[{"data":1,"prerenderedAt":3184},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-9998":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":196,"related":199},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":32,"licenseExpressionCount":102,"unknownLicensePackageCount":37,"advisoryIds":103,"advisoryCount":194,"providers":195},"opencode:9998","opencode-9998",9998,"density-maps","uba-ki-lab\u002Fdensity-maps","A minimal library for Gaussian density map workflows with PyTorch and albumentations. Keywords: uba, umweltbundesamt, ki-lab, computer vision, object counting","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps","1da30304236d86dfb376a429b1ea6e9fddba3a0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps\u002F-\u002Fcommit\u002F1da30304236d86dfb376a429b1ea6e9fddba3a0a","2026-03-20T12:17:58.583Z","2026-03-20T09:58:21.000Z",{"complete":89,"entryCount":90,"truncated":45},true,33,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","fa64e230fe01c25e6d465e090acbed3d4d86a694","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps\u002F-\u002Fblob\u002F1da30304236d86dfb376a429b1ea6e9fddba3a0a\u002Fuv.lock","a3585500d962f78bc6cb14fec81c1117e03be3b4ca8961149d10c8a44c3682ed",357047,"parsed",66,[101],"pypi",13,[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193],"GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-3749-ghw9-m3mg","GHSA-3wq7-rqq7-wx6j","GHSA-45hq-cxwh-f6vc","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6w46-j5rx-g56g","GHSA-887c-mr87-cxwp","GHSA-8v84-f9pq-wr9x","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hw9-ch79-4vh6","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mfx4-hv73-q22v","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-rrmf-rvhw-rf47","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-x3gm-94wq-g975","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2286","PYSEC-2026-3624",90,[],{"files":197,"occurrenceCount":99},[198],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":200,"vulnerabilities":808},[201,213,224,236,246,257,268,277,286,296,305,315,324,333,342,351,360,369,378,387,396,405,414,423,432,441,450,459,468,477,487,496,505,514,522,531,540,549,558,567,576,585,594,602,611,619,628,638,647,656,665,674,683,691,700,709,718,727,736,745,754,763,772,781,790,799],{"id":202,"slug":203,"identity":204,"label":205,"aiRelevant":89,"provider":206,"advisoryCount":207,"licenseExpressions":208,"versions":210,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":212},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[209],"BSD-3-Clause",[211],"2.10.0",[54],{"id":214,"slug":215,"identity":216,"label":217,"aiRelevant":45,"provider":206,"advisoryCount":90,"licenseExpressions":218,"versions":221,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":223},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[219,220],"Apache-2.0","Apache-2.0 AND MIT",[222],"3.13.3",[54],{"id":225,"slug":226,"identity":227,"label":228,"aiRelevant":45,"provider":206,"advisoryCount":229,"licenseExpressions":230,"versions":233,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":235},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[231,232],"HPND","MIT-CMU",[234],"12.1.1",[54],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":45,"provider":206,"advisoryCount":34,"licenseExpressions":241,"versions":243,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":245},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[209,242],"non-standard",[244],"3.1.6",[54],{"id":247,"slug":248,"identity":249,"label":250,"aiRelevant":45,"provider":206,"advisoryCount":251,"licenseExpressions":252,"versions":254,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":256},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",3,[253],"MIT",[255],"82.0.1",[54],{"id":258,"slug":259,"identity":260,"label":261,"aiRelevant":45,"provider":206,"advisoryCount":262,"licenseExpressions":263,"versions":265,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":267},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[253,264],"Unlicense",[266],"3.25.2",[54],{"id":269,"slug":270,"identity":271,"label":272,"aiRelevant":45,"provider":206,"advisoryCount":32,"licenseExpressions":273,"versions":274,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":276},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[209,242],[275],"3.11",[54],{"id":278,"slug":279,"identity":280,"label":281,"aiRelevant":45,"provider":206,"advisoryCount":32,"licenseExpressions":282,"versions":283,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":285},"package:pypi:lightning","lightning-28a5cccb","pypi:lightning","lightning",[219],[284],"2.6.1",[54],{"id":287,"slug":288,"identity":289,"label":290,"aiRelevant":45,"provider":206,"advisoryCount":32,"licenseExpressions":291,"versions":293,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":295},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[292],"BSD-2-Clause",[294],"2.19.2",[54],{"id":297,"slug":298,"identity":299,"label":300,"aiRelevant":45,"provider":206,"advisoryCount":32,"licenseExpressions":301,"versions":302,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":304},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[253],[303],"9.0.2",[54],{"id":306,"slug":307,"identity":308,"label":309,"aiRelevant":45,"provider":206,"advisoryCount":32,"licenseExpressions":310,"versions":312,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":314},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[311],"MIT AND MPL-2.0",[313],"4.67.3",[54],{"id":316,"slug":317,"identity":318,"label":319,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":320,"versions":322,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":323},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[321],"PSF-2.0",[284],[54],{"id":325,"slug":326,"identity":327,"label":328,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":329,"versions":330,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":332},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[219],[331],"1.4.0",[54],{"id":334,"slug":335,"identity":336,"label":337,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":338,"versions":339,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":341},"package:pypi:albucore","albucore-2d92e9fa","pypi:albucore","albucore",[242],[340],"0.0.24",[54],{"id":343,"slug":344,"identity":345,"label":346,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":347,"versions":348,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":350},"package:pypi:albumentations","albumentations-d333cb03","pypi:albumentations","albumentations",[242],[349],"2.0.8",[54],{"id":352,"slug":353,"identity":354,"label":355,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":356,"versions":357,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":359},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[253],[358],"0.7.0",[54],{"id":361,"slug":362,"identity":363,"label":364,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":365,"versions":366,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":368},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[253],[367],"25.4.0",[54],{"id":370,"slug":371,"identity":372,"label":373,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":374,"versions":375,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":377},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[242],[376],"0.4.6",[54],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":383,"versions":384,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":386},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[219],[385],"7.13.4",[54],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":392,"versions":393,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":395},"package:pypi:cuda-bindings","cuda-bindings-63e94baa","pypi:cuda-bindings","cuda-bindings",[242],[394],"12.9.4",[54],{"id":397,"slug":398,"identity":399,"label":400,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":401,"versions":402,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":404},"package:pypi:cuda-pathfinder","cuda-pathfinder-6d2ddb13","pypi:cuda-pathfinder","cuda-pathfinder",[219],[403],"1.4.2",[54],{"id":406,"slug":407,"identity":408,"label":409,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":410,"versions":411,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":413},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[219],[412],"1.8.0",[54],{"id":415,"slug":416,"identity":417,"label":418,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":419,"versions":420,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":422},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[209,242],[421],"2026.2.0",[54],{"id":424,"slug":425,"identity":426,"label":427,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":428,"versions":429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":431},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[253],[430],"2.3.0",[54],{"id":433,"slug":434,"identity":435,"label":436,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":437,"versions":438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":440},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[219],[439],"0.15.3",[54],{"id":442,"slug":443,"identity":444,"label":445,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":446,"versions":447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":449},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[209,242],[448],"3.0.3",[54],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":455,"versions":456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":458},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[242],[457],"1.3.0",[54],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":464,"versions":465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":467},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[219],[466],"6.7.1",[54],{"id":469,"slug":470,"identity":471,"label":472,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":473,"versions":474,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":476},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[209,242],[475],"3.6.1",[54],{"id":478,"slug":479,"identity":480,"label":481,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":482,"versions":484,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":486},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[483,242],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[485],"2.4.3",[54],{"id":488,"slug":489,"identity":490,"label":491,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":492,"versions":493,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":495},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[242],[494],"12.8.4.1",[54],{"id":497,"slug":498,"identity":499,"label":500,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":501,"versions":502,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":504},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[242],[503],"12.8.90",[54],{"id":506,"slug":507,"identity":508,"label":509,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":510,"versions":511,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":513},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[242],[512],"12.8.93",[54],{"id":515,"slug":516,"identity":517,"label":518,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":519,"versions":520,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":521},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[242],[503],[54],{"id":523,"slug":524,"identity":525,"label":526,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":527,"versions":528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":530},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[242],[529],"9.10.2.21",[54],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":536,"versions":537,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":539},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[242],[538],"11.3.3.83",[54],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":545,"versions":546,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":548},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[242],[547],"1.13.1.3",[54],{"id":550,"slug":551,"identity":552,"label":553,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":554,"versions":555,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":557},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[242],[556],"10.3.9.90",[54],{"id":559,"slug":560,"identity":561,"label":562,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":563,"versions":564,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":566},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[242],[565],"11.7.3.90",[54],{"id":568,"slug":569,"identity":570,"label":571,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":572,"versions":573,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":575},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[242],[574],"12.5.8.93",[54],{"id":577,"slug":578,"identity":579,"label":580,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":581,"versions":582,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":584},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[242],[583],"0.7.1",[54],{"id":586,"slug":587,"identity":588,"label":589,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":590,"versions":591,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":593},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[209,242],[592],"2.27.5",[54],{"id":595,"slug":596,"identity":597,"label":598,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":599,"versions":600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":601},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[242],[512],[54],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":607,"versions":608,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":610},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[209,242],[609],"3.4.5",[54],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":616,"versions":617,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":618},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[219,242],[503],[54],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":624,"versions":625,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":627},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[219],[626],"4.13.0.92",[54],{"id":629,"slug":630,"identity":631,"label":632,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":633,"versions":635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":637},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[634,242],"Apache-2.0 OR BSD-2-Clause",[636],"26.0",[54],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":643,"versions":644,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":646},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[253],[645],"1.6.0",[54],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":652,"versions":653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":655},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[219],[654],"0.4.1",[54],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":661,"versions":662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":664},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[253],[663],"2.12.5",[54],{"id":666,"slug":667,"identity":668,"label":669,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":670,"versions":671,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":673},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[253],[672],"2.41.5",[54],{"id":675,"slug":676,"identity":677,"label":678,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":679,"versions":680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":682},"package:pypi:pytest-cov","pytest-cov-1f608c88","pypi:pytest-cov","pytest-cov",[253],[681],"7.0.0",[54],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":688,"versions":689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":690},"package:pypi:pytorch-lightning","pytorch-lightning-1550c03a","pypi:pytorch-lightning","pytorch-lightning",[219],[284],[54],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":696,"versions":697,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":699},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[253],[698],"6.0.3",[54],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":705,"versions":706,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":708},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[253],[707],"0.15.6",[54],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":714,"versions":715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":717},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[242],[716],"1.17.1",[54],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":723,"versions":724,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":726},"package:pypi:simsimd","simsimd-7089790e","pypi:simsimd","simsimd",[219],[725],"6.5.16",[54],{"id":728,"slug":729,"identity":730,"label":731,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":732,"versions":733,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":735},"package:pypi:stringzilla","stringzilla-f268dc86","pypi:stringzilla","stringzilla",[219],[734],"4.6.0",[54],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":741,"versions":742,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":744},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[242],[743],"1.14.0",[54],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":750,"versions":751,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":753},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[219],[752],"1.9.0",[54],{"id":755,"slug":756,"identity":757,"label":758,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":759,"versions":760,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":762},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[242],[761],"0.25.0",[54],{"id":764,"slug":765,"identity":766,"label":767,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":768,"versions":769,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":771},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[253],[770],"3.6.0",[54],{"id":773,"slug":774,"identity":775,"label":776,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":777,"versions":778,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":780},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[253],[779],"0.0.23",[54],{"id":782,"slug":783,"identity":784,"label":785,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":786,"versions":787,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":789},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[321,242],[788],"4.15.0",[54],{"id":791,"slug":792,"identity":793,"label":794,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":795,"versions":796,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":798},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[253],[797],"0.4.2",[54],{"id":800,"slug":801,"identity":802,"label":803,"aiRelevant":45,"provider":206,"advisoryCount":37,"licenseExpressions":804,"versions":805,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":807},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[219],[806],"1.23.0",[54],[809,845,870,914,938,973,993,1011,1040,1078,1104,1130,1167,1190,1213,1243,1270,1289,1316,1339,1362,1385,1411,1447,1486,1509,1533,1556,1582,1602,1627,1659,1715,1747,1777,1809,1843,1867,1895,1914,1947,1972,2000,2034,2068,2090,2113,2134,2169,2192,2219,2243,2262,2290,2315,2338,2360,2382,2409,2433,2460,2487,2523,2555,2583,2615,2644,2672,2695,2725,2777,2800,2832,2851,2879,2904,2924,2941,2960,2977,2998,3014,3029,3046,3061,3078,3095,3112,3134,3163],{"id":104,"slug":810,"dossier":45,"summary":811,"aliases":812,"sourceIds":815,"published":816,"modified":817,"checkedAt":7,"severity":818,"references":825,"versionKeys":835,"packageCount":32,"repositoryCount":844},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[813,814],"CVE-2026-54279","PYSEC-2026-2112",[104,814],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[819,822],{"type":820,"score":821},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":824},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[826,829,832],{"type":827,"url":828},"ADVISORY","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":830,"url":831},"PACKAGE","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":833,"url":834},"FIX","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[836,837,838,839,840,841,842,843],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":105,"slug":846,"dossier":45,"summary":847,"aliases":848,"sourceIds":851,"published":852,"modified":853,"checkedAt":7,"severity":854,"references":859,"versionKeys":869,"packageCount":32,"repositoryCount":844},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[849,850],"CVE-2026-34514","PYSEC-2026-2096",[105,850],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[855,857],{"type":820,"score":856},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":858},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[860,862,864,866,867],{"type":833,"url":861},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":827,"url":863},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":833,"url":865},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":830,"url":831},{"type":827,"url":868},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[836,837,838,839,840,841,842,843],{"id":106,"slug":871,"dossier":45,"summary":872,"aliases":873,"sourceIds":877,"published":878,"modified":879,"checkedAt":7,"severity":880,"references":887,"versionKeys":910,"packageCount":32,"repositoryCount":251},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[874,875,876],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[106,876],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[881,883,885],{"type":823,"score":882},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":820,"score":884},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":823,"score":886},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[888,890,893,895,898,900,902,904,906,908],{"type":827,"url":889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":891,"url":892},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":891,"url":894},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":896,"url":897},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":830,"url":899},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":896,"url":901},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":891,"url":903},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":827,"url":905},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":827,"url":907},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":827,"url":909},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[911,912,913],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":107,"slug":915,"dossier":45,"summary":916,"aliases":917,"sourceIds":920,"published":921,"modified":922,"checkedAt":7,"severity":923,"references":928,"versionKeys":937,"packageCount":32,"repositoryCount":844},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[918,919],"CVE-2026-34517","PYSEC-2026-2099",[107,919],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[924,926],{"type":820,"score":925},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":927},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[929,931,933,935,936],{"type":833,"url":930},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":827,"url":932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":833,"url":934},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":108,"slug":939,"dossier":89,"summary":940,"aliases":941,"sourceIds":945,"published":946,"modified":947,"checkedAt":7,"severity":948,"references":950,"versionKeys":964,"packageCount":32,"repositoryCount":102},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[942,943,944],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[108,944],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[949],{"type":823,"score":824},[951,954,956,958,960,962],{"type":952,"url":953},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":827,"url":955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":833,"url":957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":896,"url":959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":830,"url":961},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":827,"url":963},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[965,966,967,968,969,970,971,972],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":109,"slug":974,"dossier":45,"summary":975,"aliases":976,"sourceIds":979,"published":980,"modified":981,"checkedAt":7,"severity":982,"references":986,"versionKeys":992,"packageCount":32,"repositoryCount":844},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[977,978],"CVE-2026-54273","PYSEC-2026-2107",[109,978],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[983,985],{"type":820,"score":984},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":824},[987,989,991],{"type":827,"url":988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":833,"url":990},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":110,"slug":994,"dossier":45,"summary":995,"aliases":996,"sourceIds":999,"published":1000,"modified":1001,"checkedAt":7,"severity":1002,"references":1006,"versionKeys":1010,"packageCount":32,"repositoryCount":844},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[997,998],"CVE-2026-54275","PYSEC-2026-237",[110,998],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[1003,1005],{"type":820,"score":1004},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":824},[1007,1009],{"type":827,"url":1008},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":111,"slug":1012,"dossier":89,"summary":1013,"aliases":1014,"sourceIds":1018,"published":1019,"modified":1020,"checkedAt":7,"severity":1021,"references":1024,"versionKeys":1039,"packageCount":32,"repositoryCount":102},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1015,1016,1017],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[111,1017],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[1022],{"type":823,"score":1023},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1025,1027,1029,1031,1033,1035,1037,1038],{"type":952,"url":1026},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":827,"url":1028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":833,"url":1030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":833,"url":1032},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":833,"url":1034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":896,"url":1036},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":830,"url":961},{"type":827,"url":963},[965,966,967,968,969,970,971,972],{"id":112,"slug":1041,"dossier":89,"summary":1042,"aliases":1043,"sourceIds":1046,"published":1047,"modified":1048,"checkedAt":7,"severity":1049,"references":1052,"versionKeys":1075,"packageCount":32,"repositoryCount":102},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1044,1045],"CVE-2026-4539","PYSEC-2026-2987",[112,1045],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[1050,1051],{"type":823,"score":882},{"type":820,"score":884},[1053,1055,1057,1059,1061,1063,1065,1067,1069,1071,1073],{"type":827,"url":1054},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":896,"url":1056},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":896,"url":1058},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":896,"url":1060},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":830,"url":1062},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":896,"url":1064},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":896,"url":1066},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":896,"url":1068},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":896,"url":1070},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":830,"url":1072},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":827,"url":1074},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1076,1077],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":113,"slug":1079,"dossier":45,"summary":1080,"aliases":1081,"sourceIds":1085,"published":1086,"modified":1087,"checkedAt":7,"severity":1088,"references":1093,"versionKeys":1103,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1082,1083,1084],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[113,1084],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1089,1091],{"type":820,"score":1090},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":823,"score":1092},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1094,1096,1098,1100,1102],{"type":827,"url":1095},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":827,"url":1097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":896,"url":1099},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":896,"url":1101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":830,"url":899},[911],{"id":114,"slug":1105,"dossier":45,"summary":1106,"aliases":1107,"sourceIds":1110,"published":1111,"modified":1112,"checkedAt":7,"severity":1113,"references":1116,"versionKeys":1128,"packageCount":32,"repositoryCount":1129},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1108,1109],"CVE-2025-69226","PYSEC-2026-1097",[114,1109],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[1114],{"type":820,"score":1115},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1117,1119,1121,1123,1124,1126],{"type":896,"url":1118},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":827,"url":1120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":833,"url":1122},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":830,"url":831},{"type":830,"url":1125},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":827,"url":1127},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[836,837,838,839,840,841,842],7,{"id":115,"slug":1131,"dossier":45,"summary":1132,"aliases":1133,"sourceIds":1137,"published":1138,"modified":1139,"checkedAt":7,"severity":1140,"references":1145,"versionKeys":1163,"packageCount":32,"repositoryCount":251},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1134,1135,1136],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[115,1136],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1141,1143],{"type":820,"score":1142},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":823,"score":1144},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1146,1148,1150,1152,1154,1156,1158,1160],{"type":952,"url":1147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":827,"url":1149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":891,"url":1151},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":833,"url":1153},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":896,"url":1155},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":830,"url":1157},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":896,"url":1159},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1161,"url":1162},"ARTICLE","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1164,1165,1166],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":116,"slug":1168,"dossier":89,"summary":1169,"aliases":1170,"sourceIds":1174,"published":1175,"modified":1176,"checkedAt":7,"severity":1177,"references":1179,"versionKeys":1189,"packageCount":32,"repositoryCount":102},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1171,1172,1173],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[116,1173],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[1178],{"type":823,"score":824},[1180,1182,1184,1185,1187,1188],{"type":952,"url":1181},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":827,"url":1183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":833,"url":957},{"type":896,"url":1186},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":830,"url":961},{"type":827,"url":963},[965,966,967,968,969,970,971,972],{"id":117,"slug":1191,"dossier":45,"summary":1192,"aliases":1193,"sourceIds":1197,"published":1198,"modified":1199,"checkedAt":7,"severity":1200,"references":1204,"versionKeys":1212,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1194,1195,1196],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[117,1196],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1201,1202],{"type":823,"score":886},{"type":820,"score":1203},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1205,1207,1209,1210],{"type":827,"url":1206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":827,"url":1208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":830,"url":961},{"type":827,"url":1211},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[968,969,970,971,972],{"id":118,"slug":1214,"dossier":89,"summary":1215,"aliases":1216,"sourceIds":1220,"published":1221,"modified":1222,"checkedAt":7,"severity":1223,"references":1226,"versionKeys":1242,"packageCount":32,"repositoryCount":102},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1217,1218,1219],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[118,1219],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[1224],{"type":820,"score":1225},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1227,1229,1231,1233,1235,1236,1238,1240],{"type":896,"url":1228},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":827,"url":1230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":896,"url":1232},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":896,"url":1234},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":830,"url":961},{"type":896,"url":1237},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":830,"url":1239},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":827,"url":1241},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[965,966,967,968,969,970,971,972],{"id":119,"slug":1244,"dossier":45,"summary":1245,"aliases":1246,"sourceIds":1249,"published":1250,"modified":1251,"checkedAt":7,"severity":1252,"references":1258,"versionKeys":1269,"packageCount":32,"repositoryCount":844},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1247,1248],"CVE-2026-34520","PYSEC-2026-2102",[119,1248],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[1253,1255,1256],{"type":823,"score":1254},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":820,"score":856},{"type":820,"score":1257},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1259,1261,1263,1265,1266,1267],{"type":833,"url":1260},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":827,"url":1262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":833,"url":1264},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":830,"url":831},{"type":827,"url":868},{"type":896,"url":1268},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[836,837,838,839,840,841,842,843],{"id":120,"slug":1271,"dossier":45,"summary":1272,"aliases":1273,"sourceIds":1276,"published":1277,"modified":1278,"checkedAt":7,"severity":1279,"references":1282,"versionKeys":1288,"packageCount":32,"repositoryCount":844},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[1274,1275],"CVE-2026-54277","PYSEC-2026-2110",[120,1275],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[1280,1281],{"type":820,"score":984},{"type":823,"score":824},[1283,1285,1287],{"type":827,"url":1284},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":833,"url":1286},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":121,"slug":1290,"dossier":89,"summary":1291,"aliases":1292,"sourceIds":1295,"published":1296,"modified":1297,"checkedAt":7,"severity":1298,"references":1302,"versionKeys":1311,"packageCount":32,"repositoryCount":1315},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1293,1294],"CVE-2026-45409","PYSEC-2026-215",[121,1294],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1299,1300],{"type":823,"score":927},{"type":820,"score":1301},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1303,1305,1307,1309],{"type":827,"url":1304},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":827,"url":1306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":830,"url":1308},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":896,"url":1310},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1312,1313,1314],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":122,"slug":1317,"dossier":45,"summary":1318,"aliases":1319,"sourceIds":1322,"published":1323,"modified":1324,"checkedAt":7,"severity":1325,"references":1327,"versionKeys":1338,"packageCount":32,"repositoryCount":1129},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[1320,1321],"CVE-2025-69224","PYSEC-2026-1099",[122,1321],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[1326],{"type":820,"score":856},[1328,1330,1332,1334,1335,1336],{"type":896,"url":1329},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":827,"url":1331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":833,"url":1333},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[836,837,838,839,840,841,842],{"id":123,"slug":1340,"dossier":45,"summary":1341,"aliases":1342,"sourceIds":1345,"published":1346,"modified":1347,"checkedAt":7,"severity":1348,"references":1350,"versionKeys":1361,"packageCount":32,"repositoryCount":1129},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[1343,1344],"CVE-2025-69228","PYSEC-2026-1100",[123,1344],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[1349],{"type":820,"score":984},[1351,1353,1355,1357,1358,1359],{"type":896,"url":1352},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":827,"url":1354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":833,"url":1356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1360},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[836,837,838,839,840,841,842],{"id":124,"slug":1363,"dossier":45,"summary":1364,"aliases":1365,"sourceIds":1368,"published":1369,"modified":1370,"checkedAt":7,"severity":1371,"references":1373,"versionKeys":1384,"packageCount":32,"repositoryCount":1129},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[1366,1367],"CVE-2025-69223","PYSEC-2026-1101",[124,1367],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[1372],{"type":823,"score":824},[1374,1376,1378,1380,1381,1382],{"type":896,"url":1375},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":827,"url":1377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":833,"url":1379},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1383},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[836,837,838,839,840,841,842],{"id":125,"slug":1386,"dossier":89,"summary":1387,"aliases":1388,"sourceIds":1392,"published":1393,"modified":1394,"checkedAt":7,"severity":1395,"references":1397,"versionKeys":1410,"packageCount":32,"repositoryCount":102},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[1389,1390,1391],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[125,1391],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[1396],{"type":823,"score":824},[1398,1400,1402,1404,1406,1408,1409],{"type":952,"url":1399},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":827,"url":1401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":833,"url":1403},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":833,"url":1405},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":896,"url":1407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":830,"url":961},{"type":827,"url":1237},[965,966,967,968,969,970,971,972],{"id":126,"slug":1412,"dossier":45,"summary":1413,"aliases":1414,"sourceIds":1417,"published":1418,"modified":1419,"checkedAt":7,"severity":1420,"references":1423,"versionKeys":1442,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[1415,1416],"CVE-2025-71176","PYSEC-2026-1845",[126,1416],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[1421],{"type":823,"score":1422},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[1424,1426,1428,1430,1432,1434,1436,1438,1440],{"type":827,"url":1425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":896,"url":1427},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":896,"url":1429},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":896,"url":1431},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":830,"url":1433},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":896,"url":1435},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":896,"url":1437},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":830,"url":1439},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":827,"url":1441},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[1443,1444,1445,1446],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":127,"slug":1448,"dossier":45,"summary":1449,"aliases":1450,"sourceIds":1454,"published":1455,"modified":1456,"checkedAt":7,"severity":1457,"references":1461,"versionKeys":1483,"packageCount":32,"repositoryCount":1129},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1451,1452,1453],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[127,1453],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[1458,1459],{"type":823,"score":882},{"type":820,"score":1460},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1462,1464,1466,1468,1470,1472,1473,1475,1477,1479,1481],{"type":827,"url":1463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":896,"url":1465},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":896,"url":1467},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":896,"url":1469},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":896,"url":1471},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":830,"url":899},{"type":896,"url":1474},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":896,"url":1476},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":896,"url":1478},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":830,"url":1480},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":827,"url":1482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[911,912,913,1484,1485],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":128,"slug":1487,"dossier":89,"summary":1488,"aliases":1489,"sourceIds":1493,"published":1494,"modified":1495,"checkedAt":7,"severity":1496,"references":1498,"versionKeys":1508,"packageCount":32,"repositoryCount":102},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[1490,1491,1492],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[128,1492],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[1497],{"type":823,"score":824},[1499,1501,1503,1504,1506,1507],{"type":952,"url":1500},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":827,"url":1502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":833,"url":957},{"type":896,"url":1505},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":830,"url":961},{"type":827,"url":963},[965,966,967,968,969,970,971,972],{"id":129,"slug":1510,"dossier":45,"summary":1511,"aliases":1512,"sourceIds":1515,"published":1516,"modified":1517,"checkedAt":7,"severity":1518,"references":1521,"versionKeys":1532,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[1513,1514],"CVE-2025-53643","PYSEC-2026-1104",[129,1514],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[1519],{"type":820,"score":1520},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1522,1524,1526,1528,1529,1530],{"type":896,"url":1523},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":827,"url":1525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":833,"url":1527},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1531},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[836,837,838,839],{"id":130,"slug":1534,"dossier":45,"summary":1535,"aliases":1536,"sourceIds":1539,"published":1540,"modified":1541,"checkedAt":7,"severity":1542,"references":1546,"versionKeys":1555,"packageCount":32,"repositoryCount":844},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[1537,1538],"CVE-2026-34518","PYSEC-2026-2100",[130,1538],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[1543,1545],{"type":823,"score":1544},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":820,"score":1115},[1547,1549,1551,1553,1554],{"type":833,"url":1548},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":827,"url":1550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":833,"url":1552},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":131,"slug":1557,"dossier":89,"summary":1558,"aliases":1559,"sourceIds":1563,"published":1564,"modified":1565,"checkedAt":7,"severity":1566,"references":1568,"versionKeys":1581,"packageCount":32,"repositoryCount":102},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[1560,1561,1562],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[131,1562],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[1567],{"type":823,"score":824},[1569,1571,1573,1575,1577,1579,1580],{"type":952,"url":1570},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":827,"url":1572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":833,"url":1574},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":833,"url":1576},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":896,"url":1578},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":830,"url":961},{"type":827,"url":1237},[965,966,967,968,969,970,971,972],{"id":132,"slug":1583,"dossier":45,"summary":1584,"aliases":1585,"sourceIds":1588,"published":1589,"modified":1590,"checkedAt":7,"severity":1591,"references":1595,"versionKeys":1601,"packageCount":32,"repositoryCount":844},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[1586,1587],"CVE-2026-54280","PYSEC-2026-2113",[132,1587],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[1592,1594],{"type":820,"score":1593},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":824},[1596,1598,1600],{"type":827,"url":1597},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":833,"url":1599},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":133,"slug":1603,"dossier":45,"summary":1604,"aliases":1605,"sourceIds":1608,"published":1609,"modified":1610,"checkedAt":7,"severity":1611,"references":1615,"versionKeys":1626,"packageCount":32,"repositoryCount":844},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[1606,1607],"CVE-2026-34525","PYSEC-2026-2103",[133,1607],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[1612,1614],{"type":820,"score":1613},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":823,"score":858},[1616,1618,1620,1622,1624,1625],{"type":833,"url":1617},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":827,"url":1619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":833,"url":1621},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":833,"url":1623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":134,"slug":1628,"dossier":45,"summary":1629,"aliases":1630,"sourceIds":1634,"published":1635,"modified":1636,"checkedAt":7,"severity":1637,"references":1642,"versionKeys":1658,"packageCount":32,"repositoryCount":262},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[1631,1632,1633],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[134],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[1638,1640],{"type":823,"score":1639},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":820,"score":1641},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1643,1645,1647,1649,1650,1652,1654,1656],{"type":827,"url":1644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":896,"url":1646},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":896,"url":1648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":830,"url":899},{"type":896,"url":1651},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":896,"url":1653},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":896,"url":1655},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":896,"url":1657},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[911,912],{"id":135,"slug":1660,"dossier":45,"summary":1661,"aliases":1662,"sourceIds":1666,"published":1667,"modified":1668,"checkedAt":7,"severity":1669,"references":1673,"versionKeys":1713,"packageCount":32,"repositoryCount":1714},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1663,1664,1665],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[135,1665],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1670,1672],{"type":820,"score":1671},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":823,"score":824},[1674,1676,1678,1680,1682,1684,1685,1687,1689,1691,1693,1695,1697,1699,1701,1703,1705,1707,1709,1711],{"type":896,"url":1675},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":827,"url":1677},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":896,"url":1679},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":896,"url":1681},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":896,"url":1683},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":830,"url":961},{"type":896,"url":1686},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":896,"url":1688},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":896,"url":1690},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":827,"url":1692},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":827,"url":1694},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":827,"url":1696},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":827,"url":1698},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":827,"url":1700},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":827,"url":1702},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":827,"url":1704},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":827,"url":1706},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":827,"url":1708},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":827,"url":1710},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":827,"url":1712},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[965,966,967,968,969,970,971],12,{"id":136,"slug":1716,"dossier":45,"summary":1717,"aliases":1718,"sourceIds":1721,"published":1722,"modified":1723,"checkedAt":7,"severity":1724,"references":1727,"versionKeys":1744,"packageCount":32,"repositoryCount":262},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[1719,1720],"CVE-2025-27516","PYSEC-2026-1471",[136,1720],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[1725],{"type":820,"score":1726},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1728,1730,1732,1734,1736,1738,1740,1742],{"type":896,"url":1729},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":827,"url":1731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":833,"url":1733},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":830,"url":1735},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":896,"url":1737},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":896,"url":1739},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":830,"url":1741},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":827,"url":1743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[1745,1746],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":137,"slug":1748,"dossier":45,"summary":1749,"aliases":1750,"sourceIds":1753,"published":1754,"modified":1755,"checkedAt":7,"severity":1756,"references":1759,"versionKeys":1774,"packageCount":32,"repositoryCount":1776},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[1751,1752],"CVE-2026-69244","PYSEC-2026-3545",[137,1752],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[1757],{"type":820,"score":1758},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1760,1762,1764,1766,1767,1769,1770,1772],{"type":896,"url":1761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":896,"url":1763},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":896,"url":1765},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":830,"url":831},{"type":896,"url":1768},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":830,"url":1125},{"type":827,"url":1771},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":827,"url":1773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[836,837,838,839,840,841,842,843,1775],"pypi:aiohttp@3.14.1",11,{"id":138,"slug":1778,"dossier":45,"summary":1779,"aliases":1780,"sourceIds":1784,"published":1785,"modified":1786,"checkedAt":7,"severity":1787,"references":1792,"versionKeys":1808,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[1781,1782,1783],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[138,1783],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[1788,1790],{"type":823,"score":1789},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":820,"score":1791},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1793,1795,1797,1799,1800,1802,1804,1806],{"type":827,"url":1794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":896,"url":1796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":896,"url":1798},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":830,"url":1157},{"type":896,"url":1801},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":896,"url":1803},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":830,"url":1805},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":827,"url":1807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1164],{"id":139,"slug":1810,"dossier":45,"summary":1811,"aliases":1812,"sourceIds":1816,"published":1817,"modified":1818,"checkedAt":7,"severity":1819,"references":1824,"versionKeys":1842,"packageCount":32,"repositoryCount":262},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[1813,1814,1815],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[139],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[1820,1822],{"type":823,"score":1821},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":820,"score":1823},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1825,1827,1829,1831,1833,1835,1836,1838,1840],{"type":827,"url":1826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":896,"url":1828},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":896,"url":1830},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":896,"url":1832},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":896,"url":1834},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":830,"url":899},{"type":896,"url":1837},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":896,"url":1839},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":896,"url":1841},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[911,912],{"id":140,"slug":1844,"dossier":45,"summary":1845,"aliases":1846,"sourceIds":1849,"published":1850,"modified":1851,"checkedAt":7,"severity":1852,"references":1855,"versionKeys":1866,"packageCount":32,"repositoryCount":1129},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[1847,1848],"CVE-2025-69230","PYSEC-2026-1105",[140,1848],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[1853],{"type":820,"score":1854},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1856,1858,1860,1862,1863,1864],{"type":896,"url":1857},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":827,"url":1859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":833,"url":1861},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[836,837,838,839,840,841,842],{"id":141,"slug":1868,"dossier":89,"summary":1869,"aliases":1870,"sourceIds":1874,"published":1875,"modified":1876,"checkedAt":7,"severity":1877,"references":1880,"versionKeys":1894,"packageCount":32,"repositoryCount":102},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[1871,1872,1873],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[141,1873],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[1878],{"type":823,"score":1879},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[1881,1883,1885,1887,1889,1890,1891,1892],{"type":896,"url":1882},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":827,"url":1884},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":896,"url":1886},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":896,"url":1888},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":830,"url":961},{"type":896,"url":1237},{"type":830,"url":1239},{"type":827,"url":1893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[965,966,967,968,969,970,971,972],{"id":142,"slug":1896,"dossier":45,"summary":1897,"aliases":1898,"sourceIds":1901,"published":1902,"modified":1903,"checkedAt":7,"severity":1904,"references":1907,"versionKeys":1913,"packageCount":32,"repositoryCount":844},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[1899,1900],"CVE-2026-54278","PYSEC-2026-2111",[142,1900],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[1905,1906],{"type":820,"score":984},{"type":823,"score":824},[1908,1910,1911],{"type":827,"url":1909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":830,"url":831},{"type":833,"url":1912},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[836,837,838,839,840,841,842,843],{"id":143,"slug":1915,"dossier":45,"summary":1916,"aliases":1917,"sourceIds":1920,"published":1921,"modified":1922,"checkedAt":7,"severity":1923,"references":1926,"versionKeys":1945,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1918,1919],"CVE-2024-34062","PYSEC-2026-1976",[143,1919],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1924],{"type":823,"score":1925},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1927,1929,1931,1933,1935,1937,1939,1941,1943],{"type":896,"url":1928},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":827,"url":1930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":896,"url":1932},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":830,"url":1934},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":896,"url":1936},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":896,"url":1938},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":896,"url":1940},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":830,"url":1942},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":827,"url":1944},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1946],"pypi:tqdm@4.66.2",{"id":144,"slug":1948,"dossier":45,"summary":1949,"aliases":1950,"sourceIds":1953,"published":1954,"modified":1955,"checkedAt":7,"severity":1956,"references":1958,"versionKeys":1971,"packageCount":32,"repositoryCount":1129},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[1951,1952],"CVE-2025-69229","PYSEC-2026-1106",[144,1952],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[1957],{"type":820,"score":984},[1959,1961,1963,1965,1967,1968,1969],{"type":896,"url":1960},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":827,"url":1962},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":896,"url":1964},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":896,"url":1966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":1970},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[836,837,838,839,840,841,842],{"id":145,"slug":1973,"dossier":45,"summary":1974,"aliases":1975,"sourceIds":1978,"published":1979,"modified":1980,"checkedAt":7,"severity":1981,"references":1984,"versionKeys":1999,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[1976,1977],"CVE-2024-56201","PYSEC-2026-1472",[145,1977],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[1982,1983],{"type":823,"score":1144},{"type":820,"score":1726},[1985,1987,1989,1991,1993,1994,1996,1997],{"type":896,"url":1986},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":827,"url":1988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":896,"url":1990},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":833,"url":1992},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":830,"url":1735},{"type":896,"url":1995},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":830,"url":1741},{"type":827,"url":1998},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[1745],{"id":146,"slug":2001,"dossier":89,"summary":2002,"aliases":2003,"sourceIds":2007,"published":2008,"modified":2009,"checkedAt":7,"severity":2010,"references":2013,"versionKeys":2025,"packageCount":32,"repositoryCount":2033},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[2004,2005,2006],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[146,2006],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[2011],{"type":823,"score":2012},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2014,2016,2018,2020,2022,2023],{"type":952,"url":2015},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":827,"url":2017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":833,"url":2019},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":896,"url":2021},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":830,"url":1157},{"type":827,"url":2024},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1164,1165,1166,2026,2027,2028,2029,2030,2031,2032],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":147,"slug":2035,"dossier":45,"summary":2036,"aliases":2037,"sourceIds":2040,"published":2041,"modified":2042,"checkedAt":7,"severity":2043,"references":2046,"versionKeys":2067,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2038,2039],"CVE-2024-34064","PYSEC-2026-1474",[147,2039],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[2044],{"type":823,"score":2045},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2047,2049,2051,2053,2054,2056,2058,2060,2062,2064,2065],{"type":896,"url":2048},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":827,"url":2050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":833,"url":2052},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":830,"url":1735},{"type":896,"url":2055},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":896,"url":2057},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":896,"url":2059},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":896,"url":2061},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":896,"url":2063},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":830,"url":1741},{"type":827,"url":2066},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[1745],{"id":148,"slug":2069,"dossier":45,"summary":2070,"aliases":2071,"sourceIds":2074,"published":2075,"modified":2076,"checkedAt":7,"severity":2077,"references":2080,"versionKeys":2089,"packageCount":32,"repositoryCount":844},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[2072,2073],"CVE-2026-34513","PYSEC-2026-2095",[148,2073],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[2078,2079],{"type":820,"score":925},{"type":823,"score":824},[2081,2083,2085,2087,2088],{"type":833,"url":2082},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":827,"url":2084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":833,"url":2086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":149,"slug":2091,"dossier":45,"summary":2092,"aliases":2093,"sourceIds":2096,"published":2097,"modified":2098,"checkedAt":7,"severity":2099,"references":2104,"versionKeys":2112,"packageCount":32,"repositoryCount":844},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[2094,2095],"CVE-2026-47265","PYSEC-2026-2105",[149,2095],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[2100,2102],{"type":820,"score":2101},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":823,"score":2103},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2105,2107,2109,2111],{"type":833,"url":2106},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":827,"url":2108},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":833,"url":2110},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":150,"slug":2114,"dossier":45,"summary":2115,"aliases":2116,"sourceIds":2119,"published":2120,"modified":2121,"checkedAt":7,"severity":2122,"references":2127,"versionKeys":2133,"packageCount":32,"repositoryCount":844},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[2117,2118],"CVE-2026-54276","PYSEC-2026-2109",[150,2118],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[2123,2125],{"type":820,"score":2124},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":823,"score":2126},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[2128,2130,2132],{"type":827,"url":2129},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":833,"url":2131},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":151,"slug":2135,"dossier":45,"summary":2136,"aliases":2137,"sourceIds":2140,"published":2141,"modified":2142,"checkedAt":7,"severity":2143,"references":2148,"versionKeys":2168,"packageCount":32,"repositoryCount":844},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[2138,2139],"CVE-2026-34993","PYSEC-2026-2104",[151,2139],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[2144,2146],{"type":823,"score":2145},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":823,"score":2147},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2149,2151,2153,2155,2156,2158,2160,2162,2164,2166],{"type":833,"url":2150},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":827,"url":2152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":833,"url":2154},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":830,"url":831},{"type":896,"url":2157},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":896,"url":2159},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":827,"url":2161},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":827,"url":2163},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":827,"url":2165},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":891,"url":2167},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[836,837,838,839,840,841,842,843],{"id":152,"slug":2170,"dossier":45,"summary":2171,"aliases":2172,"sourceIds":2175,"published":2176,"modified":2177,"checkedAt":7,"severity":2178,"references":2180,"versionKeys":2191,"packageCount":32,"repositoryCount":1129},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[2173,2174],"CVE-2025-69227","PYSEC-2026-1107",[152,2174],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[2179],{"type":820,"score":984},[2181,2183,2185,2187,2188,2189],{"type":896,"url":2182},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":827,"url":2184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":896,"url":2186},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":2190},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[836,837,838,839,840,841,842],{"id":153,"slug":2193,"dossier":89,"summary":2194,"aliases":2195,"sourceIds":2199,"published":2200,"modified":2201,"checkedAt":7,"severity":2202,"references":2204,"versionKeys":2218,"packageCount":32,"repositoryCount":102},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[2196,2197,2198],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[153,2198],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[2203],{"type":823,"score":824},[2205,2207,2209,2211,2213,2214,2215,2216],{"type":896,"url":2206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":827,"url":2208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":896,"url":2210},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":896,"url":2212},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":830,"url":961},{"type":896,"url":1237},{"type":830,"url":1239},{"type":827,"url":2217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[965,966,967,968,969,970,971,972],{"id":154,"slug":2220,"dossier":45,"summary":2221,"aliases":2222,"sourceIds":2225,"published":2226,"modified":2227,"checkedAt":7,"severity":2228,"references":2233,"versionKeys":2242,"packageCount":32,"repositoryCount":844},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[2223,2224],"CVE-2026-34516","PYSEC-2026-2098",[154,2224],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[2229,2230,2231],{"type":823,"score":824},{"type":820,"score":984},{"type":820,"score":2232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2234,2236,2238,2240,2241],{"type":833,"url":2235},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":827,"url":2237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":833,"url":2239},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":155,"slug":2244,"dossier":45,"summary":2245,"aliases":2246,"sourceIds":2249,"published":2250,"modified":2251,"checkedAt":7,"severity":2252,"references":2255,"versionKeys":2261,"packageCount":32,"repositoryCount":844},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[2247,2248],"CVE-2026-50269","PYSEC-2026-2106",[155,2248],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[2253,2254],{"type":820,"score":856},{"type":823,"score":824},[2256,2258,2260],{"type":827,"url":2257},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":833,"url":2259},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":830,"url":831},[836,837,838,839,840,841,842,843],{"id":156,"slug":2263,"dossier":45,"summary":2264,"aliases":2265,"sourceIds":2268,"published":2269,"modified":2270,"checkedAt":7,"severity":2271,"references":2274,"versionKeys":2289,"packageCount":32,"repositoryCount":1776},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[2266,2267],"CVE-2026-69243","PYSEC-2026-3546",[156,2267],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[2272],{"type":820,"score":2273},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2275,2277,2279,2281,2282,2284,2285,2287],{"type":896,"url":2276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":896,"url":2278},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":896,"url":2280},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":830,"url":831},{"type":896,"url":2283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":830,"url":1125},{"type":827,"url":2286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":827,"url":2288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[836,837,838,839,840,841,842,843,1775],{"id":157,"slug":2291,"dossier":45,"summary":2292,"aliases":2293,"sourceIds":2296,"published":2297,"modified":2298,"checkedAt":7,"severity":2299,"references":2301,"versionKeys":2314,"packageCount":32,"repositoryCount":1776},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[2294,2295],"CVE-2026-59881","PYSEC-2026-3547",[157,2295],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[2300],{"type":820,"score":1301},[2302,2304,2306,2308,2310,2311,2312],{"type":896,"url":2303},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":827,"url":2305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":896,"url":2307},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":896,"url":2309},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":2313},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[836,837,838,839,840,841,842,843,1775],{"id":158,"slug":2316,"dossier":45,"summary":2317,"aliases":2318,"sourceIds":2321,"published":2322,"modified":2323,"checkedAt":7,"severity":2324,"references":2326,"versionKeys":2337,"packageCount":32,"repositoryCount":1129},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[2319,2320],"CVE-2025-69225","PYSEC-2026-1109",[158,2320],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[2325],{"type":820,"score":856},[2327,2329,2331,2333,2334,2335],{"type":896,"url":2328},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":827,"url":2330},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":833,"url":2332},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":830,"url":831},{"type":830,"url":1125},{"type":827,"url":2336},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[836,837,838,839,840,841,842],{"id":159,"slug":2339,"dossier":45,"summary":2340,"aliases":2341,"sourceIds":2344,"published":2345,"modified":2346,"checkedAt":7,"severity":2347,"references":2350,"versionKeys":2359,"packageCount":32,"repositoryCount":844},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[2342,2343],"CVE-2026-34519","PYSEC-2026-2101",[159,2343],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[2348,2349],{"type":820,"score":856},{"type":823,"score":858},[2351,2353,2355,2357,2358],{"type":833,"url":2352},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":827,"url":2354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":833,"url":2356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":160,"slug":2361,"dossier":45,"summary":2362,"aliases":2363,"sourceIds":2366,"published":2367,"modified":2368,"checkedAt":7,"severity":2369,"references":2372,"versionKeys":2381,"packageCount":32,"repositoryCount":844},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[2364,2365],"CVE-2026-34515","PYSEC-2026-2097",[160,2365],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[2370,2371],{"type":820,"score":2101},{"type":823,"score":2103},[2373,2375,2377,2379,2380],{"type":833,"url":2374},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":827,"url":2376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":833,"url":2378},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":161,"slug":2383,"dossier":45,"summary":2384,"aliases":2385,"sourceIds":2389,"published":2390,"modified":2391,"checkedAt":7,"severity":2392,"references":2395,"versionKeys":2408,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[2386,2387,2388],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[161,2388],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[2393,2394],{"type":823,"score":927},{"type":823,"score":824},[2396,2398,2400,2402,2404,2406,2407],{"type":952,"url":2397},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":827,"url":2399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":833,"url":2401},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":833,"url":2403},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":896,"url":2405},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":830,"url":961},{"type":827,"url":1237},[970,971,972],{"id":162,"slug":2410,"dossier":89,"summary":2411,"aliases":2412,"sourceIds":2416,"published":2417,"modified":2418,"checkedAt":7,"severity":2419,"references":2421,"versionKeys":2432,"packageCount":32,"repositoryCount":102},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[2413,2414,2415],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[162,2415],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[2420],{"type":823,"score":824},[2422,2424,2426,2428,2430,2431],{"type":952,"url":2423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":827,"url":2425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":833,"url":2427},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":896,"url":2429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":830,"url":961},{"type":827,"url":963},[965,966,967,968,969,970,971,972],{"id":163,"slug":2434,"dossier":89,"summary":2435,"aliases":2436,"sourceIds":2440,"published":2441,"modified":2442,"checkedAt":7,"severity":2443,"references":2447,"versionKeys":2459,"packageCount":32,"repositoryCount":102},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2437,2438,2439],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[163,2439],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2444,2445],{"type":820,"score":1671},{"type":823,"score":2446},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2448,2449,2451,2453,2455,2457,2458],{"type":896,"url":1675},{"type":833,"url":2450},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":827,"url":2452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":833,"url":2454},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":833,"url":2456},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":830,"url":961},{"type":827,"url":1211},[965,966,967,968,969,970,971,972],{"id":164,"slug":2461,"dossier":45,"summary":2462,"aliases":2463,"sourceIds":2466,"published":2467,"modified":2468,"checkedAt":7,"severity":2469,"references":2473,"versionKeys":2486,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2464,2465],"CVE-2024-56326","PYSEC-2026-1475",[164,2465],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2470,2472],{"type":823,"score":2471},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":820,"score":1726},[2474,2476,2478,2480,2481,2482,2483,2484],{"type":896,"url":2475},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":827,"url":2477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":833,"url":2479},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":830,"url":1735},{"type":896,"url":1995},{"type":896,"url":1737},{"type":830,"url":1741},{"type":827,"url":2485},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[1745],{"id":165,"slug":2488,"dossier":45,"summary":2489,"aliases":2490,"sourceIds":2494,"published":2495,"modified":2496,"checkedAt":7,"severity":2497,"references":2501,"versionKeys":2519,"packageCount":32,"repositoryCount":844},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[2491,2492,2493],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[165],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[2498,2499],{"type":823,"score":1821},{"type":820,"score":2500},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2502,2504,2506,2508,2510,2512,2513,2515,2517],{"type":827,"url":2503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":896,"url":2505},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":896,"url":2507},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":896,"url":2509},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":896,"url":2511},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":830,"url":899},{"type":896,"url":2514},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":896,"url":2516},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":896,"url":2518},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[911,912,913,1484,1485,2520,2521,2522],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":166,"slug":2524,"dossier":45,"summary":2525,"aliases":2526,"sourceIds":2529,"published":2530,"modified":2531,"checkedAt":7,"severity":2532,"references":2535,"versionKeys":2550,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[2527,2528],"CVE-2026-22701","PYSEC-2026-1374",[166,2528],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[2533],{"type":823,"score":2534},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[2536,2538,2540,2542,2544,2546,2548],{"type":896,"url":2537},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":827,"url":2539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":896,"url":2541},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":896,"url":2543},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":830,"url":2545},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":830,"url":2547},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":827,"url":2549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[2551,2552,2553,2554],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":167,"slug":2556,"dossier":45,"summary":2557,"aliases":2558,"sourceIds":2562,"published":2563,"modified":2564,"checkedAt":7,"severity":2565,"references":2568,"versionKeys":2582,"packageCount":32,"repositoryCount":102},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2559,2560,2561],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[167,2561],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2566,2567],{"type":823,"score":886},{"type":820,"score":1203},[2569,2571,2573,2575,2577,2578,2579,2580],{"type":896,"url":2570},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":827,"url":2572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":896,"url":2574},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":896,"url":2576},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":830,"url":961},{"type":896,"url":1211},{"type":830,"url":1239},{"type":827,"url":2581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[965,966,967,968,969,970,971,972],{"id":168,"slug":2584,"dossier":45,"summary":2585,"aliases":2586,"sourceIds":2590,"published":1817,"modified":2591,"checkedAt":7,"severity":2592,"references":2595,"versionKeys":2613,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[2587,2588,2589],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[168],"2026-07-17T17:15:51.452848951Z",[2593,2594],{"type":823,"score":1821},{"type":820,"score":2500},[2596,2598,2600,2602,2604,2606,2607,2609,2611],{"type":827,"url":2597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":896,"url":2599},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":896,"url":2601},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":896,"url":2603},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":896,"url":2605},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":830,"url":899},{"type":896,"url":2608},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":896,"url":2610},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":896,"url":2612},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[2614,911,912,913,1484,1485,2520,2521,2522],"pypi:torch@2.10.0",{"id":169,"slug":2616,"dossier":45,"summary":2617,"aliases":2618,"sourceIds":2622,"published":1817,"modified":2623,"checkedAt":7,"severity":2624,"references":2627,"versionKeys":2642,"packageCount":32,"repositoryCount":2643},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[2619,2620,2621],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[169],"2026-06-10T17:41:15.774477397Z",[2625,2626],{"type":823,"score":1821},{"type":820,"score":1823},[2628,2630,2631,2632,2633,2635,2636,2638,2640],{"type":827,"url":2629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":896,"url":1828},{"type":896,"url":1830},{"type":896,"url":1832},{"type":896,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":830,"url":899},{"type":896,"url":2637},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":896,"url":2639},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":896,"url":2641},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[911,912,913,1484,1485,2520],8,{"id":170,"slug":2645,"dossier":45,"summary":2646,"aliases":2647,"sourceIds":2651,"published":2652,"modified":2653,"checkedAt":7,"severity":2654,"references":2657,"versionKeys":2671,"packageCount":32,"repositoryCount":102},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[2648,2649,2650],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[170,2650],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[2655],{"type":820,"score":2656},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2658,2660,2662,2664,2666,2667,2668,2669],{"type":896,"url":2659},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":827,"url":2661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":896,"url":2663},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":896,"url":2665},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":830,"url":961},{"type":896,"url":1237},{"type":830,"url":1239},{"type":827,"url":2670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[965,966,967,968,969,970,971,972],{"id":171,"slug":2673,"dossier":45,"summary":2674,"aliases":2675,"sourceIds":2678,"published":2679,"modified":2680,"checkedAt":7,"severity":2681,"references":2685,"versionKeys":2694,"packageCount":32,"repositoryCount":844},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[2676,2677],"CVE-2026-22815","PYSEC-2026-2094",[171,2677],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[2682,2683],{"type":820,"score":1301},{"type":820,"score":2684},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2686,2688,2690,2692,2693],{"type":833,"url":2687},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":827,"url":2689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":833,"url":2691},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":830,"url":831},{"type":827,"url":868},[836,837,838,839,840,841,842,843],{"id":172,"slug":2696,"dossier":45,"summary":2697,"aliases":2698,"sourceIds":2701,"published":2702,"modified":2703,"checkedAt":7,"severity":2704,"references":2707,"versionKeys":2724,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[2699,2700],"CVE-2025-68146","PYSEC-2026-1375",[172,2700],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[2705],{"type":823,"score":2706},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2708,2710,2712,2713,2715,2717,2719,2720,2722],{"type":896,"url":2709},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":896,"url":2711},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":830,"url":2545},{"type":896,"url":2714},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":896,"url":2716},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":896,"url":2718},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":830,"url":2547},{"type":827,"url":2721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":827,"url":2723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[2551,2552,2553,2554],{"id":173,"slug":2726,"dossier":45,"summary":2727,"aliases":2728,"sourceIds":2732,"published":2733,"modified":2734,"checkedAt":7,"severity":2735,"references":2738,"versionKeys":2776,"packageCount":32,"repositoryCount":102},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2729,2730,2731],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[173,2731],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2736,2737],{"type":823,"score":824},{"type":820,"score":2656},[2739,2741,2743,2745,2747,2748,2750,2752,2754,2756,2758,2760,2761,2763,2765,2767,2768,2770,2772,2774],{"type":896,"url":2740},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":827,"url":2742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":896,"url":2744},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":896,"url":2746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":830,"url":961},{"type":896,"url":2749},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":896,"url":2751},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":896,"url":2753},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":827,"url":2755},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":827,"url":2757},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":827,"url":2759},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":827,"url":1698},{"type":827,"url":2762},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":827,"url":2764},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":827,"url":2766},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":827,"url":1700},{"type":827,"url":2769},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":827,"url":2771},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":827,"url":2773},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":827,"url":2775},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[965,966,967,968,969,970,971,972],{"id":174,"slug":2778,"dossier":45,"summary":2779,"aliases":2780,"sourceIds":2784,"published":2785,"modified":2786,"checkedAt":7,"severity":2787,"references":2790,"versionKeys":2799,"packageCount":32,"repositoryCount":102},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[2781,2782,2783],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[174,2783],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[2788,2789],{"type":823,"score":886},{"type":820,"score":1203},[2791,2793,2795,2797,2798],{"type":827,"url":2792},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":827,"url":2794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":896,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":830,"url":961},{"type":827,"url":1211},[965,966,967,968,969,970,971,972],{"id":175,"slug":2801,"dossier":45,"summary":2802,"aliases":2803,"sourceIds":2807,"published":2808,"modified":2809,"checkedAt":7,"severity":2810,"references":2815,"versionKeys":2831,"packageCount":32,"repositoryCount":262},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[2804,2805,2806],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[175],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[2811,2813],{"type":823,"score":2812},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":820,"score":2814},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2816,2818,2820,2822,2824,2825,2827,2829],{"type":827,"url":2817},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":896,"url":2819},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":896,"url":2821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":896,"url":2823},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":830,"url":899},{"type":896,"url":2826},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":896,"url":2828},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":896,"url":2830},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[911,912],{"id":176,"slug":2833,"dossier":45,"summary":2834,"aliases":2835,"sourceIds":2838,"published":2839,"modified":2840,"checkedAt":7,"severity":2841,"references":2844,"versionKeys":2850,"packageCount":32,"repositoryCount":844},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[2836,2837],"CVE-2026-54274","PYSEC-2026-2108",[176,2837],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[2842,2843],{"type":820,"score":984},{"type":823,"score":824},[2845,2847,2848],{"type":827,"url":2846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":830,"url":831},{"type":833,"url":2849},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[836,837,838,839,840,841,842,843],{"id":177,"slug":2852,"dossier":45,"summary":2853,"aliases":2854,"sourceIds":2858,"published":2859,"modified":2860,"checkedAt":7,"severity":2861,"references":2864,"versionKeys":2878,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[2855,2856,2857],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[177,2857],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[2862],{"type":823,"score":2863},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2865,2867,2869,2871,2873,2875,2876],{"type":827,"url":2866},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":827,"url":2868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":896,"url":2870},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":833,"url":2872},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":896,"url":2874},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":830,"url":961},{"type":896,"url":2877},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[968],{"id":178,"slug":2880,"dossier":45,"summary":2881,"aliases":2882,"sourceIds":2886,"published":2887,"modified":2888,"checkedAt":7,"severity":2889,"references":2892,"versionKeys":2903,"packageCount":32,"repositoryCount":102},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[2883,2884,2885],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[178,2885],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[2890],{"type":823,"score":2891},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[2893,2895,2897,2899,2901,2902],{"type":952,"url":2894},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":827,"url":2896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":833,"url":2898},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":833,"url":2900},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":830,"url":961},{"type":827,"url":1237},[965,966,967,968,969,970,971,972],{"id":179,"slug":2905,"dossier":45,"summary":206,"aliases":2906,"sourceIds":2909,"published":2910,"modified":2911,"checkedAt":7,"severity":2912,"references":2914,"versionKeys":2923,"packageCount":32,"repositoryCount":262},"pysec-2025-198-62b25ed4",[2907,2908],"BIT-pytorch-2025-46148","CVE-2025-46148",[179],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[2913],{"type":823,"score":1544},[2915,2917,2919,2921],{"type":827,"url":2916},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":827,"url":2918},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":891,"url":2920},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":833,"url":2922},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[911,912],{"id":180,"slug":2925,"dossier":45,"summary":206,"aliases":2926,"sourceIds":2929,"published":2930,"modified":2931,"checkedAt":7,"severity":2932,"references":2934,"versionKeys":2940,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[2927,2928],"BIT-pytorch-2025-46149","CVE-2025-46149",[180],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[2933],{"type":823,"score":1544},[2935,2936,2938],{"type":827,"url":2916},{"type":891,"url":2937},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":833,"url":2939},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[912],{"id":181,"slug":2942,"dossier":45,"summary":206,"aliases":2943,"sourceIds":2946,"published":2947,"modified":2948,"checkedAt":7,"severity":2949,"references":2951,"versionKeys":2959,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[2944,2945],"BIT-pytorch-2025-46150","CVE-2025-46150",[181],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[2950],{"type":823,"score":1544},[2952,2953,2955,2957],{"type":827,"url":2916},{"type":891,"url":2954},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":891,"url":2956},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":833,"url":2958},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[912],{"id":182,"slug":2961,"dossier":45,"summary":206,"aliases":2962,"sourceIds":2965,"published":2966,"modified":2967,"checkedAt":7,"severity":2968,"references":2970,"versionKeys":2976,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[2963,2964],"BIT-pytorch-2025-46152","CVE-2025-46152",[182],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[2969],{"type":823,"score":927},[2971,2972,2974],{"type":827,"url":2916},{"type":891,"url":2973},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":833,"url":2975},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[912],{"id":183,"slug":2978,"dossier":45,"summary":206,"aliases":2979,"sourceIds":2982,"published":2983,"modified":2984,"checkedAt":7,"severity":2985,"references":2987,"versionKeys":2997,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[2980,2981],"BIT-pytorch-2025-46153","CVE-2025-46153",[183],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[2986],{"type":823,"score":1544},[2988,2990,2991,2993,2995],{"type":896,"url":2989},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":827,"url":2916},{"type":827,"url":2992},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":891,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":833,"url":2996},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[912],{"id":184,"slug":2999,"dossier":45,"summary":206,"aliases":3000,"sourceIds":3003,"published":3004,"modified":3005,"checkedAt":7,"severity":3006,"references":3008,"versionKeys":3013,"packageCount":32,"repositoryCount":2643},"pysec-2025-203-2febb201",[3001,3002],"BIT-pytorch-2025-55551","CVE-2025-55551",[184],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[3007],{"type":823,"score":824},[3009,3011],{"type":827,"url":3010},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":891,"url":3012},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[911,912,913,1484,1485,2520],{"id":185,"slug":3015,"dossier":45,"summary":206,"aliases":3016,"sourceIds":3019,"published":3020,"modified":3021,"checkedAt":7,"severity":3022,"references":3024,"versionKeys":3028,"packageCount":32,"repositoryCount":2643},"pysec-2025-204-cdae47da",[3017,3018],"BIT-pytorch-2025-55552","CVE-2025-55552",[185],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[3023],{"type":823,"score":824},[3025,3026],{"type":827,"url":3010},{"type":891,"url":3027},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[911,912,913,1484,1485,2520],{"id":186,"slug":3030,"dossier":45,"summary":206,"aliases":3031,"sourceIds":3034,"published":3035,"modified":3036,"checkedAt":7,"severity":3037,"references":3039,"versionKeys":3045,"packageCount":32,"repositoryCount":251},"pysec-2025-205-fd5e58fd",[3032,3033],"BIT-pytorch-2025-55553","CVE-2025-55553",[186],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[3038],{"type":823,"score":824},[3040,3041,3043],{"type":827,"url":3010},{"type":891,"url":3042},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":833,"url":3044},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[911,912,913],{"id":187,"slug":3047,"dossier":45,"summary":206,"aliases":3048,"sourceIds":3051,"published":3052,"modified":3053,"checkedAt":7,"severity":3054,"references":3056,"versionKeys":3060,"packageCount":32,"repositoryCount":2643},"pysec-2025-206-58322476",[3049,3050],"BIT-pytorch-2025-55554","CVE-2025-55554",[187],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[3055],{"type":823,"score":927},[3057,3058],{"type":827,"url":3010},{"type":891,"url":3059},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[911,912,913,1484,1485,2520],{"id":188,"slug":3062,"dossier":45,"summary":206,"aliases":3063,"sourceIds":3066,"published":3067,"modified":3068,"checkedAt":7,"severity":3069,"references":3071,"versionKeys":3077,"packageCount":32,"repositoryCount":251},"pysec-2025-207-2abef3fc",[3064,3065],"BIT-pytorch-2025-55557","CVE-2025-55557",[188],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[3070],{"type":823,"score":824},[3072,3073,3075],{"type":827,"url":3010},{"type":891,"url":3074},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":833,"url":3076},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[911,912,913],{"id":189,"slug":3079,"dossier":45,"summary":206,"aliases":3080,"sourceIds":3083,"published":3084,"modified":3085,"checkedAt":7,"severity":3086,"references":3088,"versionKeys":3094,"packageCount":32,"repositoryCount":251},"pysec-2025-208-6e93fe9d",[3081,3082],"BIT-pytorch-2025-55558","CVE-2025-55558",[189],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[3087],{"type":823,"score":824},[3089,3090,3092],{"type":827,"url":3010},{"type":891,"url":3091},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":833,"url":3093},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[911,912,913],{"id":190,"slug":3096,"dossier":45,"summary":206,"aliases":3097,"sourceIds":3100,"published":3101,"modified":3102,"checkedAt":7,"severity":3103,"references":3105,"versionKeys":3111,"packageCount":32,"repositoryCount":251},"pysec-2025-209-e6f352b0",[3098,3099],"BIT-pytorch-2025-55560","CVE-2025-55560",[190],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[3104],{"type":823,"score":824},[3106,3107,3109],{"type":827,"url":3010},{"type":891,"url":3108},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":833,"url":3110},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[911,912,913],{"id":191,"slug":3113,"dossier":45,"summary":206,"aliases":3114,"sourceIds":3117,"published":3118,"modified":3119,"checkedAt":7,"severity":3120,"references":3122,"versionKeys":3133,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[3115,3116],"BIT-pytorch-2026-4538","CVE-2026-4538",[191],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[3121],{"type":823,"score":2471},[3123,3125,3127,3129,3131],{"type":896,"url":3124},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":827,"url":3126},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":827,"url":3128},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":891,"url":3130},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":833,"url":3132},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[2614,911,912,913,1484,1485,2520,2521,2522],{"id":192,"slug":3135,"dossier":45,"summary":206,"aliases":3136,"sourceIds":3141,"published":3142,"modified":3143,"checkedAt":7,"severity":3144,"references":3146,"versionKeys":3162,"packageCount":32,"repositoryCount":844},"pysec-2026-2286-8795b007",[3137,3138,3139,3140],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[192],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[3145],{"type":823,"score":1789},[3147,3149,3151,3152,3154,3156,3158,3160],{"type":896,"url":3148},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":896,"url":3150},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":827,"url":2161},{"type":827,"url":3153},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":827,"url":3155},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":891,"url":3157},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":891,"url":3159},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":833,"url":3161},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[911,912,913,1484,1485,2520,2521,2522],{"id":193,"slug":3164,"dossier":45,"summary":206,"aliases":3165,"sourceIds":3167,"published":3168,"modified":3169,"checkedAt":7,"severity":3170,"references":3173,"versionKeys":3182,"packageCount":32,"repositoryCount":32},"pysec-2026-3624-ea5381b9",[3166],"CVE-2026-58659",[193],"2026-07-15T18:16:48.743Z","2026-08-07T09:45:09.912489225Z",[3171],{"type":820,"score":3172},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3174,3176,3178,3180],{"type":891,"url":3175},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fissues\u002F21822",{"type":833,"url":3177},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fcommit\u002Fd710d689510d50e800f53b3cd773cbca20b1f86f",{"type":833,"url":3179},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fpull\u002F21832",{"type":833,"url":3181},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fpytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter",[3183],"pypi:lightning@2.6.1",1786588639957]