[{"data":1,"prerenderedAt":7303},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7674":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":309,"related":312},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":90,"resolvedComponentCount":98,"artifactResolvedComponentCount":98,"exactManifestPinCount":37,"packageCount":98,"ecosystems":99,"aiPackageCount":101,"licenseExpressionCount":102,"unknownLicensePackageCount":103,"advisoryIds":104,"advisoryCount":307,"providers":308},"opencode:7674","opencode-7674",7674,"Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation","Simulation of Coding Agents; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fcommit\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32","2025-10-30T09:26:36.741Z","2025-10-30T09:25:27.000Z",{"complete":89,"entryCount":30,"truncated":45},true,[91],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},"uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","bd553a0a85987dc2e10ac8a15fdc2c60ccd7405408e5ff41ef47eca9399dda7f",758178,"parsed",173,[100],"pypi",8,24,3,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3c37-wwvx-h642","GHSA-3f6c-7fw2-ppm4","GHSA-3hh9-752g-5g22","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5jv2-g5wq-cmr4","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7972-pg2x-xr59","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgg8-fqqc-vfmw","GHSA-hhrp-gw25-jr43","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-j842-xgm4-wf88","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-w2fm-2cpv-w7v5","GHSA-w6q7-j642-7c25","GHSA-w6vg-jg77-2qg6","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wcj4-jw5j-44wh","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-238","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-227","PYSEC-2026-2286","PYSEC-2026-2302",202,[],{"files":310,"occurrenceCount":98},[311],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},{"packages":313,"vulnerabilities":1889},[314,326,339,350,359,369,378,388,397,408,420,429,438,449,458,467,476,485,494,505,514,523,532,542,551,560,569,578,587,596,606,615,624,634,643,652,661,670,679,688,697,706,715,724,733,743,752,761,771,780,789,798,806,815,824,833,842,851,860,868,877,886,895,904,913,923,932,941,950,959,968,977,986,995,1004,1013,1022,1031,1040,1049,1058,1067,1076,1085,1094,1103,1112,1121,1130,1138,1147,1155,1164,1173,1182,1191,1199,1208,1218,1227,1236,1245,1253,1262,1271,1280,1289,1298,1307,1315,1324,1333,1341,1349,1358,1366,1375,1384,1393,1403,1412,1421,1430,1440,1449,1458,1467,1476,1485,1495,1504,1513,1522,1531,1540,1548,1557,1566,1575,1584,1593,1603,1612,1621,1629,1638,1647,1656,1665,1674,1683,1692,1701,1711,1720,1729,1740,1749,1757,1766,1774,1783,1792,1801,1810,1819,1827,1836,1844,1853,1862,1871,1880],{"id":315,"slug":316,"identity":317,"label":318,"aiRelevant":89,"provider":319,"advisoryCount":320,"licenseExpressions":321,"versions":323,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":325},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[322],"Apache-2.0",[324],"0.11.0",[54],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":89,"provider":331,"advisoryCount":334,"licenseExpressions":335,"versions":336,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":338},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":332,"label":333},"hugging-face","Hugging Face",25,[322],[337],"4.57.1",[54],{"id":340,"slug":341,"identity":342,"label":343,"aiRelevant":89,"provider":319,"advisoryCount":344,"licenseExpressions":345,"versions":347,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":349},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[346],"BSD-3-Clause",[348],"2.8.0",[54],{"id":351,"slug":352,"identity":353,"label":354,"aiRelevant":89,"provider":319,"advisoryCount":32,"licenseExpressions":355,"versions":356,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":358},"package:pypi:lmcache","lmcache-924a3cee","pypi:lmcache","LMCache",[],[357],"0.3.8",[54],{"id":360,"slug":361,"identity":362,"label":363,"aiRelevant":89,"provider":364,"advisoryCount":37,"licenseExpressions":365,"versions":366,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":368},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":332,"label":333},[322],[367],"4.3.0",[54],{"id":70,"slug":71,"identity":370,"label":72,"aiRelevant":89,"provider":371,"advisoryCount":37,"licenseExpressions":374,"versions":375,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":377},"pypi:openai",{"id":372,"label":373},"openai","OpenAI",[322],[376],"2.6.1",[54],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":89,"provider":319,"advisoryCount":37,"licenseExpressions":383,"versions":385,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":387},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[384],"non-standard",[386],"0.22.1",[54],{"id":389,"slug":390,"identity":391,"label":392,"aiRelevant":89,"provider":319,"advisoryCount":37,"licenseExpressions":393,"versions":394,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":396},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[384],[395],"0.12.0",[54],{"id":398,"slug":399,"identity":400,"label":401,"aiRelevant":45,"provider":319,"advisoryCount":402,"licenseExpressions":403,"versions":405,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":407},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[322,404],"Apache-2.0 AND MIT",[406],"3.13.1",[54],{"id":409,"slug":410,"identity":411,"label":412,"aiRelevant":45,"provider":319,"advisoryCount":413,"licenseExpressions":414,"versions":417,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":419},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[415,416],"HPND","MIT-CMU",[418],"12.0.0",[54],{"id":421,"slug":422,"identity":423,"label":424,"aiRelevant":45,"provider":319,"advisoryCount":101,"licenseExpressions":425,"versions":426,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":428},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[322],[427],"0.0.20",[54],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":45,"provider":319,"advisoryCount":101,"licenseExpressions":434,"versions":435,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":437},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[346],[436],"0.49.0",[54],{"id":439,"slug":440,"identity":441,"label":442,"aiRelevant":45,"provider":319,"advisoryCount":443,"licenseExpressions":444,"versions":446,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":448},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[445],"MIT",[447],"2.5.0",[54],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":45,"provider":319,"advisoryCount":64,"licenseExpressions":454,"versions":455,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":457},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",[322],[456],"2.50.1",[54],{"id":459,"slug":460,"identity":461,"label":462,"aiRelevant":45,"provider":319,"advisoryCount":34,"licenseExpressions":463,"versions":464,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":466},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[346,384],[465],"3.1.6",[54],{"id":468,"slug":469,"identity":470,"label":471,"aiRelevant":45,"provider":319,"advisoryCount":103,"licenseExpressions":472,"versions":473,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":475},"package:pypi:cbor2","cbor2-9a57866f","pypi:cbor2","cbor2",[445],[474],"5.7.1",[54],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":45,"provider":319,"advisoryCount":103,"licenseExpressions":481,"versions":482,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":484},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[322],[483],"2.32.5",[54],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":45,"provider":319,"advisoryCount":103,"licenseExpressions":490,"versions":491,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":493},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[445],[492],"79.0.1",[54],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":45,"provider":319,"advisoryCount":499,"licenseExpressions":500,"versions":502,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":504},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[445,501],"Unlicense",[503],"3.20.0",[54],{"id":506,"slug":507,"identity":508,"label":509,"aiRelevant":45,"provider":319,"advisoryCount":499,"licenseExpressions":510,"versions":511,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":513},"package:pypi:mlx","mlx-6c82b549","pypi:mlx","mlx",[445],[512],"0.29.3",[54],{"id":515,"slug":516,"identity":517,"label":518,"aiRelevant":45,"provider":319,"advisoryCount":499,"licenseExpressions":519,"versions":520,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":522},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[346],[521],"6.33.0",[54],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":45,"provider":319,"advisoryCount":499,"licenseExpressions":528,"versions":529,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":531},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[322],[530],"0.1.25",[54],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":537,"versions":539,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":541},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[538],"MPL-2.0",[540],"2025.10.5",[54],{"id":543,"slug":544,"identity":545,"label":546,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":547,"versions":548,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":550},"package:pypi:click","click-ef97f731","pypi:click","click",[346,384],[549],"8.2.1",[54],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":556,"versions":557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[322],[558],"5.6.3",[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":565,"versions":566,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[445],[567],"0.16.0",[54],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":574,"versions":575,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":577},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[346,384],[576],"3.11",[54],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":583,"versions":584,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":586},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[322],[585],"1.1.2",[54],{"id":588,"slug":589,"identity":590,"label":591,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":592,"versions":593,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":595},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[322,384],[594],"22.0.0",[54],{"id":597,"slug":598,"identity":599,"label":600,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":601,"versions":603,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":605},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[602],"BSD-2-Clause",[604],"2.19.2",[54],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":611,"versions":612,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":614},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[346],[613],"1.2.1",[54],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":620,"versions":621,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":623},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[384],[622],"0.2.1",[54],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":45,"provider":319,"advisoryCount":32,"licenseExpressions":629,"versions":631,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":633},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[630],"MIT AND MPL-2.0",[632],"4.67.1",[54],{"id":635,"slug":636,"identity":637,"label":638,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":639,"versions":640,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":642},"package:pypi:aiofile","aiofile-c591e038","pypi:aiofile","aiofile",[322],[641],"3.9.0",[54],{"id":644,"slug":645,"identity":646,"label":647,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":648,"versions":649,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":651},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[322],[650],"25.1.0",[54],{"id":653,"slug":654,"identity":655,"label":656,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":657,"versions":659,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":660},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[658],"PSF-2.0",[376],[54],{"id":662,"slug":663,"identity":664,"label":665,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":666,"versions":667,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":669},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[322],[668],"1.4.0",[54],{"id":671,"slug":672,"identity":673,"label":674,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":675,"versions":676,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":678},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[445],[677],"0.0.3",[54],{"id":680,"slug":681,"identity":682,"label":683,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":684,"versions":685,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":687},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[445],[686],"0.7.0",[54],{"id":689,"slug":690,"identity":691,"label":692,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":693,"versions":694,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":696},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[384],[695],"4.9.3",[54],{"id":698,"slug":699,"identity":700,"label":701,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":702,"versions":703,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":705},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[445],[704],"4.11.0",[54],{"id":707,"slug":708,"identity":709,"label":710,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":711,"versions":712,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":714},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[346],[713],"0.8.1",[54],{"id":716,"slug":717,"identity":718,"label":719,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":720,"versions":721,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":723},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[445],[722],"25.4.0",[54],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":729,"versions":730,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":732},"package:pypi:awscrt","awscrt-eab4958f","pypi:awscrt","awscrt",[322],[731],"0.28.2",[54],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":738,"versions":740,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":742},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[739],"Apache-2.0 OR CC0-1.0",[741],"1.0.8",[54],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":748,"versions":749,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":751},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[445],[750],"6.2.1",[54],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":757,"versions":758,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":760},"package:pypi:caio","caio-c9c4d2d3","pypi:caio","caio",[322],[759],"0.9.24",[54],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":766,"versions":768,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":770},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[445,767],"MIT-0",[769],"2.0.0",[54],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":776,"versions":777,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":779},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[445],[778],"3.4.4",[54],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":785,"versions":786,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":788},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[346],[787],"3.1.1",[54],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":794,"versions":795,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":797},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[384],[796],"0.4.6",[54],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":803,"versions":804,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":805},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[322],[324],[54],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":811,"versions":812,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":814},"package:pypi:cufile-python","cufile-python-feb114e2","pypi:cufile-python","cufile-python",[445],[813],"0.2.0",[54],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":820,"versions":821,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":823},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[445],[822],"13.6.0",[54],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":829,"versions":830,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":832},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[445],[831],"0.19.0",[54],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":838,"versions":839,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":841},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[346],[840],"0.4.0",[54],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":847,"versions":848,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":850},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[322],[849],"1.9.0",[54],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":856,"versions":858,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":859},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[857],"ISC",[348],[54],{"id":861,"slug":862,"identity":863,"label":864,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":865,"versions":866,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":867},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[445],[713],[54],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":873,"versions":874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":876},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[501],[875],"2.3.0",[54],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":882,"versions":883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":885},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[445],[884],"0.120.1",[54],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":891,"versions":892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":894},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[445],[893],"0.0.14",[54],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":900,"versions":901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":903},"package:pypi:fastapi-cloud-cli","fastapi-cloud-cli-9011df6b","pypi:fastapi-cloud-cli","fastapi-cloud-cli",[445],[902],"0.3.1",[54],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":909,"versions":910,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":912},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[384],[911],"0.8.3",[54],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":918,"versions":920,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":922},"package:pypi:frozendict","frozendict-423ee416","pypi:frozendict","frozendict",[919],"LGPL-3.0",[921],"2.4.6",[54],{"id":924,"slug":925,"identity":926,"label":927,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":928,"versions":929,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":931},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[322],[930],"1.8.0",[54],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":937,"versions":938,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":940},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[346,384],[939],"2025.9.0",[54],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":946,"versions":947,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":949},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[445],[948],"0.17.1",[54],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":955,"versions":956,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":958},"package:pypi:h5py","h5py-b8fe3869","pypi:h5py","h5py",[346],[957],"3.15.1",[54],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":964,"versions":965,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":967},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[322],[966],"1.2.0",[54],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":973,"versions":974,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":976},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[346],[975],"1.0.9",[54],{"id":978,"slug":979,"identity":980,"label":981,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":982,"versions":983,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":985},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[445],[984],"0.7.1",[54],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":991,"versions":992,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":994},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[346],[993],"0.28.1",[54],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1000,"versions":1001,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1003},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[322,384],[1002],"0.36.0",[54],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1009,"versions":1010,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1012},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[445],[1011],"1.3.2",[54],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1018,"versions":1019,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1021},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[445],[1020],"0.3.3",[54],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1027,"versions":1028,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1030},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[445],[1029],"0.11.1",[54],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1036,"versions":1037,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1039},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[445],[1038],"4.25.1",[54],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1045,"versions":1046,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1048},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[445],[1047],"2025.9.1",[54],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1054,"versions":1055,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1057},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[445],[1056],"1.2.2",[54],{"id":1059,"slug":1060,"identity":1061,"label":1062,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1063,"versions":1064,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1066},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[445],[1065],"0.7.30",[54],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1072,"versions":1073,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1075},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[384],[1074],"0.44.0",[54],{"id":1077,"slug":1078,"identity":1079,"label":1080,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1081,"versions":1082,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1084},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[445],[1083],"0.11.3",[54],{"id":1086,"slug":1087,"identity":1088,"label":1089,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1090,"versions":1091,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1093},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[445],[1092],"4.0.0",[54],{"id":1095,"slug":1096,"identity":1097,"label":1098,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1099,"versions":1100,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1102},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[346,384],[1101],"3.0.3",[54],{"id":1104,"slug":1105,"identity":1106,"label":1107,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1108,"versions":1109,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1111},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[445],[1110],"0.1.2",[54],{"id":1113,"slug":1114,"identity":1115,"label":1116,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1117,"versions":1118,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1120},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[322],[1119],"1.8.5",[54],{"id":1122,"slug":1123,"identity":1124,"label":1125,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1126,"versions":1127,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1129},"package:pypi:mlx-lm","mlx-lm-c2e88814","pypi:mlx-lm","mlx-lm",[445],[1128],"0.28.3",[54],{"id":1131,"slug":1132,"identity":1133,"label":1134,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1135,"versions":1136,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1137},"package:pypi:mlx-metal","mlx-metal-fdc0094a","pypi:mlx-metal","mlx-metal",[],[512],[54],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1143,"versions":1144,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1146},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[384],[1145],"1.3.0",[54],{"id":1148,"slug":1149,"identity":1150,"label":1151,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1152,"versions":1153,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1154},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[346,384],[831],[54],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1160,"versions":1161,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1163},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[322],[1162],"6.7.0",[54],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1169,"versions":1170,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1172},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[346],[1171],"0.70.16",[54],{"id":1174,"slug":1175,"identity":1176,"label":1177,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1178,"versions":1179,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1181},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[346,384],[1180],"3.5",[54],{"id":1183,"slug":1184,"identity":1185,"label":1186,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1187,"versions":1188,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1190},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[384],[1189],"1.13.0",[54],{"id":1192,"slug":1193,"identity":1194,"label":1195,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1196,"versions":1197,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1198},"package:pypi:nixl","nixl-859842d2","pypi:nixl","nixl",[384],[686],[54],{"id":1200,"slug":1201,"identity":1202,"label":1203,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1204,"versions":1205,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1207},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[384],[1206],"0.61.2",[54],{"id":1209,"slug":1210,"identity":1211,"label":1212,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1213,"versions":1215,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1217},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1214,384],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1216],"2.2.0",[54],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1223,"versions":1224,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1226},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[384],[1225],"12.8.4.1",[54],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1232,"versions":1233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1235},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[384],[1234],"12.8.90",[54],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1241,"versions":1242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1244},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[384],[1243],"12.8.93",[54],{"id":1246,"slug":1247,"identity":1248,"label":1249,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1250,"versions":1251,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1252},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[384],[1234],[54],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1258,"versions":1259,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1261},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[384],[1260],"9.10.2.21",[54],{"id":1263,"slug":1264,"identity":1265,"label":1266,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1267,"versions":1268,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1270},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[384],[1269],"11.3.3.83",[54],{"id":1272,"slug":1273,"identity":1274,"label":1275,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1276,"versions":1277,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1279},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[384],[1278],"1.13.1.3",[54],{"id":1281,"slug":1282,"identity":1283,"label":1284,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1285,"versions":1286,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1288},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[384],[1287],"10.3.9.90",[54],{"id":1290,"slug":1291,"identity":1292,"label":1293,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1294,"versions":1295,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1297},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[384],[1296],"11.7.3.90",[54],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1303,"versions":1304,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1306},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[384],[1305],"12.5.8.93",[54],{"id":1308,"slug":1309,"identity":1310,"label":1311,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1312,"versions":1313,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1314},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[384],[984],[54],{"id":1316,"slug":1317,"identity":1318,"label":1319,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1320,"versions":1321,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1323},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[384],[1322],"13.580.82",[54],{"id":1325,"slug":1326,"identity":1327,"label":1328,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1329,"versions":1330,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1332},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[346,384],[1331],"2.27.3",[54],{"id":1334,"slug":1335,"identity":1336,"label":1337,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1338,"versions":1339,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1340},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[384],[1243],[54],{"id":1342,"slug":1343,"identity":1344,"label":1345,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1346,"versions":1347,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1348},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[322,384],[1234],[54],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1354,"versions":1355,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1357},"package:pypi:nvtx","nvtx-e0b64d25","pypi:nvtx","nvtx",[322],[1356],"0.2.13",[54],{"id":1359,"slug":1360,"identity":1361,"label":1362,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1363,"versions":1364,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1365},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[346],[875],[54],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1371,"versions":1372,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1374},"package:pypi:openai-harmony","openai-harmony-030f1d71","pypi:openai-harmony","openai-harmony",[],[1373],"0.0.4",[54],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1380,"versions":1381,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1383},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[322],[1382],"4.12.0.88",[54],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1389,"versions":1390,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1392},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[322],[1391],"0.2.11",[54],{"id":1394,"slug":1395,"identity":1396,"label":1397,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1398,"versions":1400,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1402},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1399,384],"Apache-2.0 OR BSD-2-Clause",[1401],"25.0",[54],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1408,"versions":1409,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1411},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[384],[1410],"2.3.3",[54],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1417,"versions":1418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1420},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[445],[1419],"0.2.1.1.post6",[54],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1426,"versions":1427,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1429},"package:pypi:perun","perun-158f81f8","pypi:perun","perun",[384],[1428],"0.9.0",[54],{"id":1431,"slug":1432,"identity":1433,"label":1434,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1435,"versions":1437,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1439},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[322,1436],"Apache-2.0 AND BSD-2-Clause",[1438],"0.23.1",[54],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1445,"versions":1446,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1448},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[857],[1447],"7.1.0",[54],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1454,"versions":1455,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1457},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[322],[1456],"0.4.1",[54],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1463,"versions":1464,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1466},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[346],[1465],"7.1.2",[54],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1472,"versions":1473,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1475},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[445],[1474],"9.0.0",[54],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1481,"versions":1482,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1484},"package:pypi:pybase64","pybase64-d848d924","pypi:pybase64","pybase64",[602],[1483],"1.4.2",[54],{"id":1486,"slug":1487,"identity":1488,"label":1489,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1490,"versions":1492,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1494},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[1491],"LGPL-2.1-only",[1493],"24.6.1",[54],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1500,"versions":1501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1503},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[346],[1502],"2.23",[54],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1509,"versions":1510,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1512},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[445],[1511],"2.12.3",[54],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1518,"versions":1519,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1521},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[445],[1520],"2.41.4",[54],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1527,"versions":1528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1530},"package:pypi:pydantic-extra-types","pydantic-extra-types-dddc16ef","pypi:pydantic-extra-types","pydantic-extra-types",[445],[1529],"2.10.6",[54],{"id":1532,"slug":1533,"identity":1534,"label":1535,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1536,"versions":1537,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1539},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[384],[1538],"2.9.0.post0",[54],{"id":1541,"slug":1542,"identity":1543,"label":1544,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1545,"versions":1546,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1547},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[602,384],[1092],[54],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1553,"versions":1554,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1556},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[445],[1555],"2025.2",[54],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1562,"versions":1563,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1565},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[445],[1564],"6.0.3",[54],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1571,"versions":1572,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1574},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[384],[1573],"27.1.0",[54],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1580,"versions":1581,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1583},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[445],[1582],"7.0.1",[54],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1589,"versions":1590,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1592},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[445],[1591],"0.37.0",[54],{"id":1594,"slug":1595,"identity":1596,"label":1597,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1598,"versions":1600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1602},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1599,384],"Apache-2.0 AND CNRI-Python",[1601],"2025.10.23",[54],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1608,"versions":1609,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1611},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[445],[1610],"14.2.0",[54],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1617,"versions":1618,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1620},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[445],[1619],"0.15.1",[54],{"id":1622,"slug":1623,"identity":1624,"label":1625,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1626,"versions":1627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1628},"package:pypi:rignore","rignore-bc5396c6","pypi:rignore","rignore",[445],[984],[54],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1634,"versions":1635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1637},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[445],[1636],"0.28.0",[54],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1643,"versions":1644,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1646},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[384],[1645],"0.6.2",[54],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1652,"versions":1653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1655},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[384],[1654],"1.16.2",[54],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1661,"versions":1662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1664},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[445],[1663],"2.42.1",[54],{"id":1666,"slug":1667,"identity":1668,"label":1669,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1670,"versions":1671,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1673},"package:pypi:setproctitle","setproctitle-5acfd9d9","pypi:setproctitle","setproctitle",[346],[1672],"1.3.7",[54],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1679,"versions":1680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1682},"package:pypi:setuptools-scm","setuptools-scm-1cdc69e0","pypi:setuptools-scm","setuptools-scm",[384],[1681],"9.2.2",[54],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1688,"versions":1689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1691},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[384],[1690],"1.5.4",[54],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1697,"versions":1698,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1700},"package:pypi:six","six-3c3888bd","pypi:six","six",[445],[1699],"1.17.0",[54],{"id":1702,"slug":1703,"identity":1704,"label":1705,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1706,"versions":1708,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1710},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1707],"Apache-2.0 OR MIT",[1709],"1.3.1",[54],{"id":1712,"slug":1713,"identity":1714,"label":1715,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1716,"versions":1717,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1719},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[322],[1718],"2.4.0",[54],{"id":1721,"slug":1722,"identity":1723,"label":1724,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1725,"versions":1726,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1728},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[346],[1727],"0.13.1",[54],{"id":1730,"slug":1731,"identity":1732,"label":1733,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1734,"versions":1737,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1739},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[1735,1736],"LGPL-2.0-or-later","LGPL-2.1-or-later",[1738],"1.0.0",[54],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1745,"versions":1746,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1748},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[384],[1747],"1.14.0",[54],{"id":1750,"slug":1751,"identity":1752,"label":1753,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1754,"versions":1755,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1756},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[445],[1428],[54],{"id":1758,"slug":1759,"identity":1760,"label":1761,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1762,"versions":1763,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1765},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[445],[1764],"0.13.3",[54],{"id":1767,"slug":1768,"identity":1769,"label":1770,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1771,"versions":1772,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1773},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[602,384],[348],[54],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1779,"versions":1780,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1782},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[384],[1781],"0.23.0",[54],{"id":1784,"slug":1785,"identity":1786,"label":1787,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1788,"versions":1789,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1791},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[445],[1790],"3.4.0",[54],{"id":1793,"slug":1794,"identity":1795,"label":1796,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1797,"versions":1798,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1800},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[445],[1799],"0.20.0",[54],{"id":1802,"slug":1803,"identity":1804,"label":1805,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1806,"versions":1807,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1809},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[658,384],[1808],"4.15.0",[54],{"id":1811,"slug":1812,"identity":1813,"label":1814,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1815,"versions":1816,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1818},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[445],[1817],"0.4.2",[54],{"id":1820,"slug":1821,"identity":1822,"label":1823,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1824,"versions":1825,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1826},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[322],[1555],[54],{"id":1828,"slug":1829,"identity":1830,"label":1831,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1832,"versions":1833,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1835},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[346],[1834],"0.38.0",[54],{"id":1837,"slug":1838,"identity":1839,"label":1840,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1841,"versions":1842,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1843},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[445],[386],[54],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1849,"versions":1850,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1852},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[445],[1851],"1.1.1",[54],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1858,"versions":1859,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1861},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[346],[1860],"15.0.1",[54],{"id":1863,"slug":1864,"identity":1865,"label":1866,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1867,"versions":1868,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1870},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[346],[1869],"0.0.32.post1",[54],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1876,"versions":1877,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1879},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[602,384],[1878],"3.6.0",[54],{"id":1881,"slug":1882,"identity":1883,"label":1884,"aiRelevant":45,"provider":319,"advisoryCount":37,"licenseExpressions":1885,"versions":1886,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1888},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[322],[1887],"1.22.0",[54],[1890,1929,1961,1994,2026,2074,2099,2131,2174,2200,2226,2253,2281,2310,2347,2382,2405,2432,2466,2492,2512,2530,2555,2597,2623,2652,2690,2715,2740,2768,2791,2821,2851,2887,2911,2934,2957,2987,3014,3033,3060,3083,3114,3141,3170,3195,3218,3240,3263,3292,3318,3344,3367,3391,3438,3488,3519,3558,3587,3623,3641,3692,3731,3759,3791,3823,3846,3871,3912,3936,3959,3992,4016,4050,4076,4104,4134,4154,4179,4204,4236,4289,4321,4351,4382,4416,4441,4478,4502,4530,4553,4572,4605,4630,4658,4681,4709,4734,4768,4802,4836,4858,4880,4907,4941,4962,4987,5017,5037,5061,5093,5116,5143,5168,5189,5213,5232,5253,5275,5305,5333,5356,5381,5404,5431,5460,5482,5504,5531,5556,5580,5609,5630,5662,5686,5712,5746,5768,5795,5822,5855,5875,5911,5950,5982,6009,6036,6064,6091,6121,6153,6178,6205,6227,6250,6278,6305,6332,6356,6379,6403,6429,6459,6484,6509,6561,6584,6610,6643,6672,6697,6733,6765,6784,6803,6831,6856,6876,6893,6912,6929,6950,6966,6981,6998,7013,7030,7047,7064,7077,7090,7103,7116,7129,7142,7155,7168,7185,7207,7240,7254,7283],{"id":105,"slug":1891,"dossier":45,"summary":1892,"aliases":1893,"sourceIds":1896,"published":1897,"modified":1898,"checkedAt":7,"severity":1899,"references":1903,"versionKeys":1927,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1894,1895],"CVE-2024-39689","PYSEC-2024-230",[105,1895],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1900],{"type":1901,"score":1902},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1904,1907,1909,1912,1915,1918,1921,1923,1925],{"type":1905,"url":1906},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1905,"url":1908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1910,"url":1911},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1913,"url":1914},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1916,"url":1917},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1919,"url":1920},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1916,"url":1922},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1905,"url":1924},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1905,"url":1926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1928],"pypi:certifi@2024.6.2",{"id":106,"slug":1930,"dossier":45,"summary":1931,"aliases":1932,"sourceIds":1935,"published":1936,"modified":1937,"checkedAt":7,"severity":1938,"references":1941,"versionKeys":1953,"packageCount":32,"repositoryCount":101},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1933,1934],"CVE-2026-4372","PYSEC-2026-2289",[106,1934],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[1939],{"type":1901,"score":1940},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1942,1944,1946,1948,1951],{"type":1905,"url":1943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1910,"url":1945},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1913,"url":1947},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1949,"url":1950},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1905,"url":1952},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1954,1955,1956,1957,1958,1959,1960],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":107,"slug":1962,"dossier":45,"summary":1963,"aliases":1964,"sourceIds":1967,"published":1968,"modified":1969,"checkedAt":7,"severity":1970,"references":1973,"versionKeys":1990,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1965,1966],"CVE-2025-54121","PYSEC-2026-1941",[107,1966],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[1971],{"type":1901,"score":1972},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1974,1976,1978,1980,1982,1984,1986,1988],{"type":1916,"url":1975},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1905,"url":1977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1910,"url":1979},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1913,"url":1981},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1916,"url":1983},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1916,"url":1985},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1913,"url":1987},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1905,"url":1989},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1991,1992,1993],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":108,"slug":1995,"dossier":45,"summary":1996,"aliases":1997,"sourceIds":2000,"published":2001,"modified":2002,"checkedAt":7,"severity":2003,"references":2009,"versionKeys":2016,"packageCount":32,"repositoryCount":2025},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1998,1999],"CVE-2026-54279","PYSEC-2026-2112",[108,1999],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2004,2007],{"type":2005,"score":2006},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2008},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2010,2012,2014],{"type":1905,"url":2011},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1913,"url":2013},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1910,"url":2015},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2017,2018,2019,2020,2021,2022,2023,2024],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":109,"slug":2027,"dossier":45,"summary":2028,"aliases":2029,"sourceIds":2032,"published":2033,"modified":2034,"checkedAt":7,"severity":2035,"references":2038,"versionKeys":2071,"packageCount":32,"repositoryCount":499},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2030,2031],"CVE-2026-22807","PYSEC-2026-2010",[109,2031],"2026-01-21T16:12:54Z","2026-08-07T08:11:59.370441713Z",[2036],{"type":1901,"score":2037},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2039,2041,2043,2045,2047,2049,2051,2053,2055,2057,2059,2061,2063,2065,2067,2069],{"type":1916,"url":2040},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1905,"url":2042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":1916,"url":2044},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":1916,"url":2046},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":1916,"url":2048},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":1913,"url":2050},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":1916,"url":2052},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":1913,"url":2054},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":1916,"url":2056},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":1905,"url":2058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1916,"url":2060},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":1916,"url":2062},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":1916,"url":2064},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":1916,"url":2066},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1916,"url":2068},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":1916,"url":2070},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",[2072,2073],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":110,"slug":2075,"dossier":45,"summary":2076,"aliases":2077,"sourceIds":2080,"published":2081,"modified":2082,"checkedAt":7,"severity":2083,"references":2088,"versionKeys":2098,"packageCount":32,"repositoryCount":2025},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2078,2079],"CVE-2026-34514","PYSEC-2026-2096",[110,2079],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2084,2086],{"type":2005,"score":2085},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2087},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2089,2091,2093,2095,2096],{"type":1910,"url":2090},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1905,"url":2092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1910,"url":2094},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1913,"url":2013},{"type":1905,"url":2097},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2017,2018,2019,2020,2021,2022,2023,2024],{"id":111,"slug":2100,"dossier":89,"summary":2101,"aliases":2102,"sourceIds":2105,"published":2106,"modified":2107,"checkedAt":7,"severity":2108,"references":2111,"versionKeys":2124,"packageCount":32,"repositoryCount":2130},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2103,2104],"CVE-2025-66471","PYSEC-2026-1994",[111,2104],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2109],{"type":2005,"score":2110},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2112,2114,2116,2118,2120,2122],{"type":1916,"url":2113},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1905,"url":2115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1910,"url":2117},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1913,"url":2119},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1913,"url":2121},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1905,"url":2123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2125,2126,2127,2128,2129],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":112,"slug":2132,"dossier":45,"summary":2133,"aliases":2134,"sourceIds":2138,"published":2139,"modified":2140,"checkedAt":7,"severity":2141,"references":2148,"versionKeys":2170,"packageCount":32,"repositoryCount":103},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2135,2136,2137],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[112,2137],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2142,2144,2146],{"type":1901,"score":2143},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2005,"score":2145},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1901,"score":2147},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2149,2151,2154,2156,2158,2160,2162,2164,2166,2168],{"type":1905,"url":2150},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2152,"url":2153},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2152,"url":2155},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1916,"url":2157},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1913,"url":2159},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1916,"url":2161},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2152,"url":2163},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1905,"url":2165},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1905,"url":2167},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1905,"url":2169},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2171,2172,2173],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":113,"slug":2175,"dossier":45,"summary":2176,"aliases":2177,"sourceIds":2180,"published":2181,"modified":2182,"checkedAt":7,"severity":2183,"references":2185,"versionKeys":2199,"packageCount":32,"repositoryCount":499},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2178,2179],"CVE-2025-3933","PYSEC-2026-1977",[113,2179],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2184],{"type":1901,"score":1972},[2186,2188,2190,2192,2193,2195,2197],{"type":1905,"url":2187},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1916,"url":2189},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1916,"url":2191},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1913,"url":1947},{"type":1916,"url":2194},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1913,"url":2196},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1905,"url":2198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1954,1955],{"id":114,"slug":2201,"dossier":89,"summary":2202,"aliases":2203,"sourceIds":2206,"published":2207,"modified":2208,"checkedAt":7,"severity":2209,"references":2212,"versionKeys":2225,"packageCount":32,"repositoryCount":2130},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2204,2205],"CVE-2026-21441","PYSEC-2026-1996",[114,2205],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2210,2211],{"type":1901,"score":2008},{"type":2005,"score":2110},[2213,2215,2217,2219,2220,2222,2223],{"type":1916,"url":2214},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1905,"url":2216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1910,"url":2218},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1913,"url":2119},{"type":1916,"url":2221},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1913,"url":2121},{"type":1905,"url":2224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2125,2126,2127,2128,2129],{"id":115,"slug":2227,"dossier":45,"summary":2228,"aliases":2229,"sourceIds":2232,"published":2233,"modified":2234,"checkedAt":7,"severity":2235,"references":2238,"versionKeys":2251,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[2230,2231],"CVE-2026-1260","PYSEC-2026-1909",[115,2231],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[2236],{"type":2005,"score":2237},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2239,2241,2243,2245,2247,2249],{"type":1905,"url":2240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":1916,"url":2242},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":1913,"url":2244},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":1916,"url":2246},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":1913,"url":2248},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":1905,"url":2250},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[2252],"pypi:sentencepiece@0.2.0",{"id":116,"slug":2254,"dossier":45,"summary":2255,"aliases":2256,"sourceIds":2259,"published":2260,"modified":2261,"checkedAt":7,"severity":2262,"references":2265,"versionKeys":2278,"packageCount":32,"repositoryCount":499},"ghsa-3c37-wwvx-h642-8520854e","cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads",[2257,2258],"CVE-2026-26209","PYSEC-2026-2123",[116,2258],"2026-03-23T19:16:39.530Z","2026-07-13T07:26:16.551981788Z",[2263],{"type":1901,"score":2264},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2266,2268,2270,2272,2274,2276],{"type":1949,"url":2267},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-3c37-wwvx-h642",{"type":1905,"url":2269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26209",{"type":1910,"url":2271},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F275",{"type":1910,"url":2273},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Fe61a5f365ba610d5907a0ae1bc72769bba34294b",{"type":1913,"url":2275},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2",{"type":1905,"url":2277},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Freleases\u002Ftag\u002F5.9.0",[2279,2280],"pypi:cbor2@5.7.0","pypi:cbor2@5.7.1",{"id":117,"slug":2282,"dossier":45,"summary":2283,"aliases":2284,"sourceIds":2287,"published":2288,"modified":2289,"checkedAt":7,"severity":2290,"references":2293,"versionKeys":2308,"packageCount":32,"repositoryCount":499},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[2285,2286],"CVE-2025-6242","PYSEC-2026-2011",[117,2286],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[2291],{"type":1901,"score":2292},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[2294,2296,2298,2300,2302,2304,2305,2306],{"type":1916,"url":2295},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":1905,"url":2297},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":1916,"url":2299},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":1916,"url":2301},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":1916,"url":2303},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":1913,"url":2054},{"type":1913,"url":2050},{"type":1905,"url":2307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2072,2309],"pypi:vllm@0.8.5.post1",{"id":118,"slug":2311,"dossier":45,"summary":2312,"aliases":2313,"sourceIds":2316,"published":2317,"modified":2318,"checkedAt":7,"severity":2319,"references":2324,"versionKeys":2345,"packageCount":32,"repositoryCount":32},"ghsa-3hh9-752g-5g22-02d6de07","LMCache: 16-bit multimodal hash collision can poison KV cache entries",[2314,2315],"CVE-2026-10813","PYSEC-2026-3480",[118,2315],"2026-06-04T18:30:31Z","2026-07-23T15:11:28.205252734Z",[2320,2322],{"type":1901,"score":2321},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2005,"score":2323},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2325,2327,2329,2331,2333,2335,2337,2339,2341,2343],{"type":1905,"url":2326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10813",{"type":1916,"url":2328},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fissues\u002F3301",{"type":1916,"url":2330},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fpull\u002F2932",{"type":1913,"url":2332},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache",{"type":1916,"url":2334},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10813",{"type":1916,"url":2336},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831641",{"type":1916,"url":2338},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261",{"type":1916,"url":2340},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261\u002Fcti",{"type":1913,"url":2342},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flmcache",{"type":1905,"url":2344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3hh9-752g-5g22",[2346],"pypi:lmcache@0.3.8",{"id":119,"slug":2348,"dossier":45,"summary":2349,"aliases":2350,"sourceIds":2353,"published":2354,"modified":2355,"checkedAt":7,"severity":2356,"references":2359,"versionKeys":2381,"packageCount":32,"repositoryCount":103},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[2351,2352],"CVE-2026-34756","PYSEC-2026-2298",[119,2352],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[2357],{"type":1901,"score":2358},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2360,2362,2364,2366,2368,2370,2372,2374,2376,2378,2379],{"type":1910,"url":2361},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":1905,"url":2363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":1910,"url":2365},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":1910,"url":2367},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":1905,"url":2369},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":1905,"url":2371},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":1916,"url":2373},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2152,"url":2375},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":1916,"url":2377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":1913,"url":2054},{"type":1916,"url":2380},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2072,2073,2309],{"id":120,"slug":2383,"dossier":45,"summary":2384,"aliases":2385,"sourceIds":2388,"published":2389,"modified":2390,"checkedAt":7,"severity":2391,"references":2395,"versionKeys":2404,"packageCount":32,"repositoryCount":2025},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2386,2387],"CVE-2026-34517","PYSEC-2026-2099",[120,2387],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2392,2394],{"type":2005,"score":2393},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":1972},[2396,2398,2400,2402,2403],{"type":1910,"url":2397},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1905,"url":2399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1910,"url":2401},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":121,"slug":2406,"dossier":45,"summary":2407,"aliases":2408,"sourceIds":2411,"published":2412,"modified":2413,"checkedAt":7,"severity":2414,"references":2417,"versionKeys":2431,"packageCount":32,"repositoryCount":103},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[2409,2410],"CVE-2026-47155","PYSEC-2026-2301",[121,2410],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[2415],{"type":1901,"score":2416},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[2418,2420,2422,2424,2426,2428,2429],{"type":1905,"url":2419},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":1905,"url":2421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2152,"url":2423},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":1910,"url":2425},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":1916,"url":2427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":1913,"url":2054},{"type":1905,"url":2430},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2072,2073,2309],{"id":122,"slug":2433,"dossier":89,"summary":2434,"aliases":2435,"sourceIds":2439,"published":2440,"modified":2441,"checkedAt":7,"severity":2442,"references":2444,"versionKeys":2457,"packageCount":32,"repositoryCount":2130},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2436,2437,2438],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[122,2438],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[2443],{"type":1901,"score":2008},[2445,2447,2449,2451,2453,2455],{"type":1949,"url":2446},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1905,"url":2448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1910,"url":2450},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1916,"url":2452},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1913,"url":2454},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1905,"url":2456},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2458,2459,2460,2461,2462,2463,2464,2465],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":123,"slug":2467,"dossier":45,"summary":2468,"aliases":2469,"sourceIds":2472,"published":2473,"modified":2474,"checkedAt":7,"severity":2475,"references":2478,"versionKeys":2491,"packageCount":32,"repositoryCount":443},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2470,2471],"CVE-2025-50182","PYSEC-2026-1997",[123,2471],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2476],{"type":1901,"score":2477},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2479,2481,2483,2485,2486,2488,2489],{"type":1916,"url":2480},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1905,"url":2482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1910,"url":2484},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1913,"url":2119},{"type":1916,"url":2487},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1913,"url":2121},{"type":1905,"url":2490},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2125,2126,2127,2128],{"id":124,"slug":2493,"dossier":45,"summary":2494,"aliases":2495,"sourceIds":2498,"published":2499,"modified":2500,"checkedAt":7,"severity":2501,"references":2505,"versionKeys":2511,"packageCount":32,"repositoryCount":2025},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2496,2497],"CVE-2026-54273","PYSEC-2026-2107",[124,2497],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2502,2504],{"type":2005,"score":2503},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2008},[2506,2508,2510],{"type":1905,"url":2507},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1910,"url":2509},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":125,"slug":2513,"dossier":45,"summary":2514,"aliases":2515,"sourceIds":2518,"published":2519,"modified":2520,"checkedAt":7,"severity":2521,"references":2525,"versionKeys":2529,"packageCount":32,"repositoryCount":2025},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2516,2517],"CVE-2026-54275","PYSEC-2026-237",[125,2517],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2522,2524],{"type":2005,"score":2523},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2008},[2526,2528],{"type":1905,"url":2527},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":126,"slug":2531,"dossier":45,"summary":2532,"aliases":2533,"sourceIds":2536,"published":2537,"modified":2538,"checkedAt":7,"severity":2539,"references":2542,"versionKeys":2554,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[2534,2535],"CVE-2025-46570","PYSEC-2025-53",[126,2535],"2025-05-28T18:02:24Z","2026-08-07T08:12:07.737844771Z",[2540],{"type":1901,"score":2541},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2543,2545,2547,2549,2551,2553],{"type":1905,"url":2544},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":1905,"url":2546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2152,"url":2548},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":1910,"url":2550},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":1916,"url":2552},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":1913,"url":2054},[2309],{"id":127,"slug":2556,"dossier":45,"summary":2557,"aliases":2558,"sourceIds":2561,"published":2562,"modified":2563,"checkedAt":7,"severity":2564,"references":2567,"versionKeys":2596,"packageCount":32,"repositoryCount":103},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[2559,2560],"CVE-2026-22778","PYSEC-2026-565",[127,2560],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[2565],{"type":1901,"score":2566},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2568,2570,2572,2574,2576,2578,2579,2581,2582,2584,2586,2588,2590,2591,2592,2594],{"type":1916,"url":2569},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1905,"url":2571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":1916,"url":2573},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":1916,"url":2575},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":1916,"url":2577},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":1913,"url":2050},{"type":1916,"url":2580},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":1913,"url":2054},{"type":1916,"url":2583},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":1905,"url":2585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1916,"url":2587},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":1916,"url":2589},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":1916,"url":2068},{"type":1916,"url":2070},{"type":1916,"url":2593},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1916,"url":2595},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2072,2073,2309],{"id":128,"slug":2598,"dossier":45,"summary":2599,"aliases":2600,"sourceIds":2603,"published":2604,"modified":2605,"checkedAt":7,"severity":2606,"references":2609,"versionKeys":2622,"packageCount":32,"repositoryCount":499},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2601,2602],"CVE-2025-6921","PYSEC-2026-1980",[128,2602],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2607],{"type":1901,"score":2608},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2610,2612,2614,2616,2617,2619,2620],{"type":1905,"url":2611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1916,"url":2613},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1916,"url":2615},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1913,"url":1947},{"type":1916,"url":2618},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1913,"url":2196},{"type":1905,"url":2621},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1954,1955],{"id":129,"slug":2624,"dossier":89,"summary":2625,"aliases":2626,"sourceIds":2630,"published":2631,"modified":2632,"checkedAt":7,"severity":2633,"references":2636,"versionKeys":2651,"packageCount":32,"repositoryCount":2130},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[2627,2628,2629],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[129,2629],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[2634],{"type":1901,"score":2635},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2637,2639,2641,2643,2645,2647,2649,2650],{"type":1949,"url":2638},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1905,"url":2640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1910,"url":2642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1910,"url":2644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1910,"url":2646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1916,"url":2648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1913,"url":2454},{"type":1905,"url":2456},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":130,"slug":2653,"dossier":89,"summary":2654,"aliases":2655,"sourceIds":2658,"published":2659,"modified":2660,"checkedAt":7,"severity":2661,"references":2664,"versionKeys":2687,"packageCount":32,"repositoryCount":2130},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2656,2657],"CVE-2026-4539","PYSEC-2026-2987",[130,2657],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2662,2663],{"type":1901,"score":2143},{"type":2005,"score":2145},[2665,2667,2669,2671,2673,2675,2677,2679,2681,2683,2685],{"type":1905,"url":2666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1916,"url":2668},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1916,"url":2670},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1916,"url":2672},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1913,"url":2674},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1916,"url":2676},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1916,"url":2678},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1916,"url":2680},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1916,"url":2682},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1913,"url":2684},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1905,"url":2686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2688,2689],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":131,"slug":2691,"dossier":45,"summary":2692,"aliases":2693,"sourceIds":2697,"published":2698,"modified":2699,"checkedAt":7,"severity":2700,"references":2704,"versionKeys":2714,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2694,2695,2696],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[131,2696],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[2701,2703],{"type":2005,"score":2702},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1901,"score":2566},[2705,2707,2709,2711,2713],{"type":1905,"url":2706},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1905,"url":2708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1916,"url":2710},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1916,"url":2712},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1913,"url":2159},[2171],{"id":132,"slug":2716,"dossier":45,"summary":2717,"aliases":2718,"sourceIds":2721,"published":2722,"modified":2723,"checkedAt":7,"severity":2724,"references":2727,"versionKeys":2739,"packageCount":32,"repositoryCount":443},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2719,2720],"CVE-2025-69226","PYSEC-2026-1097",[132,2720],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2725],{"type":2005,"score":2726},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2728,2730,2732,2734,2735,2737],{"type":1916,"url":2729},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1905,"url":2731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1910,"url":2733},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1913,"url":2013},{"type":1913,"url":2736},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1905,"url":2738},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2017,2018,2019,2020,2021,2022,2023],{"id":133,"slug":2741,"dossier":45,"summary":2742,"aliases":2743,"sourceIds":2746,"published":2747,"modified":2748,"checkedAt":7,"severity":2749,"references":2753,"versionKeys":2766,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[2744,2745],"CVE-2024-53981","PYSEC-2026-1851",[133,2745],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[2750,2751],{"type":1901,"score":2008},{"type":2005,"score":2752},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2754,2756,2758,2760,2762,2764],{"type":1916,"url":2755},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1905,"url":2757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1916,"url":2759},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1913,"url":2761},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1913,"url":2763},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1905,"url":2765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[2767],"pypi:python-multipart@0.0.9",{"id":134,"slug":2769,"dossier":45,"summary":2770,"aliases":2771,"sourceIds":2774,"published":2775,"modified":2776,"checkedAt":7,"severity":2777,"references":2779,"versionKeys":2790,"packageCount":32,"repositoryCount":499},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2772,2773],"CVE-2025-6638","PYSEC-2026-1981",[134,2773],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2778],{"type":1901,"score":2608},[2780,2782,2783,2784,2785,2787,2788],{"type":1905,"url":2781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1916,"url":2613},{"type":1916,"url":2615},{"type":1913,"url":1947},{"type":1916,"url":2786},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1913,"url":2196},{"type":1905,"url":2789},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1954,1955],{"id":135,"slug":2792,"dossier":45,"summary":2793,"aliases":2794,"sourceIds":2797,"published":2798,"modified":2799,"checkedAt":7,"severity":2800,"references":2804,"versionKeys":2819,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[2795,2796],"CVE-2025-57809","PYSEC-2026-2054",[135,2796],"2025-08-25T20:43:45Z","2026-08-07T08:12:03.416511779Z",[2801,2802],{"type":1901,"score":2008},{"type":2005,"score":2803},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2805,2807,2809,2811,2813,2815,2817],{"type":1916,"url":2806},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":1905,"url":2808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":1916,"url":2810},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":1916,"url":2812},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":1913,"url":2814},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":1913,"url":2816},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":1905,"url":2818},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[2820],"pypi:xgrammar@0.1.18",{"id":136,"slug":2822,"dossier":45,"summary":2823,"aliases":2824,"sourceIds":2827,"published":2828,"modified":2829,"checkedAt":7,"severity":2830,"references":2835,"versionKeys":2850,"packageCount":32,"repositoryCount":103},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[2825,2826],"CVE-2026-53923","PYSEC-2026-3403",[136,2826],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[2831,2833],{"type":1901,"score":2832},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2005,"score":2834},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2836,2838,2840,2842,2844,2846,2848,2849],{"type":1916,"url":2837},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1905,"url":2839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":1916,"url":2841},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":1916,"url":2843},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":1905,"url":2845},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1916,"url":2847},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":137,"slug":2852,"dossier":45,"summary":2853,"aliases":2854,"sourceIds":2858,"published":2859,"modified":2860,"checkedAt":7,"severity":2861,"references":2866,"versionKeys":2883,"packageCount":32,"repositoryCount":103},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[2855,2856,2857],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[137,2857],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[2862,2864],{"type":2005,"score":2863},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1901,"score":2865},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2867,2869,2871,2873,2875,2877,2879,2881],{"type":1949,"url":2868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1905,"url":2870},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2152,"url":2872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1910,"url":2874},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1916,"url":2876},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1913,"url":2878},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1916,"url":2880},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1919,"url":2882},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[2884,2885,2886],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":138,"slug":2888,"dossier":45,"summary":2889,"aliases":2890,"sourceIds":2893,"published":2894,"modified":2895,"checkedAt":7,"severity":2896,"references":2898,"versionKeys":2907,"packageCount":32,"repositoryCount":2910},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[2891,2892],"CVE-2026-53539","PYSEC-2026-3036",[138,2892],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[2897],{"type":1901,"score":2008},[2899,2901,2902,2903,2905],{"type":1916,"url":2900},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1913,"url":2761},{"type":1913,"url":2763},{"type":1905,"url":2904},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1905,"url":2906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[2908,2909,2767],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",5,{"id":139,"slug":2912,"dossier":89,"summary":2913,"aliases":2914,"sourceIds":2918,"published":2919,"modified":2920,"checkedAt":7,"severity":2921,"references":2923,"versionKeys":2933,"packageCount":32,"repositoryCount":2130},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[2915,2916,2917],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[139,2917],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[2922],{"type":1901,"score":2008},[2924,2926,2928,2929,2931,2932],{"type":1949,"url":2925},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1905,"url":2927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1910,"url":2450},{"type":1916,"url":2930},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1913,"url":2454},{"type":1905,"url":2456},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":140,"slug":2935,"dossier":45,"summary":2936,"aliases":2937,"sourceIds":2941,"published":2942,"modified":2943,"checkedAt":7,"severity":2944,"references":2948,"versionKeys":2956,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2938,2939,2940],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[140,2940],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[2945,2946],{"type":1901,"score":2147},{"type":2005,"score":2947},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2949,2951,2953,2954],{"type":1905,"url":2950},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1905,"url":2952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1913,"url":2454},{"type":1905,"url":2955},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2461,2462,2463,2464,2465],{"id":141,"slug":2958,"dossier":89,"summary":2959,"aliases":2960,"sourceIds":2964,"published":2965,"modified":2966,"checkedAt":7,"severity":2967,"references":2970,"versionKeys":2986,"packageCount":32,"repositoryCount":2130},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[2961,2962,2963],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[141,2963],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[2968],{"type":2005,"score":2969},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2971,2973,2975,2977,2979,2980,2982,2984],{"type":1916,"url":2972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1905,"url":2974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1916,"url":2976},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1916,"url":2978},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1913,"url":2454},{"type":1916,"url":2981},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1913,"url":2983},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1905,"url":2985},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":142,"slug":2988,"dossier":45,"summary":2989,"aliases":2990,"sourceIds":2993,"published":2994,"modified":2995,"checkedAt":7,"severity":2996,"references":3002,"versionKeys":3013,"packageCount":32,"repositoryCount":2025},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2991,2992],"CVE-2026-34520","PYSEC-2026-2102",[142,2992],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2997,2999,3000],{"type":1901,"score":2998},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2005,"score":2085},{"type":2005,"score":3001},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3003,3005,3007,3009,3010,3011],{"type":1910,"url":3004},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1905,"url":3006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1910,"url":3008},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1913,"url":2013},{"type":1905,"url":2097},{"type":1916,"url":3012},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2017,2018,2019,2020,2021,2022,2023,2024],{"id":143,"slug":3015,"dossier":45,"summary":3016,"aliases":3017,"sourceIds":3020,"published":3021,"modified":3022,"checkedAt":7,"severity":3023,"references":3026,"versionKeys":3032,"packageCount":32,"repositoryCount":2025},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3018,3019],"CVE-2026-54277","PYSEC-2026-2110",[143,3019],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[3024,3025],{"type":2005,"score":2503},{"type":1901,"score":2008},[3027,3029,3031],{"type":1905,"url":3028},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1910,"url":3030},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":144,"slug":3034,"dossier":89,"summary":3035,"aliases":3036,"sourceIds":3039,"published":3040,"modified":3041,"checkedAt":7,"severity":3042,"references":3046,"versionKeys":3055,"packageCount":32,"repositoryCount":3059},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3037,3038],"CVE-2026-45409","PYSEC-2026-215",[144,3038],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3043,3044],{"type":1901,"score":1972},{"type":2005,"score":3045},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3047,3049,3051,3053],{"type":1905,"url":3048},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1905,"url":3050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1913,"url":3052},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1916,"url":3054},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3056,3057,3058],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":145,"slug":3061,"dossier":45,"summary":3062,"aliases":3063,"sourceIds":3066,"published":3067,"modified":3068,"checkedAt":7,"severity":3069,"references":3071,"versionKeys":3082,"packageCount":32,"repositoryCount":443},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3064,3065],"CVE-2025-69224","PYSEC-2026-1099",[145,3065],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[3070],{"type":2005,"score":2085},[3072,3074,3076,3078,3079,3080],{"type":1916,"url":3073},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1905,"url":3075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1910,"url":3077},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":3081},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2017,2018,2019,2020,2021,2022,2023],{"id":146,"slug":3084,"dossier":45,"summary":3085,"aliases":3086,"sourceIds":3089,"published":3090,"modified":3091,"checkedAt":7,"severity":3092,"references":3094,"versionKeys":3113,"packageCount":32,"repositoryCount":103},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[3087,3088],"CVE-2025-62426","PYSEC-2026-2012",[146,3088],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[3093],{"type":1901,"score":2358},[3095,3097,3099,3101,3103,3105,3107,3108,3110,3112],{"type":1916,"url":3096},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1905,"url":3098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":1916,"url":3100},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":1916,"url":3102},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":1905,"url":3104},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1916,"url":3106},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":1913,"url":2054},{"type":1916,"url":3109},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":1916,"url":3111},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":1913,"url":2050},[2072,2073,2309],{"id":147,"slug":3115,"dossier":45,"summary":3116,"aliases":3117,"sourceIds":3120,"published":3121,"modified":3122,"checkedAt":7,"severity":3123,"references":3128,"versionKeys":3140,"packageCount":32,"repositoryCount":101},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3118,3119],"CVE-2026-1839","PYSEC-2026-2288",[147,3119],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3124,3126],{"type":1901,"score":3125},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1901,"score":3127},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3129,3131,3133,3134,3136,3138],{"type":1905,"url":3130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1910,"url":3132},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1913,"url":1947},{"type":1916,"url":3135},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1949,"url":3137},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1905,"url":3139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1954,1955,1956,1957,1958,1959,1960],{"id":148,"slug":3142,"dossier":45,"summary":3143,"aliases":3144,"sourceIds":3147,"published":3148,"modified":3149,"checkedAt":7,"severity":3150,"references":3155,"versionKeys":3169,"packageCount":32,"repositoryCount":103},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[3145,3146],"CVE-2026-34760","PYSEC-2026-2299",[148,3146],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[3151,3153],{"type":1901,"score":3152},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":1901,"score":3154},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[3156,3158,3160,3162,3164,3166,3167],{"type":1905,"url":3157},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":1905,"url":3159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2152,"url":3161},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":1910,"url":3163},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":1916,"url":3165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":1913,"url":2054},{"type":1905,"url":3168},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2072,2073,2309],{"id":149,"slug":3171,"dossier":45,"summary":3172,"aliases":3173,"sourceIds":3176,"published":3177,"modified":3178,"checkedAt":7,"severity":3179,"references":3181,"versionKeys":3194,"packageCount":32,"repositoryCount":499},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[3174,3175],"CVE-2025-61620","PYSEC-2026-2013",[149,3175],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[3180],{"type":1901,"score":2358},[3182,3184,3186,3188,3189,3190,3192],{"type":1916,"url":3183},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1916,"url":3185},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":1916,"url":3187},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":1913,"url":2054},{"type":1913,"url":2050},{"type":1905,"url":3191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1905,"url":3193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2072,2309],{"id":150,"slug":3196,"dossier":45,"summary":3197,"aliases":3198,"sourceIds":3201,"published":3202,"modified":3203,"checkedAt":7,"severity":3204,"references":3206,"versionKeys":3217,"packageCount":32,"repositoryCount":443},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3199,3200],"CVE-2025-69228","PYSEC-2026-1100",[150,3200],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3205],{"type":2005,"score":2503},[3207,3209,3211,3213,3214,3215],{"type":1916,"url":3208},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1905,"url":3210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1910,"url":3212},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":3216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2017,2018,2019,2020,2021,2022,2023],{"id":151,"slug":3219,"dossier":45,"summary":3220,"aliases":3221,"sourceIds":3224,"published":3225,"modified":3226,"checkedAt":7,"severity":3227,"references":3230,"versionKeys":3239,"packageCount":32,"repositoryCount":2910},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[3222,3223],"CVE-2026-53538","PYSEC-2026-3037",[151,3223],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[3228],{"type":1901,"score":3229},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3231,3233,3234,3235,3237],{"type":1916,"url":3232},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1913,"url":2761},{"type":1913,"url":2763},{"type":1905,"url":3236},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1905,"url":3238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[2908,2909,2767],{"id":152,"slug":3241,"dossier":45,"summary":3242,"aliases":3243,"sourceIds":3246,"published":3247,"modified":3248,"checkedAt":7,"severity":3249,"references":3251,"versionKeys":3262,"packageCount":32,"repositoryCount":443},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3244,3245],"CVE-2025-69223","PYSEC-2026-1101",[152,3245],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3250],{"type":1901,"score":2008},[3252,3254,3256,3258,3259,3260],{"type":1916,"url":3253},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1905,"url":3255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1910,"url":3257},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":3261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2017,2018,2019,2020,2021,2022,2023],{"id":153,"slug":3264,"dossier":45,"summary":3265,"aliases":3266,"sourceIds":3269,"published":3270,"modified":3271,"checkedAt":7,"severity":3272,"references":3274,"versionKeys":3291,"packageCount":32,"repositoryCount":103},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[3267,3268],"CVE-2026-54233","PYSEC-2026-3404",[153,3268],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[3273],{"type":1901,"score":2358},[3275,3277,3279,3281,3283,3285,3287,3288,3290],{"type":1916,"url":3276},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1905,"url":3278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":1916,"url":3280},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":1916,"url":3282},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":1905,"url":3284},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1916,"url":3286},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":1913,"url":2054},{"type":1916,"url":3289},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":1913,"url":2050},[2072,2073,2309],{"id":154,"slug":3293,"dossier":45,"summary":3294,"aliases":3295,"sourceIds":3298,"published":3299,"modified":3300,"checkedAt":7,"severity":3301,"references":3303,"versionKeys":3317,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[3296,3297],"CVE-2025-48942","PYSEC-2025-54",[154,3297],"2025-05-28T19:41:53Z","2026-08-07T08:12:01.995568358Z",[3302],{"type":1901,"score":2358},[3304,3306,3308,3310,3312,3314,3316],{"type":1949,"url":3305},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":1905,"url":3307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2152,"url":3309},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2152,"url":3311},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":1910,"url":3313},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":1916,"url":3315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":1913,"url":2054},[2309],{"id":155,"slug":3319,"dossier":89,"summary":3320,"aliases":3321,"sourceIds":3325,"published":3326,"modified":3327,"checkedAt":7,"severity":3328,"references":3330,"versionKeys":3343,"packageCount":32,"repositoryCount":2130},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[3322,3323,3324],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[155,3324],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[3329],{"type":1901,"score":2008},[3331,3333,3335,3337,3339,3341,3342],{"type":1949,"url":3332},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1905,"url":3334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1910,"url":3336},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1910,"url":3338},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1916,"url":3340},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1913,"url":2454},{"type":1905,"url":2981},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":156,"slug":3345,"dossier":45,"summary":3346,"aliases":3347,"sourceIds":3350,"published":3351,"modified":3352,"checkedAt":7,"severity":3353,"references":3355,"versionKeys":3366,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3348,3349],"CVE-2024-12720","PYSEC-2026-1982",[156,3349],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3354],{"type":1901,"score":2608},[3356,3358,3360,3361,3363,3364],{"type":1905,"url":3357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1916,"url":3359},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1913,"url":1947},{"type":1916,"url":3362},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1913,"url":2196},{"type":1905,"url":3365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1954],{"id":157,"slug":3368,"dossier":45,"summary":3369,"aliases":3370,"sourceIds":3373,"published":3374,"modified":3375,"checkedAt":7,"severity":3376,"references":3378,"versionKeys":3387,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3371,3372],"CVE-2026-57585","PYSEC-2026-3625",[157,3372],"2026-06-19T21:42:55Z","2026-08-07T09:55:56.955079633Z",[3377],{"type":1901,"score":2008},[3379,3381,3383,3385],{"type":1905,"url":3380},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":1910,"url":3382},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":1913,"url":3384},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":1916,"url":3386},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3388,3389,3390],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":158,"slug":3392,"dossier":45,"summary":3393,"aliases":3394,"sourceIds":3397,"published":3398,"modified":3399,"checkedAt":7,"severity":3400,"references":3402,"versionKeys":3435,"packageCount":32,"repositoryCount":499},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[3395,3396],"CVE-2023-48022","PYSEC-2026-517",[158,3396],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[3401],{"type":1901,"score":2566},[3403,3405,3407,3409,3411,3413,3415,3417,3419,3421,3423,3425,3427,3429,3431,3433],{"type":1905,"url":3404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":1916,"url":3406},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":1916,"url":3408},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":1916,"url":3410},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":1916,"url":3412},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":1916,"url":3414},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":1916,"url":3416},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":1905,"url":3418},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":1916,"url":3420},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":1913,"url":3422},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":1916,"url":3424},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":1916,"url":3426},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":1916,"url":3428},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":1916,"url":3430},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":1916,"url":3432},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":1913,"url":3434},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[3436,3437],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":159,"slug":3439,"dossier":45,"summary":3440,"aliases":3441,"sourceIds":3444,"published":3445,"modified":3446,"checkedAt":7,"severity":3447,"references":3449,"versionKeys":3487,"packageCount":32,"repositoryCount":499},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[3442,3443],"CVE-2026-27893","PYSEC-2026-2297",[159,3443],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[3448],{"type":1901,"score":2037},[3450,3452,3454,3456,3458,3460,3461,3463,3465,3467,3469,3471,3473,3475,3477,3479,3481,3483,3485],{"type":1905,"url":3451},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":1905,"url":3453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2152,"url":3455},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":1910,"url":3457},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":1916,"url":3459},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":1913,"url":2054},{"type":1916,"url":3462},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2152,"url":3464},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":1916,"url":3466},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":1905,"url":3468},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":1905,"url":3470},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":1905,"url":3472},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":1905,"url":3474},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1905,"url":3476},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1905,"url":3478},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":1905,"url":3480},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":1905,"url":3482},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":1905,"url":3484},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":1905,"url":3486},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2072,2073],{"id":160,"slug":3489,"dossier":45,"summary":3490,"aliases":3491,"sourceIds":3494,"published":3495,"modified":3496,"checkedAt":7,"severity":3497,"references":3499,"versionKeys":3516,"packageCount":32,"repositoryCount":2910},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3492,3493],"CVE-2025-62727","PYSEC-2026-1942",[160,3493],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3498],{"type":1901,"score":2008},[3500,3502,3504,3506,3509,3511,3513,3514],{"type":1916,"url":3501},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1905,"url":3503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1910,"url":3505},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3507,"url":3508},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1913,"url":3510},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1916,"url":3512},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1913,"url":1987},{"type":1905,"url":3515},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1992,1993,3517,3518],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":161,"slug":3520,"dossier":45,"summary":3521,"aliases":3522,"sourceIds":3525,"published":3526,"modified":3527,"checkedAt":7,"severity":3528,"references":3531,"versionKeys":3548,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3523,3524],"CVE-2026-0994","PYSEC-2026-1805",[161,3524],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3529],{"type":2005,"score":3530},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3532,3534,3536,3538,3540,3542,3544,3546],{"type":1905,"url":3533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1916,"url":3535},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1916,"url":3537},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1916,"url":3539},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1916,"url":3541},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1913,"url":3543},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1913,"url":3545},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1905,"url":3547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3549,3550,3551,3552,3553,3554,3555,3556,3557],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":162,"slug":3559,"dossier":45,"summary":3560,"aliases":3561,"sourceIds":3564,"published":3565,"modified":3566,"checkedAt":7,"severity":3567,"references":3571,"versionKeys":3586,"packageCount":32,"repositoryCount":103},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[3562,3563],"CVE-2026-54235","PYSEC-2026-3405",[162,3563],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[3568,3570],{"type":1901,"score":3569},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2005,"score":3045},[3572,3574,3576,3578,3580,3582,3584,3585],{"type":1916,"url":3573},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1905,"url":3575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":1916,"url":3577},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":1916,"url":3579},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":1905,"url":3581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1916,"url":3583},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":163,"slug":3588,"dossier":45,"summary":3589,"aliases":3590,"sourceIds":3593,"published":3594,"modified":3595,"checkedAt":7,"severity":3596,"references":3599,"versionKeys":3620,"packageCount":32,"repositoryCount":103},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[3591,3592],"CVE-2026-25048","PYSEC-2026-2322",[163,3592],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[3597,3598],{"type":2005,"score":2752},{"type":1901,"score":2008},[3600,3602,3604,3605,3607,3609,3611,3612,3614,3616,3618],{"type":1949,"url":3601},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":1905,"url":3603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":1913,"url":2814},{"type":1905,"url":3606},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":1916,"url":3608},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":1916,"url":3610},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":1905,"url":3476},{"type":1905,"url":3613},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":1905,"url":3615},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":1905,"url":3617},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2152,"url":3619},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[2820,3621,3622],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":164,"slug":3624,"dossier":45,"summary":3625,"aliases":3626,"sourceIds":3629,"published":3630,"modified":3631,"checkedAt":7,"severity":3632,"references":3634,"versionKeys":3638,"packageCount":32,"repositoryCount":101},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3627,3628],"CVE-2026-54283","PYSEC-2026-249",[164,3628],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3633],{"type":1901,"score":2008},[3635,3637],{"type":1905,"url":3636},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1913,"url":3510},[1991,1992,1993,3517,3518,3639,3640],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":165,"slug":3642,"dossier":45,"summary":3643,"aliases":3644,"sourceIds":3648,"published":3649,"modified":3650,"checkedAt":7,"severity":3651,"references":3654,"versionKeys":3691,"packageCount":32,"repositoryCount":101},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3645,3646,3647],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[165,3646],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[3652],{"type":1901,"score":3653},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3655,3657,3659,3661,3663,3665,3667,3669,3671,3673,3674,3676,3679,3681,3683,3685,3687,3689],{"type":1905,"url":3656},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1905,"url":3658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1910,"url":3660},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1916,"url":3662},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1919,"url":3664},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1916,"url":3666},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1916,"url":3668},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1916,"url":3670},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1916,"url":3672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1913,"url":3510},{"type":1916,"url":3675},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3677,"url":3678},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1916,"url":3680},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1916,"url":3682},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":1916,"url":3684},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":1916,"url":3686},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":1919,"url":3688},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1905,"url":3690},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1991,1992,1993,3517,3518,3639,3640],{"id":166,"slug":3693,"dossier":45,"summary":3694,"aliases":3695,"sourceIds":3699,"published":3700,"modified":3701,"checkedAt":7,"severity":3702,"references":3706,"versionKeys":3728,"packageCount":32,"repositoryCount":443},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[3696,3697,3698],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[166,3698],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[3703,3704],{"type":1901,"score":2143},{"type":2005,"score":3705},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3707,3709,3711,3713,3715,3717,3718,3720,3722,3724,3726],{"type":1905,"url":3708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1916,"url":3710},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1916,"url":3712},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1916,"url":3714},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1916,"url":3716},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1913,"url":2159},{"type":1916,"url":3719},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1916,"url":3721},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1916,"url":3723},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1913,"url":3725},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1905,"url":3727},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2171,2172,2173,3729,3730],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":167,"slug":3732,"dossier":45,"summary":3733,"aliases":3734,"sourceIds":3737,"published":3738,"modified":3739,"checkedAt":7,"severity":3740,"references":3743,"versionKeys":3758,"packageCount":32,"repositoryCount":103},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[3735,3736],"CVE-2025-66448","PYSEC-2026-2015",[167,3736],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[3741],{"type":1901,"score":3742},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3744,3746,3748,3750,3752,3754,3756,3757],{"type":1916,"url":3745},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1905,"url":3747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":1916,"url":3749},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":1916,"url":3751},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":1905,"url":3753},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1916,"url":3755},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":168,"slug":3760,"dossier":45,"summary":3761,"aliases":3762,"sourceIds":3765,"published":3766,"modified":3767,"checkedAt":7,"severity":3768,"references":3771,"versionKeys":3790,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[3763,3764],"CVE-2026-12491","PYSEC-2026-3406",[168,3764],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[3769],{"type":1901,"score":3770},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[3772,3774,3776,3778,3780,3782,3784,3786,3788,3789],{"type":1916,"url":3773},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1905,"url":3775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":1916,"url":3777},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":1916,"url":3779},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":1916,"url":3781},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":1916,"url":3783},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":1905,"url":3785},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1916,"url":3787},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2073],{"id":169,"slug":3792,"dossier":45,"summary":3793,"aliases":3794,"sourceIds":3797,"published":3798,"modified":3799,"checkedAt":7,"severity":3800,"references":3803,"versionKeys":3822,"packageCount":32,"repositoryCount":103},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3795,3796],"CVE-2025-4565","PYSEC-2026-1806",[169,3796],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3801],{"type":2005,"score":3802},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3804,3806,3808,3810,3812,3813,3815,3817,3819,3820],{"type":1916,"url":3805},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1916,"url":3807},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1905,"url":3809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1916,"url":3811},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1913,"url":3543},{"type":1916,"url":3814},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1916,"url":3816},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1916,"url":3818},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1913,"url":3545},{"type":1905,"url":3821},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3549,3551,3552],{"id":170,"slug":3824,"dossier":89,"summary":3825,"aliases":3826,"sourceIds":3830,"published":3831,"modified":3832,"checkedAt":7,"severity":3833,"references":3835,"versionKeys":3845,"packageCount":32,"repositoryCount":2130},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[3827,3828,3829],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[170,3829],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[3834],{"type":1901,"score":2008},[3836,3838,3840,3841,3843,3844],{"type":1949,"url":3837},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1905,"url":3839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1910,"url":2450},{"type":1916,"url":3842},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1913,"url":2454},{"type":1905,"url":2456},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":171,"slug":3847,"dossier":45,"summary":3848,"aliases":3849,"sourceIds":3852,"published":3853,"modified":3854,"checkedAt":7,"severity":3855,"references":3857,"versionKeys":3870,"packageCount":32,"repositoryCount":499},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3850,3851],"CVE-2025-5197","PYSEC-2026-1983",[171,3851],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[3856],{"type":1901,"score":2608},[3858,3860,3862,3864,3865,3867,3868],{"type":1905,"url":3859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1916,"url":3861},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1916,"url":3863},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1913,"url":1947},{"type":1916,"url":3866},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1913,"url":2196},{"type":1905,"url":3869},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1954,1955],{"id":172,"slug":3872,"dossier":45,"summary":3873,"aliases":3874,"sourceIds":3877,"published":3878,"modified":3879,"checkedAt":7,"severity":3880,"references":3883,"versionKeys":3911,"packageCount":32,"repositoryCount":103},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[3875,3876],"CVE-2026-48746","PYSEC-2026-226",[172,3876],"2026-06-16T17:36:41Z","2026-07-22T12:46:58.979336878Z",[3881],{"type":1901,"score":3882},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[3884,3886,3888,3890,3892,3894,3895,3897,3899,3901,3902,3903,3905,3907,3908,3909],{"type":1905,"url":3885},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":1905,"url":3887},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2152,"url":3889},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":1905,"url":3891},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1916,"url":3893},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":1913,"url":2054},{"type":1916,"url":3896},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":1916,"url":3898},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":1916,"url":3900},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":1916,"url":3686},{"type":1916,"url":2066},{"type":1916,"url":3904},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42142",{"type":1916,"url":3906},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42132",{"type":1916,"url":2371},{"type":1916,"url":2369},{"type":1916,"url":3910},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",[2072,2073,2309],{"id":173,"slug":3913,"dossier":45,"summary":3914,"aliases":3915,"sourceIds":3918,"published":3919,"modified":3920,"checkedAt":7,"severity":3921,"references":3924,"versionKeys":3935,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3916,3917],"CVE-2025-53643","PYSEC-2026-1104",[173,3917],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3922],{"type":2005,"score":3923},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3925,3927,3929,3931,3932,3933],{"type":1916,"url":3926},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1905,"url":3928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1910,"url":3930},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":3934},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2017,2018,2019,2020],{"id":174,"slug":3937,"dossier":45,"summary":3938,"aliases":3939,"sourceIds":3942,"published":3943,"modified":3944,"checkedAt":7,"severity":3945,"references":3949,"versionKeys":3958,"packageCount":32,"repositoryCount":2025},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3940,3941],"CVE-2026-34518","PYSEC-2026-2100",[174,3941],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3946,3948],{"type":1901,"score":3947},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2005,"score":2726},[3950,3952,3954,3956,3957],{"type":1910,"url":3951},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1905,"url":3953},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1910,"url":3955},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":175,"slug":3960,"dossier":45,"summary":3961,"aliases":3962,"sourceIds":3965,"published":3966,"modified":3967,"checkedAt":7,"severity":3968,"references":3972,"versionKeys":3991,"packageCount":32,"repositoryCount":103},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[3963,3964],"CVE-2026-9540","PYSEC-2026-3407",[175,3964],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[3969,3970],{"type":1901,"score":1972},{"type":2005,"score":3971},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3973,3975,3977,3979,3980,3982,3984,3986,3988,3989],{"type":1905,"url":3974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":1916,"url":3976},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":1916,"url":3978},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":1913,"url":2054},{"type":1916,"url":3981},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":1916,"url":3983},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":1916,"url":3985},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":1916,"url":3987},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":1913,"url":2050},{"type":1905,"url":3990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2072,2073,2309],{"id":176,"slug":3993,"dossier":45,"summary":3994,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4003,"versionKeys":4015,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[3996,3997],"CVE-2025-48943","PYSEC-2025-55",[176,3997],"2025-05-28T19:42:12Z","2026-08-07T08:12:07.476205432Z",[4002],{"type":1901,"score":2358},[4004,4006,4008,4010,4011,4012,4014],{"type":1905,"url":4005},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":1905,"url":4007},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2152,"url":4009},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2152,"url":3311},{"type":1910,"url":3313},{"type":1916,"url":4013},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":1913,"url":2054},[2309],{"id":177,"slug":4017,"dossier":45,"summary":4018,"aliases":4019,"sourceIds":4022,"published":4023,"modified":4024,"checkedAt":7,"severity":4025,"references":4028,"versionKeys":4047,"packageCount":32,"repositoryCount":443},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4020,4021],"CVE-2024-47081","PYSEC-2026-1872",[177,4021],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4026],{"type":1901,"score":4027},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4029,4031,4033,4035,4037,4039,4041,4043,4045],{"type":1916,"url":4030},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1905,"url":4032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1916,"url":4034},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1910,"url":4036},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1913,"url":4038},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1916,"url":4040},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1916,"url":4042},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1913,"url":4044},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1905,"url":4046},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4048,4049],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":178,"slug":4051,"dossier":89,"summary":4052,"aliases":4053,"sourceIds":4057,"published":4058,"modified":4059,"checkedAt":7,"severity":4060,"references":4062,"versionKeys":4075,"packageCount":32,"repositoryCount":2130},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[4054,4055,4056],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[178,4056],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[4061],{"type":1901,"score":2008},[4063,4065,4067,4069,4071,4073,4074],{"type":1949,"url":4064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1905,"url":4066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1910,"url":4068},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1910,"url":4070},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1916,"url":4072},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1913,"url":2454},{"type":1905,"url":2981},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":179,"slug":4077,"dossier":45,"summary":4078,"aliases":4079,"sourceIds":4082,"published":4083,"modified":4084,"checkedAt":7,"severity":4085,"references":4088,"versionKeys":4103,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[4080,4081],"CVE-2025-30165","PYSEC-2026-2017",[179,4081],"2025-05-06T16:38:35Z","2026-08-07T08:12:19.063707308Z",[4086],{"type":1901,"score":4087},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4089,4091,4093,4095,4097,4098,4100,4102],{"type":1916,"url":4090},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1905,"url":4092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":1905,"url":4094},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1916,"url":4096},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":1913,"url":2054},{"type":1916,"url":4099},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":1916,"url":4101},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":1913,"url":2050},[2309],{"id":180,"slug":4105,"dossier":45,"summary":4106,"aliases":4107,"sourceIds":4110,"published":4111,"modified":4112,"checkedAt":7,"severity":4113,"references":4116,"versionKeys":4133,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4108,4109],"CVE-2024-35195","PYSEC-2026-1873",[180,4109],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4114],{"type":1901,"score":4115},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4117,4119,4121,4123,4125,4126,4128,4130,4131],{"type":1916,"url":4118},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1905,"url":4120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1916,"url":4122},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1910,"url":4124},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1913,"url":4038},{"type":1916,"url":4127},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1916,"url":4129},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1913,"url":4044},{"type":1905,"url":4132},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4048],{"id":181,"slug":4135,"dossier":45,"summary":4136,"aliases":4137,"sourceIds":4140,"published":4141,"modified":4142,"checkedAt":7,"severity":4143,"references":4147,"versionKeys":4153,"packageCount":32,"repositoryCount":2025},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4138,4139],"CVE-2026-54280","PYSEC-2026-2113",[181,4139],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[4144,4146],{"type":2005,"score":4145},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2008},[4148,4150,4152],{"type":1905,"url":4149},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1910,"url":4151},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":182,"slug":4155,"dossier":45,"summary":4156,"aliases":4157,"sourceIds":4160,"published":4161,"modified":4162,"checkedAt":7,"severity":4163,"references":4167,"versionKeys":4178,"packageCount":32,"repositoryCount":2025},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4158,4159],"CVE-2026-34525","PYSEC-2026-2103",[182,4159],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[4164,4166],{"type":2005,"score":4165},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1901,"score":2087},[4168,4170,4172,4174,4176,4177],{"type":1910,"url":4169},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1905,"url":4171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1910,"url":4173},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1910,"url":4175},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":183,"slug":4180,"dossier":45,"summary":4181,"aliases":4182,"sourceIds":4185,"published":4186,"modified":4187,"checkedAt":7,"severity":4188,"references":4191,"versionKeys":4203,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[4183,4184],"CVE-2025-46722","PYSEC-2025-43",[183,4184],"2025-05-28T18:03:41Z","2026-08-07T08:12:03.917531780Z",[4189],{"type":1901,"score":4190},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[4192,4194,4196,4198,4200,4202],{"type":1905,"url":4193},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":1905,"url":4195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":1916,"url":4197},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":1910,"url":4199},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":1916,"url":4201},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":1913,"url":2054},[2309],{"id":184,"slug":4205,"dossier":45,"summary":4206,"aliases":4207,"sourceIds":4211,"published":4212,"modified":4213,"checkedAt":7,"severity":4214,"references":4219,"versionKeys":4235,"packageCount":32,"repositoryCount":499},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4208,4209,4210],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[184],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4215,4217],{"type":1901,"score":4216},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2005,"score":4218},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4220,4222,4224,4226,4227,4229,4231,4233],{"type":1905,"url":4221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1916,"url":4223},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1916,"url":4225},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1913,"url":2159},{"type":1916,"url":4228},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1916,"url":4230},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1916,"url":4232},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1916,"url":4234},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2171,2172],{"id":185,"slug":4237,"dossier":45,"summary":4238,"aliases":4239,"sourceIds":4243,"published":4244,"modified":4245,"checkedAt":7,"severity":4246,"references":4250,"versionKeys":4287,"packageCount":32,"repositoryCount":4288},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4240,4241,4242],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[185,4242],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4247,4249],{"type":2005,"score":4248},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1901,"score":2008},[4251,4253,4255,4257,4259,4261,4262,4264,4266,4268,4270,4272,4274,4276,4277,4279,4280,4281,4283,4285],{"type":1916,"url":4252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1905,"url":4254},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1916,"url":4256},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1916,"url":4258},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1916,"url":4260},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1913,"url":2454},{"type":1916,"url":4263},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1916,"url":4265},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1916,"url":4267},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1905,"url":4269},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1905,"url":4271},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1905,"url":4273},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1905,"url":4275},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1905,"url":3486},{"type":1905,"url":4278},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1905,"url":2595},{"type":1905,"url":2593},{"type":1905,"url":4282},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1905,"url":4284},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1905,"url":4286},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2458,2459,2460,2461,2462,2463,2464],12,{"id":186,"slug":4290,"dossier":45,"summary":4291,"aliases":4292,"sourceIds":4295,"published":4296,"modified":4297,"checkedAt":7,"severity":4298,"references":4301,"versionKeys":4318,"packageCount":32,"repositoryCount":499},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4293,4294],"CVE-2025-27516","PYSEC-2026-1471",[186,4294],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4299],{"type":2005,"score":4300},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4302,4304,4306,4308,4310,4312,4314,4316],{"type":1916,"url":4303},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1905,"url":4305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1910,"url":4307},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1913,"url":4309},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1916,"url":4311},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1916,"url":4313},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1913,"url":4315},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1905,"url":4317},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4319,4320],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":187,"slug":4322,"dossier":45,"summary":4323,"aliases":4324,"sourceIds":4327,"published":4328,"modified":4329,"checkedAt":7,"severity":4330,"references":4333,"versionKeys":4348,"packageCount":32,"repositoryCount":4350},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[4325,4326],"CVE-2026-69244","PYSEC-2026-3545",[187,4326],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[4331],{"type":2005,"score":4332},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4334,4336,4338,4340,4341,4343,4344,4346],{"type":1916,"url":4335},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1916,"url":4337},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1916,"url":4339},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1913,"url":2013},{"type":1916,"url":4342},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1913,"url":2736},{"type":1905,"url":4345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1905,"url":4347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2017,2018,2019,2020,2021,2022,2023,2024,4349],"pypi:aiohttp@3.14.1",11,{"id":188,"slug":4352,"dossier":45,"summary":4353,"aliases":4354,"sourceIds":4358,"published":4359,"modified":4360,"checkedAt":7,"severity":4361,"references":4365,"versionKeys":4381,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4355,4356,4357],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[188,4357],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4362,4363],{"type":1901,"score":2037},{"type":2005,"score":4364},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4366,4368,4370,4372,4373,4375,4377,4379],{"type":1905,"url":4367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1916,"url":4369},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1916,"url":4371},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1913,"url":2878},{"type":1916,"url":4374},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1916,"url":4376},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1913,"url":4378},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1905,"url":4380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[2884],{"id":189,"slug":4383,"dossier":45,"summary":4384,"aliases":4385,"sourceIds":4389,"published":4390,"modified":4391,"checkedAt":7,"severity":4392,"references":4397,"versionKeys":4415,"packageCount":32,"repositoryCount":499},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4386,4387,4388],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[189],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4393,4395],{"type":1901,"score":4394},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2005,"score":4396},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4398,4400,4402,4404,4406,4408,4409,4411,4413],{"type":1905,"url":4399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1916,"url":4401},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1916,"url":4403},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1916,"url":4405},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1916,"url":4407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1913,"url":2159},{"type":1916,"url":4410},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1916,"url":4412},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1916,"url":4414},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2171,2172],{"id":190,"slug":4417,"dossier":45,"summary":4418,"aliases":4419,"sourceIds":4422,"published":4423,"modified":4424,"checkedAt":7,"severity":4425,"references":4429,"versionKeys":4440,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4420,4421],"CVE-2024-47874","PYSEC-2026-1943",[190,4421],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4426,4428],{"type":1901,"score":4427},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2005,"score":2752},[4430,4432,4434,4436,4437,4438],{"type":1916,"url":4431},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1905,"url":4433},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1910,"url":4435},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1913,"url":1981},{"type":1913,"url":1987},{"type":1905,"url":4439},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1991],{"id":191,"slug":4442,"dossier":45,"summary":4443,"aliases":4444,"sourceIds":4447,"published":4448,"modified":4449,"checkedAt":7,"severity":4450,"references":4455,"versionKeys":4477,"packageCount":32,"repositoryCount":101},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4445,4446],"CVE-2026-5241","PYSEC-2026-2290",[191,4446],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[4451,4453],{"type":1901,"score":4452},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1901,"score":4454},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4456,4458,4460,4462,4463,4464,4466,4468,4469,4471,4473,4475],{"type":1905,"url":4457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1910,"url":4459},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1905,"url":4461},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1905,"url":3474},{"type":1916,"url":2066},{"type":1916,"url":4465},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2152,"url":4467},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1913,"url":1947},{"type":1916,"url":4470},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1949,"url":4472},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1916,"url":4474},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1905,"url":4476},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1954,1955,1956,1957,1958,1959,1960],{"id":192,"slug":4479,"dossier":45,"summary":4480,"aliases":4481,"sourceIds":4484,"published":4485,"modified":4486,"checkedAt":7,"severity":4487,"references":4490,"versionKeys":4501,"packageCount":32,"repositoryCount":443},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[4482,4483],"CVE-2025-69230","PYSEC-2026-1105",[192,4483],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[4488],{"type":2005,"score":4489},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4491,4493,4495,4497,4498,4499],{"type":1916,"url":4492},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1905,"url":4494},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1910,"url":4496},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":4500},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2017,2018,2019,2020,2021,2022,2023],{"id":193,"slug":4503,"dossier":89,"summary":4504,"aliases":4505,"sourceIds":4509,"published":4510,"modified":4511,"checkedAt":7,"severity":4512,"references":4515,"versionKeys":4529,"packageCount":32,"repositoryCount":2130},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[4506,4507,4508],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[193,4508],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[4513],{"type":1901,"score":4514},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[4516,4518,4520,4522,4524,4525,4526,4527],{"type":1916,"url":4517},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1905,"url":4519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1916,"url":4521},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1916,"url":4523},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1913,"url":2454},{"type":1916,"url":2981},{"type":1913,"url":2983},{"type":1905,"url":4528},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":194,"slug":4531,"dossier":45,"summary":3346,"aliases":4532,"sourceIds":4535,"published":4536,"modified":4537,"checkedAt":7,"severity":4538,"references":4541,"versionKeys":4552,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4533,4534],"CVE-2025-1194","PYSEC-2026-1984",[194,4534],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4539],{"type":1901,"score":4540},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4542,4544,4546,4547,4549,4550],{"type":1905,"url":4543},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1916,"url":4545},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1913,"url":1947},{"type":1916,"url":4548},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1913,"url":2196},{"type":1905,"url":4551},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1954],{"id":195,"slug":4554,"dossier":45,"summary":4555,"aliases":4556,"sourceIds":4559,"published":4560,"modified":4561,"checkedAt":7,"severity":4562,"references":4565,"versionKeys":4571,"packageCount":32,"repositoryCount":2025},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[4557,4558],"CVE-2026-54278","PYSEC-2026-2111",[195,4558],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[4563,4564],{"type":2005,"score":2503},{"type":1901,"score":2008},[4566,4568,4569],{"type":1905,"url":4567},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1913,"url":2013},{"type":1910,"url":4570},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2017,2018,2019,2020,2021,2022,2023,2024],{"id":196,"slug":4573,"dossier":45,"summary":4574,"aliases":4575,"sourceIds":4578,"published":4579,"modified":4580,"checkedAt":7,"severity":4581,"references":4584,"versionKeys":4603,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4576,4577],"CVE-2024-34062","PYSEC-2026-1976",[196,4577],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4582],{"type":1901,"score":4583},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4585,4587,4589,4591,4593,4595,4597,4599,4601],{"type":1916,"url":4586},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1905,"url":4588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1916,"url":4590},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1913,"url":4592},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1916,"url":4594},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1916,"url":4596},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1916,"url":4598},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1913,"url":4600},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1905,"url":4602},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4604],"pypi:tqdm@4.66.2",{"id":197,"slug":4606,"dossier":45,"summary":4607,"aliases":4608,"sourceIds":4611,"published":4612,"modified":4613,"checkedAt":7,"severity":4614,"references":4616,"versionKeys":4629,"packageCount":32,"repositoryCount":443},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[4609,4610],"CVE-2025-69229","PYSEC-2026-1106",[197,4610],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[4615],{"type":2005,"score":2503},[4617,4619,4621,4623,4625,4626,4627],{"type":1916,"url":4618},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1905,"url":4620},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1916,"url":4622},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1916,"url":4624},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":4628},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2017,2018,2019,2020,2021,2022,2023],{"id":198,"slug":4631,"dossier":89,"summary":4632,"aliases":4633,"sourceIds":4636,"published":4637,"modified":4638,"checkedAt":7,"severity":4639,"references":4644,"versionKeys":4654,"packageCount":32,"repositoryCount":4657},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4634,4635],"CVE-2026-25645","PYSEC-2026-2275",[198,4635],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4640,4642],{"type":1901,"score":4641},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1901,"score":4643},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4645,4647,4649,4651,4652],{"type":1905,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1905,"url":4648},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1910,"url":4650},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1913,"url":4038},{"type":1905,"url":4653},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4048,4049,4655,4656],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":199,"slug":4659,"dossier":89,"summary":4660,"aliases":4661,"sourceIds":4664,"published":4665,"modified":4666,"checkedAt":7,"severity":4667,"references":4669,"versionKeys":4680,"packageCount":32,"repositoryCount":2130},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4662,4663],"CVE-2025-66418","PYSEC-2026-1998",[199,4663],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4668],{"type":2005,"score":2110},[4670,4672,4674,4676,4677,4678],{"type":1916,"url":4671},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1905,"url":4673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1910,"url":4675},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1913,"url":2119},{"type":1913,"url":2121},{"type":1905,"url":4679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2125,2126,2127,2128,2129],{"id":200,"slug":4682,"dossier":45,"summary":4683,"aliases":4684,"sourceIds":4687,"published":4688,"modified":4689,"checkedAt":7,"severity":4690,"references":4693,"versionKeys":4708,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4685,4686],"CVE-2024-56201","PYSEC-2026-1472",[200,4686],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4691,4692],{"type":1901,"score":2865},{"type":2005,"score":4300},[4694,4696,4698,4700,4702,4703,4705,4706],{"type":1916,"url":4695},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1905,"url":4697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1916,"url":4699},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1910,"url":4701},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1913,"url":4309},{"type":1916,"url":4704},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1913,"url":4315},{"type":1905,"url":4707},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4319],{"id":201,"slug":4710,"dossier":45,"summary":4711,"aliases":4712,"sourceIds":4715,"published":4716,"modified":4717,"checkedAt":7,"severity":4718,"references":4721,"versionKeys":4733,"packageCount":32,"repositoryCount":103},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[4713,4714],"CVE-2026-22773","PYSEC-2026-143",[201,4714],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[4719,4720],{"type":1901,"score":2358},{"type":1901,"score":2008},[4722,4724,4726,4728,4730,4732],{"type":1949,"url":4723},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":1905,"url":4725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":1916,"url":4727},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":1916,"url":4729},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":1916,"url":4731},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":1913,"url":2054},[2072,2073,2309],{"id":202,"slug":4735,"dossier":45,"summary":4736,"aliases":4737,"sourceIds":4740,"published":4741,"modified":4742,"checkedAt":7,"severity":4743,"references":4745,"versionKeys":4766,"packageCount":32,"repositoryCount":103},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[4738,4739],"CVE-2025-34351","PYSEC-2026-518",[202,4739],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[4744],{"type":2005,"score":2702},[4746,4748,4750,4751,4752,4754,4756,4758,4760,4761,4763,4764],{"type":1916,"url":4747},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":1905,"url":4749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":1916,"url":3416},{"type":1913,"url":3422},{"type":1916,"url":4753},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":1916,"url":4755},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":1916,"url":4757},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":1916,"url":4759},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":1916,"url":3426},{"type":1916,"url":4762},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":1913,"url":3434},{"type":1905,"url":4765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[3436,3437,4767],"pypi:ray@2.50.1",{"id":203,"slug":4769,"dossier":89,"summary":4770,"aliases":4771,"sourceIds":4775,"published":4776,"modified":4777,"checkedAt":7,"severity":4778,"references":4781,"versionKeys":4793,"packageCount":32,"repositoryCount":4801},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[4772,4773,4774],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[203,4774],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[4779],{"type":1901,"score":4780},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4782,4784,4786,4788,4790,4791],{"type":1949,"url":4783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1905,"url":4785},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1910,"url":4787},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1916,"url":4789},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1913,"url":2878},{"type":1905,"url":4792},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[2884,2885,2886,4794,4795,4796,4797,4798,4799,4800],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":204,"slug":4803,"dossier":45,"summary":4804,"aliases":4805,"sourceIds":4808,"published":4809,"modified":4810,"checkedAt":7,"severity":4811,"references":4814,"versionKeys":4835,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4806,4807],"CVE-2024-34064","PYSEC-2026-1474",[204,4807],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4812],{"type":1901,"score":4813},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4815,4817,4819,4821,4822,4824,4826,4828,4830,4832,4833],{"type":1916,"url":4816},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1905,"url":4818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1910,"url":4820},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1913,"url":4309},{"type":1916,"url":4823},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1916,"url":4825},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1916,"url":4827},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1916,"url":4829},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1916,"url":4831},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1913,"url":4315},{"type":1905,"url":4834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4319],{"id":205,"slug":4837,"dossier":45,"summary":4838,"aliases":4839,"sourceIds":4842,"published":4843,"modified":4844,"checkedAt":7,"severity":4845,"references":4848,"versionKeys":4857,"packageCount":32,"repositoryCount":2025},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[4840,4841],"CVE-2026-34513","PYSEC-2026-2095",[205,4841],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[4846,4847],{"type":2005,"score":2393},{"type":1901,"score":2008},[4849,4851,4853,4855,4856],{"type":1910,"url":4850},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1905,"url":4852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1910,"url":4854},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":206,"slug":4859,"dossier":45,"summary":4860,"aliases":4861,"sourceIds":4864,"published":4865,"modified":4866,"checkedAt":7,"severity":4867,"references":4871,"versionKeys":4879,"packageCount":32,"repositoryCount":2025},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[4862,4863],"CVE-2026-47265","PYSEC-2026-2105",[206,4863],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[4868,4870],{"type":2005,"score":4869},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1901,"score":2832},[4872,4874,4876,4878],{"type":1910,"url":4873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1905,"url":4875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1910,"url":4877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":207,"slug":4881,"dossier":45,"summary":4882,"aliases":4883,"sourceIds":4886,"published":4887,"modified":4888,"checkedAt":7,"severity":4889,"references":4891,"versionKeys":4906,"packageCount":32,"repositoryCount":103},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[4884,4885],"CVE-2026-54236","PYSEC-2026-3408",[207,4885],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[4890],{"type":1901,"score":3947},[4892,4894,4896,4898,4900,4902,4904,4905],{"type":1916,"url":4893},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1905,"url":4895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":1916,"url":4897},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":1916,"url":4899},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":1905,"url":4901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1916,"url":4903},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":208,"slug":4908,"dossier":45,"summary":4909,"aliases":4910,"sourceIds":4913,"published":4914,"modified":4915,"checkedAt":7,"severity":4916,"references":4922,"versionKeys":4940,"packageCount":32,"repositoryCount":103},"ghsa-hhrp-gw25-jr43-92599f57","Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)",[4911,4912],"CVE-2026-57516","PYSEC-2026-2273",[208,4912],"2026-07-01T17:16:37.390Z","2026-07-24T16:00:26.759843240Z",[4917,4918,4920],{"type":1901,"score":2037},{"type":2005,"score":4919},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2005,"score":4921},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4923,4925,4927,4929,4931,4933,4935,4936,4938],{"type":1910,"url":4924},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",{"type":1905,"url":4926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-57516",{"type":1910,"url":4928},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":1910,"url":4930},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":1916,"url":4932},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F41443a18f9e6403a072de69098a279c23e2d943c",{"type":1916,"url":4934},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fray\u002FPYSEC-2026-2273.yaml",{"type":1913,"url":3422},{"type":1905,"url":4937},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":1905,"url":4939},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",[3436,3437,4767],{"id":209,"slug":4942,"dossier":45,"summary":4943,"aliases":4944,"sourceIds":4947,"published":4948,"modified":4949,"checkedAt":7,"severity":4950,"references":4955,"versionKeys":4961,"packageCount":32,"repositoryCount":2025},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[4945,4946],"CVE-2026-54276","PYSEC-2026-2109",[209,4946],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[4951,4953],{"type":2005,"score":4952},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1901,"score":4954},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4956,4958,4960],{"type":1905,"url":4957},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1910,"url":4959},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":210,"slug":4963,"dossier":45,"summary":4964,"aliases":4965,"sourceIds":4968,"published":4969,"modified":4970,"checkedAt":7,"severity":4971,"references":4973,"versionKeys":4986,"packageCount":32,"repositoryCount":103},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[4966,4967],"CVE-2026-44222","PYSEC-2026-3409",[210,4967],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[4972],{"type":1901,"score":2358},[4974,4976,4978,4980,4982,4984,4985],{"type":1916,"url":4975},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1905,"url":4977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":1916,"url":4979},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":1905,"url":4981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1916,"url":4983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":211,"slug":4988,"dossier":45,"summary":4989,"aliases":4990,"sourceIds":4993,"published":4994,"modified":4995,"checkedAt":7,"severity":4996,"references":5000,"versionKeys":5016,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[4991,4992],"CVE-2024-11394","PYSEC-2024-229",[211,4992],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[4997,4999],{"type":1901,"score":4998},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1901,"score":2037},[5001,5003,5005,5007,5008,5010,5012,5014],{"type":1905,"url":5002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1916,"url":5004},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1916,"url":5006},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1913,"url":1947},{"type":1916,"url":5009},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1916,"url":5011},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1905,"url":5013},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1905,"url":5015},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1954],{"id":212,"slug":5018,"dossier":45,"summary":5019,"aliases":5020,"sourceIds":5022,"published":5023,"modified":5024,"checkedAt":7,"severity":5025,"references":5028,"versionKeys":5036,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[5021],"CVE-2025-71379",[212],"2025-05-28T17:50:06Z","2026-08-07T08:12:15.960396520Z",[5026],{"type":1901,"score":5027},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5029,5031,5033,5035],{"type":1916,"url":5030},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":1916,"url":5032},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":1916,"url":5034},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":1913,"url":2054},[2309],{"id":213,"slug":5038,"dossier":45,"summary":5039,"aliases":5040,"sourceIds":5043,"published":5044,"modified":5045,"checkedAt":7,"severity":5046,"references":5049,"versionKeys":5058,"packageCount":32,"repositoryCount":499},"ghsa-j842-xgm4-wf88-5ee5f9f5","MLX has Wild Pointer Dereference in load_gguf()",[5041,5042],"CVE-2025-62609","PYSEC-2025-139",[213,5042],"2025-11-21T18:03:20Z","2026-06-06T00:45:47.874274188Z",[5047,5048],{"type":2005,"score":3971},{"type":1901,"score":2008},[5050,5052,5054,5056],{"type":1949,"url":5051},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-j842-xgm4-wf88",{"type":1905,"url":5053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62609",{"type":1913,"url":5055},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx",{"type":1916,"url":5057},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-139.yaml",[5059,5060],"pypi:mlx@0.29.0","pypi:mlx@0.29.3",{"id":214,"slug":5062,"dossier":45,"summary":5063,"aliases":5064,"sourceIds":5067,"published":5068,"modified":5069,"checkedAt":7,"severity":5070,"references":5075,"versionKeys":5092,"packageCount":32,"repositoryCount":2025},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[5065,5066],"CVE-2026-34993","PYSEC-2026-2104",[214,5066],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[5071,5073],{"type":1901,"score":5072},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1901,"score":5074},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5076,5078,5080,5082,5083,5085,5087,5088,5089,5090],{"type":1910,"url":5077},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1905,"url":5079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1910,"url":5081},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1913,"url":2013},{"type":1916,"url":5084},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1916,"url":5086},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1905,"url":3476},{"type":1905,"url":4461},{"type":1905,"url":3474},{"type":2152,"url":5091},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2017,2018,2019,2020,2021,2022,2023,2024],{"id":215,"slug":5094,"dossier":45,"summary":5095,"aliases":5096,"sourceIds":5099,"published":5100,"modified":5101,"checkedAt":7,"severity":5102,"references":5104,"versionKeys":5115,"packageCount":32,"repositoryCount":443},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[5097,5098],"CVE-2025-69227","PYSEC-2026-1107",[215,5098],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[5103],{"type":2005,"score":2503},[5105,5107,5109,5111,5112,5113],{"type":1916,"url":5106},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1905,"url":5108},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1916,"url":5110},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":5114},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2017,2018,2019,2020,2021,2022,2023],{"id":216,"slug":5117,"dossier":89,"summary":5118,"aliases":5119,"sourceIds":5123,"published":5124,"modified":5125,"checkedAt":7,"severity":5126,"references":5128,"versionKeys":5142,"packageCount":32,"repositoryCount":2130},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[5120,5121,5122],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[216,5122],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[5127],{"type":1901,"score":2008},[5129,5131,5133,5135,5137,5138,5139,5140],{"type":1916,"url":5130},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1905,"url":5132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1916,"url":5134},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1916,"url":5136},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1913,"url":2454},{"type":1916,"url":2981},{"type":1913,"url":2983},{"type":1905,"url":5141},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":217,"slug":5144,"dossier":45,"summary":5145,"aliases":5146,"sourceIds":5149,"published":5150,"modified":5151,"checkedAt":7,"severity":5152,"references":5154,"versionKeys":5167,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[5147,5148],"CVE-2025-3264","PYSEC-2026-1985",[217,5148],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[5153],{"type":1901,"score":2608},[5155,5157,5159,5161,5162,5164,5165],{"type":1905,"url":5156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1916,"url":5158},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1916,"url":5160},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1913,"url":1947},{"type":1916,"url":5163},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1913,"url":2196},{"type":1905,"url":5166},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1954],{"id":218,"slug":5169,"dossier":45,"summary":5170,"aliases":5171,"sourceIds":5174,"published":5175,"modified":5176,"checkedAt":7,"severity":5177,"references":5180,"versionKeys":5188,"packageCount":32,"repositoryCount":101},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[5172,5173],"CVE-2026-54282","PYSEC-2026-248",[218,5173],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[5178,5179],{"type":1901,"score":3229},{"type":1901,"score":2087},[5181,5183,5185,5186],{"type":1905,"url":5182},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1905,"url":5184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1913,"url":3510},{"type":1916,"url":5187},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1991,1992,1993,3517,3518,3639,3640],{"id":219,"slug":5190,"dossier":45,"summary":5191,"aliases":5192,"sourceIds":5195,"published":5196,"modified":5197,"checkedAt":7,"severity":5198,"references":5203,"versionKeys":5212,"packageCount":32,"repositoryCount":2025},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[5193,5194],"CVE-2026-34516","PYSEC-2026-2098",[219,5194],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[5199,5200,5201],{"type":1901,"score":2008},{"type":2005,"score":2503},{"type":2005,"score":5202},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5204,5206,5208,5210,5211],{"type":1910,"url":5205},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1905,"url":5207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1910,"url":5209},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":220,"slug":5214,"dossier":45,"summary":5215,"aliases":5216,"sourceIds":5219,"published":5220,"modified":5221,"checkedAt":7,"severity":5222,"references":5225,"versionKeys":5231,"packageCount":32,"repositoryCount":2025},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[5217,5218],"CVE-2026-50269","PYSEC-2026-2106",[220,5218],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[5223,5224],{"type":2005,"score":2085},{"type":1901,"score":2008},[5226,5228,5230],{"type":1905,"url":5227},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1910,"url":5229},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1913,"url":2013},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":221,"slug":5233,"dossier":45,"summary":5234,"aliases":5235,"sourceIds":5238,"published":5239,"modified":5240,"checkedAt":7,"severity":5241,"references":5244,"versionKeys":5252,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[5236,5237],"CVE-2026-56340","PYSEC-2026-250",[221,5237],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[5242,5243],{"type":1901,"score":2865},{"type":1901,"score":2008},[5245,5247,5249,5250],{"type":1905,"url":5246},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":1916,"url":5248},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":1913,"url":2054},{"type":1905,"url":5251},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2073],{"id":222,"slug":5254,"dossier":45,"summary":5255,"aliases":5256,"sourceIds":5259,"published":5260,"modified":5261,"checkedAt":7,"severity":5262,"references":5265,"versionKeys":5273,"packageCount":32,"repositoryCount":103},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[5257,5258],"CVE-2026-44432","PYSEC-2026-142",[222,5258],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[5263,5264],{"type":1901,"score":2008},{"type":2005,"score":2110},[5266,5268,5270,5272],{"type":1905,"url":5267},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1905,"url":5269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1916,"url":5271},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1913,"url":2119},[5274],"pypi:urllib3@2.6.3",{"id":223,"slug":5276,"dossier":45,"summary":5277,"aliases":5278,"sourceIds":5281,"published":5282,"modified":5283,"checkedAt":7,"severity":5284,"references":5287,"versionKeys":5300,"packageCount":32,"repositoryCount":4350},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[5279,5280],"CVE-2026-28684","PYSEC-2026-2270",[223,5280],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[5285],{"type":1901,"score":5286},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5288,5290,5292,5294,5296,5298],{"type":1910,"url":5289},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1905,"url":5291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1910,"url":5293},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1916,"url":5295},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1913,"url":5297},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1905,"url":5299},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[5301,5302,5303,5304],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":224,"slug":5306,"dossier":45,"summary":5307,"aliases":5308,"sourceIds":5311,"published":5312,"modified":5313,"checkedAt":7,"severity":5314,"references":5317,"versionKeys":5332,"packageCount":32,"repositoryCount":4350},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[5309,5310],"CVE-2026-69243","PYSEC-2026-3546",[224,5310],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[5315],{"type":2005,"score":5316},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5318,5320,5322,5324,5325,5327,5328,5330],{"type":1916,"url":5319},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1916,"url":5321},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1916,"url":5323},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1913,"url":2013},{"type":1916,"url":5326},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1913,"url":2736},{"type":1905,"url":5329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1905,"url":5331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2017,2018,2019,2020,2021,2022,2023,2024,4349],{"id":225,"slug":5334,"dossier":45,"summary":5335,"aliases":5336,"sourceIds":5339,"published":5340,"modified":5341,"checkedAt":7,"severity":5342,"references":5344,"versionKeys":5355,"packageCount":32,"repositoryCount":2910},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[5337,5338],"CVE-2026-40347","PYSEC-2026-3038",[225,5338],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[5343],{"type":1901,"score":1972},[5345,5347,5349,5350,5352,5353],{"type":1916,"url":5346},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1905,"url":5348},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1913,"url":2761},{"type":1916,"url":5351},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1913,"url":2763},{"type":1905,"url":5354},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[2908,2909,2767],{"id":226,"slug":5357,"dossier":45,"summary":5358,"aliases":5359,"sourceIds":5362,"published":5363,"modified":5364,"checkedAt":7,"severity":5365,"references":5367,"versionKeys":5380,"packageCount":32,"repositoryCount":4350},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[5360,5361],"CVE-2026-59881","PYSEC-2026-3547",[226,5361],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[5366],{"type":2005,"score":3045},[5368,5370,5372,5374,5376,5377,5378],{"type":1916,"url":5369},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1905,"url":5371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1916,"url":5373},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1916,"url":5375},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":5379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2017,2018,2019,2020,2021,2022,2023,2024,4349],{"id":227,"slug":5382,"dossier":45,"summary":5383,"aliases":5384,"sourceIds":5387,"published":5388,"modified":5389,"checkedAt":7,"severity":5390,"references":5392,"versionKeys":5403,"packageCount":32,"repositoryCount":443},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[5385,5386],"CVE-2025-69225","PYSEC-2026-1109",[227,5386],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[5391],{"type":2005,"score":2085},[5393,5395,5397,5399,5400,5401],{"type":1916,"url":5394},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1905,"url":5396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1910,"url":5398},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1913,"url":2013},{"type":1913,"url":2736},{"type":1905,"url":5402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2017,2018,2019,2020,2021,2022,2023],{"id":228,"slug":5405,"dossier":45,"summary":5406,"aliases":5407,"sourceIds":5410,"published":5411,"modified":5412,"checkedAt":7,"severity":5413,"references":5415,"versionKeys":5430,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[5408,5409],"CVE-2025-62164","PYSEC-2026-2018",[228,5409],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[5414],{"type":1901,"score":2865},[5416,5418,5420,5422,5424,5426,5428,5429],{"type":1916,"url":5417},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1905,"url":5419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":1916,"url":5421},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":1916,"url":5423},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":1905,"url":5425},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1916,"url":5427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2073],{"id":229,"slug":5432,"dossier":45,"summary":5433,"aliases":5434,"sourceIds":5438,"published":5439,"modified":5440,"checkedAt":7,"severity":5441,"references":5445,"versionKeys":5459,"packageCount":32,"repositoryCount":103},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[5435,5436,5437],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[229,5436],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[5442,5444],{"type":2005,"score":5443},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":1901,"score":2037},[5446,5448,5450,5452,5454,5456,5457],{"type":1905,"url":5447},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":1905,"url":5449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":1916,"url":5451},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":1910,"url":5453},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":1910,"url":5455},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":1913,"url":3422},{"type":1905,"url":5458},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[3436,3437,4767],{"id":230,"slug":5461,"dossier":45,"summary":5462,"aliases":5463,"sourceIds":5466,"published":5467,"modified":5468,"checkedAt":7,"severity":5469,"references":5472,"versionKeys":5481,"packageCount":32,"repositoryCount":2025},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[5464,5465],"CVE-2026-34519","PYSEC-2026-2101",[230,5465],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[5470,5471],{"type":2005,"score":2085},{"type":1901,"score":2087},[5473,5475,5477,5479,5480],{"type":1910,"url":5474},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1905,"url":5476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1910,"url":5478},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":231,"slug":5483,"dossier":45,"summary":5484,"aliases":5485,"sourceIds":5488,"published":5489,"modified":5490,"checkedAt":7,"severity":5491,"references":5494,"versionKeys":5503,"packageCount":32,"repositoryCount":2025},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[5486,5487],"CVE-2026-34515","PYSEC-2026-2097",[231,5487],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[5492,5493],{"type":2005,"score":4869},{"type":1901,"score":2832},[5495,5497,5499,5501,5502],{"type":1910,"url":5496},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1905,"url":5498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1910,"url":5500},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":232,"slug":5505,"dossier":45,"summary":5506,"aliases":5507,"sourceIds":5511,"published":5512,"modified":5513,"checkedAt":7,"severity":5514,"references":5517,"versionKeys":5530,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[5508,5509,5510],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[232,5510],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[5515,5516],{"type":1901,"score":1972},{"type":1901,"score":2008},[5518,5520,5522,5524,5526,5528,5529],{"type":1949,"url":5519},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1905,"url":5521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1910,"url":5523},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1910,"url":5525},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1916,"url":5527},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1913,"url":2454},{"type":1905,"url":2981},[2463,2464,2465],{"id":233,"slug":5532,"dossier":45,"summary":5533,"aliases":5534,"sourceIds":5537,"published":5150,"modified":5538,"checkedAt":7,"severity":5539,"references":5542,"versionKeys":5555,"packageCount":32,"repositoryCount":499},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5535,5536],"CVE-2025-3777","PYSEC-2026-1986",[233,5536],"2026-07-07T17:56:47.225461188Z",[5540],{"type":1901,"score":5541},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5543,5545,5547,5548,5550,5552,5553],{"type":1905,"url":5544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1916,"url":5546},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1913,"url":1947},{"type":1916,"url":5549},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1916,"url":5551},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1913,"url":2196},{"type":1905,"url":5554},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1954,1955],{"id":234,"slug":5557,"dossier":89,"summary":5558,"aliases":5559,"sourceIds":5563,"published":5564,"modified":5565,"checkedAt":7,"severity":5566,"references":5568,"versionKeys":5579,"packageCount":32,"repositoryCount":2130},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[5560,5561,5562],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[234,5562],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[5567],{"type":1901,"score":2008},[5569,5571,5573,5575,5577,5578],{"type":1949,"url":5570},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1905,"url":5572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1910,"url":5574},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1916,"url":5576},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1913,"url":2454},{"type":1905,"url":2456},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":235,"slug":5581,"dossier":45,"summary":5582,"aliases":5583,"sourceIds":5586,"published":5587,"modified":5588,"checkedAt":7,"severity":5589,"references":5593,"versionKeys":5608,"packageCount":32,"repositoryCount":103},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[5584,5585],"CVE-2025-62372","PYSEC-2026-2019",[235,5585],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[5590,5591],{"type":1901,"score":2358},{"type":2005,"score":5592},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[5594,5596,5598,5599,5601,5602,5604,5606,5607],{"type":1916,"url":5595},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1905,"url":5597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":1916,"url":5421},{"type":1916,"url":5600},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":1916,"url":5423},{"type":1905,"url":5603},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1916,"url":5605},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2072,2073,2309],{"id":236,"slug":5610,"dossier":45,"summary":5611,"aliases":5612,"sourceIds":5615,"published":5616,"modified":5617,"checkedAt":7,"severity":5618,"references":5620,"versionKeys":5629,"packageCount":32,"repositoryCount":2910},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[5613,5614],"CVE-2026-42561","PYSEC-2026-3039",[236,5614],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[5619],{"type":1901,"score":2008},[5621,5623,5625,5626,5627],{"type":1916,"url":5622},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1905,"url":5624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1913,"url":2761},{"type":1913,"url":2763},{"type":1905,"url":5628},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[2908,2909,2767],{"id":237,"slug":5631,"dossier":45,"summary":5632,"aliases":5633,"sourceIds":5636,"published":5637,"modified":5638,"checkedAt":7,"severity":5639,"references":5641,"versionKeys":5661,"packageCount":32,"repositoryCount":103},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[5634,5635],"CVE-2026-34755","PYSEC-2026-144",[237,5635],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[5640],{"type":1901,"score":2358},[5642,5644,5646,5648,5650,5651,5652,5654,5656,5658,5659],{"type":1910,"url":5643},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":1905,"url":5645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":1916,"url":5647},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":1916,"url":5649},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":1916,"url":2369},{"type":1916,"url":2371},{"type":1916,"url":5653},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":1916,"url":5655},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":1916,"url":5657},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":1913,"url":2054},{"type":1916,"url":5660},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2072,2073,2309],{"id":238,"slug":5663,"dossier":45,"summary":5664,"aliases":5665,"sourceIds":5668,"published":5669,"modified":5670,"checkedAt":7,"severity":5671,"references":5673,"versionKeys":5685,"packageCount":32,"repositoryCount":443},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5666,5667],"CVE-2025-50181","PYSEC-2026-1999",[238,5667],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5672],{"type":1901,"score":2477},[5674,5676,5678,5680,5681,5682,5683],{"type":1916,"url":5675},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1905,"url":5677},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1910,"url":5679},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1913,"url":2119},{"type":1916,"url":2487},{"type":1913,"url":2121},{"type":1905,"url":5684},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2125,2126,2127,2128],{"id":239,"slug":5687,"dossier":89,"summary":5688,"aliases":5689,"sourceIds":5693,"published":5694,"modified":5695,"checkedAt":7,"severity":5696,"references":5699,"versionKeys":5711,"packageCount":32,"repositoryCount":2130},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5690,5691,5692],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[239,5692],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5697,5698],{"type":2005,"score":4248},{"type":1901,"score":3127},[5700,5701,5703,5705,5707,5709,5710],{"type":1916,"url":4252},{"type":1910,"url":5702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1905,"url":5704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1910,"url":5706},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1910,"url":5708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1913,"url":2454},{"type":1905,"url":2955},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":240,"slug":5713,"dossier":45,"summary":5714,"aliases":5715,"sourceIds":5718,"published":5719,"modified":5720,"checkedAt":7,"severity":5721,"references":5724,"versionKeys":5745,"packageCount":32,"repositoryCount":103},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[5716,5717],"CVE-2025-62593","PYSEC-2026-520",[240,5717],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[5722],{"type":2005,"score":5723},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[5725,5727,5729,5731,5733,5735,5737,5738,5740,5742,5743],{"type":1916,"url":5726},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":1905,"url":5728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":1916,"url":5730},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":1916,"url":5732},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":1916,"url":5734},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":1916,"url":5736},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":1913,"url":3422},{"type":1916,"url":5739},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":1916,"url":5741},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":1913,"url":3434},{"type":1905,"url":5744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[3436,3437,4767],{"id":241,"slug":5747,"dossier":45,"summary":5748,"aliases":5749,"sourceIds":5752,"published":5150,"modified":5753,"checkedAt":7,"severity":5754,"references":5756,"versionKeys":5767,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[5750,5751],"CVE-2025-3263","PYSEC-2026-1987",[241,5751],"2026-07-07T17:56:57.889099913Z",[5755],{"type":1901,"score":2608},[5757,5759,5760,5761,5762,5764,5765],{"type":1905,"url":5758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1916,"url":5158},{"type":1916,"url":5160},{"type":1913,"url":1947},{"type":1916,"url":5763},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1913,"url":2196},{"type":1905,"url":5766},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1954],{"id":242,"slug":5769,"dossier":45,"summary":5770,"aliases":5771,"sourceIds":5774,"published":5775,"modified":5776,"checkedAt":7,"severity":5777,"references":5781,"versionKeys":5794,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5772,5773],"CVE-2024-56326","PYSEC-2026-1475",[242,5773],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5778,5780],{"type":1901,"score":5779},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2005,"score":4300},[5782,5784,5786,5788,5789,5790,5791,5792],{"type":1916,"url":5783},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1905,"url":5785},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1910,"url":5787},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1913,"url":4309},{"type":1916,"url":4704},{"type":1916,"url":4311},{"type":1913,"url":4315},{"type":1905,"url":5793},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4319],{"id":243,"slug":5796,"dossier":45,"summary":5797,"aliases":5798,"sourceIds":5801,"published":5802,"modified":5803,"checkedAt":7,"severity":5804,"references":5809,"versionKeys":5821,"packageCount":32,"repositoryCount":103},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[5799,5800],"CVE-2026-27482","PYSEC-2026-2271",[243,5800],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[5805,5807],{"type":1901,"score":5806},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":1901,"score":5808},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5810,5812,5814,5816,5818,5819],{"type":1949,"url":5811},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":1905,"url":5813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":1910,"url":5815},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":1910,"url":5817},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":1913,"url":3422},{"type":1905,"url":5820},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[3436,3437,4767],{"id":244,"slug":5823,"dossier":45,"summary":5824,"aliases":5825,"sourceIds":5828,"published":5829,"modified":5830,"checkedAt":7,"severity":5831,"references":5834,"versionKeys":5854,"packageCount":32,"repositoryCount":103},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[5826,5827],"CVE-2026-41523","PYSEC-2026-2300",[244,5827],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[5832],{"type":1901,"score":5833},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5835,5837,5839,5841,5842,5843,5845,5847,5849,5850,5852],{"type":1949,"url":5836},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":1905,"url":5838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":1910,"url":5840},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":1905,"url":2369},{"type":1905,"url":2371},{"type":1916,"url":5844},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2152,"url":5846},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":1916,"url":5848},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":1913,"url":2054},{"type":1905,"url":5851},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":1916,"url":5853},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2072,2073,2309],{"id":245,"slug":5856,"dossier":89,"summary":5857,"aliases":5858,"sourceIds":5861,"published":5862,"modified":5863,"checkedAt":7,"severity":5864,"references":5868,"versionKeys":5874,"packageCount":32,"repositoryCount":4657},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5859,5860],"CVE-2026-44431","PYSEC-2026-141",[245,5860],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5865,5866],{"type":1901,"score":3947},{"type":2005,"score":5867},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5869,5871,5873],{"type":1905,"url":5870},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1905,"url":5872},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1913,"url":2119},[2125,2126,2127,2128,2129,5274],{"id":246,"slug":5876,"dossier":45,"summary":5877,"aliases":5878,"sourceIds":5882,"published":5883,"modified":5884,"checkedAt":7,"severity":5885,"references":5889,"versionKeys":5907,"packageCount":32,"repositoryCount":2025},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[5879,5880,5881],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[246],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[5886,5887],{"type":1901,"score":4394},{"type":2005,"score":5888},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5890,5892,5894,5896,5898,5900,5901,5903,5905],{"type":1905,"url":5891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1916,"url":5893},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1916,"url":5895},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1916,"url":5897},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1916,"url":5899},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1913,"url":2159},{"type":1916,"url":5902},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1916,"url":5904},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1916,"url":5906},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2171,2172,2173,3729,3730,5908,5909,5910],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":247,"slug":5912,"dossier":45,"summary":5913,"aliases":5914,"sourceIds":5917,"published":5918,"modified":5919,"checkedAt":7,"severity":5920,"references":5923,"versionKeys":5949,"packageCount":32,"repositoryCount":103},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[5915,5916],"CVE-2026-24779","PYSEC-2026-2020",[247,5916],"2026-01-28T16:14:28Z","2026-07-21T12:46:28.194413173Z",[5921],{"type":1901,"score":5922},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5924,5926,5928,5930,5932,5934,5935,5936,5938,5940,5942,5944,5945,5946,5947,5948],{"type":1916,"url":5925},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1905,"url":5927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":1916,"url":5929},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":1916,"url":5931},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":1916,"url":5933},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":1913,"url":2050},{"type":1913,"url":2054},{"type":1916,"url":5937},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":1905,"url":5939},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1916,"url":5941},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":1916,"url":5943},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":1916,"url":2066},{"type":1916,"url":2068},{"type":1916,"url":2593},{"type":1916,"url":2595},{"type":1916,"url":3910},[2072,2073,2309],{"id":248,"slug":5951,"dossier":45,"summary":5952,"aliases":5953,"sourceIds":5956,"published":5957,"modified":5958,"checkedAt":7,"severity":5959,"references":5962,"versionKeys":5977,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5954,5955],"CVE-2026-22701","PYSEC-2026-1374",[248,5955],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5960],{"type":1901,"score":5961},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5963,5965,5967,5969,5971,5973,5975],{"type":1916,"url":5964},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1905,"url":5966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1916,"url":5968},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1916,"url":5970},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1913,"url":5972},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1913,"url":5974},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1905,"url":5976},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5978,5979,5980,5981],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":249,"slug":5983,"dossier":45,"summary":5984,"aliases":5985,"sourceIds":5988,"published":5989,"modified":5990,"checkedAt":7,"severity":5991,"references":5994,"versionKeys":6008,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[5986,5987],"CVE-2025-2099","PYSEC-2025-40",[249,5987],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[5992,5993],{"type":1901,"score":2608},{"type":1901,"score":2008},[5995,5997,5999,6001,6002,6004,6006],{"type":1905,"url":5996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1916,"url":5998},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1910,"url":6000},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1913,"url":1947},{"type":1916,"url":6003},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1916,"url":6005},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1905,"url":6007},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1954],{"id":250,"slug":6010,"dossier":45,"summary":4989,"aliases":6011,"sourceIds":6014,"published":6015,"modified":6016,"checkedAt":7,"severity":6017,"references":6021,"versionKeys":6035,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[6012,6013],"CVE-2024-11392","PYSEC-2024-227",[250,6013],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[6018,6020],{"type":1901,"score":6019},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1901,"score":2037},[6022,6024,6025,6026,6027,6029,6031,6033],{"type":1905,"url":6023},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1916,"url":5004},{"type":1916,"url":5006},{"type":1913,"url":1947},{"type":1916,"url":6028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1916,"url":6030},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1905,"url":6032},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1905,"url":6034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1954],{"id":251,"slug":6037,"dossier":45,"summary":6038,"aliases":6039,"sourceIds":6043,"published":6044,"modified":6045,"checkedAt":7,"severity":6046,"references":6049,"versionKeys":6063,"packageCount":32,"repositoryCount":2130},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[6040,6041,6042],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[251,6042],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[6047,6048],{"type":1901,"score":2147},{"type":2005,"score":2947},[6050,6052,6054,6056,6058,6059,6060,6061],{"type":1916,"url":6051},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1905,"url":6053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1916,"url":6055},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1916,"url":6057},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1913,"url":2454},{"type":1916,"url":2955},{"type":1913,"url":2983},{"type":1905,"url":6062},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":252,"slug":6065,"dossier":45,"summary":6066,"aliases":6067,"sourceIds":6070,"published":6071,"modified":6072,"checkedAt":7,"severity":6073,"references":6075,"versionKeys":6090,"packageCount":32,"repositoryCount":499},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[6068,6069],"CVE-2025-6051","PYSEC-2026-1988",[252,6069],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[6074],{"type":1901,"score":2608},[6076,6078,6080,6082,6084,6085,6087,6088],{"type":1905,"url":6077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1916,"url":6079},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1916,"url":6081},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1916,"url":6083},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1913,"url":1947},{"type":1916,"url":6086},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1913,"url":2196},{"type":1905,"url":6089},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1954,1955],{"id":253,"slug":6092,"dossier":45,"summary":6093,"aliases":6094,"sourceIds":6097,"published":6098,"modified":6099,"checkedAt":7,"severity":6100,"references":6103,"versionKeys":6116,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[6095,6096],"CVE-2026-25087","PYSEC-2026-113",[253,6096],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[6101],{"type":1901,"score":6102},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[6104,6106,6108,6110,6112,6114],{"type":1905,"url":6105},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1910,"url":6107},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1913,"url":6109},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1916,"url":6111},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1905,"url":6113},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1905,"url":6115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[6117,6118,6119,6120],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":254,"slug":6122,"dossier":45,"summary":6123,"aliases":6124,"sourceIds":6128,"published":4390,"modified":6129,"checkedAt":7,"severity":6130,"references":6133,"versionKeys":6151,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[6125,6126,6127],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[254],"2026-07-17T17:15:51.452848951Z",[6131,6132],{"type":1901,"score":4394},{"type":2005,"score":5888},[6134,6136,6138,6140,6142,6144,6145,6147,6149],{"type":1905,"url":6135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1916,"url":6137},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1916,"url":6139},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1916,"url":6141},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1916,"url":6143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1913,"url":2159},{"type":1916,"url":6146},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1916,"url":6148},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1916,"url":6150},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[6152,2171,2172,2173,3729,3730,5908,5909,5910],"pypi:torch@2.10.0",{"id":255,"slug":6154,"dossier":45,"summary":6155,"aliases":6156,"sourceIds":6159,"published":6160,"modified":6161,"checkedAt":7,"severity":6162,"references":6165,"versionKeys":6177,"packageCount":32,"repositoryCount":103},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[6157,6158],"CVE-2026-55574","PYSEC-2026-2304",[255,6158],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[6163,6164],{"type":1901,"score":2008},{"type":2005,"score":2752},[6166,6168,6170,6172,6174,6176],{"type":1905,"url":6167},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":1905,"url":6169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":1910,"url":6171},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":1910,"url":6173},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":1916,"url":6175},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":1913,"url":2054},[2072,2073,2309],{"id":256,"slug":6179,"dossier":45,"summary":6180,"aliases":6181,"sourceIds":6184,"published":6185,"modified":6186,"checkedAt":7,"severity":6187,"references":6189,"versionKeys":6204,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[6182,6183],"CVE-2025-48956","PYSEC-2026-2021",[256,6183],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[6188],{"type":1901,"score":2008},[6190,6192,6194,6196,6198,6200,6202,6203],{"type":1916,"url":6191},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1905,"url":6193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":1916,"url":6195},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":1916,"url":6197},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":1905,"url":6199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1916,"url":6201},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2309],{"id":257,"slug":6206,"dossier":45,"summary":6207,"aliases":6208,"sourceIds":6211,"published":6212,"modified":6213,"checkedAt":7,"severity":6214,"references":6217,"versionKeys":6226,"packageCount":32,"repositoryCount":2910},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[6209,6210],"CVE-2026-53540","PYSEC-2026-3040",[257,6210],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[6215],{"type":1901,"score":6216},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6218,6220,6221,6222,6224],{"type":1916,"url":6219},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1913,"url":2761},{"type":1913,"url":2763},{"type":1905,"url":6223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1905,"url":6225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[2908,2909,2767],{"id":258,"slug":6228,"dossier":45,"summary":6229,"aliases":6230,"sourceIds":6233,"published":6234,"modified":6235,"checkedAt":7,"severity":6236,"references":6238,"versionKeys":6249,"packageCount":32,"repositoryCount":2910},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[6231,6232],"CVE-2026-53537","PYSEC-2026-3041",[258,6232],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[6237],{"type":1901,"score":3229},[6239,6241,6243,6244,6246,6248],{"type":1916,"url":6240},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1905,"url":6242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1913,"url":2761},{"type":1905,"url":6245},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1916,"url":6247},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1913,"url":2763},[2908,2909,2767],{"id":259,"slug":6251,"dossier":45,"summary":6252,"aliases":6253,"sourceIds":6257,"published":4390,"modified":6258,"checkedAt":7,"severity":6259,"references":6262,"versionKeys":6277,"packageCount":32,"repositoryCount":101},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[6254,6255,6256],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[259],"2026-06-10T17:41:15.774477397Z",[6260,6261],{"type":1901,"score":4394},{"type":2005,"score":4396},[6263,6265,6266,6267,6268,6270,6271,6273,6275],{"type":1905,"url":6264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1916,"url":4401},{"type":1916,"url":4403},{"type":1916,"url":4405},{"type":1916,"url":6269},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1913,"url":2159},{"type":1916,"url":6272},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1916,"url":6274},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1916,"url":6276},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2171,2172,2173,3729,3730,5908],{"id":260,"slug":6279,"dossier":45,"summary":6280,"aliases":6281,"sourceIds":6285,"published":6286,"modified":6287,"checkedAt":7,"severity":6288,"references":6290,"versionKeys":6304,"packageCount":32,"repositoryCount":2130},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[6282,6283,6284],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[260,6284],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[6289],{"type":2005,"score":2752},[6291,6293,6295,6297,6299,6300,6301,6302],{"type":1916,"url":6292},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1905,"url":6294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1916,"url":6296},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1916,"url":6298},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1913,"url":2454},{"type":1916,"url":2981},{"type":1913,"url":2983},{"type":1905,"url":6303},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":261,"slug":6306,"dossier":45,"summary":6307,"aliases":6308,"sourceIds":6311,"published":6312,"modified":6313,"checkedAt":7,"severity":6314,"references":6317,"versionKeys":6330,"packageCount":32,"repositoryCount":103},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[6309,6310],"CVE-2025-43859","PYSEC-2026-348",[261,6310],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[6315],{"type":1901,"score":6316},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6318,6320,6322,6324,6326,6328],{"type":1916,"url":6319},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1905,"url":6321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1916,"url":6323},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1913,"url":6325},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1913,"url":6327},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1905,"url":6329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[6331],"pypi:h11@0.14.0",{"id":262,"slug":6333,"dossier":45,"summary":6334,"aliases":6335,"sourceIds":6338,"published":6339,"modified":6340,"checkedAt":7,"severity":6341,"references":6343,"versionKeys":6355,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[6336,6337],"CVE-2025-48944","PYSEC-2026-2023",[262,6337],"2025-05-28T19:42:32Z","2026-08-07T08:12:14.152190792Z",[6342],{"type":1901,"score":2358},[6344,6346,6348,6349,6351,6353,6354],{"type":1916,"url":6345},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1905,"url":6347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":1916,"url":3311},{"type":1905,"url":6350},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1916,"url":6352},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":1913,"url":2054},{"type":1913,"url":2050},[2309],{"id":263,"slug":6357,"dossier":45,"summary":6358,"aliases":6359,"sourceIds":6362,"published":6363,"modified":6364,"checkedAt":7,"severity":6365,"references":6369,"versionKeys":6378,"packageCount":32,"repositoryCount":2025},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[6360,6361],"CVE-2026-22815","PYSEC-2026-2094",[263,6361],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[6366,6367],{"type":2005,"score":3045},{"type":2005,"score":6368},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6370,6372,6374,6376,6377],{"type":1910,"url":6371},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1905,"url":6373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1910,"url":6375},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1913,"url":2013},{"type":1905,"url":2097},[2017,2018,2019,2020,2021,2022,2023,2024],{"id":264,"slug":6380,"dossier":45,"summary":6381,"aliases":6382,"sourceIds":6385,"published":6386,"modified":6387,"checkedAt":7,"severity":6388,"references":6390,"versionKeys":6402,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[6383,6384],"CVE-2025-48887","PYSEC-2025-50",[264,6384],"2025-05-28T17:49:33Z","2026-08-07T08:12:04.723988051Z",[6389],{"type":1901,"score":2358},[6391,6393,6395,6396,6397,6399,6400],{"type":1949,"url":6392},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":1905,"url":6394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2152,"url":5032},{"type":1910,"url":5034},{"type":1916,"url":6398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":1913,"url":2054},{"type":1905,"url":6401},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[2309],{"id":265,"slug":6404,"dossier":45,"summary":6405,"aliases":6406,"sourceIds":6409,"published":6410,"modified":6411,"checkedAt":7,"severity":6412,"references":6416,"versionKeys":6428,"packageCount":32,"repositoryCount":499},"ghsa-w6vg-jg77-2qg6-e819e20a","MLX has heap-buffer-overflow in load()",[6407,6408],"CVE-2025-62608","PYSEC-2025-138",[265,6408],"2025-11-21T18:02:38Z","2026-06-06T00:45:48.146084644Z",[6413,6415],{"type":2005,"score":6414},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1901,"score":3882},[6417,6419,6421,6423,6425,6426],{"type":1949,"url":6418},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-w6vg-jg77-2qg6",{"type":1905,"url":6420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62608",{"type":1910,"url":6422},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F1",{"type":1910,"url":6424},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F2",{"type":1913,"url":5055},{"type":1916,"url":6427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-138.yaml",[5059,5060],{"id":266,"slug":6430,"dossier":45,"summary":6431,"aliases":6432,"sourceIds":6435,"published":6436,"modified":6437,"checkedAt":7,"severity":6438,"references":6441,"versionKeys":6458,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[6433,6434],"CVE-2025-68146","PYSEC-2026-1375",[266,6434],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[6439],{"type":1901,"score":6440},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6442,6444,6446,6447,6449,6451,6453,6454,6456],{"type":1916,"url":6443},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1916,"url":6445},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1913,"url":5972},{"type":1916,"url":6448},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1916,"url":6450},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1916,"url":6452},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1913,"url":5974},{"type":1905,"url":6455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1905,"url":6457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5978,5979,5980,5981],{"id":267,"slug":6460,"dossier":45,"summary":6461,"aliases":6462,"sourceIds":6465,"published":6466,"modified":6467,"checkedAt":7,"severity":6468,"references":6471,"versionKeys":6482,"packageCount":32,"repositoryCount":64},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[6463,6464],"CVE-2025-69872","PYSEC-2026-2447",[267,6464],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[6469],{"type":2005,"score":6470},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6472,6474,6476,6478,6480],{"type":1905,"url":6473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":1916,"url":6475},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":1913,"url":6477},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":1913,"url":6479},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":1905,"url":6481},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[6483],"pypi:diskcache@5.6.3",{"id":268,"slug":6485,"dossier":45,"summary":6486,"aliases":6487,"sourceIds":6490,"published":6491,"modified":6492,"checkedAt":7,"severity":6493,"references":6496,"versionKeys":6508,"packageCount":32,"repositoryCount":499},"ghsa-wcj4-jw5j-44wh-9e6393c7","CBORDecoder reuse can leak shareable values across decode calls",[6488,6489],"CVE-2025-68131","PYSEC-2025-90",[268,6489],"2025-12-31T02:15:42.527Z","2026-06-05T14:30:11.179250820Z",[6494,6495],{"type":2005,"score":6414},{"type":1901,"score":2832},[6497,6499,6501,6503,6505,6506],{"type":1949,"url":6498},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-wcj4-jw5j-44wh",{"type":1905,"url":6500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68131",{"type":1910,"url":6502},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F268",{"type":1916,"url":6504},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Ff1d701cd2c411ee40bb1fe383afe7f365f35abf0",{"type":1913,"url":2275},{"type":1916,"url":6507},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcbor2\u002FPYSEC-2025-90.yaml",[2279,2280],{"id":269,"slug":6510,"dossier":45,"summary":6511,"aliases":6512,"sourceIds":6516,"published":6517,"modified":6518,"checkedAt":7,"severity":6519,"references":6522,"versionKeys":6560,"packageCount":32,"repositoryCount":2130},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6513,6514,6515],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[269,6515],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6520,6521],{"type":1901,"score":2008},{"type":2005,"score":2752},[6523,6525,6527,6529,6531,6532,6534,6536,6538,6540,6542,6544,6545,6547,6549,6551,6552,6554,6556,6558],{"type":1916,"url":6524},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1905,"url":6526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1916,"url":6528},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1916,"url":6530},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1913,"url":2454},{"type":1916,"url":6533},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1916,"url":6535},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1916,"url":6537},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1905,"url":6539},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1905,"url":6541},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1905,"url":6543},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1905,"url":4275},{"type":1905,"url":6546},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1905,"url":6548},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1905,"url":6550},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1905,"url":3486},{"type":1905,"url":6553},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1905,"url":6555},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1905,"url":6557},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1905,"url":6559},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2458,2459,2460,2461,2462,2463,2464,2465],{"id":270,"slug":6562,"dossier":45,"summary":6563,"aliases":6564,"sourceIds":6568,"published":6569,"modified":6570,"checkedAt":7,"severity":6571,"references":6574,"versionKeys":6583,"packageCount":32,"repositoryCount":2130},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6565,6566,6567],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[270,6567],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6572,6573],{"type":1901,"score":2147},{"type":2005,"score":2947},[6575,6577,6579,6581,6582],{"type":1905,"url":6576},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1905,"url":6578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1916,"url":6580},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1913,"url":2454},{"type":1905,"url":2955},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":271,"slug":6585,"dossier":45,"summary":6586,"aliases":6587,"sourceIds":6590,"published":6591,"modified":6592,"checkedAt":7,"severity":6593,"references":6596,"versionKeys":6609,"packageCount":32,"repositoryCount":2910},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[6588,6589],"CVE-2026-24486","PYSEC-2026-1852",[271,6589],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[6594],{"type":1901,"score":6595},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[6597,6599,6601,6603,6604,6606,6607],{"type":1916,"url":6598},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1905,"url":6600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1916,"url":6602},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1913,"url":2761},{"type":1916,"url":6605},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1913,"url":2763},{"type":1905,"url":6608},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[2908,2909,2767],{"id":272,"slug":6611,"dossier":45,"summary":6612,"aliases":6613,"sourceIds":6616,"published":6617,"modified":6618,"checkedAt":7,"severity":6619,"references":6621,"versionKeys":6642,"packageCount":32,"repositoryCount":101},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6614,6615],"CVE-2026-48818","PYSEC-2026-2281",[272,6615],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[6620],{"type":1901,"score":2832},[6622,6624,6625,6627,6629,6631,6633,6634,6636,6638,6640],{"type":1905,"url":6623},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1913,"url":3510},{"type":1916,"url":6626},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1916,"url":6628},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1905,"url":6630},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1905,"url":6632},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1905,"url":3910},{"type":1905,"url":6635},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2152,"url":6637},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1910,"url":6639},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1910,"url":6641},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1991,1992,1993,3517,3518,3639,3640],{"id":273,"slug":6644,"dossier":45,"summary":6645,"aliases":6646,"sourceIds":6649,"published":6650,"modified":6651,"checkedAt":7,"severity":6652,"references":6654,"versionKeys":6671,"packageCount":32,"repositoryCount":499},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[6647,6648],"CVE-2025-59425","PYSEC-2026-2026",[273,6648],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[6653],{"type":1901,"score":2832},[6655,6657,6659,6661,6663,6665,6666,6668,6670],{"type":1916,"url":6656},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1905,"url":6658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":1916,"url":6660},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":1905,"url":6662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1916,"url":6664},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":1913,"url":2054},{"type":1916,"url":6667},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":1916,"url":6669},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":1913,"url":2050},[2072,2309],{"id":274,"slug":6673,"dossier":45,"summary":4989,"aliases":6674,"sourceIds":6677,"published":4994,"modified":6678,"checkedAt":7,"severity":6679,"references":6682,"versionKeys":6696,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[6675,6676],"CVE-2024-11393","PYSEC-2024-228",[274,6676],"2026-06-10T17:00:13.252500033Z",[6680,6681],{"type":1901,"score":4998},{"type":1901,"score":2037},[6683,6685,6686,6687,6688,6690,6692,6694],{"type":1905,"url":6684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1916,"url":5004},{"type":1916,"url":5006},{"type":1913,"url":1947},{"type":1916,"url":6689},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1916,"url":6691},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1905,"url":6693},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1905,"url":6695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1954],{"id":275,"slug":6698,"dossier":45,"summary":6699,"aliases":6700,"sourceIds":6703,"published":6704,"modified":6705,"checkedAt":7,"severity":6706,"references":6713,"versionKeys":6732,"packageCount":32,"repositoryCount":103},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[6701,6702],"CVE-2026-7141","PYSEC-2026-2306",[275,6702],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[6707,6709,6711],{"type":1901,"score":6708},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2005,"score":6710},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2005,"score":6712},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6714,6716,6718,6720,6722,6724,6726,6728,6730],{"type":1905,"url":6715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2152,"url":6717},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2152,"url":6719},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":1910,"url":6721},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":1910,"url":6723},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":1905,"url":6725},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":1905,"url":6727},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2152,"url":6729},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":1905,"url":6731},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2072,2073,2309],{"id":276,"slug":6734,"dossier":45,"summary":6735,"aliases":6736,"sourceIds":6740,"published":6741,"modified":6742,"checkedAt":7,"severity":6743,"references":6748,"versionKeys":6764,"packageCount":32,"repositoryCount":499},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[6737,6738,6739],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[276],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[6744,6746],{"type":1901,"score":6745},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2005,"score":6747},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6749,6751,6753,6755,6757,6758,6760,6762],{"type":1905,"url":6750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1916,"url":6752},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1916,"url":6754},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1916,"url":6756},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1913,"url":2159},{"type":1916,"url":6759},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1916,"url":6761},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1916,"url":6763},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2171,2172],{"id":277,"slug":6766,"dossier":45,"summary":6767,"aliases":6768,"sourceIds":6771,"published":6772,"modified":6773,"checkedAt":7,"severity":6774,"references":6776,"versionKeys":6783,"packageCount":32,"repositoryCount":101},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[6769,6770],"CVE-2026-48817","PYSEC-2026-2280",[277,6770],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[6775],{"type":1901,"score":2087},[6777,6779,6781,6782],{"type":1905,"url":6778},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1905,"url":6780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1913,"url":3510},{"type":1905,"url":6635},[1991,1992,1993,3517,3518,3639,3640],{"id":278,"slug":6785,"dossier":45,"summary":6786,"aliases":6787,"sourceIds":6790,"published":6791,"modified":6792,"checkedAt":7,"severity":6793,"references":6796,"versionKeys":6802,"packageCount":32,"repositoryCount":2025},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[6788,6789],"CVE-2026-54274","PYSEC-2026-2108",[278,6789],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[6794,6795],{"type":2005,"score":2503},{"type":1901,"score":2008},[6797,6799,6800],{"type":1905,"url":6798},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1913,"url":2013},{"type":1910,"url":6801},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2017,2018,2019,2020,2021,2022,2023,2024],{"id":279,"slug":6804,"dossier":45,"summary":6805,"aliases":6806,"sourceIds":6810,"published":6811,"modified":6812,"checkedAt":7,"severity":6813,"references":6816,"versionKeys":6830,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[6807,6808,6809],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[279,6809],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[6814],{"type":1901,"score":6815},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6817,6819,6821,6823,6825,6827,6828],{"type":1905,"url":6818},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1905,"url":6820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1916,"url":6822},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1910,"url":6824},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1916,"url":6826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1913,"url":2454},{"type":1916,"url":6829},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2461],{"id":280,"slug":6832,"dossier":45,"summary":6833,"aliases":6834,"sourceIds":6838,"published":6839,"modified":6840,"checkedAt":7,"severity":6841,"references":6844,"versionKeys":6855,"packageCount":32,"repositoryCount":2130},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[6835,6836,6837],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[280,6837],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[6842],{"type":1901,"score":6843},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6845,6847,6849,6851,6853,6854],{"type":1949,"url":6846},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1905,"url":6848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1910,"url":6850},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1910,"url":6852},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1913,"url":2454},{"type":1905,"url":2981},[2458,2459,2460,2461,2462,2463,2464,2465],{"id":281,"slug":6857,"dossier":45,"summary":319,"aliases":6858,"sourceIds":6861,"published":6862,"modified":6863,"checkedAt":7,"severity":6864,"references":6866,"versionKeys":6875,"packageCount":32,"repositoryCount":499},"pysec-2025-198-62b25ed4",[6859,6860],"BIT-pytorch-2025-46148","CVE-2025-46148",[281],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[6865],{"type":1901,"score":3947},[6867,6869,6871,6873],{"type":1905,"url":6868},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1905,"url":6870},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2152,"url":6872},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1910,"url":6874},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2171,2172],{"id":282,"slug":6877,"dossier":45,"summary":319,"aliases":6878,"sourceIds":6881,"published":6882,"modified":6883,"checkedAt":7,"severity":6884,"references":6886,"versionKeys":6892,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[6879,6880],"BIT-pytorch-2025-46149","CVE-2025-46149",[282],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[6885],{"type":1901,"score":3947},[6887,6888,6890],{"type":1905,"url":6868},{"type":2152,"url":6889},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1910,"url":6891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2172],{"id":283,"slug":6894,"dossier":45,"summary":319,"aliases":6895,"sourceIds":6898,"published":6899,"modified":6900,"checkedAt":7,"severity":6901,"references":6903,"versionKeys":6911,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[6896,6897],"BIT-pytorch-2025-46150","CVE-2025-46150",[283],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[6902],{"type":1901,"score":3947},[6904,6905,6907,6909],{"type":1905,"url":6868},{"type":2152,"url":6906},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2152,"url":6908},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1910,"url":6910},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2172],{"id":284,"slug":6913,"dossier":45,"summary":319,"aliases":6914,"sourceIds":6917,"published":6918,"modified":6919,"checkedAt":7,"severity":6920,"references":6922,"versionKeys":6928,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[6915,6916],"BIT-pytorch-2025-46152","CVE-2025-46152",[284],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[6921],{"type":1901,"score":1972},[6923,6924,6926],{"type":1905,"url":6868},{"type":2152,"url":6925},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1910,"url":6927},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2172],{"id":285,"slug":6930,"dossier":45,"summary":319,"aliases":6931,"sourceIds":6934,"published":6935,"modified":6936,"checkedAt":7,"severity":6937,"references":6939,"versionKeys":6949,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[6932,6933],"BIT-pytorch-2025-46153","CVE-2025-46153",[285],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[6938],{"type":1901,"score":3947},[6940,6942,6943,6945,6947],{"type":1916,"url":6941},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1905,"url":6868},{"type":1905,"url":6944},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2152,"url":6946},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1910,"url":6948},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2172],{"id":286,"slug":6951,"dossier":45,"summary":319,"aliases":6952,"sourceIds":6955,"published":6956,"modified":6957,"checkedAt":7,"severity":6958,"references":6960,"versionKeys":6965,"packageCount":32,"repositoryCount":101},"pysec-2025-203-2febb201",[6953,6954],"BIT-pytorch-2025-55551","CVE-2025-55551",[286],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[6959],{"type":1901,"score":2008},[6961,6963],{"type":1905,"url":6962},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2152,"url":6964},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2171,2172,2173,3729,3730,5908],{"id":287,"slug":6967,"dossier":45,"summary":319,"aliases":6968,"sourceIds":6971,"published":6972,"modified":6973,"checkedAt":7,"severity":6974,"references":6976,"versionKeys":6980,"packageCount":32,"repositoryCount":101},"pysec-2025-204-cdae47da",[6969,6970],"BIT-pytorch-2025-55552","CVE-2025-55552",[287],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[6975],{"type":1901,"score":2008},[6977,6978],{"type":1905,"url":6962},{"type":2152,"url":6979},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2171,2172,2173,3729,3730,5908],{"id":288,"slug":6982,"dossier":45,"summary":319,"aliases":6983,"sourceIds":6986,"published":6987,"modified":6988,"checkedAt":7,"severity":6989,"references":6991,"versionKeys":6997,"packageCount":32,"repositoryCount":103},"pysec-2025-205-fd5e58fd",[6984,6985],"BIT-pytorch-2025-55553","CVE-2025-55553",[288],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[6990],{"type":1901,"score":2008},[6992,6993,6995],{"type":1905,"url":6962},{"type":2152,"url":6994},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1910,"url":6996},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2171,2172,2173],{"id":289,"slug":6999,"dossier":45,"summary":319,"aliases":7000,"sourceIds":7003,"published":7004,"modified":7005,"checkedAt":7,"severity":7006,"references":7008,"versionKeys":7012,"packageCount":32,"repositoryCount":101},"pysec-2025-206-58322476",[7001,7002],"BIT-pytorch-2025-55554","CVE-2025-55554",[289],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[7007],{"type":1901,"score":1972},[7009,7010],{"type":1905,"url":6962},{"type":2152,"url":7011},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2171,2172,2173,3729,3730,5908],{"id":290,"slug":7014,"dossier":45,"summary":319,"aliases":7015,"sourceIds":7018,"published":7019,"modified":7020,"checkedAt":7,"severity":7021,"references":7023,"versionKeys":7029,"packageCount":32,"repositoryCount":103},"pysec-2025-207-2abef3fc",[7016,7017],"BIT-pytorch-2025-55557","CVE-2025-55557",[290],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[7022],{"type":1901,"score":2008},[7024,7025,7027],{"type":1905,"url":6962},{"type":2152,"url":7026},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1910,"url":7028},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2171,2172,2173],{"id":291,"slug":7031,"dossier":45,"summary":319,"aliases":7032,"sourceIds":7035,"published":7036,"modified":7037,"checkedAt":7,"severity":7038,"references":7040,"versionKeys":7046,"packageCount":32,"repositoryCount":103},"pysec-2025-208-6e93fe9d",[7033,7034],"BIT-pytorch-2025-55558","CVE-2025-55558",[291],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[7039],{"type":1901,"score":2008},[7041,7042,7044],{"type":1905,"url":6962},{"type":2152,"url":7043},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1910,"url":7045},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2171,2172,2173],{"id":292,"slug":7048,"dossier":45,"summary":319,"aliases":7049,"sourceIds":7052,"published":7053,"modified":7054,"checkedAt":7,"severity":7055,"references":7057,"versionKeys":7063,"packageCount":32,"repositoryCount":103},"pysec-2025-209-e6f352b0",[7050,7051],"BIT-pytorch-2025-55560","CVE-2025-55560",[292],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[7056],{"type":1901,"score":2008},[7058,7059,7061],{"type":1905,"url":6962},{"type":2152,"url":7060},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1910,"url":7062},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2171,2172,2173],{"id":293,"slug":7065,"dossier":45,"summary":319,"aliases":7066,"sourceIds":7068,"published":7069,"modified":7070,"checkedAt":7,"severity":7071,"references":7073,"versionKeys":7076,"packageCount":32,"repositoryCount":103},"pysec-2025-211-d8bd15de",[7067],"CVE-2025-14920",[293],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[7072],{"type":1901,"score":1940},[7074],{"type":1905,"url":7075},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1954,1955,1956],{"id":294,"slug":7078,"dossier":45,"summary":319,"aliases":7079,"sourceIds":7081,"published":7082,"modified":7083,"checkedAt":7,"severity":7084,"references":7086,"versionKeys":7089,"packageCount":32,"repositoryCount":103},"pysec-2025-212-a011b97d",[7080],"CVE-2025-14921",[294],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[7085],{"type":1901,"score":1940},[7087],{"type":1905,"url":7088},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1954,1955,1956],{"id":295,"slug":7091,"dossier":45,"summary":319,"aliases":7092,"sourceIds":7094,"published":7095,"modified":7096,"checkedAt":7,"severity":7097,"references":7099,"versionKeys":7102,"packageCount":32,"repositoryCount":103},"pysec-2025-213-9043dc9b",[7093],"CVE-2025-14924",[295],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[7098],{"type":1901,"score":1940},[7100],{"type":1905,"url":7101},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1954,1955,1956],{"id":296,"slug":7104,"dossier":45,"summary":319,"aliases":7105,"sourceIds":7107,"published":7108,"modified":7109,"checkedAt":7,"severity":7110,"references":7112,"versionKeys":7115,"packageCount":32,"repositoryCount":103},"pysec-2025-214-eb241255",[7106],"CVE-2025-14926",[296],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[7111],{"type":1901,"score":1940},[7113],{"type":1905,"url":7114},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1954,1955,1956],{"id":297,"slug":7117,"dossier":45,"summary":319,"aliases":7118,"sourceIds":7120,"published":7121,"modified":7122,"checkedAt":7,"severity":7123,"references":7125,"versionKeys":7128,"packageCount":32,"repositoryCount":103},"pysec-2025-215-6064f491",[7119],"CVE-2025-14927",[297],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[7124],{"type":1901,"score":1940},[7126],{"type":1905,"url":7127},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1954,1955,1956],{"id":298,"slug":7130,"dossier":45,"summary":319,"aliases":7131,"sourceIds":7133,"published":7134,"modified":7135,"checkedAt":7,"severity":7136,"references":7138,"versionKeys":7141,"packageCount":32,"repositoryCount":103},"pysec-2025-216-5708ed01",[7132],"CVE-2025-14928",[298],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[7137],{"type":1901,"score":1940},[7139],{"type":1905,"url":7140},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1954,1955,1956],{"id":299,"slug":7143,"dossier":45,"summary":319,"aliases":7144,"sourceIds":7146,"published":7147,"modified":7148,"checkedAt":7,"severity":7149,"references":7151,"versionKeys":7154,"packageCount":32,"repositoryCount":101},"pysec-2025-217-2c1ad388",[7145],"CVE-2025-14929",[299],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[7150],{"type":1901,"score":1940},[7152],{"type":1905,"url":7153},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1954,1955,1956,1957,1958,1959,1960],{"id":300,"slug":7156,"dossier":45,"summary":319,"aliases":7157,"sourceIds":7159,"published":7160,"modified":7161,"checkedAt":7,"severity":7162,"references":7164,"versionKeys":7167,"packageCount":32,"repositoryCount":2910},"pysec-2025-218-39811fc3",[7158],"CVE-2025-14930",[300],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[7163],{"type":1901,"score":1940},[7165],{"type":1905,"url":7166},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1954,1955,1956,1957],{"id":301,"slug":7169,"dossier":45,"summary":319,"aliases":7170,"sourceIds":7172,"published":7173,"modified":7174,"checkedAt":7,"severity":7175,"references":7177,"versionKeys":7184,"packageCount":32,"repositoryCount":32},"pysec-2025-238-fe0347f8",[7171],"CVE-2025-64076",[301],"2025-11-18T18:16:14.263Z","2026-07-13T07:15:16.765464311Z",[7176],{"type":1901,"score":2008},[7178,7180,7182],{"type":2152,"url":7179},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fissues\u002F264",{"type":1910,"url":7181},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002F851473490281f82d82560b2368284ef33cf6e8f9",{"type":1910,"url":7183},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F265",[2279],{"id":302,"slug":7186,"dossier":45,"summary":319,"aliases":7187,"sourceIds":7190,"published":7191,"modified":7192,"checkedAt":7,"severity":7193,"references":7195,"versionKeys":7206,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[7188,7189],"BIT-pytorch-2026-4538","CVE-2026-4538",[302],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[7194],{"type":1901,"score":5779},[7196,7198,7200,7202,7204],{"type":1916,"url":7197},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1905,"url":7199},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1905,"url":7201},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2152,"url":7203},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1910,"url":7205},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[6152,2171,2172,2173,3729,3730,5908,5909,5910],{"id":303,"slug":7208,"dossier":89,"summary":319,"aliases":7209,"sourceIds":7212,"published":7213,"modified":7214,"checkedAt":7,"severity":7215,"references":7218,"versionKeys":7233,"packageCount":32,"repositoryCount":4801},"pysec-2026-2132-627bf7c7",[7210,7211],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[303],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[7216],{"type":1901,"score":7217},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7219,7221,7223,7225,7227,7229,7231],{"type":1916,"url":7220},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1916,"url":7222},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1905,"url":7224},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1905,"url":7226},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2152,"url":7228},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1910,"url":7230},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1949,"url":7232},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[7234,7235,7236,7237,7238,7239],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":304,"slug":7241,"dossier":45,"summary":319,"aliases":7242,"sourceIds":7245,"published":7246,"modified":7247,"checkedAt":7,"severity":7248,"references":7250,"versionKeys":7253,"packageCount":32,"repositoryCount":103},"pysec-2026-227-5f5a1d28",[7243,7244],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[304],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[7249],{"type":1901,"score":2037},[7251],{"type":1949,"url":7252},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2072,2073,2309],{"id":305,"slug":7255,"dossier":45,"summary":319,"aliases":7256,"sourceIds":7261,"published":7262,"modified":7263,"checkedAt":7,"severity":7264,"references":7266,"versionKeys":7282,"packageCount":32,"repositoryCount":2025},"pysec-2026-2286-8795b007",[7257,7258,7259,7260],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[305],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[7265],{"type":1901,"score":2037},[7267,7269,7271,7272,7274,7276,7278,7280],{"type":1916,"url":7268},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1916,"url":7270},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1905,"url":3476},{"type":1905,"url":7273},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1905,"url":7275},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2152,"url":7277},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2152,"url":7279},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1910,"url":7281},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2171,2172,2173,3729,3730,5908,5909,5910],{"id":306,"slug":7284,"dossier":45,"summary":319,"aliases":7285,"sourceIds":7287,"published":7288,"modified":7289,"checkedAt":7,"severity":7290,"references":7292,"versionKeys":7302,"packageCount":32,"repositoryCount":103},"pysec-2026-2302-60c0b148",[7286],"CVE-2026-5497",[306],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[7291],{"type":1901,"score":2008},[7293,7295,7297,7299,7300],{"type":1916,"url":7294},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":1916,"url":7296},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2152,"url":7298},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":1910,"url":5649},{"type":1949,"url":7301},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2072,2073,2309],1786588639321]