pypi:mkdocs","mkdocs",[580],[263],[101],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1428,"versions":1429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1431},"package:pypi:mkdocs-get-deps","mkdocs-get-deps-504099a6","pypi:mkdocs-get-deps","mkdocs-get-deps",[334],[1430],"0.2.0",[101],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1437,"versions":1438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1440},"package:pypi:more-itertools","more-itertools-fa46f32b","pypi:more-itertools","more-itertools",[334],[1439],"10.6.0",[101],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1446,"versions":1447,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1449},"package:pypi:myst-parser","myst-parser-af46368e","pypi:myst-parser","myst-parser",[334],[1448],"4.0.1",[55,101],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1455,"versions":1456,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1458},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[334,261],[1457],"1.37.1",[55,101],{"id":1460,"slug":1461,"identity":1462,"label":1463,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1464,"versions":1465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1467},"package:pypi:nbclient","nbclient-e201d8f1","pypi:nbclient","nbclient",[261],[1466],"0.10.2",[101],{"id":1469,"slug":1470,"identity":1471,"label":1472,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1473,"versions":1474,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1476},"package:pypi:nbformat","nbformat-2d86904f","pypi:nbformat","nbformat",[261],[1475],"5.10.4",[101],{"id":1478,"slug":1479,"identity":1480,"label":1481,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1482,"versions":1483,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1485},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[261],[1484],"1.6.0",[55,101],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1491,"versions":1492,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1494},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[261],[1493],"1.9.1",[55,101],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1500,"versions":1501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1503},"package:pypi:notebook-shim","notebook-shim-6d442652","pypi:notebook-shim","notebook-shim",[261],[1502],"0.2.4",[101],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1509,"versions":1511,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1512},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1510,261],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1278],[55,101],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1518,"versions":1519,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1521},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[303],[1520],"7.7.0",[101],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1527,"versions":1528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1530},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[334],[1529],"0.16.0",[101],{"id":1532,"slug":1533,"identity":1534,"label":1535,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1536,"versions":1538,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1540},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1537,261],"Apache-2.0 OR BSD-2-Clause",[1539],"25.0",[55,101],{"id":1542,"slug":1543,"identity":1544,"label":1545,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1546,"versions":1547,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1549},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[261],[1548],"2.2.3",[55,101],{"id":1551,"slug":1552,"identity":1553,"label":1554,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1555,"versions":1556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1557},"package:pypi:pandocfilters","pandocfilters-f452098e","pypi:pandocfilters","pandocfilters",[260],[1041],[101],{"id":1559,"slug":1560,"identity":1561,"label":1562,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1563,"versions":1564,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1566},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[334],[1565],"0.8.4",[101],{"id":1568,"slug":1569,"identity":1570,"label":1571,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1572,"versions":1573,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1574},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[472],[871],[101],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1580,"versions":1581,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1582},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[261],[636],[101],{"id":1584,"slug":1585,"identity":1586,"label":1587,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1588,"versions":1589,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1591},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[334],[1590],"32.0.1",[101],{"id":1593,"slug":1594,"identity":1595,"label":1596,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1597,"versions":1598,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1600},"package:pypi:pkginfo","pkginfo-6db98855","pypi:pkginfo","pkginfo",[334],[1599],"1.12.0",[101],{"id":1602,"slug":1603,"identity":1604,"label":1605,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1606,"versions":1607,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1609},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[334],[1608],"4.3.7",[55,101],{"id":1611,"slug":1612,"identity":1613,"label":1614,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1615,"versions":1616,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1617},"package:pypi:plotly","plotly-036ddabb","pypi:plotly","plotly",[261],[528],[55,101],{"id":1619,"slug":1620,"identity":1621,"label":1622,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1623,"versions":1624,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1626},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[334],[1625],"1.5.0",[55,101],{"id":1628,"slug":1629,"identity":1630,"label":1631,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1632,"versions":1633,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1634},"package:pypi:poetry-core","poetry-core-100baf72","pypi:poetry-core","poetry-core",[334],[437],[101],{"id":1636,"slug":1637,"identity":1638,"label":1639,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1640,"versions":1641,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1643},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[334,261],[1642],"1.28.1",[55,101],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1649,"versions":1650,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1652},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[334],[1651],"4.2.0",[55,101],{"id":1654,"slug":1655,"identity":1656,"label":1657,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1658,"versions":1660,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1662},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[303,1659],"Apache-2.0 AND BSD-2-Clause",[1661],"0.21.1",[101],{"id":1664,"slug":1665,"identity":1666,"label":1667,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1668,"versions":1669,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1671},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[260,261],[1670],"3.0.50",[101],{"id":1673,"slug":1674,"identity":1675,"label":1676,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1677,"versions":1678,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1680},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[260],[1679],"7.0.0",[101],{"id":1682,"slug":1683,"identity":1684,"label":1685,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1686,"versions":1687,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1688},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1146],[1111],[101],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1694,"versions":1695,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1697},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[334],[1696],"0.2.3",[101],{"id":1699,"slug":1700,"identity":1701,"label":1702,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1703,"versions":1704,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1705},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[303],[925],[101],{"id":1707,"slug":1708,"identity":1709,"label":1710,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1711,"versions":1712,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1714},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[260],[1713],"2.22",[55,101],{"id":1716,"slug":1717,"identity":1718,"label":1719,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1720,"versions":1721,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1723},"package:pypi:pydata-sphinx-theme","pydata-sphinx-theme-e95d5df9","pypi:pydata-sphinx-theme","pydata-sphinx-theme",[261],[1722],"0.15.4",[101],{"id":1725,"slug":1726,"identity":1727,"label":1728,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1729,"versions":1730,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1732},"package:pypi:pydyf","pydyf-60de6213","pypi:pydyf","pydyf",[261],[1731],"0.11.0",[55,101],{"id":1734,"slug":1735,"identity":1736,"label":1737,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1738,"versions":1739,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1741},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[334],[1740],"3.2.3",[55,101],{"id":1743,"slug":1744,"identity":1745,"label":1746,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1747,"versions":1751,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1753},"package:pypi:pyphen","pyphen-9e168dac","pypi:pyphen","pyphen",[1748,1749,1750],"GPL-2.0-or-later","LGPL-2.0-or-later","MPL-1.1",[1752],"0.17.2",[55,101],{"id":1755,"slug":1756,"identity":1757,"label":1758,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1759,"versions":1760,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1761},"package:pypi:pyproject-hooks","pyproject-hooks-360ad2ce","pypi:pyproject-hooks","pyproject-hooks",[334],[707],[101],{"id":1763,"slug":1764,"identity":1765,"label":1766,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1767,"versions":1768,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1770},"package:pypi:pytest-cov","pytest-cov-1f608c88","pypi:pytest-cov","pytest-cov",[334],[1769],"6.1.1",[55,101],{"id":1772,"slug":1773,"identity":1774,"label":1775,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1776,"versions":1777,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1779},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[261],[1778],"2.9.0.post0",[55,101],{"id":1781,"slug":1782,"identity":1783,"label":1784,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1785,"versions":1786,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1788},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[580,261],[1787],"3.3.0",[101],{"id":1790,"slug":1791,"identity":1792,"label":1793,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1794,"versions":1795,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1797},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[334],[1796],"2025.2",[55,101],{"id":1799,"slug":1800,"identity":1801,"label":1802,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1803,"versions":1804,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1806},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[334],[1805],"6.0.2",[55,101],{"id":1808,"slug":1809,"identity":1810,"label":1811,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1812,"versions":1813,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1815},"package:pypi:pyyaml-env-tag","pyyaml-env-tag-7c09b2b4","pypi:pyyaml-env-tag","pyyaml-env-tag",[334],[1814],"0.1",[101],{"id":1817,"slug":1818,"identity":1819,"label":1820,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1821,"versions":1822,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1824},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[261],[1823],"26.4.0",[101],{"id":1826,"slug":1827,"identity":1828,"label":1829,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1830,"versions":1831,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1833},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[334],[1832],"3.11.0",[101],{"id":1835,"slug":1836,"identity":1837,"label":1838,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1839,"versions":1840,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1842},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[334],[1841],"0.36.2",[101],{"id":1844,"slug":1845,"identity":1846,"label":1847,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1848,"versions":1849,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1850},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[303],[627],[101],{"id":1852,"slug":1853,"identity":1854,"label":1855,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1856,"versions":1857,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1858},"package:pypi:retrying","retrying-82bfb1ea","pypi:retrying","retrying",[303],[1413],[55,101],{"id":1860,"slug":1861,"identity":1862,"label":1863,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1864,"versions":1865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1867},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[334],[1866],"0.1.4",[101],{"id":1869,"slug":1870,"identity":1871,"label":1872,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1873,"versions":1874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1876},"package:pypi:rfc3986-validator","rfc3986-validator-723c00af","pypi:rfc3986-validator","rfc3986-validator",[334],[1875],"0.1.1",[101],{"id":1878,"slug":1879,"identity":1880,"label":1881,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1882,"versions":1883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1885},"package:pypi:rfc3987","rfc3987-a4373505","pypi:rfc3987","rfc3987",[261],[1884],"1.3.8",[101],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1891,"versions":1892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1894},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[334],[1893],"0.24.0",[101],{"id":1896,"slug":1897,"identity":1898,"label":1899,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1900,"versions":1901,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1903},"package:pypi:rstcheck","rstcheck-fd345cb4","pypi:rstcheck","rstcheck",[334],[1902],"3.5.0",[55,101],{"id":1905,"slug":1906,"identity":1907,"label":1908,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1909,"versions":1910,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1912},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[334],[1911],"0.9.10",[55,101],{"id":1914,"slug":1915,"identity":1916,"label":1917,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1918,"versions":1919,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1921},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[261],[1920],"1.15.2",[55,101],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1927,"versions":1928,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1930},"package:pypi:secretstorage","secretstorage-0ea3bee5","pypi:secretstorage","secretstorage",[260],[1929],"3.3.3",[101],{"id":1932,"slug":1933,"identity":1934,"label":1935,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1936,"versions":1937,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1939},"package:pypi:send2trash","send2trash-9494ed34","pypi:send2trash","send2trash",[260,261],[1938],"1.8.3",[101],{"id":1941,"slug":1942,"identity":1943,"label":1944,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1945,"versions":1946,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1948},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[261],[1947],"1.5.4",[101],{"id":1950,"slug":1951,"identity":1952,"label":1953,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1954,"versions":1955,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1957},"package:pypi:six","six-3c3888bd","pypi:six","six",[334],[1956],"1.17.0",[55,101],{"id":1959,"slug":1960,"identity":1961,"label":1962,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1963,"versions":1965,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1967},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1964],"Apache-2.0 OR MIT",[1966],"1.3.1",[101],{"id":1969,"slug":1970,"identity":1971,"label":1972,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1973,"versions":1974,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1975},"package:pypi:snowballstemmer","snowballstemmer-1fdc23ac","pypi:snowballstemmer","snowballstemmer",[260],[1006],[55,101],{"id":1977,"slug":1978,"identity":1979,"label":1980,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1981,"versions":1982,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1983},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[303],[336],[101],{"id":1985,"slug":1986,"identity":1987,"label":1988,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1989,"versions":1990,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":1992},"package:pypi:sphinx","sphinx-e280a19f","pypi:sphinx","sphinx",[261],[1991],"8.1.3",[55,101],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1998,"versions":1999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2001},"package:pypi:sphinx-book-theme","sphinx-book-theme-9ff8a638","pypi:sphinx-book-theme","sphinx-book-theme",[261],[2000],"1.1.4",[101],{"id":2003,"slug":2004,"identity":2005,"label":2006,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2007,"versions":2008,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2009},"package:pypi:sphinx-rtd-theme","sphinx-rtd-theme-faf08ada","pypi:sphinx-rtd-theme","sphinx-rtd-theme",[334],[1368],[55,101],{"id":2011,"slug":2012,"identity":2013,"label":2014,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2015,"versions":2016,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2017},"package:pypi:sphinxcontrib-applehelp","sphinxcontrib-applehelp-9e21d5db","pypi:sphinxcontrib-applehelp","sphinxcontrib-applehelp",[580,261],[925],[55,101],{"id":2019,"slug":2020,"identity":2021,"label":2022,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2023,"versions":2024,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2025},"package:pypi:sphinxcontrib-devhelp","sphinxcontrib-devhelp-9744cd2e","pypi:sphinxcontrib-devhelp","sphinxcontrib-devhelp",[261],[925],[55,101],{"id":2027,"slug":2028,"identity":2029,"label":2030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2031,"versions":2032,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2033},"package:pypi:sphinxcontrib-htmlhelp","sphinxcontrib-htmlhelp-07a94a0d","pypi:sphinxcontrib-htmlhelp","sphinxcontrib-htmlhelp",[580,261],[808],[55,101],{"id":2035,"slug":2036,"identity":2037,"label":2038,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2039,"versions":2040,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2042},"package:pypi:sphinxcontrib-jquery","sphinxcontrib-jquery-10d1d7dd","pypi:sphinxcontrib-jquery","sphinxcontrib-jquery",[261],[2041],"4.1",[55,101],{"id":2044,"slug":2045,"identity":2046,"label":2047,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2048,"versions":2049,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2051},"package:pypi:sphinxcontrib-jsmath","sphinxcontrib-jsmath-c5efc784","pypi:sphinxcontrib-jsmath","sphinxcontrib-jsmath",[261],[2050],"1.0.1",[55,101],{"id":2053,"slug":2054,"identity":2055,"label":2056,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2057,"versions":2058,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2059},"package:pypi:sphinxcontrib-qthelp","sphinxcontrib-qthelp-dfa89853","pypi:sphinxcontrib-qthelp","sphinxcontrib-qthelp",[261],[925],[55,101],{"id":2061,"slug":2062,"identity":2063,"label":2064,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2065,"versions":2066,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2067},"package:pypi:sphinxcontrib-serializinghtml","sphinxcontrib-serializinghtml-ef6417f3","pypi:sphinxcontrib-serializinghtml","sphinxcontrib-serializinghtml",[261],[925],[55,101],{"id":2069,"slug":2070,"identity":2071,"label":2072,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2073,"versions":2074,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2076},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[334],[2075],"0.6.3",[101],{"id":2078,"slug":2079,"identity":2080,"label":2081,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2082,"versions":2083,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2085},"package:pypi:terminado","terminado-9ae7e4c0","pypi:terminado","terminado",[261],[2084],"0.18.1",[101],{"id":2087,"slug":2088,"identity":2089,"label":2090,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2091,"versions":2092,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2094},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[260],[2093],"3.6.0",[55,101],{"id":2096,"slug":2097,"identity":2098,"label":2099,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2100,"versions":2101,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2103},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[261],[2102],"1.4.0",[55,101],{"id":2105,"slug":2106,"identity":2107,"label":2108,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2109,"versions":2110,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2111},"package:pypi:tinyhtml5","tinyhtml5-2f138940","pypi:tinyhtml5","tinyhtml5",[334],[925],[55,101],{"id":2113,"slug":2114,"identity":2115,"label":2116,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2117,"versions":2118,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2120},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[334],[2119],"2.2.1",[55,101],{"id":2122,"slug":2123,"identity":2124,"label":2125,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2126,"versions":2127,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2129},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[334],[2128],"0.13.2",[101],{"id":2131,"slug":2132,"identity":2133,"label":2134,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2135,"versions":2136,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2138},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[261],[2137],"5.14.3",[101],{"id":2140,"slug":2141,"identity":2142,"label":2143,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2144,"versions":2145,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2147},"package:pypi:trove-classifiers","trove-classifiers-da03c18d","pypi:trove-classifiers","trove-classifiers",[303],[2146],"2025.1.15.22",[101],{"id":2149,"slug":2150,"identity":2151,"label":2152,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2153,"versions":2154,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2156},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[303],[2155],"2.9.0.20241206",[101],{"id":2158,"slug":2159,"identity":2160,"label":2161,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2162,"versions":2163,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2165},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[977,261],[2164],"4.13.2",[55,101],{"id":2167,"slug":2168,"identity":2169,"label":2170,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2171,"versions":2172,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2173},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[303],[1796],[55,101],{"id":2175,"slug":2176,"identity":2177,"label":2178,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2179,"versions":2180,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2181},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[334],[618],[101],{"id":2183,"slug":2184,"identity":2185,"label":2186,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2187,"versions":2188,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2189},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[303],[880],[101],{"id":2191,"slug":2192,"identity":2193,"label":2194,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2195,"versions":2196,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2198},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[334],[2197],"0.2.13",[101],{"id":2200,"slug":2201,"identity":2202,"label":2203,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2204,"versions":2205,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2207},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[260],[2206],"24.11.1",[101],{"id":2209,"slug":2210,"identity":2211,"label":2212,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2213,"versions":2214,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2216},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[261],[2215],"0.5.1",[55,101],{"id":2218,"slug":2219,"identity":2220,"label":2221,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2222,"versions":2223,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2225},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[303],[2224],"1.8.0",[101],{"id":2227,"slug":2228,"identity":2229,"label":2230,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2231,"versions":2232,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2234},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[260],[2233],"4.0.13",[101],{"id":2236,"slug":2237,"identity":2238,"label":2239,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2240,"versions":2241,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2242},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[580],[1740],[55,101],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2248,"versions":2249,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2251},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[334],[2250],"3.21.0",[55,101],{"id":2253,"slug":2254,"identity":2255,"label":2256,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2257,"versions":2258,"dossier":45,"occurrenceCount":264,"directOccurrenceCount":37,"evidenceFiles":2260},"package:pypi:zopfli","zopfli-5e2184a1","pypi:zopfli","zopfli",[261],[2259],"0.2.3.post1",[55,101],[2262,2301,2342,2370,2401,2434,2461,2501,2528,2560,2587,2617,2643,2672,2706,2732,2754,2777,2806,2840,2880,2903,2934,2959,2990,3016,3049,3072,3107,3137,3160,3184,3214,3241,3271,3297,3321,3347,3383,3408,3439,3469,3497,3522,3542,3563,3588,3619,3650,3673,3693,3718,3741,3760,3783,3816,3850,3876,3910,3940,3963,3987,4043,4075,4099,4130,4158,4194,4217,4245,4273,4297,4325,4341,4364,4392,4415,4449,4464,4486,4519,4543,4565,4587,4614,4640,4666,4692,4714,4736,4757,4800,4832,4854,4881,4905,4928,4952,4976,4991,5018,5045,5079,5099,5127,5149,5171,5197,5229,5251,5303,5331,5361,5391,5410,5438,5465,5487,5514,5539,5569,5621,5673,5695,5718,5746,5771,5804,5827,5860,5875,5890,5912],{"id":113,"slug":2263,"dossier":45,"summary":2264,"aliases":2265,"sourceIds":2268,"published":2269,"modified":2270,"checkedAt":7,"severity":2271,"references":2275,"versionKeys":2299,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2266,2267],"CVE-2024-39689","PYSEC-2024-230",[113,2267],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2272],{"type":2273,"score":2274},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2276,2279,2281,2284,2287,2290,2293,2295,2297],{"type":2277,"url":2278},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2277,"url":2280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2282,"url":2283},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2285,"url":2286},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2288,"url":2289},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2291,"url":2292},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2288,"url":2294},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2277,"url":2296},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2277,"url":2298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2300],"pypi:certifi@2024.6.2",{"id":114,"slug":2302,"dossier":45,"summary":2303,"aliases":2304,"sourceIds":2307,"published":2308,"modified":2309,"checkedAt":7,"severity":2310,"references":2316,"versionKeys":2340,"packageCount":32,"repositoryCount":32},"ghsa-24qx-w28j-9m6p-97a1f20a","Jupyter Server has a  CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`",[2305,2306],"CVE-2026-40110","PYSEC-2026-2187",[114,2306],"2026-05-05T16:54:31Z","2026-07-31T20:30:21.974763351Z",[2311,2314],{"type":2312,"score":2313},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:L\u002FSI:L\u002FSA:L",{"type":2273,"score":2315},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2317,2319,2321,2324,2326,2328,2330,2332,2334,2336,2338],{"type":2282,"url":2318},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-24qx-w28j-9m6p",{"type":2277,"url":2320},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40110",{"type":2322,"url":2323},"REPORT","https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fpull\u002F603",{"type":2282,"url":2325},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F057869a327c46730afede3eab0ca2d2e3e74acea",{"type":2282,"url":2327},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F49b34392feaa97735b3b777e3baf8f22f2a14ed8",{"type":2288,"url":2329},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2288,"url":2331},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40110",{"type":2322,"url":2333},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2466912",{"type":2285,"url":2335},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server",{"type":2288,"url":2337},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-2187.yaml",{"type":2288,"url":2339},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40110.json",[2341],"pypi:jupyter-server@2.15.0",{"id":115,"slug":2343,"dossier":45,"summary":2344,"aliases":2345,"sourceIds":2348,"published":2349,"modified":2350,"checkedAt":7,"severity":2351,"references":2356,"versionKeys":2368,"packageCount":32,"repositoryCount":32},"ghsa-2599-h6xx-hpxp-c679fd6d","Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write",[2346,2347],"CVE-2026-34591","PYSEC-2026-2260",[115,2347],"2026-04-01T22:17:36Z","2026-07-13T07:26:50.150184420Z",[2352,2354],{"type":2273,"score":2353},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2312,"score":2355},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2357,2360,2362,2364,2366],{"type":2358,"url":2359},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry\u002Fsecurity\u002Fadvisories\u002FGHSA-2599-h6xx-hpxp",{"type":2277,"url":2361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34591",{"type":2282,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry\u002Fpull\u002F10792",{"type":2285,"url":2365},"https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry",{"type":2277,"url":2367},"https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry\u002Freleases\u002Ftag\u002F2.3.3",[2369],"pypi:poetry@2.0.1",{"id":116,"slug":2371,"dossier":45,"summary":2372,"aliases":2373,"sourceIds":2376,"published":2377,"modified":2378,"checkedAt":7,"severity":2379,"references":2384,"versionKeys":2395,"packageCount":32,"repositoryCount":64},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2374,2375],"CVE-2026-27199","PYSEC-2026-2320",[116,2375],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2380,2382],{"type":2312,"score":2381},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":2383},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2385,2387,2389,2391,2393],{"type":2277,"url":2386},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2277,"url":2388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2282,"url":2390},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2285,"url":2392},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2277,"url":2394},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2396,2397,2398,2399,2400],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":117,"slug":2402,"dossier":45,"summary":2403,"aliases":2404,"sourceIds":2407,"published":2408,"modified":2409,"checkedAt":7,"severity":2410,"references":2413,"versionKeys":2433,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2405,2406],"CVE-2024-34069","PYSEC-2026-2043",[117,2406],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2411],{"type":2273,"score":2412},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2414,2416,2418,2420,2421,2423,2425,2427,2429,2431],{"type":2288,"url":2415},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2277,"url":2417},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2288,"url":2419},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2285,"url":2392},{"type":2288,"url":2422},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2288,"url":2424},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2288,"url":2426},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2288,"url":2428},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2285,"url":2430},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2277,"url":2432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2396],{"id":118,"slug":2435,"dossier":45,"summary":2436,"aliases":2437,"sourceIds":2440,"published":2441,"modified":2442,"checkedAt":7,"severity":2443,"references":2446,"versionKeys":2459,"packageCount":32,"repositoryCount":32},"ghsa-2hm2-hc3v-44h9-93b1e859","Mistune toc \u002F TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content",[2438,2439],"CVE-2026-59930","PYSEC-2026-2218",[118,2439],"2026-07-08T17:17:28.867Z","2026-07-20T21:46:43.352385519Z",[2444],{"type":2273,"score":2445},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2447,2449,2451,2453,2455,2457],{"type":2358,"url":2448},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-2hm2-hc3v-44h9",{"type":2277,"url":2450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59930",{"type":2282,"url":2452},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc4093c4742ed0d10d9332fb8edb455869b7b581b",{"type":2285,"url":2454},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune",{"type":2277,"url":2456},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.3.0",{"type":2288,"url":2458},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2218.yaml",[2460],"pypi:mistune@3.1.3",{"id":119,"slug":2462,"dossier":45,"summary":2463,"aliases":2464,"sourceIds":2468,"published":2469,"modified":2470,"checkedAt":7,"severity":2471,"references":2474,"versionKeys":2499,"packageCount":32,"repositoryCount":32},"ghsa-2qfp-q593-8484-b683fc2e","Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation",[2465,2466,2467],"CVE-2025-6176","PYSEC-2026-1906","PYSEC-2026-2401",[119,2467],"2025-10-31T00:30:35Z","2026-07-13T16:43:00.989110436Z",[2472],{"type":2273,"score":2473},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2475,2477,2479,2481,2483,2485,2487,2489,2491,2493,2495,2497],{"type":2277,"url":2476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6176",{"type":2288,"url":2478},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1327",{"type":2288,"url":2480},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1375",{"type":2288,"url":2482},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fpull\u002F1234",{"type":2288,"url":2484},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fpull\u002F7134",{"type":2288,"url":2486},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F67d78bc41db1a0d03f2e763497748f2f69946627",{"type":2288,"url":2488},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fcommit\u002F14737e91edc513967f516fc839cc9c8a4f8d91da",{"type":2285,"url":2490},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli",{"type":2288,"url":2492},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Freleases\u002Ftag\u002Fv1.2.0",{"type":2288,"url":2494},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2c26a886-5984-47ee-a421-0d5fe1344eb0",{"type":2285,"url":2496},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotli",{"type":2277,"url":2498},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2qfp-q593-8484",[2500],"pypi:brotli@1.1.0",{"id":120,"slug":2502,"dossier":45,"summary":2503,"aliases":2504,"sourceIds":2507,"published":2508,"modified":2509,"checkedAt":7,"severity":2510,"references":2513,"versionKeys":2524,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[2505,2506],"CVE-2026-49476","PYSEC-2026-3071",[120,2506],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[2511],{"type":2273,"score":2512},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2514,2516,2518,2520,2522],{"type":2288,"url":2515},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2285,"url":2517},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":2285,"url":2519},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":2277,"url":2521},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2277,"url":2523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[2525,2526,2527],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":121,"slug":2529,"dossier":89,"summary":2530,"aliases":2531,"sourceIds":2534,"published":2535,"modified":2536,"checkedAt":7,"severity":2537,"references":2540,"versionKeys":2553,"packageCount":32,"repositoryCount":2559},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2532,2533],"CVE-2025-66471","PYSEC-2026-1994",[121,2533],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2538],{"type":2312,"score":2539},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2541,2543,2545,2547,2549,2551],{"type":2288,"url":2542},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2277,"url":2544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2282,"url":2546},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2285,"url":2548},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2285,"url":2550},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2277,"url":2552},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2554,2555,2556,2557,2558],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":122,"slug":2561,"dossier":45,"summary":2562,"aliases":2563,"sourceIds":2566,"published":2567,"modified":2568,"checkedAt":7,"severity":2569,"references":2572,"versionKeys":2585,"packageCount":32,"repositoryCount":264},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[2564,2565],"CVE-2025-30167","PYSEC-2026-1477",[122,2565],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[2570],{"type":2273,"score":2571},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2573,2575,2577,2579,2581,2583],{"type":2288,"url":2574},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2277,"url":2576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2288,"url":2578},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2285,"url":2580},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2285,"url":2582},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2277,"url":2584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[2586],"pypi:jupyter-core@5.7.2",{"id":123,"slug":2588,"dossier":45,"summary":2589,"aliases":2590,"sourceIds":2594,"published":2595,"modified":2596,"checkedAt":7,"severity":2597,"references":2600,"versionKeys":2615,"packageCount":32,"repositoryCount":32},"ghsa-37w4-hwhx-4rc4-705a8c0a","JupyterLab has an Extension Manager API\u002FGUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request",[2591,2592,2593],"BIT-jupyterlab-2026-42266","CVE-2026-42266","PYSEC-2026-164",[123,2593],"2026-05-05T20:53:18Z","2026-06-08T20:31:00.051032052Z",[2598],{"type":2273,"score":2599},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2601,2603,2605,2607,2609,2611,2613],{"type":2277,"url":2602},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-37w4-hwhx-4rc4",{"type":2277,"url":2604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42266",{"type":2285,"url":2606},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab",{"type":2282,"url":2608},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.7",{"type":2288,"url":2610},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyterlab\u002FPYSEC-2026-164.yaml",{"type":2288,"url":2612},"https:\u002F\u002Fjupyterhub.readthedocs.io\u002Fen\u002F5.2.1\u002Fexplanation\u002Fwebsecurity.html",{"type":2288,"url":2614},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fextensions.html#extension-manager-implementations",[2616],"pypi:jupyterlab@4.4.0",{"id":124,"slug":2618,"dossier":89,"summary":2619,"aliases":2620,"sourceIds":2623,"published":2624,"modified":2625,"checkedAt":7,"severity":2626,"references":2629,"versionKeys":2642,"packageCount":32,"repositoryCount":2559},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2621,2622],"CVE-2026-21441","PYSEC-2026-1996",[124,2622],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2627,2628],{"type":2273,"score":2512},{"type":2312,"score":2539},[2630,2632,2634,2636,2637,2639,2640],{"type":2288,"url":2631},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2277,"url":2633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2282,"url":2635},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2285,"url":2548},{"type":2288,"url":2638},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2285,"url":2550},{"type":2277,"url":2641},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2554,2555,2556,2557,2558],{"id":125,"slug":2644,"dossier":45,"summary":2645,"aliases":2646,"sourceIds":2649,"published":2650,"modified":2651,"checkedAt":7,"severity":2652,"references":2655,"versionKeys":2666,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[2647,2648],"CVE-2026-49853","PYSEC-2026-3387",[125,2648],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[2653],{"type":2273,"score":2654},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2656,2658,2660,2662,2664],{"type":2288,"url":2657},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2285,"url":2659},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2285,"url":2661},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2277,"url":2663},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2277,"url":2665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[2667,2668,2669,2670,2671],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":126,"slug":2673,"dossier":89,"summary":2674,"aliases":2675,"sourceIds":2679,"published":2680,"modified":2681,"checkedAt":7,"severity":2682,"references":2684,"versionKeys":2697,"packageCount":32,"repositoryCount":2559},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2676,2677,2678],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[126,2678],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[2683],{"type":2273,"score":2512},[2685,2687,2689,2691,2693,2695],{"type":2358,"url":2686},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2277,"url":2688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2282,"url":2690},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2288,"url":2692},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2285,"url":2694},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2277,"url":2696},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2698,2699,2700,2701,2702,2703,2704,2705],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":127,"slug":2707,"dossier":45,"summary":2708,"aliases":2709,"sourceIds":2712,"published":2713,"modified":2714,"checkedAt":7,"severity":2715,"references":2718,"versionKeys":2731,"packageCount":32,"repositoryCount":323},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2710,2711],"CVE-2025-50182","PYSEC-2026-1997",[127,2711],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2716],{"type":2273,"score":2717},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2719,2721,2723,2725,2726,2728,2729],{"type":2288,"url":2720},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2277,"url":2722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2282,"url":2724},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2285,"url":2548},{"type":2288,"url":2727},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2285,"url":2550},{"type":2277,"url":2730},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2554,2555,2556,2557],{"id":128,"slug":2733,"dossier":45,"summary":2734,"aliases":2735,"sourceIds":2738,"published":2739,"modified":2740,"checkedAt":7,"severity":2741,"references":2743,"versionKeys":2752,"packageCount":32,"repositoryCount":32},"ghsa-4c99-qj7h-p3vg-9bb362f6","nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames",[2736,2737],"CVE-2026-39377","PYSEC-2026-2229",[128,2737],"2026-04-21T01:16:05.937Z","2026-07-13T07:26:39.970591013Z",[2742],{"type":2273,"score":2353},[2744,2746,2748,2750],{"type":2277,"url":2745},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-4c99-qj7h-p3vg",{"type":2277,"url":2747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39377",{"type":2285,"url":2749},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert",{"type":2288,"url":2751},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.1",[2753],"pypi:nbconvert@7.16.6",{"id":129,"slug":2755,"dossier":45,"summary":2756,"aliases":2757,"sourceIds":2760,"published":2761,"modified":2762,"checkedAt":7,"severity":2763,"references":2765,"versionKeys":2776,"packageCount":32,"repositoryCount":32},"ghsa-4j32-57v6-6g45-cd8913d1","Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs",[2758,2759],"CVE-2026-59925","PYSEC-2026-2213",[129,2759],"2026-07-08T17:17:28.183Z","2026-07-20T21:46:43.348949802Z",[2764],{"type":2273,"score":2512},[2766,2768,2770,2772,2773,2774],{"type":2358,"url":2767},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-4j32-57v6-6g45",{"type":2277,"url":2769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59925",{"type":2282,"url":2771},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F5de41fb8e527004dbc363e047a3c380c9288c74f",{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":2775},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2213.yaml",[2460],{"id":130,"slug":2778,"dossier":89,"summary":2779,"aliases":2780,"sourceIds":2784,"published":2785,"modified":2786,"checkedAt":7,"severity":2787,"references":2790,"versionKeys":2805,"packageCount":32,"repositoryCount":2559},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[2781,2782,2783],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[130,2783],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[2788],{"type":2273,"score":2789},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2791,2793,2795,2797,2799,2801,2803,2804],{"type":2358,"url":2792},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2277,"url":2794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2282,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2282,"url":2798},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2282,"url":2800},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2288,"url":2802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2285,"url":2694},{"type":2277,"url":2696},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":131,"slug":2807,"dossier":45,"summary":2808,"aliases":2809,"sourceIds":2812,"published":2813,"modified":2814,"checkedAt":7,"severity":2815,"references":2818,"versionKeys":2837,"packageCount":32,"repositoryCount":370},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[2810,2811],"CVE-2025-8869","PYSEC-2026-1795",[131,2811],"2025-09-24T15:31:14Z","2026-07-07T17:57:29.434622137Z",[2816],{"type":2312,"score":2817},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2819,2821,2823,2825,2827,2829,2831,2833,2835],{"type":2277,"url":2820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":2288,"url":2822},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":2282,"url":2824},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":2285,"url":2826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":2288,"url":2828},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":2288,"url":2830},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":2288,"url":2832},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":2285,"url":2834},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":2277,"url":2836},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[2838,2839],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":132,"slug":2841,"dossier":89,"summary":2842,"aliases":2843,"sourceIds":2846,"published":2847,"modified":2848,"checkedAt":7,"severity":2849,"references":2854,"versionKeys":2877,"packageCount":32,"repositoryCount":2559},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2844,2845],"CVE-2026-4539","PYSEC-2026-2987",[132,2845],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2850,2852],{"type":2273,"score":2851},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2312,"score":2853},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2855,2857,2859,2861,2863,2865,2867,2869,2871,2873,2875],{"type":2277,"url":2856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2288,"url":2858},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2288,"url":2860},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2288,"url":2862},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2285,"url":2864},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2288,"url":2866},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2288,"url":2868},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2288,"url":2870},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2288,"url":2872},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2285,"url":2874},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2277,"url":2876},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2878,2879],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":133,"slug":2881,"dossier":45,"summary":2882,"aliases":2883,"sourceIds":2884,"published":2885,"modified":2886,"checkedAt":7,"severity":2887,"references":2889,"versionKeys":2896,"packageCount":32,"repositoryCount":323},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[133],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[2888],{"type":2273,"score":2512},[2890,2892,2894],{"type":2288,"url":2891},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2285,"url":2893},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2288,"url":2895},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[2897,2898,2899,2900,2901,2902],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":134,"slug":2904,"dossier":45,"summary":2905,"aliases":2906,"sourceIds":2909,"published":2910,"modified":2911,"checkedAt":7,"severity":2912,"references":2918,"versionKeys":2933,"packageCount":32,"repositoryCount":32},"ghsa-5789-5fc7-67v3-d09440f9","Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories",[2907,2908],"CVE-2026-35397","PYSEC-2026-68",[134,2908],"2026-05-05T16:49:10Z","2026-07-31T20:30:22.032211488Z",[2913,2915,2917],{"type":2273,"score":2914},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",{"type":2312,"score":2916},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":2599},[2919,2921,2923,2924,2926,2928,2929,2931],{"type":2358,"url":2920},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5789-5fc7-67v3",{"type":2277,"url":2922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35397",{"type":2288,"url":2329},{"type":2288,"url":2925},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-35397",{"type":2288,"url":2927},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2466858",{"type":2285,"url":2335},{"type":2288,"url":2930},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-68.yaml",{"type":2288,"url":2932},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-35397.json",[2341],{"id":135,"slug":2935,"dossier":45,"summary":2936,"aliases":2937,"sourceIds":2940,"published":2941,"modified":2942,"checkedAt":7,"severity":2943,"references":2948,"versionKeys":2958,"packageCount":32,"repositoryCount":32},"ghsa-58cw-g322-p94v-a1eee673","Mistune has XSS via unescaped figclass\u002Ffigwidth in Figure directive",[2938,2939],"CVE-2026-44896","PYSEC-2026-168",[135,2939],"2026-05-08T23:43:12Z","2026-06-08T23:45:17.995583404Z",[2944,2946],{"type":2273,"score":2945},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2312,"score":2947},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[2949,2951,2953,2955,2956],{"type":2277,"url":2950},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-58cw-g322-p94v",{"type":2277,"url":2952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44896",{"type":2288,"url":2954},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fa3cb6e5655308797e8be021d6c7b5bab13cbace2",{"type":2285,"url":2454},{"type":2288,"url":2957},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-168.yaml",[2460],{"id":136,"slug":2960,"dossier":45,"summary":2961,"aliases":2962,"sourceIds":2965,"published":2966,"modified":2967,"checkedAt":7,"severity":2968,"references":2971,"versionKeys":2988,"packageCount":32,"repositoryCount":32},"ghsa-58pv-8j8x-9vj2-d16b4135","jaraco.context Has a Path Traversal Vulnerability",[2963,2964],"CVE-2026-23949","PYSEC-2026-1469",[136,2964],"2026-01-13T21:48:17Z","2026-07-07T17:57:36.346499117Z",[2969],{"type":2273,"score":2970},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2972,2974,2976,2978,2980,2982,2984,2986],{"type":2288,"url":2973},"https:\u002F\u002Fgithub.com\u002Fjaraco\u002Fjaraco.context\u002Fsecurity\u002Fadvisories\u002FGHSA-58pv-8j8x-9vj2",{"type":2277,"url":2975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23949",{"type":2288,"url":2977},"https:\u002F\u002Fgithub.com\u002Fjaraco\u002Fjaraco.context\u002Fcommit\u002F7b26a42b525735e4085d2e994e13802ea339d5f9",{"type":2285,"url":2979},"https:\u002F\u002Fgithub.com\u002Fjaraco\u002Fjaraco.context",{"type":2288,"url":2981},"https:\u002F\u002Fgithub.com\u002Fjaraco\u002Fjaraco.context\u002Fblob\u002Fmain\u002Fjaraco\u002Fcontext\u002F__init__.py#L74-L91",{"type":2288,"url":2983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002Fmain\u002Fsetuptools\u002F_vendor\u002Fjaraco\u002Fcontext.py#L55-L76",{"type":2285,"url":2985},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjaraco-context",{"type":2277,"url":2987},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58pv-8j8x-9vj2",[2989],"pypi:jaraco-context@6.0.1",{"id":137,"slug":2991,"dossier":45,"summary":2992,"aliases":2993,"sourceIds":2996,"published":2997,"modified":2998,"checkedAt":7,"severity":2999,"references":3002,"versionKeys":3015,"packageCount":32,"repositoryCount":370},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[2994,2995],"CVE-2026-3219","PYSEC-2026-2875",[137,2995],"2026-04-20T18:31:48Z","2026-07-13T16:43:17.083270258Z",[3000],{"type":2312,"score":3001},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3003,3005,3007,3009,3010,3012,3013],{"type":2277,"url":3004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":2288,"url":3006},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":2288,"url":3008},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":2285,"url":2826},{"type":2288,"url":3011},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":2285,"url":2834},{"type":2277,"url":3014},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[2838,2839],{"id":138,"slug":3017,"dossier":45,"summary":3018,"aliases":3019,"sourceIds":3023,"published":3024,"modified":3025,"checkedAt":7,"severity":3026,"references":3029,"versionKeys":3044,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3020,3021,3022],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[138,3022],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3027],{"type":2273,"score":3028},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3030,3032,3034,3036,3038,3040,3042],{"type":2288,"url":3031},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2277,"url":3033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2288,"url":3035},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2282,"url":3037},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2285,"url":3039},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2285,"url":3041},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2277,"url":3043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3045,3046,3047,3048],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":139,"slug":3050,"dossier":45,"summary":3051,"aliases":3052,"sourceIds":3055,"published":3056,"modified":3057,"checkedAt":7,"severity":3058,"references":3063,"versionKeys":3071,"packageCount":32,"repositoryCount":32},"ghsa-5mrq-x3x5-8v8f-c6e2734e","Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart",[3053,3054],"CVE-2026-40934","PYSEC-2026-69",[139,3054],"2026-05-05T17:03:24Z","2026-06-06T00:45:47.735760264Z",[3059,3061],{"type":2273,"score":3060},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"type":2312,"score":3062},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3064,3066,3068,3069],{"type":2358,"url":3065},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5mrq-x3x5-8v8f",{"type":2277,"url":3067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40934",{"type":2285,"url":2335},{"type":2288,"url":3070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-69.yaml",[2341],{"id":140,"slug":3073,"dossier":45,"summary":3074,"aliases":3075,"sourceIds":3079,"published":3080,"modified":3081,"checkedAt":7,"severity":3082,"references":3086,"versionKeys":3103,"packageCount":32,"repositoryCount":370},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3076,3077,3078],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[140,3078],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3083,3085],{"type":2312,"score":3084},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2273,"score":2599},[3087,3089,3091,3093,3095,3097,3099,3101],{"type":2358,"url":3088},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2277,"url":3090},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2322,"url":3092},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2282,"url":3094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2288,"url":3096},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2285,"url":3098},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2288,"url":3100},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2291,"url":3102},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3104,3105,3106],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":141,"slug":3108,"dossier":45,"summary":3109,"aliases":3110,"sourceIds":3113,"published":3114,"modified":3115,"checkedAt":7,"severity":3116,"references":3120,"versionKeys":3135,"packageCount":32,"repositoryCount":264},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[3111,3112],"CVE-2025-69534","PYSEC-2026-89",[141,3112],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[3117,3118],{"type":2273,"score":2512},{"type":2312,"score":3119},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3121,3123,3125,3127,3129,3131,3133],{"type":2277,"url":3122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":2322,"url":3124},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":2288,"url":3126},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":2285,"url":3128},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":2288,"url":3130},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":2288,"url":3132},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":2277,"url":3134},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[3136],"pypi:markdown@3.8",{"id":142,"slug":3138,"dossier":89,"summary":3139,"aliases":3140,"sourceIds":3144,"published":3145,"modified":3146,"checkedAt":7,"severity":3147,"references":3149,"versionKeys":3159,"packageCount":32,"repositoryCount":2559},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3141,3142,3143],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[142,3143],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[3148],{"type":2273,"score":2512},[3150,3152,3154,3155,3157,3158],{"type":2358,"url":3151},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2277,"url":3153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2282,"url":2690},{"type":2288,"url":3156},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2285,"url":2694},{"type":2277,"url":2696},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":143,"slug":3161,"dossier":45,"summary":3162,"aliases":3163,"sourceIds":3167,"published":3168,"modified":3169,"checkedAt":7,"severity":3170,"references":3175,"versionKeys":3183,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3164,3165,3166],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[143,3166],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3171,3173],{"type":2273,"score":3172},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2312,"score":3174},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3176,3178,3180,3181],{"type":2277,"url":3177},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2277,"url":3179},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2285,"url":2694},{"type":2277,"url":3182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2701,2702,2703,2704,2705],{"id":144,"slug":3185,"dossier":89,"summary":3186,"aliases":3187,"sourceIds":3191,"published":3192,"modified":3193,"checkedAt":7,"severity":3194,"references":3197,"versionKeys":3213,"packageCount":32,"repositoryCount":2559},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3188,3189,3190],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[144,3190],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[3195],{"type":2312,"score":3196},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3198,3200,3202,3204,3206,3207,3209,3211],{"type":2288,"url":3199},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2277,"url":3201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2288,"url":3203},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2288,"url":3205},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2285,"url":2694},{"type":2288,"url":3208},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2285,"url":3210},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2277,"url":3212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":145,"slug":3215,"dossier":89,"summary":3216,"aliases":3217,"sourceIds":3220,"published":3221,"modified":3222,"checkedAt":7,"severity":3223,"references":3227,"versionKeys":3236,"packageCount":32,"repositoryCount":3240},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3218,3219],"CVE-2026-45409","PYSEC-2026-215",[145,3219],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3224,3225],{"type":2273,"score":2383},{"type":2312,"score":3226},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3228,3230,3232,3234],{"type":2277,"url":3229},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2277,"url":3231},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2285,"url":3233},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2288,"url":3235},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3237,3238,3239],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":146,"slug":3242,"dossier":45,"summary":3243,"aliases":3244,"sourceIds":3247,"published":3248,"modified":3249,"checkedAt":7,"severity":3250,"references":3255,"versionKeys":3266,"packageCount":32,"repositoryCount":64},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[3245,3246],"CVE-2026-27205","PYSEC-2026-2151",[146,3246],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[3251,3253],{"type":2312,"score":3252},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":3254},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3256,3258,3260,3262,3264],{"type":2277,"url":3257},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2277,"url":3259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2282,"url":3261},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2285,"url":3263},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2277,"url":3265},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[3267,3268,3269,3270],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":147,"slug":3272,"dossier":89,"summary":3273,"aliases":3274,"sourceIds":3278,"published":3279,"modified":3280,"checkedAt":7,"severity":3281,"references":3283,"versionKeys":3296,"packageCount":32,"repositoryCount":2559},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[3275,3276,3277],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[147,3277],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[3282],{"type":2273,"score":2512},[3284,3286,3288,3290,3292,3294,3295],{"type":2358,"url":3285},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2277,"url":3287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2282,"url":3289},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2282,"url":3291},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2288,"url":3293},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2285,"url":2694},{"type":2277,"url":3208},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":148,"slug":3298,"dossier":45,"summary":3299,"aliases":3300,"sourceIds":3303,"published":3304,"modified":3305,"checkedAt":7,"severity":3306,"references":3308,"versionKeys":3317,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3301,3302],"CVE-2026-57585","PYSEC-2026-3625",[148,3302],"2026-06-19T21:42:55Z","2026-08-07T09:55:56.955079633Z",[3307],{"type":2273,"score":2512},[3309,3311,3313,3315],{"type":2277,"url":3310},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2282,"url":3312},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2285,"url":3314},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2288,"url":3316},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3318,3319,3320],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":149,"slug":3322,"dossier":45,"summary":3323,"aliases":3324,"sourceIds":3327,"published":3328,"modified":3329,"checkedAt":7,"severity":3330,"references":3333,"versionKeys":3346,"packageCount":32,"repositoryCount":370},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[3325,3326],"CVE-2026-1703","PYSEC-2026-1796",[149,3326],"2026-02-02T15:30:34Z","2026-07-07T17:56:16.480954738Z",[3331],{"type":2312,"score":3332},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3334,3336,3338,3340,3341,3343,3344],{"type":2277,"url":3335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":2288,"url":3337},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":2288,"url":3339},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":2285,"url":2826},{"type":2288,"url":3342},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":2285,"url":2834},{"type":2277,"url":3345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[2838,2839],{"id":150,"slug":3348,"dossier":45,"summary":3349,"aliases":3350,"sourceIds":3353,"published":3354,"modified":3355,"checkedAt":7,"severity":3356,"references":3359,"versionKeys":3378,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[3351,3352],"CVE-2025-71176","PYSEC-2026-1845",[150,3352],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[3357],{"type":2273,"score":3358},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[3360,3362,3364,3366,3368,3370,3372,3374,3376],{"type":2277,"url":3361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":2288,"url":3363},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":2288,"url":3365},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":2288,"url":3367},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":2285,"url":3369},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":2288,"url":3371},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":2288,"url":3373},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":2285,"url":3375},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":2277,"url":3377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[3379,3380,3381,3382],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":151,"slug":3384,"dossier":45,"summary":3385,"aliases":3386,"sourceIds":3389,"published":3390,"modified":3391,"checkedAt":7,"severity":3392,"references":3395,"versionKeys":3407,"packageCount":32,"repositoryCount":32},"ghsa-73h3-mf4w-8647-540f9fd2","Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4",[3387,3388],"CVE-2026-41140","PYSEC-2026-2890",[151,3388],"2026-04-22T14:35:30Z","2026-07-13T16:42:25.945183494Z",[3393],{"type":2312,"score":3394},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3396,3398,3400,3401,3403,3405],{"type":2288,"url":3397},"https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry\u002Fsecurity\u002Fadvisories\u002FGHSA-73h3-mf4w-8647",{"type":2277,"url":3399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41140",{"type":2285,"url":2365},{"type":2288,"url":3402},"https:\u002F\u002Fgithub.com\u002Fpython-poetry\u002Fpoetry\u002Freleases\u002Ftag\u002F2.3.4",{"type":2285,"url":3404},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpoetry",{"type":2277,"url":3406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-73h3-mf4w-8647",[2369],{"id":152,"slug":3409,"dossier":45,"summary":3410,"aliases":3411,"sourceIds":3414,"published":3415,"modified":3416,"checkedAt":7,"severity":3417,"references":3420,"versionKeys":3433,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[3412,3413],"CVE-2025-66034","PYSEC-2026-1389",[152,3413],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[3418],{"type":2273,"score":3419},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[3421,3423,3425,3427,3429,3431],{"type":2288,"url":3422},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2277,"url":3424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2288,"url":3426},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2285,"url":3428},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2285,"url":3430},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2277,"url":3432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[3434,3435,3436,3437,3438],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":153,"slug":3440,"dossier":45,"summary":3441,"aliases":3442,"sourceIds":3446,"published":3447,"modified":3448,"checkedAt":7,"severity":3449,"references":3456,"versionKeys":3468,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[3443,3444,3445],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[153,3444,3445],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[3450,3452,3454],{"type":2273,"score":3451},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2273,"score":3453},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2273,"score":3455},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3457,3459,3461,3462,3464,3466],{"type":2277,"url":3458},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2288,"url":3460},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2285,"url":2659},{"type":2288,"url":3463},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2277,"url":3465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2277,"url":3467},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[2667,2668,2669,2670],{"id":154,"slug":3470,"dossier":45,"summary":2882,"aliases":3471,"sourceIds":3474,"published":3475,"modified":3476,"checkedAt":7,"severity":3477,"references":3478,"versionKeys":3496,"packageCount":32,"repositoryCount":370},"ghsa-79v4-65xg-pq4g-b911b371",[3472,3473],"CVE-2024-12797","PYSEC-2026-1284",[154,3473],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[3479,3481,3483,3485,3487,3489,3490,3492,3494],{"type":2288,"url":3480},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2277,"url":3482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2288,"url":3484},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2288,"url":3486},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2288,"url":3488},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2285,"url":2893},{"type":2288,"url":3491},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2285,"url":3493},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2277,"url":3495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[2897,2898,2899],{"id":155,"slug":3498,"dossier":45,"summary":3499,"aliases":3500,"sourceIds":3503,"published":3504,"modified":3505,"checkedAt":7,"severity":3506,"references":3508,"versionKeys":3521,"packageCount":32,"repositoryCount":264},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[3501,3502],"CVE-2025-47287","PYSEC-2026-1974",[155,3502],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[3507],{"type":2273,"score":2512},[3509,3511,3513,3515,3516,3518,3519],{"type":2288,"url":3510},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2277,"url":3512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2288,"url":3514},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2285,"url":2659},{"type":2288,"url":3517},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2285,"url":2661},{"type":2277,"url":3520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[2667],{"id":156,"slug":3523,"dossier":45,"summary":3524,"aliases":3525,"sourceIds":3528,"published":3529,"modified":3530,"checkedAt":7,"severity":3531,"references":3534,"versionKeys":3541,"packageCount":32,"repositoryCount":32},"ghsa-7jqv-fw35-gmx9-d6bf4abd","nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding",[3526,3527],"CVE-2026-39378","PYSEC-2026-2230",[156,3527],"2026-04-21T01:16:06.073Z","2026-07-13T07:26:18.607056830Z",[3532],{"type":2273,"score":3533},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3535,3537,3539,3540],{"type":2277,"url":3536},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-7jqv-fw35-gmx9",{"type":2277,"url":3538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39378",{"type":2285,"url":2749},{"type":2288,"url":2751},[2753],{"id":157,"slug":3543,"dossier":45,"summary":3544,"aliases":3545,"sourceIds":3548,"published":3549,"modified":3550,"checkedAt":7,"severity":3551,"references":3553,"versionKeys":3562,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[3546,3547],"CVE-2026-49477","PYSEC-2026-3072",[157,3547],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[3552],{"type":2273,"score":2512},[3554,3556,3557,3558,3560],{"type":2288,"url":3555},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2285,"url":2517},{"type":2285,"url":2519},{"type":2277,"url":3559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2277,"url":3561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[2525,2526,2527],{"id":158,"slug":3564,"dossier":45,"summary":3565,"aliases":3566,"sourceIds":3569,"published":3570,"modified":3571,"checkedAt":7,"severity":3572,"references":3575,"versionKeys":3586,"packageCount":32,"repositoryCount":3587},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[3567,3568],"CVE-2026-21860","PYSEC-2026-2044",[158,3568],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[3573,3574],{"type":2273,"score":2383},{"type":2312,"score":2381},[3576,3578,3580,3582,3583,3584],{"type":2288,"url":3577},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2277,"url":3579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2288,"url":3581},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2285,"url":2392},{"type":2285,"url":2430},{"type":2277,"url":3585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2396,2397,2398,2399],5,{"id":159,"slug":3589,"dossier":45,"summary":3590,"aliases":3591,"sourceIds":3594,"published":3595,"modified":3596,"checkedAt":7,"severity":3597,"references":3600,"versionKeys":3617,"packageCount":32,"repositoryCount":32},"ghsa-897w-fcg9-f6xj-5f2cb719","Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows",[3592,3593],"CVE-2026-42305","PYSEC-2026-2463",[159,3593],"2026-05-28T22:28:06Z","2026-07-13T16:42:38.959600273Z",[3598],{"type":2273,"score":3599},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3601,3603,3605,3607,3609,3611,3613,3615],{"type":2288,"url":3602},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich\u002Fsecurity\u002Fadvisories\u002FGHSA-897w-fcg9-f6xj",{"type":2277,"url":3604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42305",{"type":2288,"url":3606},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich\u002Fcommit\u002F49eb56e51aad637fc23d54bf2a08cb42739b8290",{"type":2288,"url":3608},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich\u002Fcommit\u002F57efc4aa1581e038915a0fd79365be53b150f4a9",{"type":2285,"url":3610},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich",{"type":2288,"url":3612},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich\u002Freleases\u002Ftag\u002Fdulwich-1.2.5",{"type":2285,"url":3614},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdulwich",{"type":2277,"url":3616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-897w-fcg9-f6xj",[3618],"pypi:dulwich@0.22.7",{"id":160,"slug":3620,"dossier":45,"summary":3621,"aliases":3622,"sourceIds":3624,"published":3625,"modified":3626,"checkedAt":7,"severity":3627,"references":3630,"versionKeys":3648,"packageCount":32,"repositoryCount":32},"ghsa-89vp-jrxv-24w8-56cdaa85","JupyterLab: PyPI extension blocklist package-name canonicalization bypass",[3623],"CVE-2026-73416",[160],"2026-07-22T23:14:27Z","2026-08-12T20:00:09.906926487Z",[3628],{"type":2312,"score":3629},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3631,3633,3635,3637,3639,3641,3643,3644,3646],{"type":2288,"url":3632},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-89vp-jrxv-24w8",{"type":2288,"url":3634},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19184",{"type":2288,"url":3636},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19185",{"type":2288,"url":3638},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19186",{"type":2288,"url":3640},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fbe9303f5bcd5308eaeae953c5a3c903046682c2c",{"type":2288,"url":3642},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Ff1beab4a2027af4719d6edc07d52d6cf5a39a432",{"type":2285,"url":2606},{"type":2288,"url":3645},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.10",{"type":2288,"url":3647},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.6.2",[3649],"pypi:jupyterlab@4.6.1",{"id":161,"slug":3651,"dossier":45,"summary":3652,"aliases":3653,"sourceIds":3656,"published":3657,"modified":3658,"checkedAt":7,"severity":3659,"references":3661,"versionKeys":3672,"packageCount":32,"repositoryCount":32},"ghsa-8c25-4j27-2rv3-4e2c246a","Mistune: XSS via percent-encoded javascript URI bypass in safe_url()",[3654,3655],"CVE-2026-59923","PYSEC-2026-2211",[161,3655],"2026-07-08T17:17:27.910Z","2026-07-20T21:46:43.351006286Z",[3660],{"type":2273,"score":2945},[3662,3664,3666,3668,3669,3670],{"type":2358,"url":3663},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8c25-4j27-2rv3",{"type":2277,"url":3665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59923",{"type":2282,"url":3667},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc",{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":3671},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2211.yaml",[2460],{"id":162,"slug":3674,"dossier":45,"summary":3675,"aliases":3676,"sourceIds":3679,"published":3680,"modified":3681,"checkedAt":7,"severity":3682,"references":3684,"versionKeys":3692,"packageCount":32,"repositoryCount":32},"ghsa-8g87-j6q8-g93x-2e837b39","Mistune Math Plugin has an XSS Escape Bypass",[3677,3678],"CVE-2026-44708","PYSEC-2026-2206",[162,3678],"2026-05-08T23:40:04Z","2026-07-13T07:26:26.365066334Z",[3683],{"type":2273,"score":2945},[3685,3687,3689,3690],{"type":2358,"url":3686},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8g87-j6q8-g93x",{"type":2277,"url":3688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44708",{"type":2285,"url":2454},{"type":2277,"url":3691},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.2.1",[2460],{"id":163,"slug":3694,"dossier":45,"summary":3695,"aliases":3696,"sourceIds":3699,"published":3700,"modified":3701,"checkedAt":7,"severity":3702,"references":3705,"versionKeys":3717,"packageCount":32,"repositoryCount":32},"ghsa-8mp2-v27r-99xp-3e3baa33","Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input",[3697,3698],"CVE-2026-33079","PYSEC-2026-2651",[163,3698],"2026-05-06T16:52:43Z","2026-07-13T16:42:39.431792280Z",[3703],{"type":2312,"score":3704},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3706,3708,3710,3711,3713,3715],{"type":2288,"url":3707},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",{"type":2277,"url":3709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33079",{"type":2285,"url":2454},{"type":2288,"url":3712},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fblob\u002Fdf23edd60b43b639d2e6760ef9dd3d618aa11c21\u002Fsrc\u002Fmistune\u002Fhelpers.py#L20-L25",{"type":2285,"url":3714},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmistune",{"type":2277,"url":3716},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",[2460],{"id":164,"slug":3719,"dossier":45,"summary":3720,"aliases":3721,"sourceIds":3724,"published":3725,"modified":3726,"checkedAt":7,"severity":3727,"references":3729,"versionKeys":3740,"packageCount":32,"repositoryCount":32},"ghsa-8mpj-m6qm-5qr8-24abd1d9","Mistune directives\u002Finclude: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files",[3722,3723],"CVE-2026-59927","PYSEC-2026-2215",[164,3723],"2026-07-08T17:17:28.450Z","2026-07-20T21:30:45.969881443Z",[3728],{"type":2273,"score":2383},[3730,3732,3734,3736,3737,3738],{"type":2358,"url":3731},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpj-m6qm-5qr8",{"type":2277,"url":3733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59927",{"type":2282,"url":3735},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F1bef343ade163fc3bb95572b15be720084cdb993",{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":3739},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2215.yaml",[2460],{"id":165,"slug":3742,"dossier":45,"summary":3743,"aliases":3744,"sourceIds":3745,"published":3746,"modified":3747,"checkedAt":7,"severity":3748,"references":3751,"versionKeys":3758,"packageCount":32,"repositoryCount":32},"ghsa-8rfp-98v4-mmr6-7ea7e5dd","Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output",[],[165],"2026-06-16T14:06:29Z","2026-06-18T13:29:27.505774604Z",[3749],{"type":2273,"score":3750},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[3752,3754,3756],{"type":2288,"url":3753},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-8rfp-98v4-mmr6",{"type":2288,"url":3755},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=2023812",{"type":2285,"url":3757},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach",[3759],"pypi:bleach@6.2.0",{"id":166,"slug":3761,"dossier":89,"summary":3762,"aliases":3763,"sourceIds":3767,"published":3768,"modified":3769,"checkedAt":7,"severity":3770,"references":3772,"versionKeys":3782,"packageCount":32,"repositoryCount":2559},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[3764,3765,3766],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[166,3766],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[3771],{"type":2273,"score":2512},[3773,3775,3777,3778,3780,3781],{"type":2358,"url":3774},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2277,"url":3776},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2282,"url":2690},{"type":2288,"url":3779},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2285,"url":2694},{"type":2277,"url":2696},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":167,"slug":3784,"dossier":45,"summary":3785,"aliases":3786,"sourceIds":3789,"published":3790,"modified":3791,"checkedAt":7,"severity":3792,"references":3795,"versionKeys":3814,"packageCount":32,"repositoryCount":32},"ghsa-983w-rhvv-gwmv-c6b60e52","WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect",[3787,3788],"CVE-2025-68616","PYSEC-2026-2034",[167,3788],"2026-01-20T16:29:53Z","2026-07-07T17:57:32.367800639Z",[3793],{"type":2273,"score":3794},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3796,3798,3800,3802,3804,3806,3808,3810,3812],{"type":2288,"url":3797},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",{"type":2277,"url":3799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68616",{"type":2288,"url":3801},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fcommit\u002Fb6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565",{"type":2288,"url":3803},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-68616",{"type":2288,"url":3805},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2430858",{"type":2285,"url":3807},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint",{"type":2288,"url":3809},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2025\u002Fcve-2025-68616.json",{"type":2285,"url":3811},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fweasyprint",{"type":2277,"url":3813},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",[3815],"pypi:weasyprint@64.1",{"id":168,"slug":3817,"dossier":45,"summary":3818,"aliases":3819,"sourceIds":3822,"published":3823,"modified":3824,"checkedAt":7,"severity":3825,"references":3828,"versionKeys":3847,"packageCount":32,"repositoryCount":323},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3820,3821],"CVE-2024-47081","PYSEC-2026-1872",[168,3821],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3826],{"type":2273,"score":3827},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3829,3831,3833,3835,3837,3839,3841,3843,3845],{"type":2288,"url":3830},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2277,"url":3832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2288,"url":3834},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2282,"url":3836},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2285,"url":3838},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2288,"url":3840},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2288,"url":3842},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2285,"url":3844},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2277,"url":3846},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3848,3849],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":169,"slug":3851,"dossier":89,"summary":3852,"aliases":3853,"sourceIds":3857,"published":3858,"modified":3859,"checkedAt":7,"severity":3860,"references":3862,"versionKeys":3875,"packageCount":32,"repositoryCount":2559},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[3854,3855,3856],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[169,3856],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[3861],{"type":2273,"score":2512},[3863,3865,3867,3869,3871,3873,3874],{"type":2358,"url":3864},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2277,"url":3866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2282,"url":3868},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2282,"url":3870},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2288,"url":3872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2285,"url":2694},{"type":2277,"url":3208},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":170,"slug":3877,"dossier":45,"summary":3878,"aliases":3879,"sourceIds":3886,"published":3887,"modified":3888,"checkedAt":7,"severity":3889,"references":3894,"versionKeys":3908,"packageCount":32,"repositoryCount":32},"ghsa-9q39-rmj3-p4r2-67d5744e","HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering",[3880,3881,3882,3883,3884,3885],"BIT-jupyter-base-notebook-2024-43805","BIT-jupyter-notebook-2024-43805","BIT-jupyterlab-2024-43805","CVE-2024-43805","PYSEC-2026-1481","PYSEC-2026-2536",[170,3884],"2024-08-29T17:55:53Z","2026-07-13T16:43:05.974128183Z",[3890,3892],{"type":2273,"score":3891},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":2312,"score":3893},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3895,3897,3899,3901,3903,3904,3906],{"type":2288,"url":3896},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",{"type":2277,"url":3898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-43805",{"type":2288,"url":3900},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F06ad9de836f155add7d3d651ef936cc4c5ea8093",{"type":2288,"url":3902},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88e24baac551196f9cb3de16bd060a7ab1597674",{"type":2285,"url":2606},{"type":2285,"url":3905},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyterlab",{"type":2277,"url":3907},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",[3909],"pypi:notebook@7.0.7",{"id":171,"slug":3911,"dossier":45,"summary":3912,"aliases":3913,"sourceIds":3916,"published":3917,"modified":3918,"checkedAt":7,"severity":3919,"references":3922,"versionKeys":3939,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3914,3915],"CVE-2024-35195","PYSEC-2026-1873",[171,3915],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3920],{"type":2273,"score":3921},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3923,3925,3927,3929,3931,3932,3934,3936,3937],{"type":2288,"url":3924},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2277,"url":3926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2288,"url":3928},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2282,"url":3930},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2285,"url":3838},{"type":2288,"url":3933},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2288,"url":3935},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2285,"url":3844},{"type":2277,"url":3938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3848],{"id":172,"slug":3941,"dossier":45,"summary":3942,"aliases":3943,"sourceIds":3946,"published":3947,"modified":3948,"checkedAt":7,"severity":3949,"references":3951,"versionKeys":3962,"packageCount":32,"repositoryCount":32},"ghsa-c8j7-8cv4-2xmq-1ef013c3","Mistune plugins\u002Fformatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough \u002F mark \u002F insert)",[3944,3945],"CVE-2026-59922","PYSEC-2026-2210",[172,3945],"2026-07-08T17:17:27.770Z","2026-07-20T21:46:39.999565306Z",[3950],{"type":2273,"score":2512},[3952,3954,3956,3958,3959,3960],{"type":2358,"url":3953},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-c8j7-8cv4-2xmq",{"type":2277,"url":3955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59922",{"type":2282,"url":3957},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F96d0f57f8fe9eeb06bb4cff521962a27d7c402e7",{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":3961},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2210.yaml",[2460],{"id":173,"slug":3964,"dossier":45,"summary":3965,"aliases":3966,"sourceIds":3969,"published":3970,"modified":3971,"checkedAt":7,"severity":3972,"references":3974,"versionKeys":3986,"packageCount":32,"repositoryCount":3587},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[3967,3968],"CVE-2025-67725","PYSEC-2025-266",[173,3968],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[3973],{"type":2273,"score":2512},[3975,3977,3979,3981,3983,3984],{"type":2277,"url":3976},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2277,"url":3978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":2282,"url":3980},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":2288,"url":3982},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":2285,"url":2659},{"type":2277,"url":3985},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[2667,2668,2669],{"id":174,"slug":3988,"dossier":45,"summary":3989,"aliases":3990,"sourceIds":3994,"published":3995,"modified":3996,"checkedAt":7,"severity":3997,"references":4001,"versionKeys":4041,"packageCount":32,"repositoryCount":4042},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[3991,3992,3993],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[174,3993],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[3998,4000],{"type":2312,"score":3999},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":2512},[4002,4004,4006,4008,4010,4012,4013,4015,4017,4019,4021,4023,4025,4027,4029,4031,4033,4035,4037,4039],{"type":2288,"url":4003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2277,"url":4005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2288,"url":4007},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2288,"url":4009},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2288,"url":4011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2285,"url":2694},{"type":2288,"url":4014},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2288,"url":4016},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2288,"url":4018},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2277,"url":4020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2277,"url":4022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2277,"url":4024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2277,"url":4026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2277,"url":4028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2277,"url":4030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2277,"url":4032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2277,"url":4034},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2277,"url":4036},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2277,"url":4038},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2277,"url":4040},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2698,2699,2700,2701,2702,2703,2704],12,{"id":175,"slug":4044,"dossier":45,"summary":4045,"aliases":4046,"sourceIds":4049,"published":4050,"modified":4051,"checkedAt":7,"severity":4052,"references":4055,"versionKeys":4072,"packageCount":32,"repositoryCount":264},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4047,4048],"CVE-2025-27516","PYSEC-2026-1471",[175,4048],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4053],{"type":2312,"score":4054},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4056,4058,4060,4062,4064,4066,4068,4070],{"type":2288,"url":4057},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2277,"url":4059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2282,"url":4061},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2285,"url":4063},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2288,"url":4065},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2288,"url":4067},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2285,"url":4069},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2277,"url":4071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4073,4074],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":176,"slug":4076,"dossier":45,"summary":4077,"aliases":4078,"sourceIds":4081,"published":4082,"modified":4083,"checkedAt":7,"severity":4084,"references":4087,"versionKeys":4098,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[4079,4080],"CVE-2026-49854","PYSEC-2026-3388",[176,4080],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[4085],{"type":2273,"score":4086},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4088,4090,4091,4093,4094,4096],{"type":2288,"url":4089},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2285,"url":2659},{"type":2288,"url":4092},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2285,"url":2661},{"type":2277,"url":4095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2277,"url":4097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[2667,2668,2669,2670,2671],{"id":177,"slug":4100,"dossier":45,"summary":4101,"aliases":4102,"sourceIds":4106,"published":4107,"modified":4108,"checkedAt":7,"severity":4109,"references":4113,"versionKeys":4129,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4103,4104,4105],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[177,4105],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4110,4111],{"type":2273,"score":3599},{"type":2312,"score":4112},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4114,4116,4118,4120,4121,4123,4125,4127],{"type":2277,"url":4115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2288,"url":4117},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2288,"url":4119},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2285,"url":3098},{"type":2288,"url":4122},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2288,"url":4124},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2285,"url":4126},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2277,"url":4128},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3104],{"id":178,"slug":4131,"dossier":45,"summary":4132,"aliases":4133,"sourceIds":4136,"published":4137,"modified":4138,"checkedAt":7,"severity":4139,"references":4142,"versionKeys":4157,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[4134,4135],"CVE-2024-49766","PYSEC-2026-2045",[178,4135],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[4140],{"type":2312,"score":4141},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4143,4145,4147,4149,4150,4152,4154,4155],{"type":2288,"url":4144},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2277,"url":4146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2282,"url":4148},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2285,"url":2392},{"type":2288,"url":4151},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2288,"url":4153},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2285,"url":2430},{"type":2277,"url":4156},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2396],{"id":179,"slug":4159,"dossier":45,"summary":4160,"aliases":4161,"sourceIds":4164,"published":4165,"modified":4166,"checkedAt":7,"severity":4167,"references":4172,"versionKeys":4193,"packageCount":32,"repositoryCount":32},"ghsa-fcw5-x6j4-ccmp-6b9a05f5","Jupyter Server: Stored XSS in `NbconvertFileHandler` \u002F `NbconvertPostHandler` via missing `sandbox` CSP",[4162,4163],"CVE-2026-44727","PYSEC-2026-366",[179,4163],"2026-06-18T15:04:07Z","2026-07-22T12:46:58.982015256Z",[4168,4170],{"type":2273,"score":4169},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2312,"score":4171},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[4173,4175,4177,4179,4180,4182,4184,4186,4187,4189,4191],{"type":2288,"url":4174},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":2277,"url":4176},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44727",{"type":2288,"url":4178},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F6cbee8d65e71abac851c4492fea987ad080580bd",{"type":2288,"url":2329},{"type":2288,"url":4181},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44727",{"type":2288,"url":4183},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491516",{"type":2277,"url":4185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":2285,"url":2335},{"type":2288,"url":4188},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-366.yaml",{"type":2285,"url":4190},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-server",{"type":2288,"url":4192},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44727.json",[2341],{"id":180,"slug":4195,"dossier":45,"summary":4196,"aliases":4197,"sourceIds":4200,"published":4201,"modified":4202,"checkedAt":7,"severity":4203,"references":4205,"versionKeys":4216,"packageCount":32,"repositoryCount":32},"ghsa-ffq3-xpv3-j92q-22580948","Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions",[4198,4199],"CVE-2026-59928","PYSEC-2026-2216",[180,4199],"2026-07-08T17:17:28.600Z","2026-07-20T21:30:38.320453360Z",[4204],{"type":2273,"score":2512},[4206,4208,4210,4212,4213,4214],{"type":2358,"url":4207},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ffq3-xpv3-j92q",{"type":2277,"url":4209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59928",{"type":2282,"url":4211},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F2b04d7ba341c16ac78fe82d3076bdd5c3de87c69",{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":4215},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2216.yaml",[2460],{"id":181,"slug":4218,"dossier":89,"summary":4219,"aliases":4220,"sourceIds":4224,"published":4225,"modified":4226,"checkedAt":7,"severity":4227,"references":4230,"versionKeys":4244,"packageCount":32,"repositoryCount":2559},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[4221,4222,4223],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[181,4223],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[4228],{"type":2273,"score":4229},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[4231,4233,4235,4237,4239,4240,4241,4242],{"type":2288,"url":4232},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2277,"url":4234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2288,"url":4236},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2288,"url":4238},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2285,"url":2694},{"type":2288,"url":3208},{"type":2285,"url":3210},{"type":2277,"url":4243},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":182,"slug":4246,"dossier":45,"summary":4247,"aliases":4248,"sourceIds":4251,"published":4252,"modified":4253,"checkedAt":7,"severity":4254,"references":4257,"versionKeys":4270,"packageCount":32,"repositoryCount":323},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[4249,4250],"CVE-2026-69247","PYSEC-2026-3552",[182,4250],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[4255],{"type":2312,"score":4256},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4258,4260,4262,4264,4265,4266,4268],{"type":2288,"url":4259},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2288,"url":4261},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2288,"url":4263},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2285,"url":2893},{"type":2285,"url":3493},{"type":2277,"url":4267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2277,"url":4269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[2899,2900,2901,2902,4271,4272],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":183,"slug":4274,"dossier":45,"summary":4275,"aliases":4276,"sourceIds":4279,"published":4280,"modified":4281,"checkedAt":7,"severity":4282,"references":4286,"versionKeys":4296,"packageCount":32,"repositoryCount":32},"ghsa-g97x-gvcm-x72h-ff087202","Mistune: XSS via unescaped class option in Admonition directive",[4277,4278],"CVE-2026-59926","PYSEC-2026-2214",[183,4278],"2026-07-08T17:17:28.323Z","2026-07-20T21:46:40.083797845Z",[4283,4285],{"type":2312,"score":4284},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2273,"score":2945},[4287,4289,4291,4292,4293,4294],{"type":2277,"url":4288},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-g97x-gvcm-x72h",{"type":2277,"url":4290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59926",{"type":2282,"url":2954},{"type":2285,"url":2454},{"type":2277,"url":3691},{"type":2288,"url":4295},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2214.yaml",[2460],{"id":184,"slug":4298,"dossier":89,"summary":4299,"aliases":4300,"sourceIds":4303,"published":4304,"modified":4305,"checkedAt":7,"severity":4306,"references":4311,"versionKeys":4321,"packageCount":32,"repositoryCount":4324},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4301,4302],"CVE-2026-25645","PYSEC-2026-2275",[184,4302],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4307,4309],{"type":2273,"score":4308},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2273,"score":4310},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4312,4314,4316,4318,4319],{"type":2277,"url":4313},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2277,"url":4315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2282,"url":4317},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2285,"url":3838},{"type":2277,"url":4320},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3848,3849,4322,4323],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":185,"slug":4326,"dossier":45,"summary":4327,"aliases":4328,"sourceIds":4329,"published":4330,"modified":4331,"checkedAt":7,"severity":4332,"references":4334,"versionKeys":4340,"packageCount":32,"repositoryCount":32},"ghsa-gj48-438w-jh9v-02216692","Bleach clean() \u002F Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes",[],[185],"2026-06-16T14:07:49Z","2026-06-18T18:29:26.517334064Z",[4333],{"type":2273,"score":2945},[4335,4337,4338],{"type":2288,"url":4336},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-gj48-438w-jh9v",{"type":2285,"url":3757},{"type":2288,"url":4339},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Freleases\u002Ftag\u002Fv6.4.0",[3759],{"id":186,"slug":4342,"dossier":89,"summary":4343,"aliases":4344,"sourceIds":4347,"published":4348,"modified":4349,"checkedAt":7,"severity":4350,"references":4352,"versionKeys":4363,"packageCount":32,"repositoryCount":2559},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4345,4346],"CVE-2025-66418","PYSEC-2026-1998",[186,4346],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4351],{"type":2312,"score":2539},[4353,4355,4357,4359,4360,4361],{"type":2288,"url":4354},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2277,"url":4356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2282,"url":4358},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2285,"url":2548},{"type":2285,"url":2550},{"type":2277,"url":4362},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2554,2555,2556,2557,2558],{"id":187,"slug":4365,"dossier":45,"summary":4366,"aliases":4367,"sourceIds":4370,"published":4371,"modified":4372,"checkedAt":7,"severity":4373,"references":4376,"versionKeys":4391,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4368,4369],"CVE-2024-56201","PYSEC-2026-1472",[187,4369],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4374,4375],{"type":2273,"score":2599},{"type":2312,"score":4054},[4377,4379,4381,4383,4385,4386,4388,4389],{"type":2288,"url":4378},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2277,"url":4380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2288,"url":4382},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2282,"url":4384},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2285,"url":4063},{"type":2288,"url":4387},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2285,"url":4069},{"type":2277,"url":4390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4073],{"id":188,"slug":4393,"dossier":45,"summary":4394,"aliases":4395,"sourceIds":4397,"published":4398,"modified":4399,"checkedAt":7,"severity":4400,"references":4403,"versionKeys":4414,"packageCount":32,"repositoryCount":264},"ghsa-gx64-gj6p-pc4c-8fabc035","JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab",[4396],"CVE-2026-73415",[188],"2026-07-22T23:14:44Z","2026-08-12T20:00:09.958377926Z",[4401],{"type":2312,"score":4402},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4404,4406,4407,4408,4409,4410,4411,4412,4413],{"type":2288,"url":4405},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-gx64-gj6p-pc4c",{"type":2288,"url":3634},{"type":2288,"url":3636},{"type":2288,"url":3638},{"type":2288,"url":3640},{"type":2288,"url":3642},{"type":2285,"url":2606},{"type":2288,"url":3645},{"type":2288,"url":3647},[2616,3649],{"id":189,"slug":4416,"dossier":89,"summary":4417,"aliases":4418,"sourceIds":4422,"published":4423,"modified":4424,"checkedAt":7,"severity":4425,"references":4428,"versionKeys":4440,"packageCount":32,"repositoryCount":4448},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[4419,4420,4421],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[189,4421],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[4426],{"type":2273,"score":4427},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4429,4431,4433,4435,4437,4438],{"type":2358,"url":4430},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2277,"url":4432},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2282,"url":4434},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2288,"url":4436},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2285,"url":3098},{"type":2277,"url":4439},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3104,3105,3106,4441,4442,4443,4444,4445,4446,4447],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":190,"slug":4450,"dossier":45,"summary":4451,"aliases":4452,"sourceIds":4453,"published":4454,"modified":4455,"checkedAt":7,"severity":4456,"references":4457,"versionKeys":4463,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[190],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[4458,4460,4461],{"type":2288,"url":4459},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2285,"url":2893},{"type":2288,"url":4462},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[2897],{"id":191,"slug":4465,"dossier":45,"summary":4466,"aliases":4467,"sourceIds":4468,"published":4469,"modified":4470,"checkedAt":7,"severity":4471,"references":4474,"versionKeys":4485,"packageCount":32,"repositoryCount":264},"ghsa-h5v5-8746-g7mm-7b4783af","JupyterLab PluginManager lock-rule enforcement bypass",[],[191],"2026-07-22T23:13:34Z","2026-08-08T09:26:58.136390127Z",[4472],{"type":2312,"score":4473},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4475,4477,4478,4479,4480,4481,4482,4483,4484],{"type":2288,"url":4476},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-h5v5-8746-g7mm",{"type":2288,"url":3634},{"type":2288,"url":3636},{"type":2288,"url":3638},{"type":2288,"url":3640},{"type":2288,"url":3642},{"type":2285,"url":2606},{"type":2288,"url":3645},{"type":2288,"url":3647},[2616,3649],{"id":192,"slug":4487,"dossier":45,"summary":4488,"aliases":4489,"sourceIds":4492,"published":4493,"modified":4494,"checkedAt":7,"severity":4495,"references":4497,"versionKeys":4518,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4490,4491],"CVE-2024-34064","PYSEC-2026-1474",[192,4491],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4496],{"type":2273,"score":3451},[4498,4500,4502,4504,4505,4507,4509,4511,4513,4515,4516],{"type":2288,"url":4499},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2277,"url":4501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2282,"url":4503},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2285,"url":4063},{"type":2288,"url":4506},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2288,"url":4508},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2288,"url":4510},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2288,"url":4512},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2288,"url":4514},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2285,"url":4069},{"type":2277,"url":4517},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4073],{"id":193,"slug":4520,"dossier":45,"summary":2372,"aliases":4521,"sourceIds":4524,"published":4525,"modified":4526,"checkedAt":7,"severity":4527,"references":4529,"versionKeys":4542,"packageCount":32,"repositoryCount":3587},"ghsa-hgf8-39gv-g3f2-0469b394",[4522,4523],"CVE-2025-66221","PYSEC-2026-2046",[193,4523],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[4528],{"type":2312,"score":2381},[4530,4532,4534,4536,4537,4539,4540],{"type":2288,"url":4531},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2277,"url":4533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2288,"url":4535},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2285,"url":2392},{"type":2288,"url":4538},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2285,"url":2430},{"type":2277,"url":4541},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2396,2397,2398,2399],{"id":194,"slug":4544,"dossier":45,"summary":4545,"aliases":4546,"sourceIds":4549,"published":4550,"modified":4551,"checkedAt":7,"severity":4552,"references":4555,"versionKeys":4564,"packageCount":32,"repositoryCount":32},"ghsa-jhhc-3hcp-qhm5-310e06ea","WeasyPrint has CSS Injection via Presentational Hints",[4547,4548],"CVE-2026-49452","PYSEC-2026-3412",[194,4548],"2026-07-06T17:29:53Z","2026-07-13T16:42:26.449768536Z",[4553],{"type":2273,"score":4554},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4556,4558,4559,4560,4562],{"type":2288,"url":4557},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":2285,"url":3807},{"type":2285,"url":3811},{"type":2277,"url":4561},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":2277,"url":4563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49452",[3815],{"id":195,"slug":4566,"dossier":45,"summary":4567,"aliases":4568,"sourceIds":4571,"published":4572,"modified":4573,"checkedAt":7,"severity":4574,"references":4576,"versionKeys":4586,"packageCount":32,"repositoryCount":3587},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[4569,4570],"CVE-2025-67726","PYSEC-2025-267",[195,4570],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[4575],{"type":2273,"score":2512},[4577,4579,4581,4582,4584,4585],{"type":2277,"url":4578},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2277,"url":4580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":2282,"url":3980},{"type":2288,"url":4583},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":2285,"url":2659},{"type":2277,"url":3985},[2667,2668,2669],{"id":196,"slug":4588,"dossier":89,"summary":4589,"aliases":4590,"sourceIds":4594,"published":4595,"modified":4596,"checkedAt":7,"severity":4597,"references":4599,"versionKeys":4613,"packageCount":32,"repositoryCount":2559},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[4591,4592,4593],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[196,4593],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[4598],{"type":2273,"score":2512},[4600,4602,4604,4606,4608,4609,4610,4611],{"type":2288,"url":4601},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2277,"url":4603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2288,"url":4605},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2288,"url":4607},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2285,"url":2694},{"type":2288,"url":3208},{"type":2285,"url":3210},{"type":2277,"url":4612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":197,"slug":4615,"dossier":45,"summary":4616,"aliases":4617,"sourceIds":4620,"published":4621,"modified":4622,"checkedAt":7,"severity":4623,"references":4626,"versionKeys":4639,"packageCount":32,"repositoryCount":370},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[4618,4619],"CVE-2026-6357","PYSEC-2026-2876",[197,4619],"2026-04-27T15:30:52Z","2026-07-13T16:43:01.316339792Z",[4624],{"type":2312,"score":4625},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4627,4629,4631,4633,4634,4636,4637],{"type":2277,"url":4628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":2288,"url":4630},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":2288,"url":4632},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":2285,"url":2826},{"type":2288,"url":4635},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":2285,"url":2834},{"type":2277,"url":4638},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[2838,2839],{"id":198,"slug":4641,"dossier":45,"summary":4642,"aliases":4643,"sourceIds":4646,"published":4647,"modified":4648,"checkedAt":7,"severity":4649,"references":4651,"versionKeys":4664,"packageCount":32,"repositoryCount":4665},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[4644,4645],"CVE-2026-69249","PYSEC-2026-3553",[198,4645],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[4650],{"type":2312,"score":3704},[4652,4654,4656,4658,4659,4660,4662],{"type":2288,"url":4653},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2288,"url":4655},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2288,"url":4657},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2285,"url":2893},{"type":2285,"url":3493},{"type":2277,"url":4661},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2277,"url":4663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[2897,2898,2899,2900,2901,2902,4271],8,{"id":199,"slug":4667,"dossier":45,"summary":4668,"aliases":4669,"sourceIds":4672,"published":4673,"modified":4674,"checkedAt":7,"severity":4675,"references":4678,"versionKeys":4691,"packageCount":32,"repositoryCount":4665},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[4670,4671],"CVE-2026-69248","PYSEC-2026-3554",[199,4671],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[4676],{"type":2312,"score":4677},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4679,4681,4683,4685,4686,4687,4689],{"type":2288,"url":4680},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2288,"url":4682},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2288,"url":4684},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2285,"url":2893},{"type":2285,"url":3493},{"type":2277,"url":4688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2277,"url":4690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[2897,2898,2899,2900,2901,2902,4271],{"id":200,"slug":4693,"dossier":45,"summary":4694,"aliases":4695,"sourceIds":4698,"published":4699,"modified":4700,"checkedAt":7,"severity":4701,"references":4705,"versionKeys":4713,"packageCount":32,"repositoryCount":323},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[4696,4697],"CVE-2026-34073","PYSEC-2026-35",[200,4697],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[4702,4703],{"type":2273,"score":3455},{"type":2312,"score":4704},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4706,4708,4710,4711],{"type":2277,"url":4707},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2277,"url":4709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2285,"url":2893},{"type":2288,"url":4712},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[2897,2898,2899,2900,2901,2902],{"id":201,"slug":4715,"dossier":45,"summary":4716,"aliases":4717,"sourceIds":4720,"published":4721,"modified":4722,"checkedAt":7,"severity":4723,"references":4726,"versionKeys":4734,"packageCount":32,"repositoryCount":370},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4718,4719],"CVE-2026-44432","PYSEC-2026-142",[201,4719],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4724,4725],{"type":2273,"score":2512},{"type":2312,"score":2539},[4727,4729,4731,4733],{"type":2277,"url":4728},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2277,"url":4730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2288,"url":4732},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2285,"url":2548},[4735],"pypi:urllib3@2.6.3",{"id":202,"slug":4737,"dossier":45,"summary":4738,"aliases":4739,"sourceIds":4742,"published":4743,"modified":4744,"checkedAt":7,"severity":4745,"references":4747,"versionKeys":4756,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[4740,4741],"CVE-2026-49855","PYSEC-2026-3389",[202,4741],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[4746],{"type":2273,"score":2512},[4748,4750,4751,4752,4754],{"type":2288,"url":4749},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2285,"url":2659},{"type":2285,"url":2661},{"type":2277,"url":4753},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2277,"url":4755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[2667,2668,2669,2670,2671],{"id":203,"slug":4758,"dossier":45,"summary":4759,"aliases":4760,"sourceIds":4763,"published":4764,"modified":4765,"checkedAt":7,"severity":4766,"references":4772,"versionKeys":4799,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[4761,4762],"CVE-2023-5752","PYSEC-2023-228",[203,4762],"2023-10-25T18:17:00Z","2026-06-10T17:01:27.606909654Z",[4767,4768,4770],{"type":2273,"score":4310},{"type":2312,"score":4769},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":4771},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4773,4775,4777,4779,4781,4782,4783,4785,4787,4789,4791,4793,4795,4797],{"type":2277,"url":4774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":2282,"url":4776},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":2288,"url":4778},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":2288,"url":4780},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":2285,"url":2826},{"type":2288,"url":2828},{"type":2288,"url":4784},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":2288,"url":4786},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":2288,"url":4788},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":2288,"url":4790},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":2288,"url":4792},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":2288,"url":4794},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":2277,"url":4796},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":2277,"url":4798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[2838],{"id":204,"slug":4801,"dossier":45,"summary":4802,"aliases":4803,"sourceIds":4810,"published":4811,"modified":4812,"checkedAt":7,"severity":4813,"references":4818,"versionKeys":4831,"packageCount":264,"repositoryCount":32},"ghsa-mqcg-5x36-vfcg-bd7ad531","JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content",[4804,4805,4806,4807,4808,4809],"BIT-jupyter-base-notebook-2026-42557","BIT-jupyter-notebook-2026-42557","BIT-jupyterlab-2026-42557","CVE-2026-42557","PYSEC-2026-2537","PYSEC-2026-2681",[204,4808,4809],"2026-05-06T21:43:44Z","2026-07-13T16:43:04.081738235Z",[4814,4816],{"type":2273,"score":4815},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2312,"score":4817},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4819,4821,4823,4824,4826,4827,4829],{"type":2288,"url":4820},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":2277,"url":4822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42557",{"type":2285,"url":2606},{"type":2288,"url":4825},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-files",{"type":2285,"url":3905},{"type":2277,"url":4828},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":2285,"url":4830},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnotebook",[2616,3909],{"id":205,"slug":4833,"dossier":45,"summary":4834,"aliases":4835,"sourceIds":4838,"published":4839,"modified":4840,"checkedAt":7,"severity":4841,"references":4845,"versionKeys":4853,"packageCount":32,"repositoryCount":370},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[4836,4837],"CVE-2026-39892","PYSEC-2026-36",[205,4837],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[4842,4843],{"type":2312,"score":3226},{"type":2273,"score":4844},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4846,4848,4850,4851],{"type":2277,"url":4847},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2277,"url":4849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2285,"url":2893},{"type":2288,"url":4852},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[2901,2902],{"id":206,"slug":4855,"dossier":45,"summary":4856,"aliases":4857,"sourceIds":4861,"published":4862,"modified":4863,"checkedAt":7,"severity":4864,"references":4867,"versionKeys":4880,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[4858,4859,4860],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[206,4860],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[4865,4866],{"type":2273,"score":2383},{"type":2273,"score":2512},[4868,4870,4872,4874,4876,4878,4879],{"type":2358,"url":4869},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2277,"url":4871},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2282,"url":4873},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2282,"url":4875},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2288,"url":4877},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2285,"url":2694},{"type":2277,"url":3208},[2703,2704,2705],{"id":207,"slug":4882,"dossier":89,"summary":4883,"aliases":4884,"sourceIds":4888,"published":4889,"modified":4890,"checkedAt":7,"severity":4891,"references":4893,"versionKeys":4904,"packageCount":32,"repositoryCount":2559},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[4885,4886,4887],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[207,4887],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[4892],{"type":2273,"score":2512},[4894,4896,4898,4900,4902,4903],{"type":2358,"url":4895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2277,"url":4897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2282,"url":4899},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2288,"url":4901},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2285,"url":2694},{"type":2277,"url":2696},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":208,"slug":4906,"dossier":45,"summary":4907,"aliases":4908,"sourceIds":4910,"published":4911,"modified":4912,"checkedAt":7,"severity":4913,"references":4916,"versionKeys":4927,"packageCount":32,"repositoryCount":264},"ghsa-pppj-hq3g-57pj-cec62aea","JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)",[4909],"CVE-2026-73417",[208],"2026-07-22T23:16:18Z","2026-08-12T20:15:07.672765933Z",[4914],{"type":2312,"score":4915},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:L",[4917,4919,4920,4921,4922,4923,4924,4925,4926],{"type":2288,"url":4918},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-pppj-hq3g-57pj",{"type":2288,"url":3634},{"type":2288,"url":3636},{"type":2288,"url":3638},{"type":2288,"url":3640},{"type":2288,"url":3642},{"type":2285,"url":2606},{"type":2288,"url":3645},{"type":2288,"url":3647},[2616,3649],{"id":209,"slug":4929,"dossier":45,"summary":4930,"aliases":4931,"sourceIds":4934,"published":4935,"modified":4936,"checkedAt":7,"severity":4937,"references":4939,"versionKeys":4951,"packageCount":32,"repositoryCount":323},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[4932,4933],"CVE-2025-50181","PYSEC-2026-1999",[209,4933],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[4938],{"type":2273,"score":2717},[4940,4942,4944,4946,4947,4948,4949],{"type":2288,"url":4941},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2277,"url":4943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2282,"url":4945},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2285,"url":2548},{"type":2288,"url":2727},{"type":2285,"url":2550},{"type":2277,"url":4950},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2554,2555,2556,2557],{"id":210,"slug":4953,"dossier":45,"summary":4954,"aliases":4955,"sourceIds":4958,"published":4959,"modified":4960,"checkedAt":7,"severity":4961,"references":4964,"versionKeys":4975,"packageCount":32,"repositoryCount":3587},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[4956,4957],"CVE-2025-67724","PYSEC-2025-265",[210,4957],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[4962,4963],{"type":2273,"score":3451},{"type":2273,"score":2945},[4965,4967,4969,4971,4973,4974],{"type":2277,"url":4966},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2277,"url":4968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":2282,"url":4970},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":2288,"url":4972},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":2285,"url":2659},{"type":2277,"url":3985},[2667,2668,2669],{"id":211,"slug":4977,"dossier":45,"summary":4978,"aliases":4979,"sourceIds":4980,"published":4981,"modified":4982,"checkedAt":7,"severity":4983,"references":4986,"versionKeys":4990,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[211],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[4984],{"type":2273,"score":4985},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4987,4989],{"type":2288,"url":4988},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2285,"url":2659},[2667,2668,2669,2670,2671],{"id":212,"slug":4992,"dossier":89,"summary":4993,"aliases":4994,"sourceIds":4998,"published":4999,"modified":5000,"checkedAt":7,"severity":5001,"references":5005,"versionKeys":5017,"packageCount":32,"repositoryCount":2559},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[4995,4996,4997],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[212,4997],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5002,5003],{"type":2312,"score":3999},{"type":2273,"score":5004},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5006,5007,5009,5011,5013,5015,5016],{"type":2288,"url":4003},{"type":2282,"url":5008},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2277,"url":5010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2282,"url":5012},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2282,"url":5014},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2285,"url":2694},{"type":2277,"url":3182},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":213,"slug":5019,"dossier":45,"summary":5020,"aliases":5021,"sourceIds":5024,"published":5025,"modified":5026,"checkedAt":7,"severity":5027,"references":5031,"versionKeys":5044,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5022,5023],"CVE-2024-56326","PYSEC-2026-1475",[213,5023],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5028,5030],{"type":2273,"score":5029},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2312,"score":4054},[5032,5034,5036,5038,5039,5040,5041,5042],{"type":2288,"url":5033},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2277,"url":5035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2282,"url":5037},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2285,"url":4063},{"type":2288,"url":4387},{"type":2288,"url":4065},{"type":2285,"url":4069},{"type":2277,"url":5043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4073],{"id":214,"slug":5046,"dossier":45,"summary":5047,"aliases":5048,"sourceIds":5052,"published":5053,"modified":5054,"checkedAt":7,"severity":5055,"references":5058,"versionKeys":5078,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[5049,5050,5051],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[214,5051],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[5056,5057],{"type":2273,"score":2512},{"type":2312,"score":3226},[5059,5061,5063,5065,5067,5069,5071,5072,5073,5075,5076],{"type":2288,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2277,"url":5062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2288,"url":5064},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2288,"url":5066},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2288,"url":5068},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2288,"url":5070},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2285,"url":2392},{"type":2288,"url":4151},{"type":2288,"url":5074},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2285,"url":2430},{"type":2277,"url":5077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2396],{"id":215,"slug":5080,"dossier":89,"summary":5081,"aliases":5082,"sourceIds":5085,"published":5086,"modified":5087,"checkedAt":7,"severity":5088,"references":5092,"versionKeys":5098,"packageCount":32,"repositoryCount":4324},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5083,5084],"CVE-2026-44431","PYSEC-2026-141",[215,5084],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5089,5091],{"type":2273,"score":5090},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2312,"score":4256},[5093,5095,5097],{"type":2277,"url":5094},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2277,"url":5096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2285,"url":2548},[2554,2555,2556,2557,2558,4735],{"id":216,"slug":5100,"dossier":45,"summary":5101,"aliases":5102,"sourceIds":5105,"published":5106,"modified":5107,"checkedAt":7,"severity":5108,"references":5111,"versionKeys":5126,"packageCount":32,"repositoryCount":32},"ghsa-qcq2-496w-v96p-f873dd58","Mistune: Potential DoS via quadratic-time parsing in parse_link_text",[5103,5104],"CVE-2026-49851","PYSEC-2026-2652",[216,5104],"2026-07-09T23:52:27Z","2026-07-23T05:15:25.338180329Z",[5109,5110],{"type":2273,"score":2512},{"type":2312,"score":3704},[5112,5114,5116,5118,5120,5121,5123,5124],{"type":2288,"url":5113},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",{"type":2277,"url":5115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49851",{"type":2288,"url":5117},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49851",{"type":2288,"url":5119},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492304",{"type":2285,"url":2454},{"type":2288,"url":5122},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49851.json",{"type":2285,"url":3714},{"type":2277,"url":5125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",[2460],{"id":217,"slug":5128,"dossier":45,"summary":5129,"aliases":5130,"sourceIds":5133,"published":5134,"modified":5135,"checkedAt":7,"severity":5136,"references":5138,"versionKeys":5148,"packageCount":32,"repositoryCount":32},"ghsa-qfrw-5rxm-mhh2-586619d0","Mistune renderers\u002Fhtml.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution",[5131,5132],"CVE-2026-59929","PYSEC-2026-2217",[217,5132],"2026-07-08T17:17:28.737Z","2026-07-20T21:46:41.246867209Z",[5137],{"type":2273,"score":2945},[5139,5141,5143,5144,5145,5146],{"type":2358,"url":5140},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qfrw-5rxm-mhh2",{"type":2277,"url":5142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59929",{"type":2282,"url":3667},{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":5147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2217.yaml",[2460],{"id":218,"slug":5150,"dossier":45,"summary":5151,"aliases":5152,"sourceIds":5155,"published":5156,"modified":5157,"checkedAt":7,"severity":5158,"references":5162,"versionKeys":5170,"packageCount":32,"repositoryCount":32},"ghsa-qh7q-6qm3-653w-ce7f1a0b","Jupyter Server has an open redirection vulnerability in `next` query parameter",[5153,5154],"CVE-2025-61669","PYSEC-2026-67",[218,5154],"2026-05-05T16:16:10.133Z","2026-06-05T18:00:15.359519984Z",[5159,5161],{"type":2312,"score":5160},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",{"type":2273,"score":2945},[5163,5165,5167,5168],{"type":2358,"url":5164},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-qh7q-6qm3-653w",{"type":2277,"url":5166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61669",{"type":2285,"url":2335},{"type":2288,"url":5169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-67.yaml",[2341],{"id":219,"slug":5172,"dossier":45,"summary":5173,"aliases":5174,"sourceIds":5177,"published":5178,"modified":5179,"checkedAt":7,"severity":5180,"references":5183,"versionKeys":5196,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[5175,5176],"CVE-2026-31958","PYSEC-2026-140",[219,5176],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[5181,5182],{"type":2273,"score":2512},{"type":2312,"score":3704},[5184,5186,5188,5190,5192,5193,5194],{"type":2277,"url":5185},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2277,"url":5187},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2288,"url":5189},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2288,"url":5191},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2285,"url":2659},{"type":2288,"url":3463},{"type":2288,"url":5195},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[2667,2668,2669,2670],{"id":220,"slug":5198,"dossier":45,"summary":5199,"aliases":5200,"sourceIds":5203,"published":5204,"modified":5205,"checkedAt":7,"severity":5206,"references":5209,"versionKeys":5224,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5201,5202],"CVE-2026-22701","PYSEC-2026-1374",[220,5202],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5207],{"type":2273,"score":5208},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5210,5212,5214,5216,5218,5220,5222],{"type":2288,"url":5211},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2277,"url":5213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2288,"url":5215},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2288,"url":5217},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2285,"url":5219},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2285,"url":5221},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2277,"url":5223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5225,5226,5227,5228],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":221,"slug":5230,"dossier":45,"summary":5231,"aliases":5232,"sourceIds":5235,"published":5236,"modified":5237,"checkedAt":7,"severity":5238,"references":5240,"versionKeys":5250,"packageCount":32,"repositoryCount":32},"ghsa-r4rv-85jg-w4mf-c97959dd","Mistune: Arbitrary File Read via Include directive path traversal",[5233,5234],"CVE-2026-59924","PYSEC-2026-2212",[221,5234],"2026-07-08T17:17:28.050Z","2026-07-20T21:46:41.298212805Z",[5239],{"type":2273,"score":4985},[5241,5243,5245,5246,5247,5248],{"type":2358,"url":5242},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-r4rv-85jg-w4mf",{"type":2277,"url":5244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59924",{"type":2282,"url":3735},{"type":2285,"url":2454},{"type":2277,"url":2456},{"type":2288,"url":5249},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2212.yaml",[2460],{"id":222,"slug":5252,"dossier":45,"summary":5253,"aliases":5254,"sourceIds":5257,"published":5258,"modified":5259,"checkedAt":7,"severity":5260,"references":5264,"versionKeys":5302,"packageCount":32,"repositoryCount":323},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[5255,5256],"CVE-2026-26007","PYSEC-2026-2141",[222,5256],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[5261,5263],{"type":2312,"score":5262},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2273,"score":3533},[5265,5267,5269,5271,5272,5274,5276,5278,5279,5281,5283,5285,5287,5289,5291,5293,5295,5297,5299,5301],{"type":2288,"url":5266},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2277,"url":5268},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2288,"url":5270},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2285,"url":2893},{"type":2288,"url":5273},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2288,"url":5275},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2288,"url":5277},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2277,"url":4020},{"type":2277,"url":5280},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2277,"url":5282},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2277,"url":5284},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2277,"url":5286},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2277,"url":5288},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2277,"url":5290},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2277,"url":5292},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2277,"url":5294},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2277,"url":5296},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2277,"url":5298},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2277,"url":5300},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2277,"url":4040},[2897,2898,2899,2900,2901,2902],{"id":223,"slug":5304,"dossier":45,"summary":5305,"aliases":5306,"sourceIds":5310,"published":5311,"modified":5312,"checkedAt":7,"severity":5313,"references":5316,"versionKeys":5330,"packageCount":32,"repositoryCount":2559},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[5307,5308,5309],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[223,5309],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[5314,5315],{"type":2273,"score":3172},{"type":2312,"score":3174},[5317,5319,5321,5323,5325,5326,5327,5328],{"type":2288,"url":5318},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2277,"url":5320},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2288,"url":5322},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2288,"url":5324},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2285,"url":2694},{"type":2288,"url":3182},{"type":2285,"url":3210},{"type":2277,"url":5329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":224,"slug":5332,"dossier":45,"summary":5333,"aliases":5334,"sourceIds":5341,"published":5342,"modified":5343,"checkedAt":7,"severity":5344,"references":5347,"versionKeys":5360,"packageCount":264,"repositoryCount":32},"ghsa-rch3-82jr-f9w9-c220441f","Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS",[5335,5336,5337,5338,5339,5340],"BIT-jupyter-base-notebook-2026-40171","BIT-jupyter-notebook-2026-40171","BIT-jupyterlab-2026-40171","CVE-2026-40171","PYSEC-2026-2538","PYSEC-2026-2682",[224,5339,5340],"2026-04-30T17:25:47Z","2026-07-13T16:42:47.886298772Z",[5345],{"type":2312,"score":5346},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5348,5350,5352,5354,5356,5357,5359],{"type":2288,"url":5349},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook\u002Fsecurity\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":2277,"url":5351},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40171",{"type":2285,"url":5353},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook",{"type":2288,"url":5355},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-output-and-files",{"type":2285,"url":3905},{"type":2277,"url":5358},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":2285,"url":4830},[2616,3909],{"id":225,"slug":5362,"dossier":45,"summary":5363,"aliases":5364,"sourceIds":5367,"published":5368,"modified":5369,"checkedAt":7,"severity":5370,"references":5373,"versionKeys":5386,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[5365,5366],"CVE-2026-25087","PYSEC-2026-113",[225,5366],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[5371],{"type":2273,"score":5372},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5374,5376,5378,5380,5382,5384],{"type":2277,"url":5375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2282,"url":5377},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2285,"url":5379},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2288,"url":5381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2277,"url":5383},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2277,"url":5385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[5387,5388,5389,5390],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":226,"slug":5392,"dossier":45,"summary":5393,"aliases":5394,"sourceIds":5397,"published":5398,"modified":5399,"checkedAt":7,"severity":5400,"references":5402,"versionKeys":5409,"packageCount":32,"repositoryCount":32},"ghsa-v87v-83h2-53w7-36afb5ef","Mistune Heading ID Attribute has Injection XSS",[5395,5396],"CVE-2026-44897","PYSEC-2026-2207",[226,5396],"2026-05-09T00:13:12Z","2026-07-13T07:26:47.040339656Z",[5401],{"type":2273,"score":2945},[5403,5405,5407,5408],{"type":2358,"url":5404},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-v87v-83h2-53w7",{"type":2277,"url":5406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44897",{"type":2285,"url":2454},{"type":2277,"url":3691},[2460],{"id":227,"slug":5411,"dossier":45,"summary":5412,"aliases":5413,"sourceIds":5416,"published":5417,"modified":5418,"checkedAt":7,"severity":5419,"references":5421,"versionKeys":5434,"packageCount":32,"repositoryCount":3587},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[5414,5415],"CVE-2026-41066","PYSEC-2026-87",[227,5415],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[5420],{"type":2273,"score":3794},[5422,5424,5426,5428,5430,5432],{"type":2277,"url":5423},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":2277,"url":5425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":2322,"url":5427},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":2285,"url":5429},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":2288,"url":5431},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":2288,"url":5433},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[5435,5436,5437],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":228,"slug":5439,"dossier":45,"summary":5440,"aliases":5441,"sourceIds":5445,"published":5446,"modified":5447,"checkedAt":7,"severity":5448,"references":5450,"versionKeys":5464,"packageCount":32,"repositoryCount":2559},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[5442,5443,5444],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[228,5444],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[5449],{"type":2312,"score":3704},[5451,5453,5455,5457,5459,5460,5461,5462],{"type":2288,"url":5452},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2277,"url":5454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2288,"url":5456},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2288,"url":5458},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2285,"url":2694},{"type":2288,"url":3208},{"type":2285,"url":3210},{"type":2277,"url":5463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":229,"slug":5466,"dossier":45,"summary":5467,"aliases":5468,"sourceIds":5470,"published":5471,"modified":5472,"checkedAt":7,"severity":5473,"references":5476,"versionKeys":5486,"packageCount":32,"repositoryCount":32},"ghsa-vmhf-c436-hxj4-2356488f","JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol",[5469],"CVE-2026-67338",[229],"2026-06-19T15:11:17Z","2026-08-02T03:56:47.223984500Z",[5474],{"type":2312,"score":5475},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[5477,5479,5481,5483,5484],{"type":2288,"url":5478},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vmhf-c436-hxj4",{"type":2288,"url":5480},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F4e61e07d0a91145b53fbf96ac74b0387f6bc51f6",{"type":2288,"url":5482},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fd5d961f6e10a6442dddbf94d9a976b3897055a12",{"type":2285,"url":2606},{"type":2288,"url":5485},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.9",[2616],{"id":230,"slug":5488,"dossier":45,"summary":5489,"aliases":5490,"sourceIds":5493,"published":5494,"modified":5495,"checkedAt":7,"severity":5496,"references":5499,"versionKeys":5512,"packageCount":32,"repositoryCount":370},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5491,5492],"CVE-2025-43859","PYSEC-2026-348",[230,5492],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5497],{"type":2273,"score":5498},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5500,5502,5504,5506,5508,5510],{"type":2288,"url":5501},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2277,"url":5503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2288,"url":5505},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2285,"url":5507},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2285,"url":5509},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2277,"url":5511},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5513],"pypi:h11@0.14.0",{"id":231,"slug":5515,"dossier":45,"summary":5516,"aliases":5517,"sourceIds":5521,"published":5522,"modified":5523,"checkedAt":7,"severity":5524,"references":5527,"versionKeys":5538,"packageCount":32,"repositoryCount":32},"ghsa-vvfj-2jqx-52jm-5fd8a3bd","JupyterLab LaTeX typesetter links did not enforce `noopener` attribute",[5518,5519,5520],"BIT-jupyterlab-2025-59842","CVE-2025-59842","PYSEC-2026-1482",[231,5520],"2025-09-26T14:26:40Z","2026-07-07T17:57:38.072715082Z",[5525],{"type":2312,"score":5526},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5528,5530,5532,5534,5535,5536],{"type":2288,"url":5529},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",{"type":2277,"url":5531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59842",{"type":2288,"url":5533},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88ef373039a8cc09f27d3814382a512d9033675c",{"type":2285,"url":2606},{"type":2285,"url":3905},{"type":2277,"url":5537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",[2616],{"id":232,"slug":5540,"dossier":45,"summary":5541,"aliases":5542,"sourceIds":5545,"published":5546,"modified":5547,"checkedAt":7,"severity":5548,"references":5551,"versionKeys":5568,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5543,5544],"CVE-2025-68146","PYSEC-2026-1375",[232,5544],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5549],{"type":2273,"score":5550},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5552,5554,5556,5557,5559,5561,5563,5564,5566],{"type":2288,"url":5553},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2288,"url":5555},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2285,"url":5219},{"type":2288,"url":5558},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2288,"url":5560},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2288,"url":5562},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2285,"url":5221},{"type":2277,"url":5565},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2277,"url":5567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5225,5226,5227,5228],{"id":233,"slug":5570,"dossier":45,"summary":5571,"aliases":5572,"sourceIds":5575,"published":5576,"modified":5577,"checkedAt":7,"severity":5578,"references":5584,"versionKeys":5620,"packageCount":32,"repositoryCount":370},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[5573,5574],"CVE-2026-8643","PYSEC-2026-196",[233,5574],"2026-06-01T17:17:35.770Z","2026-07-14T02:29:29.982772188Z",[5579,5581,5583],{"type":2273,"score":5580},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2312,"score":5582},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2273,"score":4310},[5585,5587,5589,5591,5593,5595,5597,5599,5601,5603,5605,5607,5609,5611,5613,5615,5616,5618],{"type":2277,"url":5586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":2282,"url":5588},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":2288,"url":5590},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":2288,"url":5592},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":2288,"url":5594},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":2288,"url":5596},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":2288,"url":5598},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":2288,"url":5600},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":2288,"url":5602},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":2288,"url":5604},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":2288,"url":5606},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2288,"url":5608},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":2288,"url":5610},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":2288,"url":5612},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":2288,"url":5614},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":2285,"url":2826},{"type":2277,"url":5617},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":2277,"url":5619},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[2838,2839],{"id":234,"slug":5622,"dossier":45,"summary":5623,"aliases":5624,"sourceIds":5628,"published":5629,"modified":5630,"checkedAt":7,"severity":5631,"references":5634,"versionKeys":5672,"packageCount":32,"repositoryCount":2559},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[5625,5626,5627],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[234,5627],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[5632,5633],{"type":2273,"score":2512},{"type":2312,"score":3704},[5635,5637,5639,5641,5643,5644,5646,5648,5650,5652,5654,5656,5657,5659,5661,5663,5664,5666,5668,5670],{"type":2288,"url":5636},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2277,"url":5638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2288,"url":5640},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2288,"url":5642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2285,"url":2694},{"type":2288,"url":5645},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2288,"url":5647},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2288,"url":5649},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2277,"url":5651},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2277,"url":5653},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2277,"url":5655},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2277,"url":4026},{"type":2277,"url":5658},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2277,"url":5660},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2277,"url":5662},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2277,"url":4028},{"type":2277,"url":5665},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2277,"url":5667},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2277,"url":5669},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2277,"url":5671},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2698,2699,2700,2701,2702,2703,2704,2705],{"id":235,"slug":5674,"dossier":45,"summary":5675,"aliases":5676,"sourceIds":5677,"published":5678,"modified":5679,"checkedAt":7,"severity":5680,"references":5683,"versionKeys":5694,"packageCount":32,"repositoryCount":264},"ghsa-whvh-wf3x-g77j-38e6ead5","JupyterLab: Allowlist\u002Fblocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)",[],[235],"2026-07-22T23:12:22Z","2026-08-08T09:26:58.996028341Z",[5681],{"type":2273,"score":5682},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[5684,5686,5687,5688,5689,5690,5691,5692,5693],{"type":2288,"url":5685},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-whvh-wf3x-g77j",{"type":2288,"url":3634},{"type":2288,"url":3636},{"type":2288,"url":3638},{"type":2288,"url":3640},{"type":2288,"url":3642},{"type":2285,"url":2606},{"type":2288,"url":3645},{"type":2288,"url":3647},[2616,3649],{"id":236,"slug":5696,"dossier":45,"summary":5697,"aliases":5698,"sourceIds":5702,"published":5703,"modified":5704,"checkedAt":7,"severity":5705,"references":5708,"versionKeys":5717,"packageCount":32,"repositoryCount":2559},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[5699,5700,5701],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[236,5701],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[5706,5707],{"type":2273,"score":3172},{"type":2312,"score":3174},[5709,5711,5713,5715,5716],{"type":2277,"url":5710},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2277,"url":5712},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2288,"url":5714},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2285,"url":2694},{"type":2277,"url":3182},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":237,"slug":5719,"dossier":45,"summary":5720,"aliases":5721,"sourceIds":5725,"published":5726,"modified":5727,"checkedAt":7,"severity":5728,"references":5731,"versionKeys":5745,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[5722,5723,5724],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[237,5724],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[5729],{"type":2273,"score":5730},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5732,5734,5736,5738,5740,5742,5743],{"type":2277,"url":5733},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2277,"url":5735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2288,"url":5737},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2282,"url":5739},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2288,"url":5741},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2285,"url":2694},{"type":2288,"url":5744},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2701],{"id":238,"slug":5747,"dossier":45,"summary":5748,"aliases":5749,"sourceIds":5753,"published":5754,"modified":5755,"checkedAt":7,"severity":5756,"references":5759,"versionKeys":5770,"packageCount":32,"repositoryCount":2559},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[5750,5751,5752],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[238,5752],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[5757],{"type":2273,"score":5758},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5760,5762,5764,5766,5768,5769],{"type":2358,"url":5761},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2277,"url":5763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2282,"url":5765},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2282,"url":5767},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2285,"url":2694},{"type":2277,"url":3208},[2698,2699,2700,2701,2702,2703,2704,2705],{"id":239,"slug":5772,"dossier":45,"summary":5773,"aliases":5774,"sourceIds":5777,"published":5778,"modified":5779,"checkedAt":7,"severity":5780,"references":5783,"versionKeys":5803,"packageCount":32,"repositoryCount":32},"ghsa-xm59-rqc7-hhvf-9413791b","nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows",[5775,5776],"CVE-2025-53000","PYSEC-2026-1691",[239,5776],"2025-12-18T22:03:08Z","2026-07-07T17:56:11.809154672Z",[5781],{"type":2312,"score":5782},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5784,5786,5788,5790,5792,5793,5795,5797,5799,5801],{"type":2288,"url":5785},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",{"type":2277,"url":5787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53000",{"type":2288,"url":5789},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fissues\u002F2258",{"type":2288,"url":5791},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fcommit\u002Fc9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71",{"type":2285,"url":2749},{"type":2288,"url":5794},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fblob\u002F4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7\u002Fnbconvert\u002Fpreprocessors\u002Fsvg2pdf.py#L104",{"type":2288,"url":5796},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.0",{"type":2288,"url":5798},"https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fcode-execution-in-jupyter-notebook-exports",{"type":2285,"url":5800},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnbconvert",{"type":2277,"url":5802},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",[2753],{"id":240,"slug":5805,"dossier":45,"summary":5806,"aliases":5807,"sourceIds":5810,"published":5811,"modified":5812,"checkedAt":7,"severity":5813,"references":5816,"versionKeys":5826,"packageCount":32,"repositoryCount":32},"ghsa-xrvj-v92f-53gj-f104bdc0","Dulwich has unbounded memory allocation in receive-pack from crafted thin packs",[5808,5809],"CVE-2026-47734","PYSEC-2026-2466",[240,5809],"2026-06-08T23:43:42Z","2026-07-13T16:43:32.716665118Z",[5814],{"type":2273,"score":5815},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[5817,5819,5821,5822,5823,5824],{"type":2288,"url":5818},"https:\u002F\u002Fgithub.com\u002Fjelmer\u002Fdulwich\u002Fsecurity\u002Fadvisories\u002FGHSA-xrvj-v92f-53gj",{"type":2277,"url":5820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47734",{"type":2285,"url":3610},{"type":2288,"url":3612},{"type":2285,"url":3614},{"type":2277,"url":5825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrvj-v92f-53gj",[3618],{"id":241,"slug":5828,"dossier":89,"summary":82,"aliases":5829,"sourceIds":5832,"published":5833,"modified":5834,"checkedAt":7,"severity":5835,"references":5838,"versionKeys":5853,"packageCount":32,"repositoryCount":4448},"pysec-2026-2132-627bf7c7",[5830,5831],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[241],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5836],{"type":2273,"score":5837},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5839,5841,5843,5845,5847,5849,5851],{"type":2288,"url":5840},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2288,"url":5842},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2277,"url":5844},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2277,"url":5846},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2322,"url":5848},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2282,"url":5850},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2358,"url":5852},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5854,5855,5856,5857,5858,5859],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":242,"slug":5861,"dossier":45,"summary":82,"aliases":5862,"sourceIds":5865,"published":5866,"modified":5867,"checkedAt":7,"severity":5868,"references":5870,"versionKeys":5874,"packageCount":32,"repositoryCount":32},"pysec-2026-2208-4dad303d",[5863,5864],"CVE-2026-44898","GHSA-6269-cqxg-mhhv",[242],"2026-05-26T21:16:39.810Z","2026-07-13T07:15:28.986856174Z",[5869],{"type":2273,"score":2945},[5871,5872],{"type":2277,"url":3691},{"type":2358,"url":5873},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-6269-cqxg-mhhv",[2460],{"id":243,"slug":5876,"dossier":45,"summary":82,"aliases":5877,"sourceIds":5880,"published":5881,"modified":5882,"checkedAt":7,"severity":5883,"references":5885,"versionKeys":5889,"packageCount":32,"repositoryCount":32},"pysec-2026-2209-f89c37e9",[5878,5879],"CVE-2026-44899","GHSA-ccfx-mfmx-2fx9",[243],"2026-05-26T21:16:39.953Z","2026-07-13T07:15:29.089597285Z",[5884],{"type":2273,"score":2945},[5886,5887],{"type":2277,"url":3691},{"type":2358,"url":5888},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ccfx-mfmx-2fx9",[2460],{"id":244,"slug":5891,"dossier":45,"summary":5892,"aliases":5893,"sourceIds":5896,"published":5897,"modified":5898,"checkedAt":7,"severity":5899,"references":5902,"versionKeys":5911,"packageCount":32,"repositoryCount":32},"pysec-2026-2532-53eb0619","Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()",[5894,5895],"CVE-2026-5422","GHSA-gf7q-q4j7-hp7c",[244],"2026-07-13T15:46:13.935289Z","2026-07-13T16:31:58.966038327Z",[5900],{"type":2273,"score":5901},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5903,5905,5906,5908,5909],{"type":2277,"url":5904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5422",{"type":2285,"url":2335},{"type":2288,"url":5907},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F24a36953-6490-466f-8cb2-a90d1ca56e0f",{"type":2285,"url":4190},{"type":2277,"url":5910},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gf7q-q4j7-hp7c",[2341],{"id":245,"slug":5913,"dossier":45,"summary":5914,"aliases":5915,"sourceIds":5918,"published":5919,"modified":5920,"checkedAt":7,"severity":5921,"references":5924,"versionKeys":5933,"packageCount":32,"repositoryCount":32},"pysec-2026-3472-ec05ba41","jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used",[5916,5917],"CVE-2026-6657","GHSA-v42x-x7jp-845h",[245],"2026-07-23T11:41:37.761563Z","2026-07-23T15:00:15.106608390Z",[5922],{"type":2273,"score":5923},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5925,5927,5928,5930,5931],{"type":2277,"url":5926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6657",{"type":2285,"url":2335},{"type":2288,"url":5929},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F18f642db-3569-43b3-b58d-ff97be4b09d7",{"type":2285,"url":4190},{"type":2277,"url":5932},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v42x-x7jp-845h",[2341],1786588637892]