[{"data":1,"prerenderedAt":2117},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7788":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":152,"related":155},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":103,"unknownLicensePackageCount":37,"advisoryIds":104,"advisoryCount":150,"providers":151},"opencode:7788","opencode-7788",7788,"Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage","Green AI Workshop zu Energiemessung von LLM-Nutzung; Keywords: uba, umweltbundesamt, ki-lab, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage","d72ec94b58729e8b5e32caa9484867ec13add189","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fcommit\u002Fd72ec94b58729e8b5e32caa9484867ec13add189","2025-11-10T11:11:40.478Z","2025-11-10T11:11:34.000Z",{"complete":89,"entryCount":90,"truncated":45},true,8,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","61957e618f66a37d9e215e1c3f28156669993991782385cff9bcc34a70d841ce",156416,"parsed",78,[101],"pypi",2,15,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149],"GHSA-248v-346w-9cwc","GHSA-2c2j-9gv5-cj73","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-38jv-5279-wg99","GHSA-3x9g-8vmp-wqvf","GHSA-48p4-8xcf-vxj5","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-65pc-fj4g-8rjx","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-c98p-7wgm-6p64","GHSA-cx3h-4qpv-8hc9","GHSA-f96h-pmfr-66vw","GHSA-fjrm-76x2-c4q4","GHSA-g6cj-pr64-35w5","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-h4gh-qq45-vh27","GHSA-jhmp-mqwm-3gq8","GHSA-jp82-jpqv-5vv3","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-p423-j2cm-9vmq","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-qccp-gfcp-xxvc","GHSA-qjxf-f2mg-c6mc","GHSA-r6ph-v2qm-q3c2","GHSA-vqfr-h8mv-ghfj","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-2132",45,[],{"files":153,"occurrenceCount":99},[154],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":156,"vulnerabilities":874},[157,167,178,187,198,208,218,228,238,248,257,266,275,284,294,304,313,322,331,340,349,358,368,377,386,395,404,413,422,431,440,449,458,467,476,485,494,503,512,521,530,539,548,557,567,576,586,595,604,613,622,632,641,650,659,667,676,685,694,703,712,721,730,739,748,757,766,775,785,794,803,812,820,830,839,847,856,865],{"id":70,"slug":71,"identity":158,"label":72,"aiRelevant":89,"provider":159,"advisoryCount":37,"licenseExpressions":162,"versions":164,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":166},"pypi:openai",{"id":160,"label":161},"openai","OpenAI",[163],"Apache-2.0",[165],"2.7.1",[54],{"id":168,"slug":169,"identity":170,"label":171,"aiRelevant":89,"provider":172,"advisoryCount":37,"licenseExpressions":173,"versions":175,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":177},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",null,[174],"MIT",[176],"3.0.8",[54],{"id":179,"slug":180,"identity":181,"label":182,"aiRelevant":45,"provider":172,"advisoryCount":40,"licenseExpressions":183,"versions":184,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":186},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[163],[185],"6.5.2",[54],{"id":188,"slug":189,"identity":190,"label":191,"aiRelevant":45,"provider":172,"advisoryCount":192,"licenseExpressions":193,"versions":195,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":197},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[194],"Apache-2.0 OR BSD-3-Clause",[196],"46.0.3",[54],{"id":199,"slug":200,"identity":201,"label":202,"aiRelevant":45,"provider":172,"advisoryCount":90,"licenseExpressions":203,"versions":205,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":207},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[204],"BSD-3-Clause",[206],"0.49.3",[54],{"id":209,"slug":210,"identity":211,"label":212,"aiRelevant":45,"provider":172,"advisoryCount":213,"licenseExpressions":214,"versions":215,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":217},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[174],[216],"2.5.0",[54],{"id":219,"slug":220,"identity":221,"label":222,"aiRelevant":45,"provider":172,"advisoryCount":223,"licenseExpressions":224,"versions":225,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":227},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[163],[226],"2.32.5",[54],{"id":229,"slug":230,"identity":231,"label":232,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":233,"versions":235,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":237},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[234],"MPL-2.0",[236],"2025.10.5",[54],{"id":239,"slug":240,"identity":241,"label":242,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":243,"versions":245,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":247},"package:pypi:click","click-ef97f731","pypi:click","click",[204,244],"non-standard",[246],"8.3.0",[54],{"id":249,"slug":250,"identity":251,"label":252,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":253,"versions":254,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":256},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[174],[255],"0.16.0",[54],{"id":258,"slug":259,"identity":260,"label":261,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":262,"versions":263,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":265},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[204,244],[264],"3.11",[54],{"id":267,"slug":268,"identity":269,"label":270,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":271,"versions":272,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":274},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[204,244],[273],"5.9.1",[54],{"id":276,"slug":277,"identity":278,"label":279,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":280,"versions":281,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":283},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[244],[282],"1.5.6",[54],{"id":285,"slug":286,"identity":287,"label":288,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":289,"versions":291,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":293},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[290],"BSD-2-Clause",[292],"2.19.2",[54],{"id":295,"slug":296,"identity":297,"label":298,"aiRelevant":45,"provider":172,"advisoryCount":32,"licenseExpressions":299,"versions":301,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":303},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[300],"MIT AND MPL-2.0",[302],"4.67.1",[54],{"id":305,"slug":306,"identity":307,"label":308,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":309,"versions":310,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":312},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[174],[311],"0.0.3",[54],{"id":314,"slug":315,"identity":316,"label":317,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":318,"versions":319,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":321},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[174],[320],"0.7.0",[54],{"id":323,"slug":324,"identity":325,"label":326,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":327,"versions":328,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":330},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[174],[329],"4.11.0",[54],{"id":332,"slug":333,"identity":334,"label":335,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":336,"versions":337,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":339},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[244],[338],"0.1.4",[54],{"id":341,"slug":342,"identity":343,"label":344,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":345,"versions":346,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":348},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[244],[347],"1.4.0",[54],{"id":350,"slug":351,"identity":352,"label":353,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":354,"versions":355,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":357},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[163],[356],"3.0.0",[54],{"id":359,"slug":360,"identity":361,"label":362,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":363,"versions":365,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":367},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[174,364],"MIT-0",[366],"2.0.0",[54],{"id":369,"slug":370,"identity":371,"label":372,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":373,"versions":374,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":376},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[174],[375],"3.4.4",[54],{"id":378,"slug":379,"identity":380,"label":381,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":382,"versions":383,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":385},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[244],[384],"0.4.6",[54],{"id":387,"slug":388,"identity":389,"label":390,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":391,"versions":392,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":394},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[244],[393],"0.2.3",[54],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":400,"versions":401,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":403},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[174],[402],"1.8.17",[54],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":409,"versions":410,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":412},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[290,244],[411],"5.2.1",[54],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":418,"versions":419,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":421},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[163],[420],"1.9.0",[54],{"id":423,"slug":424,"identity":425,"label":426,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":427,"versions":428,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":430},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[174],[429],"2.2.1",[54],{"id":432,"slug":433,"identity":434,"label":435,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":436,"versions":437,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":439},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[174],[438],"0.121.1",[54],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":445,"versions":446,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":448},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[174],[447],"0.20.0",[54],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":454,"versions":455,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":457},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[204],[456],"1.0.9",[54],{"id":459,"slug":460,"identity":461,"label":462,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":463,"versions":464,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":466},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[204],[465],"0.27.2",[54],{"id":468,"slug":469,"identity":470,"label":471,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":472,"versions":473,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":475},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[204,244],[474],"7.1.0",[54],{"id":477,"slug":478,"identity":479,"label":480,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":481,"versions":482,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":484},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[204],[483],"9.7.0",[54],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":490,"versions":491,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":493},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[244],[492],"1.1.1",[54],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":499,"versions":500,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":502},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[174],[501],"0.19.2",[54],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":508,"versions":509,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":511},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[174],[510],"0.12.0",[54],{"id":513,"slug":514,"identity":515,"label":516,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":517,"versions":518,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":520},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[244],[519],"8.6.3",[54],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":526,"versions":527,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":529},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[174],[528],"4.0.0",[54],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":535,"versions":536,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":538},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[204,244],[537],"0.2.1",[54],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":544,"versions":545,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":547},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[174],[546],"0.1.2",[54],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":553,"versions":554,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":556},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[244],[555],"1.6.0",[54],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":562,"versions":564,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":566},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[563,244],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[565],"2.3.4",[54],{"id":568,"slug":569,"identity":570,"label":571,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":572,"versions":573,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":575},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[244],[574],"13.580.82",[54],{"id":577,"slug":578,"identity":579,"label":580,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":581,"versions":583,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":585},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[582,244],"Apache-2.0 OR BSD-2-Clause",[584],"25.0",[54],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":591,"versions":592,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":594},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[244],[593],"2.3.3",[54],{"id":596,"slug":597,"identity":598,"label":599,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":600,"versions":601,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":603},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[174],[602],"0.8.5",[54],{"id":605,"slug":606,"identity":607,"label":608,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":609,"versions":610,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":612},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[244],[611],"4.9.0",[54],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":618,"versions":619,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":621},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[174],[620],"4.5.0",[54],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":627,"versions":629,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":631},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[163,628],"Apache-2.0 AND BSD-2-Clause",[630],"0.23.1",[54],{"id":633,"slug":634,"identity":635,"label":636,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":637,"versions":638,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":640},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[204,244],[639],"3.0.52",[54],{"id":642,"slug":643,"identity":644,"label":645,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":646,"versions":647,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":649},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[204],[648],"7.1.3",[54],{"id":651,"slug":652,"identity":653,"label":654,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":655,"versions":657,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":658},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[656],"ISC",[320],[54],{"id":660,"slug":661,"identity":662,"label":663,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":664,"versions":665,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":666},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[174],[393],[54],{"id":668,"slug":669,"identity":670,"label":671,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":672,"versions":673,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":675},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[174],[674],"9.0.0",[54],{"id":677,"slug":678,"identity":679,"label":680,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":681,"versions":682,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":684},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[204],[683],"2.23",[54],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":690,"versions":691,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":693},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[174],[692],"2.12.4",[54],{"id":695,"slug":696,"identity":697,"label":698,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":699,"versions":700,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":702},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[174],[701],"2.41.5",[54],{"id":704,"slug":705,"identity":706,"label":707,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":708,"versions":709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":711},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[244],[710],"2.9.0.post0",[54],{"id":713,"slug":714,"identity":715,"label":716,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":717,"versions":718,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":720},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[174],[719],"2025.2",[54],{"id":722,"slug":723,"identity":724,"label":725,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":726,"versions":727,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":729},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[244],[728],"27.1.0",[54],{"id":731,"slug":732,"identity":733,"label":734,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":735,"versions":736,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":738},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[174],[737],"2.1.1",[54],{"id":740,"slug":741,"identity":742,"label":743,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":744,"versions":745,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":747},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[174],[746],"3.14.3",[54],{"id":749,"slug":750,"identity":751,"label":752,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":753,"versions":754,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":756},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[174],[755],"14.2.0",[54],{"id":758,"slug":759,"identity":760,"label":761,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":762,"versions":763,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":765},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[244],[764],"1.5.4",[54],{"id":767,"slug":768,"identity":769,"label":770,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":771,"versions":772,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":774},"package:pypi:six","six-3c3888bd","pypi:six","six",[174],[773],"1.17.0",[54],{"id":776,"slug":777,"identity":778,"label":779,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":780,"versions":782,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":784},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[781],"Apache-2.0 OR MIT",[783],"1.3.1",[54],{"id":786,"slug":787,"identity":788,"label":789,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":790,"versions":791,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":793},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[174],[792],"0.6.3",[54],{"id":795,"slug":796,"identity":797,"label":798,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":799,"versions":800,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":802},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[174],[801],"3.2.0",[54],{"id":804,"slug":805,"identity":806,"label":807,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":808,"versions":809,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":811},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[244],[810],"5.14.3",[54],{"id":813,"slug":814,"identity":815,"label":816,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":817,"versions":818,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":819},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[174],[447],[54],{"id":821,"slug":822,"identity":823,"label":824,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":825,"versions":827,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":829},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[826,244],"PSF-2.0",[828],"4.15.0",[54],{"id":831,"slug":832,"identity":833,"label":834,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":835,"versions":836,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":838},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[174],[837],"0.4.2",[54],{"id":840,"slug":841,"identity":842,"label":843,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":844,"versions":845,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":846},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[163],[719],[54],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":852,"versions":853,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":855},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[204],[854],"0.38.0",[54],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":861,"versions":862,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":864},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[174],[863],"0.2.14",[54],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":45,"provider":172,"advisoryCount":37,"licenseExpressions":870,"versions":871,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":873},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[174],[872],"3.3.0",[54],[875,914,947,980,1007,1034,1063,1089,1129,1152,1179,1209,1237,1262,1294,1312,1363,1397,1427,1451,1475,1501,1528,1556,1589,1616,1639,1654,1676,1698,1723,1749,1771,1793,1814,1836,1860,1885,1900,1920,1946,2001,2028,2064,2083],{"id":105,"slug":876,"dossier":45,"summary":877,"aliases":878,"sourceIds":881,"published":882,"modified":883,"checkedAt":7,"severity":884,"references":888,"versionKeys":912,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[879,880],"CVE-2024-39689","PYSEC-2024-230",[105,880],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[885],{"type":886,"score":887},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[889,892,894,897,900,903,906,908,910],{"type":890,"url":891},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":890,"url":893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":895,"url":896},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":898,"url":899},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":901,"url":902},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":904,"url":905},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":901,"url":907},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":890,"url":909},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":890,"url":911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[913],"pypi:certifi@2024.6.2",{"id":106,"slug":915,"dossier":45,"summary":916,"aliases":917,"sourceIds":920,"published":921,"modified":922,"checkedAt":7,"severity":923,"references":926,"versionKeys":943,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[918,919],"CVE-2025-54121","PYSEC-2026-1941",[106,919],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[924],{"type":886,"score":925},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[927,929,931,933,935,937,939,941],{"type":901,"url":928},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":890,"url":930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":895,"url":932},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":898,"url":934},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":901,"url":936},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":901,"url":938},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":898,"url":940},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":890,"url":942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[944,945,946],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":107,"slug":948,"dossier":89,"summary":949,"aliases":950,"sourceIds":953,"published":954,"modified":955,"checkedAt":7,"severity":956,"references":960,"versionKeys":973,"packageCount":32,"repositoryCount":979},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[951,952],"CVE-2025-66471","PYSEC-2026-1994",[107,952],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[957],{"type":958,"score":959},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[961,963,965,967,969,971],{"type":901,"url":962},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":890,"url":964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":895,"url":966},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":898,"url":968},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":898,"url":970},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":890,"url":972},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[974,975,976,977,978],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":108,"slug":981,"dossier":45,"summary":982,"aliases":983,"sourceIds":986,"published":987,"modified":988,"checkedAt":7,"severity":989,"references":992,"versionKeys":1005,"packageCount":32,"repositoryCount":102},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[984,985],"CVE-2025-30167","PYSEC-2026-1477",[108,985],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[990],{"type":886,"score":991},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[993,995,997,999,1001,1003],{"type":901,"url":994},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":890,"url":996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":901,"url":998},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":898,"url":1000},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":898,"url":1002},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":890,"url":1004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[1006],"pypi:jupyter-core@5.7.2",{"id":109,"slug":1008,"dossier":89,"summary":1009,"aliases":1010,"sourceIds":1013,"published":1014,"modified":1015,"checkedAt":7,"severity":1016,"references":1020,"versionKeys":1033,"packageCount":32,"repositoryCount":979},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1011,1012],"CVE-2026-21441","PYSEC-2026-1996",[109,1012],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1017,1019],{"type":886,"score":1018},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":958,"score":959},[1021,1023,1025,1027,1028,1030,1031],{"type":901,"url":1022},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":890,"url":1024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":895,"url":1026},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":898,"url":968},{"type":901,"url":1029},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":898,"url":970},{"type":890,"url":1032},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[974,975,976,977,978],{"id":110,"slug":1035,"dossier":45,"summary":1036,"aliases":1037,"sourceIds":1040,"published":1041,"modified":1042,"checkedAt":7,"severity":1043,"references":1046,"versionKeys":1057,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1038,1039],"CVE-2026-49853","PYSEC-2026-3387",[110,1039],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[1044],{"type":886,"score":1045},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1047,1049,1051,1053,1055],{"type":901,"url":1048},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":898,"url":1050},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":898,"url":1052},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":890,"url":1054},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":890,"url":1056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1058,1059,1060,1061,1062],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":111,"slug":1064,"dossier":45,"summary":1065,"aliases":1066,"sourceIds":1069,"published":1070,"modified":1071,"checkedAt":7,"severity":1072,"references":1075,"versionKeys":1088,"packageCount":32,"repositoryCount":213},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1067,1068],"CVE-2025-50182","PYSEC-2026-1997",[111,1068],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1073],{"type":886,"score":1074},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1076,1078,1080,1082,1083,1085,1086],{"type":901,"url":1077},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":890,"url":1079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":895,"url":1081},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":898,"url":968},{"type":901,"url":1084},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":898,"url":970},{"type":890,"url":1087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[974,975,976,977],{"id":112,"slug":1090,"dossier":89,"summary":1091,"aliases":1092,"sourceIds":1095,"published":1096,"modified":1097,"checkedAt":7,"severity":1098,"references":1103,"versionKeys":1126,"packageCount":32,"repositoryCount":979},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1093,1094],"CVE-2026-4539","PYSEC-2026-2987",[112,1094],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[1099,1101],{"type":886,"score":1100},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":958,"score":1102},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124],{"type":890,"url":1105},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":901,"url":1107},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":901,"url":1109},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":901,"url":1111},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":898,"url":1113},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":901,"url":1115},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":901,"url":1117},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":901,"url":1119},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":901,"url":1121},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":898,"url":1123},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":890,"url":1125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1127,1128],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":113,"slug":1130,"dossier":45,"summary":1131,"aliases":1132,"sourceIds":1133,"published":1134,"modified":1135,"checkedAt":7,"severity":1136,"references":1138,"versionKeys":1145,"packageCount":32,"repositoryCount":213},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[113],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[1137],{"type":886,"score":1018},[1139,1141,1143],{"type":901,"url":1140},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":898,"url":1142},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":901,"url":1144},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[1146,1147,1148,1149,1150,1151],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":114,"slug":1153,"dossier":89,"summary":1154,"aliases":1155,"sourceIds":1158,"published":1159,"modified":1160,"checkedAt":7,"severity":1161,"references":1165,"versionKeys":1174,"packageCount":32,"repositoryCount":1178},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1156,1157],"CVE-2026-45409","PYSEC-2026-215",[114,1157],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1162,1163],{"type":886,"score":925},{"type":958,"score":1164},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1166,1168,1170,1172],{"type":890,"url":1167},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":890,"url":1169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":898,"url":1171},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":901,"url":1173},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1175,1176,1177],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":115,"slug":1180,"dossier":45,"summary":1181,"aliases":1182,"sourceIds":1186,"published":1187,"modified":1188,"checkedAt":7,"severity":1189,"references":1196,"versionKeys":1208,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[1183,1184,1185],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[115,1184,1185],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[1190,1192,1194],{"type":886,"score":1191},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":886,"score":1193},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":886,"score":1195},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1197,1199,1201,1202,1204,1206],{"type":890,"url":1198},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":901,"url":1200},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":898,"url":1050},{"type":901,"url":1203},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":890,"url":1205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":890,"url":1207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1058,1059,1060,1061],{"id":116,"slug":1210,"dossier":45,"summary":1131,"aliases":1211,"sourceIds":1214,"published":1215,"modified":1216,"checkedAt":7,"severity":1217,"references":1218,"versionKeys":1236,"packageCount":32,"repositoryCount":223},"ghsa-79v4-65xg-pq4g-b911b371",[1212,1213],"CVE-2024-12797","PYSEC-2026-1284",[116,1213],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[1219,1221,1223,1225,1227,1229,1230,1232,1234],{"type":901,"url":1220},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":890,"url":1222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":901,"url":1224},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":901,"url":1226},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":901,"url":1228},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":898,"url":1142},{"type":901,"url":1231},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":898,"url":1233},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":890,"url":1235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[1146,1147,1148],{"id":117,"slug":1238,"dossier":45,"summary":1239,"aliases":1240,"sourceIds":1243,"published":1244,"modified":1245,"checkedAt":7,"severity":1246,"references":1248,"versionKeys":1261,"packageCount":32,"repositoryCount":102},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[1241,1242],"CVE-2025-47287","PYSEC-2026-1974",[117,1242],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[1247],{"type":886,"score":1018},[1249,1251,1253,1255,1256,1258,1259],{"type":901,"url":1250},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":890,"url":1252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":901,"url":1254},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":898,"url":1050},{"type":901,"url":1257},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":898,"url":1052},{"type":890,"url":1260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1058],{"id":118,"slug":1263,"dossier":45,"summary":1264,"aliases":1265,"sourceIds":1268,"published":1269,"modified":1270,"checkedAt":7,"severity":1271,"references":1273,"versionKeys":1290,"packageCount":32,"repositoryCount":1293},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[1266,1267],"CVE-2025-62727","PYSEC-2026-1942",[118,1267],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[1272],{"type":886,"score":1018},[1274,1276,1278,1280,1283,1285,1287,1288],{"type":901,"url":1275},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":890,"url":1277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":895,"url":1279},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":1281,"url":1282},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":898,"url":1284},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":901,"url":1286},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":898,"url":940},{"type":890,"url":1289},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[945,946,1291,1292],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",5,{"id":119,"slug":1295,"dossier":45,"summary":1296,"aliases":1297,"sourceIds":1300,"published":1301,"modified":1302,"checkedAt":7,"severity":1303,"references":1305,"versionKeys":1309,"packageCount":32,"repositoryCount":90},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[1298,1299],"CVE-2026-54283","PYSEC-2026-249",[119,1299],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[1304],{"type":886,"score":1018},[1306,1308],{"type":890,"url":1307},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":898,"url":1284},[944,945,946,1291,1292,1310,1311],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":120,"slug":1313,"dossier":45,"summary":1314,"aliases":1315,"sourceIds":1319,"published":1320,"modified":1321,"checkedAt":7,"severity":1322,"references":1325,"versionKeys":1362,"packageCount":32,"repositoryCount":90},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[1316,1317,1318],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[120,1317],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[1323],{"type":886,"score":1324},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1326,1328,1330,1332,1334,1336,1338,1340,1342,1344,1345,1347,1350,1352,1354,1356,1358,1360],{"type":890,"url":1327},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":890,"url":1329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":895,"url":1331},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":901,"url":1333},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":904,"url":1335},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":901,"url":1337},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":901,"url":1339},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":901,"url":1341},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":901,"url":1343},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":898,"url":1284},{"type":901,"url":1346},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":1348,"url":1349},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":901,"url":1351},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":901,"url":1353},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":901,"url":1355},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":901,"url":1357},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":904,"url":1359},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":890,"url":1361},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[944,945,946,1291,1292,1310,1311],{"id":121,"slug":1364,"dossier":45,"summary":1365,"aliases":1366,"sourceIds":1369,"published":1370,"modified":1371,"checkedAt":7,"severity":1372,"references":1375,"versionKeys":1394,"packageCount":32,"repositoryCount":213},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1367,1368],"CVE-2024-47081","PYSEC-2026-1872",[121,1368],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1373],{"type":886,"score":1374},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1376,1378,1380,1382,1384,1386,1388,1390,1392],{"type":901,"url":1377},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":890,"url":1379},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":901,"url":1381},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":895,"url":1383},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":898,"url":1385},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":901,"url":1387},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":901,"url":1389},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":898,"url":1391},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":890,"url":1393},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1395,1396],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":122,"slug":1398,"dossier":45,"summary":1399,"aliases":1400,"sourceIds":1403,"published":1404,"modified":1405,"checkedAt":7,"severity":1406,"references":1409,"versionKeys":1426,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1401,1402],"CVE-2024-35195","PYSEC-2026-1873",[122,1402],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1407],{"type":886,"score":1408},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1410,1412,1414,1416,1418,1419,1421,1423,1424],{"type":901,"url":1411},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":890,"url":1413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":901,"url":1415},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":895,"url":1417},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":898,"url":1385},{"type":901,"url":1420},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":901,"url":1422},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":898,"url":1391},{"type":890,"url":1425},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1395],{"id":123,"slug":1428,"dossier":45,"summary":1429,"aliases":1430,"sourceIds":1433,"published":1434,"modified":1435,"checkedAt":7,"severity":1436,"references":1438,"versionKeys":1450,"packageCount":32,"repositoryCount":1293},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[1431,1432],"CVE-2025-67725","PYSEC-2025-266",[123,1432],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[1437],{"type":886,"score":1018},[1439,1441,1443,1445,1447,1448],{"type":890,"url":1440},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":890,"url":1442},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":895,"url":1444},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":901,"url":1446},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":898,"url":1050},{"type":890,"url":1449},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[1058,1059,1060],{"id":124,"slug":1452,"dossier":45,"summary":1453,"aliases":1454,"sourceIds":1457,"published":1458,"modified":1459,"checkedAt":7,"severity":1460,"references":1463,"versionKeys":1474,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[1455,1456],"CVE-2026-49854","PYSEC-2026-3388",[124,1456],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[1461],{"type":886,"score":1462},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1464,1466,1467,1469,1470,1472],{"type":901,"url":1465},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":898,"url":1050},{"type":901,"url":1468},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":898,"url":1052},{"type":890,"url":1471},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":890,"url":1473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1058,1059,1060,1061,1062],{"id":125,"slug":1476,"dossier":45,"summary":1477,"aliases":1478,"sourceIds":1481,"published":1482,"modified":1483,"checkedAt":7,"severity":1484,"references":1489,"versionKeys":1500,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[1479,1480],"CVE-2024-47874","PYSEC-2026-1943",[125,1480],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[1485,1487],{"type":886,"score":1486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":958,"score":1488},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1490,1492,1494,1496,1497,1498],{"type":901,"url":1491},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":890,"url":1493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":895,"url":1495},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":898,"url":934},{"type":898,"url":940},{"type":890,"url":1499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[944],{"id":126,"slug":1502,"dossier":45,"summary":1503,"aliases":1504,"sourceIds":1507,"published":1508,"modified":1509,"checkedAt":7,"severity":1510,"references":1512,"versionKeys":1526,"packageCount":32,"repositoryCount":223},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[1505,1506],"CVE-2026-39373","PYSEC-2026-70",[126,1506],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[1511],{"type":886,"score":925},[1513,1516,1518,1520,1522,1524],{"type":1514,"url":1515},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":890,"url":1517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":901,"url":1519},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":898,"url":1521},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":901,"url":1523},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":901,"url":1525},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[1527],"pypi:jwcrypto@1.5.6",{"id":127,"slug":1529,"dossier":45,"summary":1530,"aliases":1531,"sourceIds":1534,"published":1535,"modified":1536,"checkedAt":7,"severity":1537,"references":1540,"versionKeys":1553,"packageCount":32,"repositoryCount":213},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[1532,1533],"CVE-2026-69247","PYSEC-2026-3552",[127,1533],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[1538],{"type":958,"score":1539},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1541,1543,1545,1547,1548,1549,1551],{"type":901,"url":1542},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":901,"url":1544},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":901,"url":1546},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":898,"url":1142},{"type":898,"url":1233},{"type":890,"url":1550},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":890,"url":1552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[1148,1149,1150,1151,1554,1555],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":128,"slug":1557,"dossier":45,"summary":1558,"aliases":1559,"sourceIds":1562,"published":1563,"modified":1564,"checkedAt":7,"severity":1565,"references":1568,"versionKeys":1587,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1560,1561],"CVE-2024-34062","PYSEC-2026-1976",[128,1561],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1566],{"type":886,"score":1567},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1569,1571,1573,1575,1577,1579,1581,1583,1585],{"type":901,"url":1570},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":890,"url":1572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":901,"url":1574},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":898,"url":1576},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":901,"url":1578},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":901,"url":1580},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":901,"url":1582},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":898,"url":1584},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":890,"url":1586},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1588],"pypi:tqdm@4.66.2",{"id":129,"slug":1590,"dossier":89,"summary":1591,"aliases":1592,"sourceIds":1595,"published":1596,"modified":1597,"checkedAt":7,"severity":1598,"references":1603,"versionKeys":1613,"packageCount":32,"repositoryCount":103},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1593,1594],"CVE-2026-25645","PYSEC-2026-2275",[129,1594],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1599,1601],{"type":886,"score":1600},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":886,"score":1602},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1604,1606,1608,1610,1611],{"type":890,"url":1605},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":890,"url":1607},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":895,"url":1609},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":898,"url":1385},{"type":890,"url":1612},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1395,1396,1614,1615],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":130,"slug":1617,"dossier":89,"summary":1618,"aliases":1619,"sourceIds":1622,"published":1623,"modified":1624,"checkedAt":7,"severity":1625,"references":1627,"versionKeys":1638,"packageCount":32,"repositoryCount":979},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1620,1621],"CVE-2025-66418","PYSEC-2026-1998",[130,1621],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1626],{"type":958,"score":959},[1628,1630,1632,1634,1635,1636],{"type":901,"url":1629},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":890,"url":1631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":895,"url":1633},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":898,"url":968},{"type":898,"url":970},{"type":890,"url":1637},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[974,975,976,977,978],{"id":131,"slug":1640,"dossier":45,"summary":1641,"aliases":1642,"sourceIds":1643,"published":1644,"modified":1645,"checkedAt":7,"severity":1646,"references":1647,"versionKeys":1653,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[131],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[1648,1650,1651],{"type":901,"url":1649},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":898,"url":1142},{"type":901,"url":1652},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[1146],{"id":132,"slug":1655,"dossier":45,"summary":1656,"aliases":1657,"sourceIds":1660,"published":1661,"modified":1662,"checkedAt":7,"severity":1663,"references":1665,"versionKeys":1675,"packageCount":32,"repositoryCount":1293},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[1658,1659],"CVE-2025-67726","PYSEC-2025-267",[132,1659],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[1664],{"type":886,"score":1018},[1666,1668,1670,1671,1673,1674],{"type":890,"url":1667},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":890,"url":1669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":895,"url":1444},{"type":901,"url":1672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":898,"url":1050},{"type":890,"url":1449},[1058,1059,1060],{"id":133,"slug":1677,"dossier":45,"summary":1678,"aliases":1679,"sourceIds":1682,"published":1683,"modified":1684,"checkedAt":7,"severity":1685,"references":1689,"versionKeys":1697,"packageCount":32,"repositoryCount":90},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[1680,1681],"CVE-2026-54282","PYSEC-2026-248",[133,1681],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[1686,1688],{"type":886,"score":1687},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":886,"score":1195},[1690,1692,1694,1695],{"type":890,"url":1691},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":890,"url":1693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":898,"url":1284},{"type":901,"url":1696},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[944,945,946,1291,1292,1310,1311],{"id":134,"slug":1699,"dossier":45,"summary":1700,"aliases":1701,"sourceIds":1704,"published":1705,"modified":1706,"checkedAt":7,"severity":1707,"references":1709,"versionKeys":1722,"packageCount":32,"repositoryCount":90},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[1702,1703],"CVE-2026-69249","PYSEC-2026-3553",[134,1703],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[1708],{"type":958,"score":1488},[1710,1712,1714,1716,1717,1718,1720],{"type":901,"url":1711},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":901,"url":1713},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":901,"url":1715},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":898,"url":1142},{"type":898,"url":1233},{"type":890,"url":1719},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":890,"url":1721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[1146,1147,1148,1149,1150,1151,1554],{"id":135,"slug":1724,"dossier":45,"summary":1725,"aliases":1726,"sourceIds":1729,"published":1730,"modified":1731,"checkedAt":7,"severity":1732,"references":1735,"versionKeys":1748,"packageCount":32,"repositoryCount":90},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[1727,1728],"CVE-2026-69248","PYSEC-2026-3554",[135,1728],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[1733],{"type":958,"score":1734},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1736,1738,1740,1742,1743,1744,1746],{"type":901,"url":1737},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":901,"url":1739},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":901,"url":1741},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":898,"url":1142},{"type":898,"url":1233},{"type":890,"url":1745},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":890,"url":1747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[1146,1147,1148,1149,1150,1151,1554],{"id":136,"slug":1750,"dossier":45,"summary":1751,"aliases":1752,"sourceIds":1755,"published":1756,"modified":1757,"checkedAt":7,"severity":1758,"references":1762,"versionKeys":1770,"packageCount":32,"repositoryCount":213},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[1753,1754],"CVE-2026-34073","PYSEC-2026-35",[136,1754],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[1759,1760],{"type":886,"score":1195},{"type":958,"score":1761},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1763,1765,1767,1768],{"type":890,"url":1764},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":890,"url":1766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":898,"url":1142},{"type":901,"url":1769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[1146,1147,1148,1149,1150,1151],{"id":137,"slug":1772,"dossier":45,"summary":1773,"aliases":1774,"sourceIds":1777,"published":1778,"modified":1779,"checkedAt":7,"severity":1780,"references":1783,"versionKeys":1791,"packageCount":32,"repositoryCount":223},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[1775,1776],"CVE-2026-44432","PYSEC-2026-142",[137,1776],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[1781,1782],{"type":886,"score":1018},{"type":958,"score":959},[1784,1786,1788,1790],{"type":890,"url":1785},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":890,"url":1787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":901,"url":1789},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":898,"url":968},[1792],"pypi:urllib3@2.6.3",{"id":138,"slug":1794,"dossier":45,"summary":1795,"aliases":1796,"sourceIds":1799,"published":1800,"modified":1801,"checkedAt":7,"severity":1802,"references":1804,"versionKeys":1813,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[1797,1798],"CVE-2026-49855","PYSEC-2026-3389",[138,1798],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[1803],{"type":886,"score":1018},[1805,1807,1808,1809,1811],{"type":901,"url":1806},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":898,"url":1050},{"type":898,"url":1052},{"type":890,"url":1810},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":890,"url":1812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1058,1059,1060,1061,1062],{"id":139,"slug":1815,"dossier":45,"summary":1816,"aliases":1817,"sourceIds":1820,"published":1821,"modified":1822,"checkedAt":7,"severity":1823,"references":1827,"versionKeys":1835,"packageCount":32,"repositoryCount":223},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[1818,1819],"CVE-2026-39892","PYSEC-2026-36",[139,1819],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[1824,1825],{"type":958,"score":1164},{"type":886,"score":1826},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1828,1830,1832,1833],{"type":890,"url":1829},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":890,"url":1831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":898,"url":1142},{"type":901,"url":1834},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[1150,1151],{"id":140,"slug":1837,"dossier":45,"summary":1838,"aliases":1839,"sourceIds":1842,"published":1843,"modified":1844,"checkedAt":7,"severity":1845,"references":1847,"versionKeys":1859,"packageCount":32,"repositoryCount":213},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[1840,1841],"CVE-2025-50181","PYSEC-2026-1999",[140,1841],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[1846],{"type":886,"score":1074},[1848,1850,1852,1854,1855,1856,1857],{"type":901,"url":1849},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":890,"url":1851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":895,"url":1853},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":898,"url":968},{"type":901,"url":1084},{"type":898,"url":970},{"type":890,"url":1858},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[974,975,976,977],{"id":141,"slug":1861,"dossier":45,"summary":1862,"aliases":1863,"sourceIds":1866,"published":1867,"modified":1868,"checkedAt":7,"severity":1869,"references":1873,"versionKeys":1884,"packageCount":32,"repositoryCount":1293},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[1864,1865],"CVE-2025-67724","PYSEC-2025-265",[141,1865],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[1870,1871],{"type":886,"score":1191},{"type":886,"score":1872},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[1874,1876,1878,1880,1882,1883],{"type":890,"url":1875},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":890,"url":1877},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":895,"url":1879},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":901,"url":1881},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":898,"url":1050},{"type":890,"url":1449},[1058,1059,1060],{"id":142,"slug":1886,"dossier":45,"summary":1887,"aliases":1888,"sourceIds":1889,"published":1890,"modified":1891,"checkedAt":7,"severity":1892,"references":1895,"versionKeys":1899,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[142],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[1893],{"type":886,"score":1894},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1896,1898],{"type":901,"url":1897},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":898,"url":1050},[1058,1059,1060,1061,1062],{"id":143,"slug":1901,"dossier":89,"summary":1902,"aliases":1903,"sourceIds":1906,"published":1907,"modified":1908,"checkedAt":7,"severity":1909,"references":1913,"versionKeys":1919,"packageCount":32,"repositoryCount":103},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[1904,1905],"CVE-2026-44431","PYSEC-2026-141",[143,1905],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[1910,1912],{"type":886,"score":1911},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":958,"score":1539},[1914,1916,1918],{"type":890,"url":1915},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":890,"url":1917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":898,"url":968},[974,975,976,977,978,1792],{"id":144,"slug":1921,"dossier":45,"summary":1922,"aliases":1923,"sourceIds":1926,"published":1927,"modified":1928,"checkedAt":7,"severity":1929,"references":1932,"versionKeys":1945,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[1924,1925],"CVE-2026-31958","PYSEC-2026-140",[144,1925],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[1930,1931],{"type":886,"score":1018},{"type":958,"score":1488},[1933,1935,1937,1939,1941,1942,1943],{"type":890,"url":1934},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":890,"url":1936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":901,"url":1938},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":901,"url":1940},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":898,"url":1050},{"type":901,"url":1203},{"type":901,"url":1944},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1058,1059,1060,1061],{"id":145,"slug":1947,"dossier":45,"summary":1948,"aliases":1949,"sourceIds":1952,"published":1953,"modified":1954,"checkedAt":7,"severity":1955,"references":1960,"versionKeys":2000,"packageCount":32,"repositoryCount":213},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[1950,1951],"CVE-2026-26007","PYSEC-2026-2141",[145,1951],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[1956,1958],{"type":958,"score":1957},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":886,"score":1959},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1961,1963,1965,1967,1968,1970,1972,1974,1976,1978,1980,1982,1984,1986,1988,1990,1992,1994,1996,1998],{"type":901,"url":1962},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":890,"url":1964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":901,"url":1966},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":898,"url":1142},{"type":901,"url":1969},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":901,"url":1971},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":901,"url":1973},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":890,"url":1975},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":890,"url":1977},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":890,"url":1979},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":890,"url":1981},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":890,"url":1983},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":890,"url":1985},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":890,"url":1987},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":890,"url":1989},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":890,"url":1991},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":890,"url":1993},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":890,"url":1995},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":890,"url":1997},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":890,"url":1999},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1146,1147,1148,1149,1150,1151],{"id":146,"slug":2002,"dossier":45,"summary":2003,"aliases":2004,"sourceIds":2007,"published":2008,"modified":2009,"checkedAt":7,"severity":2010,"references":2013,"versionKeys":2026,"packageCount":32,"repositoryCount":223},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[2005,2006],"CVE-2025-43859","PYSEC-2026-348",[146,2006],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[2011],{"type":886,"score":2012},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2014,2016,2018,2020,2022,2024],{"type":901,"url":2015},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":890,"url":2017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":901,"url":2019},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":898,"url":2021},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":898,"url":2023},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":890,"url":2025},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[2027],"pypi:h11@0.14.0",{"id":147,"slug":2029,"dossier":45,"summary":2030,"aliases":2031,"sourceIds":2034,"published":2035,"modified":2036,"checkedAt":7,"severity":2037,"references":2040,"versionKeys":2063,"packageCount":32,"repositoryCount":90},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[2032,2033],"CVE-2026-48818","PYSEC-2026-2281",[147,2033],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[2038],{"type":886,"score":2039},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2041,2043,2044,2046,2048,2050,2052,2054,2056,2059,2061],{"type":890,"url":2042},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":898,"url":1284},{"type":901,"url":2045},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":901,"url":2047},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":890,"url":2049},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":890,"url":2051},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":890,"url":2053},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":890,"url":2055},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2057,"url":2058},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":895,"url":2060},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":895,"url":2062},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[944,945,946,1291,1292,1310,1311],{"id":148,"slug":2065,"dossier":45,"summary":2066,"aliases":2067,"sourceIds":2070,"published":2071,"modified":2072,"checkedAt":7,"severity":2073,"references":2075,"versionKeys":2082,"packageCount":32,"repositoryCount":90},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[2068,2069],"CVE-2026-48817","PYSEC-2026-2280",[148,2069],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[2074],{"type":886,"score":1195},[2076,2078,2080,2081],{"type":890,"url":2077},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":890,"url":2079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":898,"url":1284},{"type":890,"url":2055},[944,945,946,1291,1292,1310,1311],{"id":149,"slug":2084,"dossier":89,"summary":172,"aliases":2085,"sourceIds":2088,"published":2089,"modified":2090,"checkedAt":7,"severity":2091,"references":2094,"versionKeys":2109,"packageCount":32,"repositoryCount":2116},"pysec-2026-2132-627bf7c7",[2086,2087],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[149],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[2092],{"type":886,"score":2093},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2095,2097,2099,2101,2103,2105,2107],{"type":901,"url":2096},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":901,"url":2098},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":890,"url":2100},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":890,"url":2102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2057,"url":2104},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":895,"url":2106},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1514,"url":2108},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[2110,2111,2112,2113,2114,2115],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",14,1786588639855]