[{"data":1,"prerenderedAt":2597},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-8742":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":178,"related":181},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":40,"licenseExpressionCount":102,"unknownLicensePackageCount":37,"advisoryIds":103,"advisoryCount":176,"providers":177},"opencode:8742","opencode-8742",8742,"ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark","Small vibecoded benchmark meant as a smoke test for search API results.","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark","cd6b854b1b400d7e45796aaa22bded8183642916","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fcommit\u002Fcd6b854b1b400d7e45796aaa22bded8183642916","2026-05-07T14:25:51.430Z","2026-02-17T14:55:53.000Z",{"complete":89,"entryCount":90,"truncated":45},true,248,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","b8f9651f03205e9719be196d83af006415043f761f2f02bcde0cac7b36f8dca7",305255,"parsed",65,[101],"pypi",16,[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175],"GHSA-248v-346w-9cwc","GHSA-2fqr-mr3j-6wp8","GHSA-2g6r-c272-w58r","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3644-q5cj-c5c7","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-428g-f7cq-pgp5","GHSA-45pg-36p6-83v9","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4xgf-cpjx-pc3j","GHSA-54jq-c3m8-4m76","GHSA-5chr-fjjv-38qv","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6qv9-48xg-fc7f","GHSA-926x-3r5x-gfhw","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c67j-w6g6-q2cm","GHSA-cq5v-8q36-5273","GHSA-f4xh-w4cj-qxq8","GHSA-fh55-r93g-j68g","GHSA-fjqc-hq36-qh5p","GHSA-fv5p-p927-qmxr","GHSA-g3cq-j2xw-wf74","GHSA-g48c-2wqr-h844","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gr75-jv2w-4656","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pc6w-59fv-rh23","GHSA-pjwx-r37v-7724","GHSA-pq67-6m6q-mj2v","GHSA-q25c-c977-4cmh","GHSA-qccp-gfcp-xxvc","GHSA-qh6h-p6c9-ff54","GHSA-r7w7-9xr2-qq2r","GHSA-rr7j-v2q5-chgv","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w39p-vh2g-g8g5","GHSA-xcgm-r5h9-7989","PYSEC-2024-115","PYSEC-2024-323",72,[],{"files":179,"occurrenceCount":99},[180],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":182,"vulnerabilities":785},[183,195,204,214,224,236,245,253,262,271,281,292,301,310,319,329,338,348,357,366,375,384,395,404,413,423,433,442,451,460,469,478,487,496,505,514,525,534,543,552,560,569,578,586,594,603,611,621,630,640,648,657,666,675,685,694,703,712,721,730,739,748,757,767,776],{"id":184,"slug":185,"identity":186,"label":187,"aiRelevant":89,"provider":188,"advisoryCount":189,"licenseExpressions":190,"versions":192,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":194},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","LangChain Core",null,7,[191],"MIT",[193],"1.2.7",[54],{"id":196,"slug":197,"identity":198,"label":199,"aiRelevant":89,"provider":188,"advisoryCount":34,"licenseExpressions":200,"versions":201,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":203},"package:pypi:langchain-community","langchain-community-b296254c","pypi:langchain-community","LangChain Community",[191],[202],"0.4.1",[54],{"id":205,"slug":206,"identity":207,"label":208,"aiRelevant":89,"provider":188,"advisoryCount":209,"licenseExpressions":210,"versions":211,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":213},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","LangChain",3,[191],[212],"1.2.6",[54],{"id":215,"slug":216,"identity":217,"label":218,"aiRelevant":89,"provider":188,"advisoryCount":219,"licenseExpressions":220,"versions":221,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":223},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","LangGraph",2,[191],[222],"1.0.6",[54],{"id":225,"slug":226,"identity":227,"label":228,"aiRelevant":89,"provider":229,"advisoryCount":32,"licenseExpressions":232,"versions":233,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":235},"package:pypi:langchain-openai","langchain-openai-4985188e","pypi:langchain-openai","LangChain OpenAI",{"id":230,"label":231},"openai","OpenAI",[191],[234],"1.1.7",[54],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":89,"provider":188,"advisoryCount":32,"licenseExpressions":241,"versions":242,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":244},"package:pypi:langchain-text-splitters","langchain-text-splitters-0c057788","pypi:langchain-text-splitters","LangChain · Text Splitters",[191],[243],"1.1.0",[54],{"id":70,"slug":71,"identity":246,"label":72,"aiRelevant":89,"provider":247,"advisoryCount":37,"licenseExpressions":248,"versions":250,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":252},"pypi:openai",{"id":230,"label":231},[249],"Apache-2.0",[251],"2.15.0",[54],{"id":254,"slug":255,"identity":256,"label":257,"aiRelevant":89,"provider":188,"advisoryCount":37,"licenseExpressions":258,"versions":259,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":261},"package:pypi:langchain-linkup","langchain-linkup-d50e0d4b","pypi:langchain-linkup","LangChain · Linkup",[191],[260],"0.1.7",[54],{"id":263,"slug":264,"identity":265,"label":266,"aiRelevant":89,"provider":188,"advisoryCount":37,"licenseExpressions":267,"versions":268,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":270},"package:pypi:langchain-tavily","langchain-tavily-432e1c93","pypi:langchain-tavily","LangChain · Tavily",[191],[269],"0.2.17",[54],{"id":272,"slug":273,"identity":274,"label":275,"aiRelevant":89,"provider":188,"advisoryCount":37,"licenseExpressions":276,"versions":278,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":280},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[277],"non-standard",[279],"0.12.0",[54],{"id":282,"slug":283,"identity":284,"label":285,"aiRelevant":45,"provider":188,"advisoryCount":286,"licenseExpressions":287,"versions":289,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":291},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[249,288],"Apache-2.0 AND MIT",[290],"3.13.3",[54],{"id":293,"slug":294,"identity":295,"label":296,"aiRelevant":45,"provider":188,"advisoryCount":189,"licenseExpressions":297,"versions":298,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":300},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[191],[299],"2.6.3",[54],{"id":302,"slug":303,"identity":304,"label":305,"aiRelevant":45,"provider":188,"advisoryCount":209,"licenseExpressions":306,"versions":307,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":309},"package:pypi:langsmith","langsmith-a7ab7b96","pypi:langsmith","langsmith",[191],[308],"0.6.4",[54],{"id":311,"slug":312,"identity":313,"label":314,"aiRelevant":45,"provider":188,"advisoryCount":209,"licenseExpressions":315,"versions":316,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":318},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[249],[317],"2.32.5",[54],{"id":320,"slug":321,"identity":322,"label":323,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":324,"versions":326,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":328},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[325],"MPL-2.0",[327],"2026.1.4",[54],{"id":330,"slug":331,"identity":332,"label":333,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":334,"versions":335,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":337},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[191],[336],"0.16.0",[54],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":343,"versions":345,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":347},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[344,277],"BSD-3-Clause",[346],"3.11",[54],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":353,"versions":354,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":356},"package:pypi:langchain-classic","langchain-classic-ee5360ab","pypi:langchain-classic","langchain-classic",[191],[355],"1.0.1",[54],{"id":358,"slug":359,"identity":360,"label":361,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":362,"versions":363,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":365},"package:pypi:langgraph-checkpoint","langgraph-checkpoint-b3039a64","pypi:langgraph-checkpoint","langgraph-checkpoint",[191],[364],"4.0.0",[54],{"id":367,"slug":368,"identity":369,"label":370,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":371,"versions":372,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":374},"package:pypi:langgraph-sdk","langgraph-sdk-7670dc92","pypi:langgraph-sdk","langgraph-sdk",[191],[373],"0.3.3",[54],{"id":376,"slug":377,"identity":378,"label":379,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":380,"versions":381,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":383},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[191],[382],"3.26.2",[54],{"id":385,"slug":386,"identity":387,"label":388,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":389,"versions":392,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":394},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[390,391],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[393],"3.11.5",[54],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":400,"versions":401,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":403},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[191],[402],"2.12.0",[54],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":409,"versions":410,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":412},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[344],[411],"1.2.1",[54],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":45,"provider":188,"advisoryCount":32,"licenseExpressions":418,"versions":420,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":422},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[419],"MIT AND MPL-2.0",[421],"4.67.1",[54],{"id":424,"slug":425,"identity":426,"label":427,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":428,"versions":430,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":432},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[429],"PSF-2.0",[431],"2.6.1",[54],{"id":434,"slug":435,"identity":436,"label":437,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":438,"versions":439,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":441},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[249],[440],"1.4.0",[54],{"id":443,"slug":444,"identity":445,"label":446,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":447,"versions":448,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":450},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[191],[449],"0.7.0",[54],{"id":452,"slug":453,"identity":454,"label":455,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":456,"versions":457,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":459},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[191],[458],"4.12.1",[54],{"id":461,"slug":462,"identity":463,"label":464,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":465,"versions":466,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":468},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[191],[467],"25.4.0",[54],{"id":470,"slug":471,"identity":472,"label":473,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":474,"versions":475,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":477},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[191],[476],"3.4.4",[54],{"id":479,"slug":480,"identity":481,"label":482,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":483,"versions":484,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":486},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[277],[485],"0.4.6",[54],{"id":488,"slug":489,"identity":490,"label":491,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":492,"versions":493,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":495},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[191],[494],"0.6.7",[54],{"id":497,"slug":498,"identity":499,"label":500,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":501,"versions":502,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":504},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[249],[503],"1.9.0",[54],{"id":506,"slug":507,"identity":508,"label":509,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":510,"versions":511,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":513},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[249],[512],"1.8.0",[54],{"id":515,"slug":516,"identity":517,"label":518,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":519,"versions":522,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":524},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[191,520,521],"MIT AND PSF-2.0","MIT AND Python-2.0",[523],"3.3.0",[54],{"id":526,"slug":527,"identity":528,"label":529,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":530,"versions":531,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":533},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[344],[532],"1.0.9",[54],{"id":535,"slug":536,"identity":537,"label":538,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":539,"versions":540,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":542},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[344],[541],"0.28.1",[54],{"id":544,"slug":545,"identity":546,"label":547,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":548,"versions":549,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":551},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[191],[550],"0.4.3",[54],{"id":553,"slug":554,"identity":555,"label":556,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":557,"versions":558,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[191],[279],[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":565,"versions":566,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:jsonpatch","jsonpatch-ce7aa354","pypi:jsonpatch","jsonpatch",[277],[567],"1.33",[54],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":574,"versions":575,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":577},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[277],[576],"3.0.0",[54],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":583,"versions":584,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":585},"package:pypi:langgraph-prebuilt","langgraph-prebuilt-84c4e144","pypi:langgraph-prebuilt","langgraph-prebuilt",[191],[222],[54],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":591,"versions":592,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":593},"package:pypi:linkup-sdk","linkup-sdk-d56065ac","pypi:linkup-sdk","linkup-sdk",[191],[279],[54],{"id":595,"slug":596,"identity":597,"label":598,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":599,"versions":600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":602},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[249],[601],"6.7.0",[54],{"id":604,"slug":605,"identity":606,"label":607,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":608,"versions":609,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":610},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[191],[243],[54],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":616,"versions":618,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":620},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[617,277],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[619],"2.4.1",[54],{"id":622,"slug":623,"identity":624,"label":625,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":626,"versions":627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":629},"package:pypi:ormsgpack","ormsgpack-56a067ff","pypi:ormsgpack","ormsgpack",[390],[628],"1.12.2",[54],{"id":631,"slug":632,"identity":633,"label":634,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":635,"versions":637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":639},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[636,277],"Apache-2.0 OR BSD-2-Clause",[638],"25.0",[54],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":645,"versions":646,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":647},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[249],[202],[54],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":653,"versions":654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":656},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[191],[655],"2.12.5",[54],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":662,"versions":663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":665},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[191],[664],"2.41.5",[54],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":671,"versions":672,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":674},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[191],[673],"6.0.3",[54],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":680,"versions":682,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":684},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[681,277],"Apache-2.0 AND CNRI-Python",[683],"2026.1.15",[54],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":690,"versions":691,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":693},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[249],[692],"1.0.0",[54],{"id":695,"slug":696,"identity":697,"label":698,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":699,"versions":700,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":702},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[390],[701],"1.3.1",[54],{"id":704,"slug":705,"identity":706,"label":707,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":708,"versions":709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":711},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[191],[710],"2.0.46",[54],{"id":713,"slug":714,"identity":715,"label":716,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":717,"versions":718,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":720},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[249],[719],"9.1.2",[54],{"id":722,"slug":723,"identity":724,"label":725,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":726,"versions":727,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":729},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[429,277],[728],"4.15.0",[54],{"id":731,"slug":732,"identity":733,"label":734,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":735,"versions":736,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":738},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[191],[737],"0.9.0",[54],{"id":740,"slug":741,"identity":742,"label":743,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":744,"versions":745,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":747},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[191],[746],"0.4.2",[54],{"id":749,"slug":750,"identity":751,"label":752,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":753,"versions":754,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":756},"package:pypi:uuid-utils","uuid-utils-c3d356a2","pypi:uuid-utils","uuid-utils",[344,277],[755],"0.14.0",[54],{"id":758,"slug":759,"identity":760,"label":761,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":762,"versions":764,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":766},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[763,277],"BSD-2-Clause",[765],"3.6.0",[54],{"id":768,"slug":769,"identity":770,"label":771,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":772,"versions":773,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":775},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[249],[774],"1.22.0",[54],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":45,"provider":188,"advisoryCount":37,"licenseExpressions":781,"versions":782,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":784},"package:pypi:zstandard","zstandard-8fab007a","pypi:zstandard","zstandard",[344],[783],"0.25.0",[54],[786,825,857,887,912,944,978,1004,1028,1055,1083,1109,1129,1147,1165,1190,1218,1245,1264,1291,1314,1337,1360,1386,1420,1444,1466,1500,1530,1550,1575,1609,1639,1655,1679,1704,1726,1745,1770,1803,1828,1856,1879,1904,1926,1949,1970,2006,2042,2065,2089,2108,2130,2160,2188,2213,2236,2258,2280,2309,2331,2355,2383,2403,2434,2458,2479,2506,2529,2561,2580],{"id":104,"slug":787,"dossier":45,"summary":788,"aliases":789,"sourceIds":792,"published":793,"modified":794,"checkedAt":7,"severity":795,"references":799,"versionKeys":823,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[790,791],"CVE-2024-39689","PYSEC-2024-230",[104,791],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[796],{"type":797,"score":798},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[800,803,805,808,811,814,817,819,821],{"type":801,"url":802},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":801,"url":804},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":806,"url":807},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":809,"url":810},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":812,"url":813},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":815,"url":816},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":812,"url":818},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":801,"url":820},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":801,"url":822},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[824],"pypi:certifi@2024.6.2",{"id":105,"slug":826,"dossier":45,"summary":827,"aliases":828,"sourceIds":831,"published":832,"modified":833,"checkedAt":7,"severity":834,"references":840,"versionKeys":847,"packageCount":32,"repositoryCount":856},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[829,830],"CVE-2026-54279","PYSEC-2026-2112",[105,830],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[835,838],{"type":836,"score":837},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":839},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[841,843,845],{"type":801,"url":842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":809,"url":844},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":806,"url":846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[848,849,850,851,852,853,854,855],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":106,"slug":858,"dossier":45,"summary":859,"aliases":860,"sourceIds":863,"published":864,"modified":865,"checkedAt":7,"severity":866,"references":869,"versionKeys":884,"packageCount":32,"repositoryCount":219},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[861,862],"CVE-2026-26013","PYSEC-2026-2562",[106,862],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[867],{"type":797,"score":868},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[870,872,874,876,878,880,882],{"type":812,"url":871},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":801,"url":873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":812,"url":875},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":809,"url":877},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",{"type":812,"url":879},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":809,"url":881},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":801,"url":883},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[885,886],"pypi:langchain-core@0.2.28","pypi:langchain-core@1.2.7",{"id":107,"slug":888,"dossier":45,"summary":889,"aliases":890,"sourceIds":893,"published":894,"modified":895,"checkedAt":7,"severity":896,"references":901,"versionKeys":911,"packageCount":32,"repositoryCount":856},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[891,892],"CVE-2026-34514","PYSEC-2026-2096",[107,892],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[897,899],{"type":836,"score":898},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":900},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[902,904,906,908,909],{"type":806,"url":903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":801,"url":905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":806,"url":907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":809,"url":844},{"type":801,"url":910},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[848,849,850,851,852,853,854,855],{"id":108,"slug":913,"dossier":89,"summary":914,"aliases":915,"sourceIds":918,"published":919,"modified":920,"checkedAt":7,"severity":921,"references":924,"versionKeys":937,"packageCount":32,"repositoryCount":943},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[916,917],"CVE-2025-66471","PYSEC-2026-1994",[108,917],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[922],{"type":836,"score":923},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[925,927,929,931,933,935],{"type":812,"url":926},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":801,"url":928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":806,"url":930},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":809,"url":932},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":809,"url":934},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":801,"url":936},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[938,939,940,941,942],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":109,"slug":945,"dossier":45,"summary":946,"aliases":947,"sourceIds":952,"published":953,"modified":954,"checkedAt":7,"severity":955,"references":958,"versionKeys":973,"packageCount":209,"repositoryCount":209},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[948,949,950,951],"CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582",[109,949,950,951],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[956],{"type":797,"score":957},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[959,961,963,965,967,969,971],{"type":812,"url":960},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":801,"url":962},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":809,"url":964},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":809,"url":966},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":801,"url":968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":809,"url":970},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":809,"url":972},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[974,975,976,977],"pypi:langchain-classic@1.0.1","pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langsmith@0.6.4",{"id":110,"slug":979,"dossier":89,"summary":980,"aliases":981,"sourceIds":984,"published":985,"modified":986,"checkedAt":7,"severity":987,"references":990,"versionKeys":1003,"packageCount":32,"repositoryCount":943},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[982,983],"CVE-2026-21441","PYSEC-2026-1996",[110,983],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[988,989],{"type":797,"score":839},{"type":836,"score":923},[991,993,995,997,998,1000,1001],{"type":812,"url":992},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":801,"url":994},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":806,"url":996},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":809,"url":932},{"type":812,"url":999},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":809,"url":934},{"type":801,"url":1002},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[938,939,940,941,942],{"id":111,"slug":1005,"dossier":45,"summary":1006,"aliases":1007,"sourceIds":1010,"published":1011,"modified":1012,"checkedAt":7,"severity":1013,"references":1018,"versionKeys":1027,"packageCount":32,"repositoryCount":856},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1008,1009],"CVE-2026-34517","PYSEC-2026-2099",[111,1009],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[1014,1016],{"type":836,"score":1015},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":1017},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1019,1021,1023,1025,1026],{"type":806,"url":1020},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":801,"url":1022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":806,"url":1024},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":112,"slug":1029,"dossier":45,"summary":1030,"aliases":1031,"sourceIds":1034,"published":1035,"modified":1036,"checkedAt":7,"severity":1037,"references":1039,"versionKeys":1052,"packageCount":32,"repositoryCount":219},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[1032,1033],"CVE-2025-68480","PYSEC-2026-1605",[112,1033],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[1038],{"type":797,"score":1017},[1040,1042,1044,1046,1048,1050],{"type":812,"url":1041},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":801,"url":1043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":812,"url":1045},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":809,"url":1047},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":809,"url":1049},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":801,"url":1051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[1053,1054],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":113,"slug":1056,"dossier":45,"summary":1057,"aliases":1058,"sourceIds":1061,"published":1062,"modified":1063,"checkedAt":7,"severity":1064,"references":1069,"versionKeys":1081,"packageCount":32,"repositoryCount":32},"ghsa-45pg-36p6-83v9-9505da12","Langchain SQL Injection vulnerability",[1059,174,1060],"CVE-2024-8309","PYSEC-2026-1507",[113],"2024-10-29T15:32:05Z","2026-07-07T17:57:12.591755527Z",[1065,1067],{"type":797,"score":1066},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":836,"score":1068},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1070,1072,1074,1076,1077,1079],{"type":801,"url":1071},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8309",{"type":812,"url":1073},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F64c317eba05fbac0c6a6fc5aa192bc0d7130972e",{"type":812,"url":1075},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc2a3021bb0c5f54649d380b42a0684ca5778c255",{"type":809,"url":877},{"type":812,"url":1078},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain\u002FPYSEC-2024-115.yaml",{"type":812,"url":1080},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5",[1082],"pypi:langchain-community@0.2.7",{"id":114,"slug":1084,"dossier":45,"summary":1085,"aliases":1086,"sourceIds":1089,"published":1090,"modified":1091,"checkedAt":7,"severity":1092,"references":1095,"versionKeys":1108,"packageCount":32,"repositoryCount":189},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1087,1088],"CVE-2025-50182","PYSEC-2026-1997",[114,1088],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1093],{"type":797,"score":1094},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1096,1098,1100,1102,1103,1105,1106],{"type":812,"url":1097},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":801,"url":1099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":806,"url":1101},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":809,"url":932},{"type":812,"url":1104},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":809,"url":934},{"type":801,"url":1107},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[938,939,940,941],{"id":115,"slug":1110,"dossier":45,"summary":1111,"aliases":1112,"sourceIds":1115,"published":1116,"modified":1117,"checkedAt":7,"severity":1118,"references":1122,"versionKeys":1128,"packageCount":32,"repositoryCount":856},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1113,1114],"CVE-2026-54273","PYSEC-2026-2107",[115,1114],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[1119,1121],{"type":836,"score":1120},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":839},[1123,1125,1127],{"type":801,"url":1124},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":806,"url":1126},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":116,"slug":1130,"dossier":45,"summary":1131,"aliases":1132,"sourceIds":1135,"published":1136,"modified":1137,"checkedAt":7,"severity":1138,"references":1142,"versionKeys":1146,"packageCount":32,"repositoryCount":856},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1133,1134],"CVE-2026-54275","PYSEC-2026-237",[116,1134],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[1139,1141],{"type":836,"score":1140},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":839},[1143,1145],{"type":801,"url":1144},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":117,"slug":1148,"dossier":45,"summary":1149,"aliases":1150,"sourceIds":1152,"published":1153,"modified":1154,"checkedAt":7,"severity":1155,"references":1158,"versionKeys":1163,"packageCount":32,"repositoryCount":219},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[1151],"CVE-2026-58203",[117],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[1156],{"type":797,"score":1157},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1159,1161],{"type":812,"url":1160},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":809,"url":1162},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[1164],"pypi:pydantic-settings@2.12.0",{"id":118,"slug":1166,"dossier":45,"summary":1167,"aliases":1168,"sourceIds":1171,"published":1172,"modified":1173,"checkedAt":7,"severity":1174,"references":1177,"versionKeys":1189,"packageCount":32,"repositoryCount":189},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1169,1170],"CVE-2025-69226","PYSEC-2026-1097",[118,1170],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[1175],{"type":836,"score":1176},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1178,1180,1182,1184,1185,1187],{"type":812,"url":1179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":801,"url":1181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":806,"url":1183},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":809,"url":844},{"type":809,"url":1186},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":801,"url":1188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[848,849,850,851,852,853,854],{"id":119,"slug":1191,"dossier":45,"summary":1192,"aliases":1193,"sourceIds":1196,"published":1197,"modified":1198,"checkedAt":7,"severity":1199,"references":1202,"versionKeys":1217,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[1194,1195],"CVE-2024-10940","PYSEC-2026-1517",[119,1195],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[1200],{"type":797,"score":1201},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1203,1205,1207,1209,1211,1212,1214,1215],{"type":801,"url":1204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":812,"url":1206},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":812,"url":1208},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":812,"url":1210},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":809,"url":877},{"type":812,"url":1213},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":809,"url":881},{"type":801,"url":1216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[885],{"id":120,"slug":1219,"dossier":45,"summary":1220,"aliases":1221,"sourceIds":1224,"published":1225,"modified":1226,"checkedAt":7,"severity":1227,"references":1233,"versionKeys":1244,"packageCount":32,"repositoryCount":856},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1222,1223],"CVE-2026-34520","PYSEC-2026-2102",[120,1223],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[1228,1230,1231],{"type":797,"score":1229},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":836,"score":898},{"type":836,"score":1232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1234,1236,1238,1240,1241,1242],{"type":806,"url":1235},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":801,"url":1237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":806,"url":1239},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":809,"url":844},{"type":801,"url":910},{"type":812,"url":1243},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[848,849,850,851,852,853,854,855],{"id":121,"slug":1246,"dossier":45,"summary":1247,"aliases":1248,"sourceIds":1251,"published":1252,"modified":1253,"checkedAt":7,"severity":1254,"references":1257,"versionKeys":1263,"packageCount":32,"repositoryCount":856},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[1249,1250],"CVE-2026-54277","PYSEC-2026-2110",[121,1250],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[1255,1256],{"type":836,"score":1120},{"type":797,"score":839},[1258,1260,1262],{"type":801,"url":1259},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":806,"url":1261},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":122,"slug":1265,"dossier":89,"summary":1266,"aliases":1267,"sourceIds":1270,"published":1271,"modified":1272,"checkedAt":7,"severity":1273,"references":1277,"versionKeys":1286,"packageCount":32,"repositoryCount":1290},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1268,1269],"CVE-2026-45409","PYSEC-2026-215",[122,1269],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1274,1275],{"type":797,"score":1017},{"type":836,"score":1276},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1278,1280,1282,1284],{"type":801,"url":1279},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":801,"url":1281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":809,"url":1283},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":812,"url":1285},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1287,1288,1289],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":123,"slug":1292,"dossier":45,"summary":1293,"aliases":1294,"sourceIds":1297,"published":1298,"modified":1299,"checkedAt":7,"severity":1300,"references":1302,"versionKeys":1313,"packageCount":32,"repositoryCount":189},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[1295,1296],"CVE-2025-69224","PYSEC-2026-1099",[123,1296],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[1301],{"type":836,"score":898},[1303,1305,1307,1309,1310,1311],{"type":812,"url":1304},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":801,"url":1306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":806,"url":1308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1312},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[848,849,850,851,852,853,854],{"id":124,"slug":1315,"dossier":45,"summary":1316,"aliases":1317,"sourceIds":1320,"published":1321,"modified":1322,"checkedAt":7,"severity":1323,"references":1325,"versionKeys":1336,"packageCount":32,"repositoryCount":189},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[1318,1319],"CVE-2025-69228","PYSEC-2026-1100",[124,1319],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[1324],{"type":836,"score":1120},[1326,1328,1330,1332,1333,1334],{"type":812,"url":1327},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":801,"url":1329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":806,"url":1331},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[848,849,850,851,852,853,854],{"id":125,"slug":1338,"dossier":45,"summary":1339,"aliases":1340,"sourceIds":1343,"published":1344,"modified":1345,"checkedAt":7,"severity":1346,"references":1348,"versionKeys":1359,"packageCount":32,"repositoryCount":189},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[1341,1342],"CVE-2025-69223","PYSEC-2026-1101",[125,1342],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[1347],{"type":797,"score":839},[1349,1351,1353,1355,1356,1357],{"type":812,"url":1350},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":801,"url":1352},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":806,"url":1354},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1358},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[848,849,850,851,852,853,854],{"id":126,"slug":1361,"dossier":45,"summary":1362,"aliases":1363,"sourceIds":1366,"published":1367,"modified":1368,"checkedAt":7,"severity":1369,"references":1372,"versionKeys":1385,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[1364,1365],"CVE-2025-65106","PYSEC-2026-1518",[126,1365],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[1370],{"type":836,"score":1371},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1373,1375,1377,1379,1381,1382,1383],{"type":812,"url":1374},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":801,"url":1376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":812,"url":1378},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":812,"url":1380},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":809,"url":877},{"type":809,"url":881},{"type":801,"url":1384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[885],{"id":127,"slug":1387,"dossier":45,"summary":1388,"aliases":1389,"sourceIds":1392,"published":1393,"modified":1394,"checkedAt":7,"severity":1395,"references":1398,"versionKeys":1419,"packageCount":32,"repositoryCount":219},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[1390,1391],"CVE-2026-40087","PYSEC-2026-2563",[127,1391],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[1396],{"type":797,"score":1397},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1399,1401,1403,1405,1407,1409,1411,1412,1414,1416,1417],{"type":812,"url":1400},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":801,"url":1402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":812,"url":1404},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":812,"url":1406},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":812,"url":1408},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":812,"url":1410},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":809,"url":877},{"type":812,"url":1413},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":812,"url":1415},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":809,"url":881},{"type":801,"url":1418},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[885,886],{"id":128,"slug":1421,"dossier":45,"summary":1422,"aliases":1423,"sourceIds":1426,"published":1427,"modified":1428,"checkedAt":7,"severity":1429,"references":1432,"versionKeys":1443,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[1424,1425],"CVE-2025-53643","PYSEC-2026-1104",[128,1425],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[1430],{"type":836,"score":1431},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1433,1435,1437,1439,1440,1441],{"type":812,"url":1434},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":801,"url":1436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":806,"url":1438},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[848,849,850,851],{"id":129,"slug":1445,"dossier":45,"summary":1446,"aliases":1447,"sourceIds":1450,"published":1451,"modified":1452,"checkedAt":7,"severity":1453,"references":1456,"versionKeys":1465,"packageCount":32,"repositoryCount":856},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[1448,1449],"CVE-2026-34518","PYSEC-2026-2100",[129,1449],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[1454,1455],{"type":797,"score":1397},{"type":836,"score":1176},[1457,1459,1461,1463,1464],{"type":806,"url":1458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":801,"url":1460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":806,"url":1462},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":130,"slug":1467,"dossier":45,"summary":1468,"aliases":1469,"sourceIds":1472,"published":1473,"modified":1474,"checkedAt":7,"severity":1475,"references":1478,"versionKeys":1497,"packageCount":32,"repositoryCount":189},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1470,1471],"CVE-2024-47081","PYSEC-2026-1872",[130,1471],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1476],{"type":797,"score":1477},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1479,1481,1483,1485,1487,1489,1491,1493,1495],{"type":812,"url":1480},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":801,"url":1482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":812,"url":1484},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":806,"url":1486},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":809,"url":1488},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":812,"url":1490},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":812,"url":1492},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":809,"url":1494},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":801,"url":1496},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1498,1499],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":131,"slug":1501,"dossier":45,"summary":1502,"aliases":1503,"sourceIds":1506,"published":1507,"modified":1508,"checkedAt":7,"severity":1509,"references":1512,"versionKeys":1529,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1504,1505],"CVE-2024-35195","PYSEC-2026-1873",[131,1505],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1510],{"type":797,"score":1511},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1513,1515,1517,1519,1521,1522,1524,1526,1527],{"type":812,"url":1514},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":801,"url":1516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":812,"url":1518},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":806,"url":1520},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":809,"url":1488},{"type":812,"url":1523},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":812,"url":1525},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":809,"url":1494},{"type":801,"url":1528},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1498],{"id":132,"slug":1531,"dossier":45,"summary":1532,"aliases":1533,"sourceIds":1536,"published":1537,"modified":1538,"checkedAt":7,"severity":1539,"references":1543,"versionKeys":1549,"packageCount":32,"repositoryCount":856},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[1534,1535],"CVE-2026-54280","PYSEC-2026-2113",[132,1535],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[1540,1542],{"type":836,"score":1541},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":839},[1544,1546,1548],{"type":801,"url":1545},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":806,"url":1547},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":133,"slug":1551,"dossier":45,"summary":1552,"aliases":1553,"sourceIds":1556,"published":1557,"modified":1558,"checkedAt":7,"severity":1559,"references":1563,"versionKeys":1574,"packageCount":32,"repositoryCount":856},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[1554,1555],"CVE-2026-34525","PYSEC-2026-2103",[133,1555],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[1560,1562],{"type":836,"score":1561},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":797,"score":900},[1564,1566,1568,1570,1572,1573],{"type":806,"url":1565},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":801,"url":1567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":806,"url":1569},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":806,"url":1571},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":134,"slug":1576,"dossier":45,"summary":1577,"aliases":1578,"sourceIds":1581,"published":1582,"modified":1583,"checkedAt":7,"severity":1584,"references":1587,"versionKeys":1608,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[1579,1580],"CVE-2025-68664","PYSEC-2026-373",[134,1580],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[1585],{"type":797,"score":1586},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[1588,1590,1592,1594,1596,1598,1600,1601,1603,1605,1606],{"type":812,"url":1589},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":801,"url":1591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":812,"url":1593},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":812,"url":1595},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":812,"url":1597},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":812,"url":1599},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":809,"url":877},{"type":812,"url":1602},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":812,"url":1604},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":809,"url":881},{"type":801,"url":1607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[885],{"id":135,"slug":1610,"dossier":45,"summary":1611,"aliases":1612,"sourceIds":1615,"published":1616,"modified":1617,"checkedAt":7,"severity":1618,"references":1621,"versionKeys":1636,"packageCount":32,"repositoryCount":1638},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[1613,1614],"CVE-2026-69244","PYSEC-2026-3545",[135,1614],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[1619],{"type":836,"score":1620},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1622,1624,1626,1628,1629,1631,1632,1634],{"type":812,"url":1623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":812,"url":1625},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":812,"url":1627},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":809,"url":844},{"type":812,"url":1630},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":809,"url":1186},{"type":801,"url":1633},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":801,"url":1635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[848,849,850,851,852,853,854,855,1637],"pypi:aiohttp@3.14.1",11,{"id":136,"slug":1640,"dossier":45,"summary":1641,"aliases":1642,"sourceIds":1644,"published":1645,"modified":1646,"checkedAt":7,"severity":1647,"references":1650,"versionKeys":1654,"packageCount":32,"repositoryCount":32},"ghsa-f4xh-w4cj-qxq8-981d76df","LangSmith SDK TracingMiddleware: Arbitrary server-side file read",[1643],"CVE-2026-59152",[136],"2026-06-19T22:10:34Z","2026-07-08T08:26:43.324048749Z",[1648],{"type":797,"score":1649},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1651,1653],{"type":812,"url":1652},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-f4xh-w4cj-qxq8",{"type":809,"url":964},[977],{"id":137,"slug":1656,"dossier":45,"summary":1657,"aliases":1658,"sourceIds":1661,"published":1662,"modified":1663,"checkedAt":7,"severity":1664,"references":1667,"versionKeys":1678,"packageCount":32,"repositoryCount":189},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[1659,1660],"CVE-2025-69230","PYSEC-2026-1105",[137,1660],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[1665],{"type":836,"score":1666},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1668,1670,1672,1674,1675,1676],{"type":812,"url":1669},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":801,"url":1671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":806,"url":1673},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[848,849,850,851,852,853,854],{"id":138,"slug":1680,"dossier":45,"summary":1681,"aliases":1682,"sourceIds":1685,"published":1686,"modified":1687,"checkedAt":7,"severity":1688,"references":1691,"versionKeys":1702,"packageCount":32,"repositoryCount":32},"ghsa-fjqc-hq36-qh5p-fbc7458c","LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading",[1683,1684],"CVE-2026-48775","PYSEC-2026-2573",[138,1684],"2026-06-25T18:25:42Z","2026-07-13T16:42:57.455268050Z",[1689],{"type":797,"score":1690},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1692,1694,1696,1698,1700],{"type":812,"url":1693},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",{"type":801,"url":1695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48775",{"type":809,"url":1697},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",{"type":809,"url":1699},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-checkpoint",{"type":801,"url":1701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",[1703],"pypi:langgraph-checkpoint@4.0.0",{"id":139,"slug":1705,"dossier":45,"summary":1706,"aliases":1707,"sourceIds":1710,"published":1711,"modified":1712,"checkedAt":7,"severity":1713,"references":1716,"versionKeys":1724,"packageCount":32,"repositoryCount":32},"ghsa-fv5p-p927-qmxr-2692dd04","LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass",[1708,1709],"CVE-2026-41481","PYSEC-2026-77",[139,1709],"2026-04-16T22:53:32Z","2026-06-06T01:15:07.890699366Z",[1714],{"type":797,"score":1715},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1717,1719,1721,1722],{"type":801,"url":1718},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-fv5p-p927-qmxr",{"type":801,"url":1720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41481",{"type":809,"url":877},{"type":812,"url":1723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-text-splitters\u002FPYSEC-2026-77.yaml",[1725],"pypi:langchain-text-splitters@1.1.0",{"id":140,"slug":1727,"dossier":45,"summary":1728,"aliases":1729,"sourceIds":1732,"published":1733,"modified":1734,"checkedAt":7,"severity":1735,"references":1738,"versionKeys":1744,"packageCount":32,"repositoryCount":856},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[1730,1731],"CVE-2026-54278","PYSEC-2026-2111",[140,1731],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[1736,1737],{"type":836,"score":1120},{"type":797,"score":839},[1739,1741,1742],{"type":801,"url":1740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":809,"url":844},{"type":806,"url":1743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[848,849,850,851,852,853,854,855],{"id":141,"slug":1746,"dossier":45,"summary":1747,"aliases":1748,"sourceIds":1751,"published":1752,"modified":1753,"checkedAt":7,"severity":1754,"references":1758,"versionKeys":1766,"packageCount":32,"repositoryCount":209},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[1749,1750],"CVE-2026-28277","PYSEC-2026-83",[141,1750],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[1755,1756],{"type":797,"score":1690},{"type":797,"score":1757},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1759,1761,1763,1764],{"type":801,"url":1760},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":801,"url":1762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":809,"url":1697},{"type":812,"url":1765},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[1767,1768,1769],"pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@1.0.6",{"id":142,"slug":1771,"dossier":45,"summary":1772,"aliases":1773,"sourceIds":1776,"published":1777,"modified":1778,"checkedAt":7,"severity":1779,"references":1782,"versionKeys":1801,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1774,1775],"CVE-2024-34062","PYSEC-2026-1976",[142,1775],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1780],{"type":797,"score":1781},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1783,1785,1787,1789,1791,1793,1795,1797,1799],{"type":812,"url":1784},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":801,"url":1786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":812,"url":1788},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":809,"url":1790},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":812,"url":1792},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":812,"url":1794},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":812,"url":1796},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":809,"url":1798},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":801,"url":1800},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1802],"pypi:tqdm@4.66.2",{"id":143,"slug":1804,"dossier":45,"summary":1805,"aliases":1806,"sourceIds":1809,"published":1810,"modified":1811,"checkedAt":7,"severity":1812,"references":1814,"versionKeys":1827,"packageCount":32,"repositoryCount":189},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[1807,1808],"CVE-2025-69229","PYSEC-2026-1106",[143,1808],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[1813],{"type":836,"score":1120},[1815,1817,1819,1821,1823,1824,1825],{"type":812,"url":1816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":801,"url":1818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":812,"url":1820},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":812,"url":1822},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":1826},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[848,849,850,851,852,853,854],{"id":144,"slug":1829,"dossier":89,"summary":1830,"aliases":1831,"sourceIds":1834,"published":1835,"modified":1836,"checkedAt":7,"severity":1837,"references":1842,"versionKeys":1852,"packageCount":32,"repositoryCount":1855},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1832,1833],"CVE-2026-25645","PYSEC-2026-2275",[144,1833],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1838,1840],{"type":797,"score":1839},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":797,"score":1841},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1843,1845,1847,1849,1850],{"type":801,"url":1844},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":801,"url":1846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":806,"url":1848},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":809,"url":1488},{"type":801,"url":1851},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1498,1499,1853,1854],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":145,"slug":1857,"dossier":89,"summary":1858,"aliases":1859,"sourceIds":1862,"published":1863,"modified":1864,"checkedAt":7,"severity":1865,"references":1867,"versionKeys":1878,"packageCount":32,"repositoryCount":943},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1860,1861],"CVE-2025-66418","PYSEC-2026-1998",[145,1861],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1866],{"type":836,"score":923},[1868,1870,1872,1874,1875,1876],{"type":812,"url":1869},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":801,"url":1871},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":806,"url":1873},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":809,"url":932},{"type":809,"url":934},{"type":801,"url":1877},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[938,939,940,941,942],{"id":146,"slug":1880,"dossier":45,"summary":1881,"aliases":1882,"sourceIds":1886,"published":1887,"modified":1888,"checkedAt":7,"severity":1889,"references":1894,"versionKeys":1902,"packageCount":32,"repositoryCount":209},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[1883,1884,1885],"CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556",[146,1884],"2026-06-16T15:03:14Z","2026-08-07T08:11:57.170704540Z",[1890,1892],{"type":797,"score":1891},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":797,"score":1893},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1895,1897,1899,1901],{"type":801,"url":1896},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":801,"url":1898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":806,"url":1900},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":809,"url":877},[975,976,1903],"pypi:langchain@1.2.6",{"id":147,"slug":1905,"dossier":45,"summary":1906,"aliases":1907,"sourceIds":1910,"published":1911,"modified":1912,"checkedAt":7,"severity":1913,"references":1916,"versionKeys":1925,"packageCount":32,"repositoryCount":856},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[1908,1909],"CVE-2026-34513","PYSEC-2026-2095",[147,1909],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[1914,1915],{"type":836,"score":1015},{"type":797,"score":839},[1917,1919,1921,1923,1924],{"type":806,"url":1918},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":801,"url":1920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":806,"url":1922},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":148,"slug":1927,"dossier":45,"summary":1928,"aliases":1929,"sourceIds":1932,"published":1933,"modified":1934,"checkedAt":7,"severity":1935,"references":1940,"versionKeys":1948,"packageCount":32,"repositoryCount":856},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[1930,1931],"CVE-2026-47265","PYSEC-2026-2105",[148,1931],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[1936,1938],{"type":836,"score":1937},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":797,"score":1939},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1941,1943,1945,1947],{"type":806,"url":1942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":801,"url":1944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":806,"url":1946},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":149,"slug":1950,"dossier":45,"summary":1951,"aliases":1952,"sourceIds":1955,"published":1956,"modified":1957,"checkedAt":7,"severity":1958,"references":1963,"versionKeys":1969,"packageCount":32,"repositoryCount":856},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[1953,1954],"CVE-2026-54276","PYSEC-2026-2109",[149,1954],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[1959,1961],{"type":836,"score":1960},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":797,"score":1962},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[1964,1966,1968],{"type":801,"url":1965},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":806,"url":1967},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":150,"slug":1971,"dossier":45,"summary":1972,"aliases":1973,"sourceIds":1976,"published":1977,"modified":1978,"checkedAt":7,"severity":1979,"references":1983,"versionKeys":2001,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[1974,1975],"CVE-2025-67221","PYSEC-2026-107",[150,1975],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[1980,1982],{"type":836,"score":1981},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":797,"score":839},[1984,1986,1988,1990,1992,1994,1997,1999],{"type":801,"url":1985},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":812,"url":1987},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":812,"url":1989},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":812,"url":1991},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":809,"url":1993},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1995,"url":1996},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":812,"url":1998},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":801,"url":2000},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[2002,2003,2004,2005],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":151,"slug":2007,"dossier":45,"summary":2008,"aliases":2009,"sourceIds":2012,"published":2013,"modified":2014,"checkedAt":7,"severity":2015,"references":2020,"versionKeys":2041,"packageCount":32,"repositoryCount":856},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[2010,2011],"CVE-2026-34993","PYSEC-2026-2104",[151,2011],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[2016,2018],{"type":797,"score":2017},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":797,"score":2019},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2021,2023,2025,2027,2028,2030,2032,2034,2036,2038],{"type":806,"url":2022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":801,"url":2024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":806,"url":2026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":809,"url":844},{"type":812,"url":2029},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":812,"url":2031},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":801,"url":2033},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":801,"url":2035},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":801,"url":2037},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2039,"url":2040},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[848,849,850,851,852,853,854,855],{"id":152,"slug":2043,"dossier":45,"summary":2044,"aliases":2045,"sourceIds":2048,"published":2049,"modified":2050,"checkedAt":7,"severity":2051,"references":2053,"versionKeys":2064,"packageCount":32,"repositoryCount":189},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[2046,2047],"CVE-2025-69227","PYSEC-2026-1107",[152,2047],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[2052],{"type":836,"score":1120},[2054,2056,2058,2060,2061,2062],{"type":812,"url":2055},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":801,"url":2057},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":812,"url":2059},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":2063},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[848,849,850,851,852,853,854],{"id":153,"slug":2066,"dossier":45,"summary":2067,"aliases":2068,"sourceIds":2071,"published":2072,"modified":2073,"checkedAt":7,"severity":2074,"references":2079,"versionKeys":2088,"packageCount":32,"repositoryCount":856},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[2069,2070],"CVE-2026-34516","PYSEC-2026-2098",[153,2070],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[2075,2076,2077],{"type":797,"score":839},{"type":836,"score":1120},{"type":836,"score":2078},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2080,2082,2084,2086,2087],{"type":806,"url":2081},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":801,"url":2083},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":806,"url":2085},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":154,"slug":2090,"dossier":45,"summary":2091,"aliases":2092,"sourceIds":2095,"published":2096,"modified":2097,"checkedAt":7,"severity":2098,"references":2101,"versionKeys":2107,"packageCount":32,"repositoryCount":856},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[2093,2094],"CVE-2026-50269","PYSEC-2026-2106",[154,2094],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[2099,2100],{"type":836,"score":898},{"type":797,"score":839},[2102,2104,2106],{"type":801,"url":2103},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":806,"url":2105},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":809,"url":844},[848,849,850,851,852,853,854,855],{"id":155,"slug":2109,"dossier":45,"summary":2110,"aliases":2111,"sourceIds":2114,"published":2115,"modified":2116,"checkedAt":7,"severity":2117,"references":2120,"versionKeys":2128,"packageCount":32,"repositoryCount":209},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2112,2113],"CVE-2026-44432","PYSEC-2026-142",[155,2113],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2118,2119],{"type":797,"score":839},{"type":836,"score":923},[2121,2123,2125,2127],{"type":801,"url":2122},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":801,"url":2124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":812,"url":2126},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":809,"url":932},[2129],"pypi:urllib3@2.6.3",{"id":156,"slug":2131,"dossier":45,"summary":2132,"aliases":2133,"sourceIds":2136,"published":2137,"modified":2138,"checkedAt":7,"severity":2139,"references":2142,"versionKeys":2155,"packageCount":32,"repositoryCount":1638},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[2134,2135],"CVE-2026-28684","PYSEC-2026-2270",[156,2135],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[2140],{"type":797,"score":2141},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2143,2145,2147,2149,2151,2153],{"type":806,"url":2144},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":801,"url":2146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":806,"url":2148},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":812,"url":2150},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":809,"url":2152},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":801,"url":2154},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[2156,2157,2158,2159],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":157,"slug":2161,"dossier":45,"summary":2162,"aliases":2163,"sourceIds":2166,"published":2167,"modified":2168,"checkedAt":7,"severity":2169,"references":2172,"versionKeys":2187,"packageCount":32,"repositoryCount":1638},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[2164,2165],"CVE-2026-69243","PYSEC-2026-3546",[157,2165],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[2170],{"type":836,"score":2171},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2173,2175,2177,2179,2180,2182,2183,2185],{"type":812,"url":2174},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":812,"url":2176},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":812,"url":2178},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":809,"url":844},{"type":812,"url":2181},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":809,"url":1186},{"type":801,"url":2184},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":801,"url":2186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[848,849,850,851,852,853,854,855,1637],{"id":158,"slug":2189,"dossier":45,"summary":2190,"aliases":2191,"sourceIds":2194,"published":2195,"modified":2196,"checkedAt":7,"severity":2197,"references":2199,"versionKeys":2212,"packageCount":32,"repositoryCount":1638},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[2192,2193],"CVE-2026-59881","PYSEC-2026-3547",[158,2193],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[2198],{"type":836,"score":1276},[2200,2202,2204,2206,2208,2209,2210],{"type":812,"url":2201},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":801,"url":2203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":812,"url":2205},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":812,"url":2207},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":2211},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[848,849,850,851,852,853,854,855,1637],{"id":159,"slug":2214,"dossier":45,"summary":2215,"aliases":2216,"sourceIds":2219,"published":2220,"modified":2221,"checkedAt":7,"severity":2222,"references":2224,"versionKeys":2235,"packageCount":32,"repositoryCount":189},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[2217,2218],"CVE-2025-69225","PYSEC-2026-1109",[159,2218],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[2223],{"type":836,"score":898},[2225,2227,2229,2231,2232,2233],{"type":812,"url":2226},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":801,"url":2228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":806,"url":2230},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":809,"url":844},{"type":809,"url":1186},{"type":801,"url":2234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[848,849,850,851,852,853,854],{"id":160,"slug":2237,"dossier":45,"summary":2238,"aliases":2239,"sourceIds":2242,"published":2243,"modified":2244,"checkedAt":7,"severity":2245,"references":2248,"versionKeys":2257,"packageCount":32,"repositoryCount":856},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[2240,2241],"CVE-2026-34519","PYSEC-2026-2101",[160,2241],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[2246,2247],{"type":836,"score":898},{"type":797,"score":900},[2249,2251,2253,2255,2256],{"type":806,"url":2250},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":801,"url":2252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":806,"url":2254},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":161,"slug":2259,"dossier":45,"summary":2260,"aliases":2261,"sourceIds":2264,"published":2265,"modified":2266,"checkedAt":7,"severity":2267,"references":2270,"versionKeys":2279,"packageCount":32,"repositoryCount":856},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[2262,2263],"CVE-2026-34515","PYSEC-2026-2097",[161,2263],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[2268,2269],{"type":836,"score":1937},{"type":797,"score":1939},[2271,2273,2275,2277,2278],{"type":806,"url":2272},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":801,"url":2274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":806,"url":2276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":162,"slug":2281,"dossier":45,"summary":2282,"aliases":2283,"sourceIds":2286,"published":2287,"modified":2288,"checkedAt":7,"severity":2289,"references":2292,"versionKeys":2307,"packageCount":32,"repositoryCount":219},"ghsa-pc6w-59fv-rh23-cab9cb2f","Langchain Community Vulnerable to XML External Entity (XXE) Attacks",[2284,2285],"CVE-2025-6984","PYSEC-2026-1515",[162,2285],"2025-09-04T12:30:42Z","2026-07-07T17:56:45.822570559Z",[2290],{"type":797,"score":2291},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2293,2295,2297,2299,2301,2303,2305],{"type":801,"url":2294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6984",{"type":812,"url":2296},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community\u002Fcommit\u002Fe842452108089524e22c3a2ced851c021884556f",{"type":809,"url":2298},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community",{"type":812,"url":2300},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fblob\u002Fd79b5813a0b3b243c612b77013768995e46c4337\u002Flibs\u002Flangchain\u002Flangchain\u002Fdocument_loaders\u002Fevernote.py#L1-L23",{"type":812,"url":2302},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa6b521cf-258c-41c0-9edb-d8ef976abb2a",{"type":809,"url":2304},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-community",{"type":801,"url":2306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pc6w-59fv-rh23",[1082,2308],"pypi:langchain-community@0.3.7",{"id":163,"slug":2310,"dossier":45,"summary":2311,"aliases":2312,"sourceIds":2315,"published":2316,"modified":2317,"checkedAt":7,"severity":2318,"references":2321,"versionKeys":2330,"packageCount":32,"repositoryCount":219},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[2313,2314],"CVE-2026-44843","PYSEC-2026-2564",[163,2314],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[2319],{"type":797,"score":2320},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2322,2324,2326,2327,2328],{"type":812,"url":2323},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":801,"url":2325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":809,"url":877},{"type":809,"url":881},{"type":801,"url":2329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[885,886],{"id":164,"slug":2332,"dossier":45,"summary":2333,"aliases":2334,"sourceIds":2337,"published":2338,"modified":2339,"checkedAt":7,"severity":2340,"references":2342,"versionKeys":2354,"packageCount":32,"repositoryCount":189},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2335,2336],"CVE-2025-50181","PYSEC-2026-1999",[164,2336],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2341],{"type":797,"score":1094},[2343,2345,2347,2349,2350,2351,2352],{"type":812,"url":2344},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":801,"url":2346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":806,"url":2348},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":809,"url":932},{"type":812,"url":1104},{"type":809,"url":934},{"type":801,"url":2353},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[938,939,940,941],{"id":165,"slug":2356,"dossier":45,"summary":2357,"aliases":2358,"sourceIds":2361,"published":2362,"modified":2363,"checkedAt":7,"severity":2364,"references":2367,"versionKeys":2382,"packageCount":32,"repositoryCount":32},"ghsa-q25c-c977-4cmh-8e74e348","Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever",[2359,2360],"CVE-2024-3095","PYSEC-2026-1516",[165,2360],"2024-06-06T21:30:36Z","2026-07-07T17:57:27.127785500Z",[2365],{"type":797,"score":2366},"CVSS:3.0\u002FAV:P\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2368,2370,2372,2374,2375,2377,2379,2380],{"type":801,"url":2369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-3095",{"type":812,"url":2371},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F24451",{"type":812,"url":2373},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":809,"url":877},{"type":812,"url":2376},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-community%3D%3D0.2.9",{"type":812,"url":2378},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe62d4895-2901-405b-9559-38276b6a5273",{"type":809,"url":2304},{"type":801,"url":2381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q25c-c977-4cmh",[1082],{"id":166,"slug":2384,"dossier":89,"summary":2385,"aliases":2386,"sourceIds":2389,"published":2390,"modified":2391,"checkedAt":7,"severity":2392,"references":2396,"versionKeys":2402,"packageCount":32,"repositoryCount":1855},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2387,2388],"CVE-2026-44431","PYSEC-2026-141",[166,2388],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2393,2394],{"type":797,"score":1397},{"type":836,"score":2395},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2397,2399,2401],{"type":801,"url":2398},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":801,"url":2400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":809,"url":932},[938,939,940,941,942,2129],{"id":167,"slug":2404,"dossier":45,"summary":2405,"aliases":2406,"sourceIds":2409,"published":2410,"modified":2411,"checkedAt":7,"severity":2412,"references":2414,"versionKeys":2433,"packageCount":32,"repositoryCount":219},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[2407,2408],"CVE-2026-34070","PYSEC-2026-2193",[167,2408],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[2413],{"type":797,"score":1939},[2415,2417,2419,2421,2422,2424,2426,2428,2430,2431],{"type":1995,"url":2416},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":801,"url":2418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":806,"url":2420},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":809,"url":877},{"type":801,"url":2423},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":812,"url":2425},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":812,"url":2427},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":801,"url":2429},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":801,"url":2037},{"type":2039,"url":2432},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[885,886],{"id":168,"slug":2435,"dossier":45,"summary":2436,"aliases":2437,"sourceIds":2440,"published":2441,"modified":2442,"checkedAt":7,"severity":2443,"references":2446,"versionKeys":2454,"packageCount":32,"repositoryCount":209},"ghsa-r7w7-9xr2-qq2r-7a3a0a91","langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding",[2438,2439],"CVE-2026-41488","PYSEC-2026-76",[168,2439],"2026-04-16T23:00:12Z","2026-06-06T01:15:07.912179267Z",[2444],{"type":797,"score":2445},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2447,2449,2451,2452],{"type":801,"url":2448},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-r7w7-9xr2-qq2r",{"type":801,"url":2450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41488",{"type":809,"url":877},{"type":812,"url":2453},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-openai\u002FPYSEC-2026-76.yaml",[2455,2456,2457],"pypi:langchain-openai@0.2.8","pypi:langchain-openai@1.1.7","pypi:langchain-openai@1.1.9",{"id":169,"slug":2459,"dossier":45,"summary":2460,"aliases":2461,"sourceIds":2464,"published":2465,"modified":2466,"checkedAt":7,"severity":2467,"references":2469,"versionKeys":2478,"packageCount":32,"repositoryCount":32},"ghsa-rr7j-v2q5-chgv-a773969e","LangSmith SDK: Streaming token events bypass output redaction",[2462,2463],"CVE-2026-41182","PYSEC-2026-2583",[169,2463],"2026-04-16T01:20:37Z","2026-07-13T16:43:37.566182133Z",[2468],{"type":797,"score":1397},[2470,2472,2474,2475,2476],{"type":812,"url":2471},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",{"type":801,"url":2473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41182",{"type":809,"url":964},{"type":809,"url":972},{"type":801,"url":2477},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",[977],{"id":170,"slug":2480,"dossier":45,"summary":2481,"aliases":2482,"sourceIds":2485,"published":2486,"modified":2487,"checkedAt":7,"severity":2488,"references":2491,"versionKeys":2504,"packageCount":32,"repositoryCount":209},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[2483,2484],"CVE-2025-43859","PYSEC-2026-348",[170,2484],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[2489],{"type":797,"score":2490},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2492,2494,2496,2498,2500,2502],{"type":812,"url":2493},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":801,"url":2495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":812,"url":2497},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":809,"url":2499},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":809,"url":2501},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":801,"url":2503},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[2505],"pypi:h11@0.14.0",{"id":171,"slug":2507,"dossier":45,"summary":2508,"aliases":2509,"sourceIds":2512,"published":2513,"modified":2514,"checkedAt":7,"severity":2515,"references":2519,"versionKeys":2528,"packageCount":32,"repositoryCount":856},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[2510,2511],"CVE-2026-22815","PYSEC-2026-2094",[171,2511],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[2516,2517],{"type":836,"score":1276},{"type":836,"score":2518},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2520,2522,2524,2526,2527],{"type":806,"url":2521},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":801,"url":2523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":806,"url":2525},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":809,"url":844},{"type":801,"url":910},[848,849,850,851,852,853,854,855],{"id":172,"slug":2530,"dossier":45,"summary":2531,"aliases":2532,"sourceIds":2536,"published":2537,"modified":2538,"checkedAt":7,"severity":2539,"references":2543,"versionKeys":2559,"packageCount":219,"repositoryCount":219},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[2533,2534,2535],"CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575",[172,2534,2535],"2026-06-17T10:55:15.113Z","2026-07-21T15:15:50.659527533Z",[2540,2542],{"type":797,"score":2541},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":797,"score":2490},[2544,2546,2548,2550,2551,2553,2555,2557],{"type":812,"url":2545},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":801,"url":2547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":801,"url":2549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":809,"url":1697},{"type":812,"url":2552},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":812,"url":2554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph-sdk\u002FPYSEC-2026-2575.yaml",{"type":812,"url":2556},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-2194.yaml",{"type":809,"url":2558},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",[2560,1767],"pypi:langgraph-sdk@0.3.3",{"id":173,"slug":2562,"dossier":45,"summary":2563,"aliases":2564,"sourceIds":2567,"published":2568,"modified":2569,"checkedAt":7,"severity":2570,"references":2573,"versionKeys":2579,"packageCount":32,"repositoryCount":856},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[2565,2566],"CVE-2026-54274","PYSEC-2026-2108",[173,2566],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[2571,2572],{"type":836,"score":1120},{"type":797,"score":839},[2574,2576,2577],{"type":801,"url":2575},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":809,"url":844},{"type":806,"url":2578},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[848,849,850,851,852,853,854,855],{"id":175,"slug":2581,"dossier":45,"summary":188,"aliases":2582,"sourceIds":2586,"published":2587,"modified":2588,"checkedAt":7,"severity":2589,"references":2592,"versionKeys":2596,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[2583,2584,2585],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[175],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[2590],{"type":797,"score":2591},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2593,2594],{"type":806,"url":2373},{"type":1995,"url":2595},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[975],1786588640062]