[{"data":1,"prerenderedAt":3424},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5201":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":190,"related":198},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":101,"artifactResolvedComponentCount":100,"exactManifestPinCount":32,"packageCount":100,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":33,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":188,"providers":189},"opencode:5201","opencode-5201",5201,"photovoltaic_systems","uba-ki-lab\u002Fphotovoltaic_systems",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems","d0ec9137f2985f323b9aad141d83c47d14c64cce","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fcommit\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce","2026-06-23T00:00:13.675Z","2025-07-28T14:41:03.000Z",{"complete":89,"entryCount":90,"truncated":45},true,63,[92],{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"sbom.json","sbom-json","90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Fsbom.json","96f1a2a325045c8cc77018c4e6ddb5eee3755657b446c27c42dc724c0bcc6365",306666,"parsed",98,99,[103],"pypi",3,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187],"GHSA-248v-346w-9cwc","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-38jv-5279-wg99","GHSA-3j69-69wj-xqx2","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4x4j-2g7c-83w6","GHSA-4xh5-x5gv-qwph","GHSA-53q9-r3pm-6pq6","GHSA-58qw-9mgm-455v","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-6r8x-57c9-28j4","GHSA-6vgw-5pg2-w6jp","GHSA-768j-98cg-p3fv","GHSA-836r-79rf-4m37","GHSA-887c-mr87-cxwp","GHSA-8v84-f9pq-wr9x","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-c38f-wx89-p2xg","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fj7v-r99m-22gq","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-jjj6-mw9f-p565","GHSA-jp4c-xjxw-mgf9","GHSA-mf9v-mfxr-j63j","GHSA-mq26-g339-26xf","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-w853-jp5j-5j7f","GHSA-wf93-45jw-7689","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-x3gm-94wq-g975","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286",82,[],{"files":191,"occurrenceCount":101},[192,197],{"path":193,"kind":194,"sourceUrl":195,"commitSha":84,"blobSha":196,"state":99,"componentCount":32},"requirements.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Frequirements.txt","7a97f17a84ac02fdfcec421e3644be03d98eeb57",{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":199,"vulnerabilities":1096},[200,211,221,232,244,255,264,273,284,293,302,312,321,331,340,349,358,367,376,385,395,403,412,421,430,440,450,459,468,477,486,495,504,513,522,531,540,549,559,568,577,586,595,604,613,622,631,640,648,656,666,675,684,693,701,710,719,728,737,746,755,764,773,782,790,800,809,819,828,837,846,855,864,873,882,891,900,909,918,927,936,945,954,963,972,981,989,998,1007,1016,1025,1034,1043,1052,1062,1070,1078,1087],{"id":201,"slug":202,"identity":203,"label":204,"aiRelevant":89,"provider":82,"advisoryCount":205,"licenseExpressions":206,"versions":208,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":210},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[207],"BSD-3-Clause",[209],"2.7.0",[93],{"id":212,"slug":213,"identity":214,"label":215,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":216,"versions":218,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":220},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[217],"Apache-2.0",[219],"4.11.0.86",[93],{"id":222,"slug":223,"identity":224,"label":225,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":226,"versions":228,"dossier":89,"occurrenceCount":230,"directOccurrenceCount":32,"evidenceFiles":231},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[207,227],"non-standard",[229],"1.6.1",2,[193,93],{"id":233,"slug":234,"identity":235,"label":236,"aiRelevant":45,"provider":82,"advisoryCount":237,"licenseExpressions":238,"versions":241,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":243},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[239,240],"HPND","MIT-CMU",[242],"11.2.1",[93],{"id":245,"slug":246,"identity":247,"label":248,"aiRelevant":45,"provider":82,"advisoryCount":249,"licenseExpressions":250,"versions":252,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":254},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[251],"MIT",[253],"2.4.0",[93],{"id":256,"slug":257,"identity":258,"label":259,"aiRelevant":45,"provider":82,"advisoryCount":64,"licenseExpressions":260,"versions":261,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":263},"package:pypi:pip","pip-2911c768","pypi:pip","pip",[251],[262],"25.1.1",[93],{"id":265,"slug":266,"identity":267,"label":268,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":269,"versions":270,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":272},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[207,227],[271],"3.1.6",[93],{"id":274,"slug":275,"identity":276,"label":277,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":278,"versions":281,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":283},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[207,279,280],"BSD-3-Clause AND TCL","TCL",[282],"5.10.0",[93],{"id":285,"slug":286,"identity":287,"label":288,"aiRelevant":45,"provider":82,"advisoryCount":104,"licenseExpressions":289,"versions":290,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":292},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[217],[291],"2.32.3",[93],{"id":294,"slug":295,"identity":296,"label":297,"aiRelevant":45,"provider":82,"advisoryCount":104,"licenseExpressions":298,"versions":299,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":301},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[251],[300],"80.8.0",[93],{"id":303,"slug":304,"identity":305,"label":306,"aiRelevant":45,"provider":82,"advisoryCount":230,"licenseExpressions":307,"versions":309,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":311},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[251,308],"Unlicense",[310],"3.18.0",[93],{"id":313,"slug":314,"identity":315,"label":316,"aiRelevant":45,"provider":82,"advisoryCount":230,"licenseExpressions":317,"versions":318,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":320},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[251],[319],"2.7",[93],{"id":322,"slug":323,"identity":324,"label":325,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":326,"versions":328,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":330},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[327],"MPL-2.0",[329],"2025.4.26",[93],{"id":332,"slug":333,"identity":334,"label":335,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":336,"versions":337,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":339},"package:pypi:click","click-ef97f731","pypi:click","click",[207,227],[338],"8.2.1",[93],{"id":341,"slug":342,"identity":343,"label":344,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":345,"versions":346,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":348},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[251],[347],"4.58.0",[93],{"id":350,"slug":351,"identity":352,"label":353,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":354,"versions":355,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":357},"package:pypi:geopandas","geopandas-968b51b0","pypi:geopandas","geopandas",[207],[356],"1.0.1",[93],{"id":359,"slug":360,"identity":361,"label":362,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":363,"versions":364,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":366},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[207,227],[365],"3.10",[93],{"id":368,"slug":369,"identity":370,"label":371,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":372,"versions":373,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":375},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[207],[374],"5.4.0",[93],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":381,"versions":382,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":384},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[217,227],[383],"20.0.0",[93],{"id":386,"slug":387,"identity":388,"label":389,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":390,"versions":392,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":394},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[391],"MIT AND MPL-2.0",[393],"4.67.1",[93],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":400,"versions":401,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":402},"package:pypi:affine","affine-44cc504f","pypi:affine","affine",[227],[253],[93],{"id":404,"slug":405,"identity":406,"label":407,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":408,"versions":409,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":411},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[227],[410],"1.3.0",[93],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":417,"versions":418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":420},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[251],[419],"25.3.0",[93],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":426,"versions":427,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":429},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[251],[428],"4.13.4",[93],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":435,"versions":437,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":439},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[436],"BSD-2-Clause",[438],"5.0",[93],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":445,"versions":447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":449},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[446,227],"0BSD",[448],"5.2.0",[93],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":455,"versions":456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":458},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[251],[457],"3.4.2",[93],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":464,"versions":465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":467},"package:pypi:click-plugins","click-plugins-b43a6bb3","pypi:click-plugins","click-plugins",[227],[466],"1.1.1",[93],{"id":469,"slug":470,"identity":471,"label":472,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":473,"versions":474,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":476},"package:pypi:cligj","cligj-f69f4bb0","pypi:cligj","cligj",[227],[475],"0.7.2",[93],{"id":478,"slug":479,"identity":480,"label":481,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":482,"versions":483,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":485},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[227],[484],"1.3.2",[93],{"id":487,"slug":488,"identity":489,"label":490,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":491,"versions":492,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":494},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[227],[493],"0.12.1",[93],{"id":496,"slug":497,"identity":498,"label":499,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":500,"versions":501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":503},"package:pypi:cyclonedx-bom","cyclonedx-bom-120c32c1","pypi:cyclonedx-bom","cyclonedx-bom",[217],[502],"6.1.1",[93],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":509,"versions":510,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":512},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[217],[511],"10.0.1",[93],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":518,"versions":519,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":521},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[227],[520],"0.7.1",[93],{"id":523,"slug":524,"identity":525,"label":526,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":527,"versions":528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":530},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[227],[529],"1.5.1",[93],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":536,"versions":537,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":539},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[207,227],[538],"2025.5.0",[93],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":545,"versions":546,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":548},"package:pypi:geojson","geojson-df535d26","pypi:geojson","geojson",[227],[547],"3.2.0",[93],{"id":550,"slug":551,"identity":552,"label":553,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":554,"versions":556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":558},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[555],"ISC",[557],"20.11.0",[93],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":564,"versions":565,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":567},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[207],[566],"1.5.0",[93],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":573,"versions":574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":576},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[227],[575],"3.0.0",[93],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":582,"versions":583,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":585},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[251],[584],"4.23.0",[93],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":591,"versions":592,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":594},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[251],[593],"2025.4.1",[93],{"id":596,"slug":597,"identity":598,"label":599,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":600,"versions":601,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":603},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[227],[602],"1.4.8",[93],{"id":605,"slug":606,"identity":607,"label":608,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":609,"versions":610,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":612},"package:pypi:kneed","kneed-74447081","pypi:kneed","kneed",[],[611],"0.8.5",[93],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":618,"versions":619,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":621},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[217],[620],"30.4.1",[93],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":627,"versions":628,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":630},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[207,227],[629],"3.0.2",[93],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":636,"versions":637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":639},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[227],[638],"3.10.3",[93],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":645,"versions":646,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":647},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[227],[410],[93],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":653,"versions":654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":655},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[207,227],[457],[93],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":661,"versions":663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":665},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[662,227],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[664],"2.2.6",[93],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":671,"versions":672,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":674},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[227],[673],"12.6.4.1",[93],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":680,"versions":681,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":683},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[227],[682],"12.6.80",[93],{"id":685,"slug":686,"identity":687,"label":688,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":689,"versions":690,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":692},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[227],[691],"12.6.77",[93],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":698,"versions":699,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":700},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[227],[691],[93],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":706,"versions":707,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":709},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[227],[708],"9.5.1.17",[93],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":715,"versions":716,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":718},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[227],[717],"11.3.0.4",[93],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":724,"versions":725,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":727},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[227],[726],"1.11.1.6",[93],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":733,"versions":734,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":736},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[227],[735],"10.3.7.77",[93],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":742,"versions":743,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":745},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[227],[744],"11.7.1.2",[93],{"id":747,"slug":748,"identity":749,"label":750,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":751,"versions":752,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":754},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[227],[753],"12.5.4.2",[93],{"id":756,"slug":757,"identity":758,"label":759,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":760,"versions":761,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":763},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[227],[762],"0.6.3",[93],{"id":765,"slug":766,"identity":767,"label":768,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":769,"versions":770,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":772},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[207,227],[771],"2.26.2",[93],{"id":774,"slug":775,"identity":776,"label":777,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":778,"versions":779,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":781},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[227],[780],"12.6.85",[93],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":787,"versions":788,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":789},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[217,227],[691],[93],{"id":791,"slug":792,"identity":793,"label":794,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":795,"versions":797,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":799},"package:pypi:osmpythontools","osmpythontools-10ae8221","pypi:osmpythontools","osmpythontools",[796],"GPL-3.0",[798],"0.3.5",[93],{"id":801,"slug":802,"identity":803,"label":804,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":805,"versions":806,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":808},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[251],[807],"0.16.0",[93],{"id":810,"slug":811,"identity":812,"label":813,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":814,"versions":816,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":818},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[815,227],"Apache-2.0 OR BSD-2-Clause",[817],"25.0",[93],{"id":820,"slug":821,"identity":822,"label":823,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":824,"versions":825,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":827},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[227],[826],"2.2.3",[93],{"id":829,"slug":830,"identity":831,"label":832,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":833,"versions":834,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":836},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[251],[835],"32.0.1",[93],{"id":838,"slug":839,"identity":840,"label":841,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":842,"versions":843,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":845},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[217],[844],"2.0.0",[93],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":851,"versions":852,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":854},"package:pypi:pyogrio","pyogrio-ff34272a","pypi:pyogrio","pyogrio",[227],[853],"0.11.0",[93],{"id":856,"slug":857,"identity":858,"label":859,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":860,"versions":861,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":863},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[251],[862],"3.2.3",[93],{"id":865,"slug":866,"identity":867,"label":868,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":869,"versions":870,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":872},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[251],[871],"3.7.1",[93],{"id":874,"slug":875,"identity":876,"label":877,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":878,"versions":879,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":881},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[227],[880],"2.9.0.post0",[93],{"id":883,"slug":884,"identity":885,"label":886,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":887,"versions":888,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":890},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[251],[889],"2025.2",[93],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":896,"versions":897,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":899},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[251],[898],"6.0.2",[93],{"id":901,"slug":902,"identity":903,"label":904,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":905,"versions":906,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":908},"package:pypi:rasterio","rasterio-8127369d","pypi:rasterio","rasterio",[207,227],[907],"1.4.3",[93],{"id":910,"slug":911,"identity":912,"label":913,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":914,"versions":915,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":917},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[251],[916],"0.36.2",[93],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":923,"versions":924,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":926},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[251],[925],"0.1.4",[93],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":932,"versions":933,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":935},"package:pypi:rfc3987","rfc3987-a4373505","pypi:rfc3987","rfc3987",[227],[934],"1.3.8",[93],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":941,"versions":942,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":944},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[251],[943],"0.25.0",[93],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":950,"versions":951,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":953},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[227],[952],"1.15.3",[93],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":959,"versions":960,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":962},"package:pypi:segment-anything","segment-anything-e8a30cc3","pypi:segment-anything","segment-anything",[217],[961],"1.0",[93],{"id":964,"slug":965,"identity":966,"label":967,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":968,"versions":969,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":971},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[207],[970],"2.1.1",[93],{"id":973,"slug":974,"identity":975,"label":976,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":977,"versions":978,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":980},"package:pypi:six","six-3c3888bd","pypi:six","six",[251],[979],"1.17.0",[93],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":986,"versions":987,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":988},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[217],[253],[93],{"id":990,"slug":991,"identity":992,"label":993,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":994,"versions":995,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":997},"package:pypi:supervision","supervision-c48208b7","pypi:supervision","supervision",[251],[996],"0.25.1",[93],{"id":999,"slug":1000,"identity":1001,"label":1002,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1003,"versions":1004,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1006},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[227],[1005],"1.14.0",[93],{"id":1008,"slug":1009,"identity":1010,"label":1011,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1012,"versions":1013,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1015},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[207],[1014],"3.6.0",[93],{"id":1017,"slug":1018,"identity":1019,"label":1020,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1021,"versions":1022,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1024},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[251],[1023],"2.2.1",[93],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1030,"versions":1031,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1033},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[227],[1032],"0.22.0",[93],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1039,"versions":1040,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1042},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[251],[1041],"3.3.0",[93],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1048,"versions":1049,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1051},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[217],[1050],"2.9.0.20250516",[93],{"id":1053,"slug":1054,"identity":1055,"label":1056,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1057,"versions":1059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1061},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[1058,227],"PSF-2.0",[1060],"4.13.2",[93],{"id":1063,"slug":1064,"identity":1065,"label":1066,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1067,"versions":1068,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1069},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[217],[889],[93],{"id":1071,"slug":1072,"identity":1073,"label":1074,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1075,"versions":1076,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1077},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[251],[410],[93],{"id":1079,"slug":1080,"identity":1081,"label":1082,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1083,"versions":1084,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1086},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[207],[1085],"24.11.1",[93],{"id":1088,"slug":1089,"identity":1090,"label":1091,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1092,"versions":1093,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1095},"package:pypi:xarray","xarray-1bb3cdce","pypi:xarray","xarray",[217],[1094],"2025.4.0",[93],[1097,1136,1163,1196,1239,1265,1294,1329,1355,1384,1418,1444,1470,1506,1529,1552,1582,1619,1647,1673,1699,1730,1751,1790,1813,1847,1873,1903,1927,1959,1987,2043,2075,2107,2141,2169,2202,2230,2253,2281,2315,2349,2376,2402,2424,2467,2494,2518,2542,2569,2596,2617,2654,2686,2714,2744,2776,2805,2834,2861,2891,2943,2971,3023,3046,3078,3106,3131,3151,3168,3187,3204,3225,3241,3256,3273,3288,3305,3322,3339,3361,3394],{"id":106,"slug":1098,"dossier":45,"summary":1099,"aliases":1100,"sourceIds":1103,"published":1104,"modified":1105,"checkedAt":7,"severity":1106,"references":1110,"versionKeys":1134,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1101,1102],"CVE-2024-39689","PYSEC-2024-230",[106,1102],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1107],{"type":1108,"score":1109},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1111,1114,1116,1119,1122,1125,1128,1130,1132],{"type":1112,"url":1113},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1112,"url":1115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1117,"url":1118},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1120,"url":1121},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1123,"url":1124},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1126,"url":1127},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1123,"url":1129},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1112,"url":1131},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1112,"url":1133},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1135],"pypi:certifi@2024.6.2",{"id":107,"slug":1137,"dossier":45,"summary":1138,"aliases":1139,"sourceIds":1142,"published":1143,"modified":1144,"checkedAt":7,"severity":1145,"references":1148,"versionKeys":1159,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[1140,1141],"CVE-2026-49476","PYSEC-2026-3071",[107,1141],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[1146],{"type":1108,"score":1147},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1149,1151,1153,1155,1157],{"type":1123,"url":1150},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1120,"url":1152},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":1120,"url":1154},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":1112,"url":1156},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1112,"url":1158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[1160,1161,1162],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":108,"slug":1164,"dossier":89,"summary":1165,"aliases":1166,"sourceIds":1169,"published":1170,"modified":1171,"checkedAt":7,"severity":1172,"references":1176,"versionKeys":1189,"packageCount":32,"repositoryCount":1195},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1167,1168],"CVE-2025-66471","PYSEC-2026-1994",[108,1168],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1173],{"type":1174,"score":1175},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1177,1179,1181,1183,1185,1187],{"type":1123,"url":1178},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1112,"url":1180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1117,"url":1182},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1120,"url":1184},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1120,"url":1186},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1112,"url":1188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1190,1191,1192,1193,1194],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":109,"slug":1197,"dossier":45,"summary":1198,"aliases":1199,"sourceIds":1203,"published":1204,"modified":1205,"checkedAt":7,"severity":1206,"references":1213,"versionKeys":1235,"packageCount":32,"repositoryCount":104},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1200,1201,1202],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[109,1202],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[1207,1209,1211],{"type":1108,"score":1208},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1174,"score":1210},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1108,"score":1212},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1214,1216,1219,1221,1223,1225,1227,1229,1231,1233],{"type":1112,"url":1215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1217,"url":1218},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1217,"url":1220},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1123,"url":1222},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1120,"url":1224},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1123,"url":1226},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1217,"url":1228},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1112,"url":1230},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1112,"url":1232},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1112,"url":1234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1236,1237,1238],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":110,"slug":1240,"dossier":89,"summary":1241,"aliases":1242,"sourceIds":1245,"published":1246,"modified":1247,"checkedAt":7,"severity":1248,"references":1251,"versionKeys":1264,"packageCount":32,"repositoryCount":1195},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1243,1244],"CVE-2026-21441","PYSEC-2026-1996",[110,1244],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1249,1250],{"type":1108,"score":1147},{"type":1174,"score":1175},[1252,1254,1256,1258,1259,1261,1262],{"type":1123,"url":1253},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1112,"url":1255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1117,"url":1257},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1120,"url":1184},{"type":1123,"url":1260},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1120,"url":1186},{"type":1112,"url":1263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1190,1191,1192,1193,1194],{"id":111,"slug":1266,"dossier":45,"summary":1267,"aliases":1268,"sourceIds":1271,"published":1272,"modified":1273,"checkedAt":7,"severity":1274,"references":1277,"versionKeys":1290,"packageCount":32,"repositoryCount":1293},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[1269,1270],"CVE-2026-54911","PYSEC-2026-2294",[111,1270],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[1275],{"type":1108,"score":1276},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1278,1280,1282,1284,1286,1288],{"type":1117,"url":1279},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":1112,"url":1281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":1117,"url":1283},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":1123,"url":1285},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":1120,"url":1287},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":1112,"url":1289},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[1291,1292],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",5,{"id":112,"slug":1295,"dossier":89,"summary":1296,"aliases":1297,"sourceIds":1301,"published":1302,"modified":1303,"checkedAt":7,"severity":1304,"references":1306,"versionKeys":1320,"packageCount":32,"repositoryCount":1195},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1298,1299,1300],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[112,1300],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[1305],{"type":1108,"score":1147},[1307,1310,1312,1314,1316,1318],{"type":1308,"url":1309},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1112,"url":1311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1117,"url":1313},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1123,"url":1315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1120,"url":1317},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1112,"url":1319},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1321,1322,1323,1324,1325,1326,1327,1328],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":113,"slug":1330,"dossier":45,"summary":1331,"aliases":1332,"sourceIds":1335,"published":1336,"modified":1337,"checkedAt":7,"severity":1338,"references":1341,"versionKeys":1354,"packageCount":32,"repositoryCount":249},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1333,1334],"CVE-2025-50182","PYSEC-2026-1997",[113,1334],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1339],{"type":1108,"score":1340},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1342,1344,1346,1348,1349,1351,1352],{"type":1123,"url":1343},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1112,"url":1345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1117,"url":1347},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1120,"url":1184},{"type":1123,"url":1350},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1120,"url":1186},{"type":1112,"url":1353},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1190,1191,1192,1193],{"id":114,"slug":1356,"dossier":89,"summary":1357,"aliases":1358,"sourceIds":1362,"published":1363,"modified":1364,"checkedAt":7,"severity":1365,"references":1368,"versionKeys":1383,"packageCount":32,"repositoryCount":1195},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1359,1360,1361],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[114,1361],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[1366],{"type":1108,"score":1367},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1369,1371,1373,1375,1377,1379,1381,1382],{"type":1308,"url":1370},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1112,"url":1372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1117,"url":1374},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1117,"url":1376},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1117,"url":1378},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1123,"url":1380},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1120,"url":1317},{"type":1112,"url":1319},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":115,"slug":1385,"dossier":45,"summary":1386,"aliases":1387,"sourceIds":1390,"published":1391,"modified":1392,"checkedAt":7,"severity":1393,"references":1396,"versionKeys":1415,"packageCount":32,"repositoryCount":104},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[1388,1389],"CVE-2025-8869","PYSEC-2026-1795",[115,1389],"2025-09-24T15:31:14Z","2026-07-07T17:57:29.434622137Z",[1394],{"type":1174,"score":1395},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1397,1399,1401,1403,1405,1407,1409,1411,1413],{"type":1112,"url":1398},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":1123,"url":1400},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":1117,"url":1402},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":1120,"url":1404},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":1123,"url":1406},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":1123,"url":1408},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":1123,"url":1410},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":1120,"url":1412},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":1112,"url":1414},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[1416,1417],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":116,"slug":1419,"dossier":45,"summary":1420,"aliases":1421,"sourceIds":1425,"published":1426,"modified":1427,"checkedAt":7,"severity":1428,"references":1433,"versionKeys":1443,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1422,1423,1424],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[116,1424],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1429,1431],{"type":1174,"score":1430},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1108,"score":1432},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1434,1436,1438,1440,1442],{"type":1112,"url":1435},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1112,"url":1437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1123,"url":1439},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1123,"url":1441},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1120,"url":1224},[1236],{"id":117,"slug":1445,"dossier":45,"summary":1446,"aliases":1447,"sourceIds":1450,"published":1451,"modified":1452,"checkedAt":7,"severity":1453,"references":1456,"versionKeys":1469,"packageCount":32,"repositoryCount":104},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[1448,1449],"CVE-2026-3219","PYSEC-2026-2875",[117,1449],"2026-04-20T18:31:48Z","2026-07-13T16:43:17.083270258Z",[1454],{"type":1174,"score":1455},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1457,1459,1461,1463,1464,1466,1467],{"type":1112,"url":1458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":1123,"url":1460},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":1123,"url":1462},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":1120,"url":1404},{"type":1123,"url":1465},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":1120,"url":1412},{"type":1112,"url":1468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[1416,1417],{"id":118,"slug":1471,"dossier":45,"summary":1472,"aliases":1473,"sourceIds":1477,"published":1478,"modified":1479,"checkedAt":7,"severity":1480,"references":1485,"versionKeys":1502,"packageCount":32,"repositoryCount":104},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1474,1475,1476],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[118,1476],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1481,1483],{"type":1174,"score":1482},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1108,"score":1484},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1486,1488,1490,1492,1494,1496,1498,1500],{"type":1308,"url":1487},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1112,"url":1489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1217,"url":1491},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1117,"url":1493},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1123,"url":1495},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1120,"url":1497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1123,"url":1499},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1126,"url":1501},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1503,1504,1505],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":119,"slug":1507,"dossier":89,"summary":1508,"aliases":1509,"sourceIds":1513,"published":1514,"modified":1515,"checkedAt":7,"severity":1516,"references":1518,"versionKeys":1528,"packageCount":32,"repositoryCount":1195},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1510,1511,1512],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[119,1512],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[1517],{"type":1108,"score":1147},[1519,1521,1523,1524,1526,1527],{"type":1308,"url":1520},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1112,"url":1522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1117,"url":1313},{"type":1123,"url":1525},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1120,"url":1317},{"type":1112,"url":1319},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":120,"slug":1530,"dossier":45,"summary":1531,"aliases":1532,"sourceIds":1536,"published":1537,"modified":1538,"checkedAt":7,"severity":1539,"references":1543,"versionKeys":1551,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1533,1534,1535],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[120,1535],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1540,1541],{"type":1108,"score":1212},{"type":1174,"score":1542},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1544,1546,1548,1549],{"type":1112,"url":1545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1112,"url":1547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1120,"url":1317},{"type":1112,"url":1550},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1324,1325,1326,1327,1328],{"id":121,"slug":1553,"dossier":89,"summary":1554,"aliases":1555,"sourceIds":1559,"published":1560,"modified":1561,"checkedAt":7,"severity":1562,"references":1565,"versionKeys":1581,"packageCount":32,"repositoryCount":1195},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1556,1557,1558],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[121,1558],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[1563],{"type":1174,"score":1564},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1566,1568,1570,1572,1574,1575,1577,1579],{"type":1123,"url":1567},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1112,"url":1569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1123,"url":1571},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1123,"url":1573},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1120,"url":1317},{"type":1123,"url":1576},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1120,"url":1578},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1112,"url":1580},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":122,"slug":1583,"dossier":45,"summary":1584,"aliases":1585,"sourceIds":1588,"published":1589,"modified":1590,"checkedAt":7,"severity":1591,"references":1594,"versionKeys":1617,"packageCount":32,"repositoryCount":32},"ghsa-6497-prx7-gpmq-2b8ee85d","geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure",[1586,1587],"CVE-2025-69662","PYSEC-2026-62",[122,1587],"2026-01-30T19:16:11.967Z","2026-06-10T17:01:18.172032507Z",[1592],{"type":1108,"score":1593},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1595,1597,1599,1601,1603,1605,1607,1609,1611,1613,1615],{"type":1112,"url":1596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69662",{"type":1123,"url":1598},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fissues\u002F3679",{"type":1117,"url":1600},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fpull\u002F3681",{"type":1123,"url":1602},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fcommit\u002F6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419",{"type":1123,"url":1604},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas",{"type":1120,"url":1606},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas",{"type":1123,"url":1608},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Freleases\u002Ftag\u002Fv1.1.2",{"type":1123,"url":1610},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgeopandas\u002FPYSEC-2026-62.yaml",{"type":1123,"url":1612},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00025.html",{"type":1308,"url":1614},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas\u002F",{"type":1112,"url":1616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6497-prx7-gpmq",[1618],"pypi:geopandas@1.0.1",{"id":123,"slug":1620,"dossier":89,"summary":1621,"aliases":1622,"sourceIds":1625,"published":1626,"modified":1627,"checkedAt":7,"severity":1628,"references":1633,"versionKeys":1642,"packageCount":32,"repositoryCount":1646},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1623,1624],"CVE-2026-45409","PYSEC-2026-215",[123,1624],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1629,1631],{"type":1108,"score":1630},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1174,"score":1632},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1634,1636,1638,1640],{"type":1112,"url":1635},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1112,"url":1637},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1120,"url":1639},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1123,"url":1641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1643,1644,1645],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":124,"slug":1648,"dossier":89,"summary":1649,"aliases":1650,"sourceIds":1654,"published":1655,"modified":1656,"checkedAt":7,"severity":1657,"references":1659,"versionKeys":1672,"packageCount":32,"repositoryCount":1195},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[1651,1652,1653],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[124,1653],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[1658],{"type":1108,"score":1147},[1660,1662,1664,1666,1668,1670,1671],{"type":1308,"url":1661},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1112,"url":1663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1117,"url":1665},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1117,"url":1667},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1123,"url":1669},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1120,"url":1317},{"type":1112,"url":1576},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":125,"slug":1674,"dossier":45,"summary":1675,"aliases":1676,"sourceIds":1679,"published":1680,"modified":1681,"checkedAt":7,"severity":1682,"references":1685,"versionKeys":1698,"packageCount":32,"repositoryCount":104},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[1677,1678],"CVE-2026-1703","PYSEC-2026-1796",[125,1678],"2026-02-02T15:30:34Z","2026-07-07T17:56:16.480954738Z",[1683],{"type":1174,"score":1684},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1686,1688,1690,1692,1693,1695,1696],{"type":1112,"url":1687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":1123,"url":1689},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":1123,"url":1691},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":1120,"url":1404},{"type":1123,"url":1694},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":1120,"url":1412},{"type":1112,"url":1697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[1416,1417],{"id":126,"slug":1700,"dossier":45,"summary":1701,"aliases":1702,"sourceIds":1705,"published":1706,"modified":1707,"checkedAt":7,"severity":1708,"references":1711,"versionKeys":1724,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[1703,1704],"CVE-2025-66034","PYSEC-2026-1389",[126,1704],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[1709],{"type":1108,"score":1710},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[1712,1714,1716,1718,1720,1722],{"type":1123,"url":1713},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1112,"url":1715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1123,"url":1717},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1120,"url":1719},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1120,"url":1721},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1112,"url":1723},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[1725,1726,1727,1728,1729],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":127,"slug":1731,"dossier":45,"summary":1732,"aliases":1733,"sourceIds":1736,"published":1737,"modified":1738,"checkedAt":7,"severity":1739,"references":1741,"versionKeys":1750,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[1734,1735],"CVE-2026-49477","PYSEC-2026-3072",[127,1735],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[1740],{"type":1108,"score":1147},[1742,1744,1745,1746,1748],{"type":1123,"url":1743},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1120,"url":1152},{"type":1120,"url":1154},{"type":1112,"url":1747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1112,"url":1749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[1160,1161,1162],{"id":128,"slug":1752,"dossier":45,"summary":1753,"aliases":1754,"sourceIds":1758,"published":1759,"modified":1760,"checkedAt":7,"severity":1761,"references":1765,"versionKeys":1787,"packageCount":32,"repositoryCount":249},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1755,1756,1757],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[128,1757],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[1762,1763],{"type":1108,"score":1208},{"type":1174,"score":1764},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1766,1768,1770,1772,1774,1776,1777,1779,1781,1783,1785],{"type":1112,"url":1767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1123,"url":1769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1123,"url":1771},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1123,"url":1773},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1123,"url":1775},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1120,"url":1224},{"type":1123,"url":1778},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1123,"url":1780},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1123,"url":1782},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1120,"url":1784},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1112,"url":1786},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1236,1237,1238,1788,1789],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":129,"slug":1791,"dossier":89,"summary":1792,"aliases":1793,"sourceIds":1797,"published":1798,"modified":1799,"checkedAt":7,"severity":1800,"references":1802,"versionKeys":1812,"packageCount":32,"repositoryCount":1195},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[1794,1795,1796],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[129,1796],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[1801],{"type":1108,"score":1147},[1803,1805,1807,1808,1810,1811],{"type":1308,"url":1804},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1112,"url":1806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1117,"url":1313},{"type":1123,"url":1809},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1120,"url":1317},{"type":1112,"url":1319},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":130,"slug":1814,"dossier":45,"summary":1815,"aliases":1816,"sourceIds":1819,"published":1820,"modified":1821,"checkedAt":7,"severity":1822,"references":1825,"versionKeys":1844,"packageCount":32,"repositoryCount":249},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1817,1818],"CVE-2024-47081","PYSEC-2026-1872",[130,1818],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1823],{"type":1108,"score":1824},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1826,1828,1830,1832,1834,1836,1838,1840,1842],{"type":1123,"url":1827},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1112,"url":1829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1123,"url":1831},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1117,"url":1833},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1120,"url":1835},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1123,"url":1837},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1123,"url":1839},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1120,"url":1841},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1112,"url":1843},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1845,1846],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":131,"slug":1848,"dossier":89,"summary":1849,"aliases":1850,"sourceIds":1854,"published":1855,"modified":1856,"checkedAt":7,"severity":1857,"references":1859,"versionKeys":1872,"packageCount":32,"repositoryCount":1195},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[1851,1852,1853],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[131,1853],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[1858],{"type":1108,"score":1147},[1860,1862,1864,1866,1868,1870,1871],{"type":1308,"url":1861},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1112,"url":1863},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1117,"url":1865},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1117,"url":1867},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1123,"url":1869},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1120,"url":1317},{"type":1112,"url":1576},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":132,"slug":1874,"dossier":45,"summary":1875,"aliases":1876,"sourceIds":1879,"published":1880,"modified":1881,"checkedAt":7,"severity":1882,"references":1885,"versionKeys":1902,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1877,1878],"CVE-2024-35195","PYSEC-2026-1873",[132,1878],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1883],{"type":1108,"score":1884},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1886,1888,1890,1892,1894,1895,1897,1899,1900],{"type":1123,"url":1887},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1112,"url":1889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1123,"url":1891},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1117,"url":1893},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1120,"url":1835},{"type":1123,"url":1896},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1123,"url":1898},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1120,"url":1841},{"type":1112,"url":1901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1845],{"id":133,"slug":1904,"dossier":45,"summary":1905,"aliases":1906,"sourceIds":1909,"published":1910,"modified":1911,"checkedAt":7,"severity":1912,"references":1916,"versionKeys":1926,"packageCount":32,"repositoryCount":1293},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[1907,1908],"CVE-2026-44660","PYSEC-2026-2293",[133,1908],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[1913,1914],{"type":1108,"score":1147},{"type":1174,"score":1915},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1917,1919,1921,1923,1924],{"type":1117,"url":1918},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":1112,"url":1920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":1117,"url":1922},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":1120,"url":1287},{"type":1112,"url":1925},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[1291,1292],{"id":134,"slug":1928,"dossier":45,"summary":1929,"aliases":1930,"sourceIds":1934,"published":1935,"modified":1936,"checkedAt":7,"severity":1937,"references":1942,"versionKeys":1958,"packageCount":32,"repositoryCount":230},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[1931,1932,1933],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[134],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[1938,1940],{"type":1108,"score":1939},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1174,"score":1941},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1943,1945,1947,1949,1950,1952,1954,1956],{"type":1112,"url":1944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1123,"url":1946},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1123,"url":1948},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1120,"url":1224},{"type":1123,"url":1951},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1123,"url":1953},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1123,"url":1955},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1123,"url":1957},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1236,1237],{"id":135,"slug":1960,"dossier":45,"summary":1961,"aliases":1962,"sourceIds":1965,"published":1966,"modified":1967,"checkedAt":7,"severity":1968,"references":1970,"versionKeys":1986,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[1963,1964],"CVE-2026-32875","PYSEC-2026-2292",[135,1964],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[1969],{"type":1108,"score":1147},[1971,1973,1975,1977,1979,1980,1982,1984],{"type":1308,"url":1972},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":1112,"url":1974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":1217,"url":1976},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":1117,"url":1978},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":1120,"url":1287},{"type":1123,"url":1981},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":1123,"url":1983},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":1217,"url":1985},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[1291],{"id":136,"slug":1988,"dossier":45,"summary":1989,"aliases":1990,"sourceIds":1994,"published":1995,"modified":1996,"checkedAt":7,"severity":1997,"references":2001,"versionKeys":2041,"packageCount":32,"repositoryCount":2042},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1991,1992,1993],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[136,1993],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1998,2000],{"type":1174,"score":1999},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1108,"score":1147},[2002,2004,2006,2008,2010,2012,2013,2015,2017,2019,2021,2023,2025,2027,2029,2031,2033,2035,2037,2039],{"type":1123,"url":2003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1112,"url":2005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1123,"url":2007},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1123,"url":2009},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1123,"url":2011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1120,"url":1317},{"type":1123,"url":2014},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1123,"url":2016},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1123,"url":2018},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1112,"url":2020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1112,"url":2022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1112,"url":2024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1112,"url":2026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1112,"url":2028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1112,"url":2030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1112,"url":2032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1112,"url":2034},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1112,"url":2036},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1112,"url":2038},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1112,"url":2040},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1321,1322,1323,1324,1325,1326,1327],12,{"id":137,"slug":2044,"dossier":45,"summary":2045,"aliases":2046,"sourceIds":2049,"published":2050,"modified":2051,"checkedAt":7,"severity":2052,"references":2055,"versionKeys":2072,"packageCount":32,"repositoryCount":230},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2047,2048],"CVE-2025-27516","PYSEC-2026-1471",[137,2048],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[2053],{"type":1174,"score":2054},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2056,2058,2060,2062,2064,2066,2068,2070],{"type":1123,"url":2057},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1112,"url":2059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1117,"url":2061},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1120,"url":2063},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1123,"url":2065},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1123,"url":2067},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1120,"url":2069},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1112,"url":2071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2073,2074],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":138,"slug":2076,"dossier":45,"summary":2077,"aliases":2078,"sourceIds":2082,"published":2083,"modified":2084,"checkedAt":7,"severity":2085,"references":2090,"versionKeys":2106,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2079,2080,2081],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[138,2081],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[2086,2088],{"type":1108,"score":2087},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1174,"score":2089},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2091,2093,2095,2097,2098,2100,2102,2104],{"type":1112,"url":2092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1123,"url":2094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1123,"url":2096},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1120,"url":1497},{"type":1123,"url":2099},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1123,"url":2101},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1120,"url":2103},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1112,"url":2105},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1503],{"id":139,"slug":2108,"dossier":45,"summary":2109,"aliases":2110,"sourceIds":2114,"published":2115,"modified":2116,"checkedAt":7,"severity":2117,"references":2122,"versionKeys":2140,"packageCount":32,"repositoryCount":230},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2111,2112,2113],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[139],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2118,2120],{"type":1108,"score":2119},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1174,"score":2121},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2123,2125,2127,2129,2131,2133,2134,2136,2138],{"type":1112,"url":2124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1123,"url":2126},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1123,"url":2128},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1123,"url":2130},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1123,"url":2132},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1120,"url":1224},{"type":1123,"url":2135},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1123,"url":2137},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1123,"url":2139},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1236,1237],{"id":140,"slug":2142,"dossier":89,"summary":2143,"aliases":2144,"sourceIds":2148,"published":2149,"modified":2150,"checkedAt":7,"severity":2151,"references":2154,"versionKeys":2168,"packageCount":32,"repositoryCount":1195},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2145,2146,2147],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[140,2147],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[2152],{"type":1108,"score":2153},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2155,2157,2159,2161,2163,2164,2165,2166],{"type":1123,"url":2156},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1112,"url":2158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1123,"url":2160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1123,"url":2162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1120,"url":1317},{"type":1123,"url":1576},{"type":1120,"url":1578},{"type":1112,"url":2167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":141,"slug":2170,"dossier":45,"summary":2171,"aliases":2172,"sourceIds":2175,"published":2176,"modified":2177,"checkedAt":7,"severity":2178,"references":2181,"versionKeys":2200,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[2173,2174],"CVE-2024-34062","PYSEC-2026-1976",[141,2174],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[2179],{"type":1108,"score":2180},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2182,2184,2186,2188,2190,2192,2194,2196,2198],{"type":1123,"url":2183},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1112,"url":2185},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1123,"url":2187},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1120,"url":2189},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1123,"url":2191},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1123,"url":2193},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1123,"url":2195},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1120,"url":2197},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1112,"url":2199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[2201],"pypi:tqdm@4.66.2",{"id":142,"slug":2203,"dossier":89,"summary":2204,"aliases":2205,"sourceIds":2208,"published":2209,"modified":2210,"checkedAt":7,"severity":2211,"references":2216,"versionKeys":2226,"packageCount":32,"repositoryCount":2229},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[2206,2207],"CVE-2026-25645","PYSEC-2026-2275",[142,2207],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[2212,2214],{"type":1108,"score":2213},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1108,"score":2215},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2217,2219,2221,2223,2224],{"type":1112,"url":2218},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1112,"url":2220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1117,"url":2222},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1120,"url":1835},{"type":1112,"url":2225},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1845,1846,2227,2228],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":143,"slug":2231,"dossier":89,"summary":2232,"aliases":2233,"sourceIds":2236,"published":2237,"modified":2238,"checkedAt":7,"severity":2239,"references":2241,"versionKeys":2252,"packageCount":32,"repositoryCount":1195},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2234,2235],"CVE-2025-66418","PYSEC-2026-1998",[143,2235],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[2240],{"type":1174,"score":1175},[2242,2244,2246,2248,2249,2250],{"type":1123,"url":2243},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1112,"url":2245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1117,"url":2247},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1120,"url":1184},{"type":1120,"url":1186},{"type":1112,"url":2251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1190,1191,1192,1193,1194],{"id":144,"slug":2254,"dossier":45,"summary":2255,"aliases":2256,"sourceIds":2259,"published":2260,"modified":2261,"checkedAt":7,"severity":2262,"references":2265,"versionKeys":2280,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2257,2258],"CVE-2024-56201","PYSEC-2026-1472",[144,2258],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[2263,2264],{"type":1108,"score":1484},{"type":1174,"score":2054},[2266,2268,2270,2272,2274,2275,2277,2278],{"type":1123,"url":2267},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1112,"url":2269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1123,"url":2271},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1117,"url":2273},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1120,"url":2063},{"type":1123,"url":2276},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1120,"url":2069},{"type":1112,"url":2279},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2073],{"id":145,"slug":2282,"dossier":89,"summary":2283,"aliases":2284,"sourceIds":2288,"published":2289,"modified":2290,"checkedAt":7,"severity":2291,"references":2294,"versionKeys":2306,"packageCount":32,"repositoryCount":2314},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[2285,2286,2287],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[145,2287],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[2292],{"type":1108,"score":2293},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2295,2297,2299,2301,2303,2304],{"type":1308,"url":2296},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1112,"url":2298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1117,"url":2300},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1123,"url":2302},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1120,"url":1497},{"type":1112,"url":2305},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1503,1504,1505,2307,2308,2309,2310,2311,2312,2313],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":146,"slug":2316,"dossier":45,"summary":2317,"aliases":2318,"sourceIds":2321,"published":2322,"modified":2323,"checkedAt":7,"severity":2324,"references":2327,"versionKeys":2348,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2319,2320],"CVE-2024-34064","PYSEC-2026-1474",[146,2320],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[2325],{"type":1108,"score":2326},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2328,2330,2332,2334,2335,2337,2339,2341,2343,2345,2346],{"type":1123,"url":2329},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1112,"url":2331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1117,"url":2333},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1120,"url":2063},{"type":1123,"url":2336},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1123,"url":2338},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1123,"url":2340},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1123,"url":2342},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1123,"url":2344},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1120,"url":2069},{"type":1112,"url":2347},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2073],{"id":147,"slug":2350,"dossier":89,"summary":2351,"aliases":2352,"sourceIds":2356,"published":2357,"modified":2358,"checkedAt":7,"severity":2359,"references":2361,"versionKeys":2375,"packageCount":32,"repositoryCount":1195},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[2353,2354,2355],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[147,2355],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[2360],{"type":1108,"score":1147},[2362,2364,2366,2368,2370,2371,2372,2373],{"type":1123,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1112,"url":2365},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1123,"url":2367},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1123,"url":2369},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1120,"url":1317},{"type":1123,"url":1576},{"type":1120,"url":1578},{"type":1112,"url":2374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":148,"slug":2377,"dossier":45,"summary":2378,"aliases":2379,"sourceIds":2382,"published":2383,"modified":2384,"checkedAt":7,"severity":2385,"references":2388,"versionKeys":2401,"packageCount":32,"repositoryCount":104},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[2380,2381],"CVE-2026-6357","PYSEC-2026-2876",[148,2381],"2026-04-27T15:30:52Z","2026-07-13T16:43:01.316339792Z",[2386],{"type":1174,"score":2387},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2389,2391,2393,2395,2396,2398,2399],{"type":1112,"url":2390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":1123,"url":2392},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":1123,"url":2394},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":1120,"url":1404},{"type":1123,"url":2397},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":1120,"url":1412},{"type":1112,"url":2400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[1416,1417],{"id":149,"slug":2403,"dossier":45,"summary":2404,"aliases":2405,"sourceIds":2408,"published":2409,"modified":2410,"checkedAt":7,"severity":2411,"references":2414,"versionKeys":2422,"packageCount":32,"repositoryCount":104},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2406,2407],"CVE-2026-44432","PYSEC-2026-142",[149,2407],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2412,2413],{"type":1108,"score":1147},{"type":1174,"score":1175},[2415,2417,2419,2421],{"type":1112,"url":2416},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1112,"url":2418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1123,"url":2420},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1120,"url":1184},[2423],"pypi:urllib3@2.6.3",{"id":150,"slug":2425,"dossier":45,"summary":2426,"aliases":2427,"sourceIds":2430,"published":2431,"modified":2432,"checkedAt":7,"severity":2433,"references":2439,"versionKeys":2466,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[2428,2429],"CVE-2023-5752","PYSEC-2023-228",[150,2429],"2023-10-25T18:17:00Z","2026-06-10T17:01:27.606909654Z",[2434,2435,2437],{"type":1108,"score":2215},{"type":1174,"score":2436},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1108,"score":2438},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2440,2442,2444,2446,2448,2449,2450,2452,2454,2456,2458,2460,2462,2464],{"type":1112,"url":2441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":1117,"url":2443},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":1123,"url":2445},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":1123,"url":2447},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":1120,"url":1404},{"type":1123,"url":1406},{"type":1123,"url":2451},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":1123,"url":2453},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":1123,"url":2455},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":1123,"url":2457},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":1123,"url":2459},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":1123,"url":2461},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":1112,"url":2463},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":1112,"url":2465},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[1416],{"id":151,"slug":2468,"dossier":45,"summary":2469,"aliases":2470,"sourceIds":2474,"published":2475,"modified":2476,"checkedAt":7,"severity":2477,"references":2480,"versionKeys":2493,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[2471,2472,2473],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[151,2473],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[2478,2479],{"type":1108,"score":1630},{"type":1108,"score":1147},[2481,2483,2485,2487,2489,2491,2492],{"type":1308,"url":2482},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1112,"url":2484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1117,"url":2486},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1117,"url":2488},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1123,"url":2490},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1120,"url":1317},{"type":1112,"url":1576},[1326,1327,1328],{"id":152,"slug":2495,"dossier":89,"summary":2496,"aliases":2497,"sourceIds":2501,"published":2502,"modified":2503,"checkedAt":7,"severity":2504,"references":2506,"versionKeys":2517,"packageCount":32,"repositoryCount":1195},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[2498,2499,2500],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[152,2500],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[2505],{"type":1108,"score":1147},[2507,2509,2511,2513,2515,2516],{"type":1308,"url":2508},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1112,"url":2510},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1117,"url":2512},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1123,"url":2514},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1120,"url":1317},{"type":1112,"url":1319},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":153,"slug":2519,"dossier":45,"summary":2520,"aliases":2521,"sourceIds":2524,"published":2525,"modified":2526,"checkedAt":7,"severity":2527,"references":2529,"versionKeys":2541,"packageCount":32,"repositoryCount":249},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2522,2523],"CVE-2025-50181","PYSEC-2026-1999",[153,2523],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2528],{"type":1108,"score":1340},[2530,2532,2534,2536,2537,2538,2539],{"type":1123,"url":2531},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1112,"url":2533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1117,"url":2535},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1120,"url":1184},{"type":1123,"url":1350},{"type":1120,"url":1186},{"type":1112,"url":2540},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1190,1191,1192,1193],{"id":154,"slug":2543,"dossier":89,"summary":2544,"aliases":2545,"sourceIds":2549,"published":2550,"modified":2551,"checkedAt":7,"severity":2552,"references":2556,"versionKeys":2568,"packageCount":32,"repositoryCount":1195},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2546,2547,2548],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[154,2548],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2553,2554],{"type":1174,"score":1999},{"type":1108,"score":2555},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2557,2558,2560,2562,2564,2566,2567],{"type":1123,"url":2003},{"type":1117,"url":2559},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1112,"url":2561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1117,"url":2563},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1117,"url":2565},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1120,"url":1317},{"type":1112,"url":1550},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":155,"slug":2570,"dossier":45,"summary":2571,"aliases":2572,"sourceIds":2575,"published":2576,"modified":2577,"checkedAt":7,"severity":2578,"references":2582,"versionKeys":2595,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2573,2574],"CVE-2024-56326","PYSEC-2026-1475",[155,2574],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2579,2581],{"type":1108,"score":2580},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1174,"score":2054},[2583,2585,2587,2589,2590,2591,2592,2593],{"type":1123,"url":2584},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1112,"url":2586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1117,"url":2588},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1120,"url":2063},{"type":1123,"url":2276},{"type":1123,"url":2065},{"type":1120,"url":2069},{"type":1112,"url":2594},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2073],{"id":156,"slug":2597,"dossier":89,"summary":2598,"aliases":2599,"sourceIds":2602,"published":2603,"modified":2604,"checkedAt":7,"severity":2605,"references":2610,"versionKeys":2616,"packageCount":32,"repositoryCount":2229},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2600,2601],"CVE-2026-44431","PYSEC-2026-141",[156,2601],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2606,2608],{"type":1108,"score":2607},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1174,"score":2609},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2611,2613,2615],{"type":1112,"url":2612},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1112,"url":2614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1120,"url":1184},[1190,1191,1192,1193,1194,2423],{"id":157,"slug":2618,"dossier":45,"summary":2619,"aliases":2620,"sourceIds":2624,"published":2625,"modified":2626,"checkedAt":7,"severity":2627,"references":2631,"versionKeys":2649,"packageCount":32,"repositoryCount":2653},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[2621,2622,2623],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[157],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[2628,2629],{"type":1108,"score":2119},{"type":1174,"score":2630},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2632,2634,2636,2638,2640,2642,2643,2645,2647],{"type":1112,"url":2633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1123,"url":2635},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1123,"url":2637},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1123,"url":2639},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1123,"url":2641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1120,"url":1224},{"type":1123,"url":2644},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1123,"url":2646},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1123,"url":2648},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1236,1237,1238,1788,1789,2650,2651,2652],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",9,{"id":158,"slug":2655,"dossier":45,"summary":2656,"aliases":2657,"sourceIds":2660,"published":2661,"modified":2662,"checkedAt":7,"severity":2663,"references":2666,"versionKeys":2681,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[2658,2659],"CVE-2026-22701","PYSEC-2026-1374",[158,2659],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[2664],{"type":1108,"score":2665},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[2667,2669,2671,2673,2675,2677,2679],{"type":1123,"url":2668},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1112,"url":2670},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1123,"url":2672},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1123,"url":2674},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1120,"url":2676},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1120,"url":2678},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1112,"url":2680},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[2682,2683,2684,2685],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":159,"slug":2687,"dossier":45,"summary":2688,"aliases":2689,"sourceIds":2693,"published":2694,"modified":2695,"checkedAt":7,"severity":2696,"references":2699,"versionKeys":2713,"packageCount":32,"repositoryCount":1195},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2690,2691,2692],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[159,2692],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2697,2698],{"type":1108,"score":1212},{"type":1174,"score":1542},[2700,2702,2704,2706,2708,2709,2710,2711],{"type":1123,"url":2701},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1112,"url":2703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1123,"url":2705},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1123,"url":2707},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1120,"url":1317},{"type":1123,"url":1550},{"type":1120,"url":1578},{"type":1112,"url":2712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":160,"slug":2715,"dossier":45,"summary":2716,"aliases":2717,"sourceIds":2720,"published":2721,"modified":2722,"checkedAt":7,"severity":2723,"references":2726,"versionKeys":2739,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[2718,2719],"CVE-2026-25087","PYSEC-2026-113",[160,2719],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[2724],{"type":1108,"score":2725},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[2727,2729,2731,2733,2735,2737],{"type":1112,"url":2728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1117,"url":2730},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1120,"url":2732},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1123,"url":2734},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1112,"url":2736},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1112,"url":2738},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[2740,2741,2742,2743],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":161,"slug":2745,"dossier":45,"summary":2746,"aliases":2747,"sourceIds":2751,"published":2115,"modified":2752,"checkedAt":7,"severity":2753,"references":2756,"versionKeys":2774,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[2748,2749,2750],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[161],"2026-07-17T17:15:51.452848951Z",[2754,2755],{"type":1108,"score":2119},{"type":1174,"score":2630},[2757,2759,2761,2763,2765,2767,2768,2770,2772],{"type":1112,"url":2758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1123,"url":2760},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1123,"url":2762},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1123,"url":2764},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1123,"url":2766},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1120,"url":1224},{"type":1123,"url":2769},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1123,"url":2771},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1123,"url":2773},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[2775,1236,1237,1238,1788,1789,2650,2651,2652],"pypi:torch@2.10.0",{"id":162,"slug":2777,"dossier":45,"summary":2778,"aliases":2779,"sourceIds":2782,"published":2783,"modified":2784,"checkedAt":7,"severity":2785,"references":2788,"versionKeys":2801,"packageCount":32,"repositoryCount":1293},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[2780,2781],"CVE-2026-41066","PYSEC-2026-87",[162,2781],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[2786],{"type":1108,"score":2787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2789,2791,2793,2795,2797,2799],{"type":1112,"url":2790},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":1112,"url":2792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":1217,"url":2794},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":1120,"url":2796},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":1123,"url":2798},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":1123,"url":2800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[2802,2803,2804],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":163,"slug":2806,"dossier":45,"summary":2807,"aliases":2808,"sourceIds":2812,"published":2115,"modified":2813,"checkedAt":7,"severity":2814,"references":2817,"versionKeys":2832,"packageCount":32,"repositoryCount":2833},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[2809,2810,2811],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[163],"2026-06-10T17:41:15.774477397Z",[2815,2816],{"type":1108,"score":2119},{"type":1174,"score":2121},[2818,2820,2821,2822,2823,2825,2826,2828,2830],{"type":1112,"url":2819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1123,"url":2126},{"type":1123,"url":2128},{"type":1123,"url":2130},{"type":1123,"url":2824},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1120,"url":1224},{"type":1123,"url":2827},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1123,"url":2829},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1123,"url":2831},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1236,1237,1238,1788,1789,2650],8,{"id":164,"slug":2835,"dossier":45,"summary":2836,"aliases":2837,"sourceIds":2841,"published":2842,"modified":2843,"checkedAt":7,"severity":2844,"references":2846,"versionKeys":2860,"packageCount":32,"repositoryCount":1195},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[2838,2839,2840],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[164,2840],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[2845],{"type":1174,"score":1915},[2847,2849,2851,2853,2855,2856,2857,2858],{"type":1123,"url":2848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1112,"url":2850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1123,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1123,"url":2854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1120,"url":1317},{"type":1123,"url":1576},{"type":1120,"url":1578},{"type":1112,"url":2859},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":165,"slug":2862,"dossier":45,"summary":2863,"aliases":2864,"sourceIds":2867,"published":2868,"modified":2869,"checkedAt":7,"severity":2870,"references":2873,"versionKeys":2890,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[2865,2866],"CVE-2025-68146","PYSEC-2026-1375",[165,2866],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[2871],{"type":1108,"score":2872},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2874,2876,2878,2879,2881,2883,2885,2886,2888],{"type":1123,"url":2875},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1123,"url":2877},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1120,"url":2676},{"type":1123,"url":2880},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1123,"url":2882},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1123,"url":2884},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1120,"url":2678},{"type":1112,"url":2887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1112,"url":2889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[2682,2683,2684,2685],{"id":166,"slug":2892,"dossier":45,"summary":2893,"aliases":2894,"sourceIds":2897,"published":2898,"modified":2899,"checkedAt":7,"severity":2900,"references":2906,"versionKeys":2942,"packageCount":32,"repositoryCount":104},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[2895,2896],"CVE-2026-8643","PYSEC-2026-196",[166,2896],"2026-06-01T17:17:35.770Z","2026-07-14T02:29:29.982772188Z",[2901,2903,2905],{"type":1108,"score":2902},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1174,"score":2904},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1108,"score":2215},[2907,2909,2911,2913,2915,2917,2919,2921,2923,2925,2927,2929,2931,2933,2935,2937,2938,2940],{"type":1112,"url":2908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":1117,"url":2910},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":1123,"url":2912},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":1123,"url":2914},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":1123,"url":2916},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":1123,"url":2918},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":1123,"url":2920},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":1123,"url":2922},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":1123,"url":2924},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":1123,"url":2926},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":1123,"url":2928},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1123,"url":2930},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":1123,"url":2932},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":1123,"url":2934},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":1123,"url":2936},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":1120,"url":1404},{"type":1112,"url":2939},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":1112,"url":2941},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[1416,1417],{"id":167,"slug":2944,"dossier":45,"summary":2945,"aliases":2946,"sourceIds":2949,"published":2950,"modified":2951,"checkedAt":7,"severity":2952,"references":2954,"versionKeys":2970,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[2947,2948],"CVE-2026-32874","PYSEC-2026-2291",[167,2948],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[2953],{"type":1108,"score":1147},[2955,2957,2959,2961,2962,2964,2966,2968],{"type":1112,"url":2956},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":1112,"url":2958},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":1117,"url":2960},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":1120,"url":1287},{"type":1112,"url":2963},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":1123,"url":2965},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":1123,"url":2967},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":1217,"url":2969},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[1291],{"id":168,"slug":2972,"dossier":45,"summary":2973,"aliases":2974,"sourceIds":2978,"published":2979,"modified":2980,"checkedAt":7,"severity":2981,"references":2984,"versionKeys":3022,"packageCount":32,"repositoryCount":1195},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2975,2976,2977],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[168,2977],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2982,2983],{"type":1108,"score":1147},{"type":1174,"score":1915},[2985,2987,2989,2991,2993,2994,2996,2998,3000,3002,3004,3006,3007,3009,3011,3013,3014,3016,3018,3020],{"type":1123,"url":2986},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1112,"url":2988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1123,"url":2990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1123,"url":2992},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1120,"url":1317},{"type":1123,"url":2995},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1123,"url":2997},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1123,"url":2999},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1112,"url":3001},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1112,"url":3003},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1112,"url":3005},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1112,"url":2026},{"type":1112,"url":3008},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1112,"url":3010},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1112,"url":3012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1112,"url":2028},{"type":1112,"url":3015},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1112,"url":3017},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1112,"url":3019},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1112,"url":3021},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1321,1322,1323,1324,1325,1326,1327,1328],{"id":169,"slug":3024,"dossier":45,"summary":3025,"aliases":3026,"sourceIds":3030,"published":3031,"modified":3032,"checkedAt":7,"severity":3033,"references":3036,"versionKeys":3045,"packageCount":32,"repositoryCount":1195},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[3027,3028,3029],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[169,3029],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[3034,3035],{"type":1108,"score":1212},{"type":1174,"score":1542},[3037,3039,3041,3043,3044],{"type":1112,"url":3038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1112,"url":3040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1123,"url":3042},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1120,"url":1317},{"type":1112,"url":1550},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":170,"slug":3047,"dossier":45,"summary":3048,"aliases":3049,"sourceIds":3053,"published":3054,"modified":3055,"checkedAt":7,"severity":3056,"references":3061,"versionKeys":3077,"packageCount":32,"repositoryCount":230},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[3050,3051,3052],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[170],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[3057,3059],{"type":1108,"score":3058},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1174,"score":3060},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3062,3064,3066,3068,3070,3071,3073,3075],{"type":1112,"url":3063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1123,"url":3065},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1123,"url":3067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1123,"url":3069},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1120,"url":1224},{"type":1123,"url":3072},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1123,"url":3074},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1123,"url":3076},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1236,1237],{"id":171,"slug":3079,"dossier":45,"summary":3080,"aliases":3081,"sourceIds":3085,"published":3086,"modified":3087,"checkedAt":7,"severity":3088,"references":3091,"versionKeys":3105,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[3082,3083,3084],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[171,3084],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[3089],{"type":1108,"score":3090},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3092,3094,3096,3098,3100,3102,3103],{"type":1112,"url":3093},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1112,"url":3095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1123,"url":3097},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1117,"url":3099},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1123,"url":3101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1120,"url":1317},{"type":1123,"url":3104},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1324],{"id":172,"slug":3107,"dossier":45,"summary":3108,"aliases":3109,"sourceIds":3113,"published":3114,"modified":3115,"checkedAt":7,"severity":3116,"references":3119,"versionKeys":3130,"packageCount":32,"repositoryCount":1195},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[3110,3111,3112],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[172,3112],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[3117],{"type":1108,"score":3118},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3120,3122,3124,3126,3128,3129],{"type":1308,"url":3121},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1112,"url":3123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1117,"url":3125},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1117,"url":3127},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1120,"url":1317},{"type":1112,"url":1576},[1321,1322,1323,1324,1325,1326,1327,1328],{"id":173,"slug":3132,"dossier":45,"summary":82,"aliases":3133,"sourceIds":3136,"published":3137,"modified":3138,"checkedAt":7,"severity":3139,"references":3141,"versionKeys":3150,"packageCount":32,"repositoryCount":230},"pysec-2025-198-62b25ed4",[3134,3135],"BIT-pytorch-2025-46148","CVE-2025-46148",[173],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[3140],{"type":1108,"score":2607},[3142,3144,3146,3148],{"type":1112,"url":3143},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1112,"url":3145},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1217,"url":3147},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1117,"url":3149},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1236,1237],{"id":174,"slug":3152,"dossier":45,"summary":82,"aliases":3153,"sourceIds":3156,"published":3157,"modified":3158,"checkedAt":7,"severity":3159,"references":3161,"versionKeys":3167,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[3154,3155],"BIT-pytorch-2025-46149","CVE-2025-46149",[174],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[3160],{"type":1108,"score":2607},[3162,3163,3165],{"type":1112,"url":3143},{"type":1217,"url":3164},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1117,"url":3166},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1237],{"id":175,"slug":3169,"dossier":45,"summary":82,"aliases":3170,"sourceIds":3173,"published":3174,"modified":3175,"checkedAt":7,"severity":3176,"references":3178,"versionKeys":3186,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[3171,3172],"BIT-pytorch-2025-46150","CVE-2025-46150",[175],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[3177],{"type":1108,"score":2607},[3179,3180,3182,3184],{"type":1112,"url":3143},{"type":1217,"url":3181},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1217,"url":3183},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1117,"url":3185},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1237],{"id":176,"slug":3188,"dossier":45,"summary":82,"aliases":3189,"sourceIds":3192,"published":3193,"modified":3194,"checkedAt":7,"severity":3195,"references":3197,"versionKeys":3203,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[3190,3191],"BIT-pytorch-2025-46152","CVE-2025-46152",[176],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[3196],{"type":1108,"score":1630},[3198,3199,3201],{"type":1112,"url":3143},{"type":1217,"url":3200},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1117,"url":3202},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1237],{"id":177,"slug":3205,"dossier":45,"summary":82,"aliases":3206,"sourceIds":3209,"published":3210,"modified":3211,"checkedAt":7,"severity":3212,"references":3214,"versionKeys":3224,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[3207,3208],"BIT-pytorch-2025-46153","CVE-2025-46153",[177],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[3213],{"type":1108,"score":2607},[3215,3217,3218,3220,3222],{"type":1123,"url":3216},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1112,"url":3143},{"type":1112,"url":3219},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1217,"url":3221},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1117,"url":3223},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1237],{"id":178,"slug":3226,"dossier":45,"summary":82,"aliases":3227,"sourceIds":3230,"published":3231,"modified":3232,"checkedAt":7,"severity":3233,"references":3235,"versionKeys":3240,"packageCount":32,"repositoryCount":2833},"pysec-2025-203-2febb201",[3228,3229],"BIT-pytorch-2025-55551","CVE-2025-55551",[178],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[3234],{"type":1108,"score":1147},[3236,3238],{"type":1112,"url":3237},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1217,"url":3239},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1236,1237,1238,1788,1789,2650],{"id":179,"slug":3242,"dossier":45,"summary":82,"aliases":3243,"sourceIds":3246,"published":3247,"modified":3248,"checkedAt":7,"severity":3249,"references":3251,"versionKeys":3255,"packageCount":32,"repositoryCount":2833},"pysec-2025-204-cdae47da",[3244,3245],"BIT-pytorch-2025-55552","CVE-2025-55552",[179],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[3250],{"type":1108,"score":1147},[3252,3253],{"type":1112,"url":3237},{"type":1217,"url":3254},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1236,1237,1238,1788,1789,2650],{"id":180,"slug":3257,"dossier":45,"summary":82,"aliases":3258,"sourceIds":3261,"published":3262,"modified":3263,"checkedAt":7,"severity":3264,"references":3266,"versionKeys":3272,"packageCount":32,"repositoryCount":104},"pysec-2025-205-fd5e58fd",[3259,3260],"BIT-pytorch-2025-55553","CVE-2025-55553",[180],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[3265],{"type":1108,"score":1147},[3267,3268,3270],{"type":1112,"url":3237},{"type":1217,"url":3269},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1117,"url":3271},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1236,1237,1238],{"id":181,"slug":3274,"dossier":45,"summary":82,"aliases":3275,"sourceIds":3278,"published":3279,"modified":3280,"checkedAt":7,"severity":3281,"references":3283,"versionKeys":3287,"packageCount":32,"repositoryCount":2833},"pysec-2025-206-58322476",[3276,3277],"BIT-pytorch-2025-55554","CVE-2025-55554",[181],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[3282],{"type":1108,"score":1630},[3284,3285],{"type":1112,"url":3237},{"type":1217,"url":3286},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1236,1237,1238,1788,1789,2650],{"id":182,"slug":3289,"dossier":45,"summary":82,"aliases":3290,"sourceIds":3293,"published":3294,"modified":3295,"checkedAt":7,"severity":3296,"references":3298,"versionKeys":3304,"packageCount":32,"repositoryCount":104},"pysec-2025-207-2abef3fc",[3291,3292],"BIT-pytorch-2025-55557","CVE-2025-55557",[182],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[3297],{"type":1108,"score":1147},[3299,3300,3302],{"type":1112,"url":3237},{"type":1217,"url":3301},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1117,"url":3303},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1236,1237,1238],{"id":183,"slug":3306,"dossier":45,"summary":82,"aliases":3307,"sourceIds":3310,"published":3311,"modified":3312,"checkedAt":7,"severity":3313,"references":3315,"versionKeys":3321,"packageCount":32,"repositoryCount":104},"pysec-2025-208-6e93fe9d",[3308,3309],"BIT-pytorch-2025-55558","CVE-2025-55558",[183],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[3314],{"type":1108,"score":1147},[3316,3317,3319],{"type":1112,"url":3237},{"type":1217,"url":3318},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1117,"url":3320},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1236,1237,1238],{"id":184,"slug":3323,"dossier":45,"summary":82,"aliases":3324,"sourceIds":3327,"published":3328,"modified":3329,"checkedAt":7,"severity":3330,"references":3332,"versionKeys":3338,"packageCount":32,"repositoryCount":104},"pysec-2025-209-e6f352b0",[3325,3326],"BIT-pytorch-2025-55560","CVE-2025-55560",[184],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[3331],{"type":1108,"score":1147},[3333,3334,3336],{"type":1112,"url":3237},{"type":1217,"url":3335},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1117,"url":3337},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1236,1237,1238],{"id":185,"slug":3340,"dossier":45,"summary":82,"aliases":3341,"sourceIds":3344,"published":3345,"modified":3346,"checkedAt":7,"severity":3347,"references":3349,"versionKeys":3360,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[3342,3343],"BIT-pytorch-2026-4538","CVE-2026-4538",[185],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[3348],{"type":1108,"score":2580},[3350,3352,3354,3356,3358],{"type":1123,"url":3351},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1112,"url":3353},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1112,"url":3355},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1217,"url":3357},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1117,"url":3359},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[2775,1236,1237,1238,1788,1789,2650,2651,2652],{"id":186,"slug":3362,"dossier":89,"summary":82,"aliases":3363,"sourceIds":3366,"published":3367,"modified":3368,"checkedAt":7,"severity":3369,"references":3372,"versionKeys":3387,"packageCount":32,"repositoryCount":2314},"pysec-2026-2132-627bf7c7",[3364,3365],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[186],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[3370],{"type":1108,"score":3371},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3373,3375,3377,3379,3381,3383,3385],{"type":1123,"url":3374},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1123,"url":3376},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1112,"url":3378},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1112,"url":3380},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1217,"url":3382},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1117,"url":3384},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1308,"url":3386},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[3388,3389,3390,3391,3392,3393],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":187,"slug":3395,"dossier":45,"summary":82,"aliases":3396,"sourceIds":3401,"published":3402,"modified":3403,"checkedAt":7,"severity":3404,"references":3406,"versionKeys":3423,"packageCount":32,"repositoryCount":2653},"pysec-2026-2286-8795b007",[3397,3398,3399,3400],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[187],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[3405],{"type":1108,"score":2087},[3407,3409,3411,3413,3415,3417,3419,3421],{"type":1123,"url":3408},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1123,"url":3410},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1112,"url":3412},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1112,"url":3414},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1112,"url":3416},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1217,"url":3418},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1217,"url":3420},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1117,"url":3422},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1236,1237,1238,1788,1789,2650,2651,2652],1786588639612]