[{"data":1,"prerenderedAt":599},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-tornado-ab0f364e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":279,"related":346},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":81,"category":82,"aiRelevant":45,"provider":82,"repositoryCount":83,"occurrenceCount":84,"directRepositoryCount":37,"versionCount":64,"licenseExpressions":85,"advisoryIds":87,"advisoryCount":40,"verifiedAttestation":98,"repositories":99,"versions":156},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","pypi","tornado",null,8,11,[86],"Apache-2.0",[88,89,90,91,92,93,94,95,96,97],"GHSA-3x9g-8vmp-wqvf","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-c98p-7wgm-6p64","GHSA-cx3h-4qpv-8hc9","GHSA-jhmp-mqwm-3gq8","GHSA-mgf9-4vpg-hj56","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-qjxf-f2mg-c6mc",true,[100,108,117,123,130,137,144,150],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":105,"evidenceCount":107},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[106],"6.5.7",3,{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":116},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[114,115],"6.5.2","6.5.5",2,{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":122,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[106],{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":128,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[129],"6.5.1",{"id":131,"slug":132,"name":133,"pathWithNamespace":134,"versions":135,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[136],"6.4.2",{"id":138,"slug":139,"name":140,"pathWithNamespace":141,"versions":142,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[143],"6.5.4",{"id":145,"slug":146,"name":147,"pathWithNamespace":148,"versions":149,"evidenceCount":32},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[136],{"id":151,"slug":152,"name":153,"pathWithNamespace":154,"versions":155,"evidenceCount":32},"opencode:7788","opencode-7788","Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage",[114],[157,194,211,228,245,262],{"version":136,"repositoryCount":116,"occurrenceCount":116,"ageDays":158,"advisoryIds":159,"metadata":160},629,[88,89,90,91,92,93,94,95,96,97],{"state":161,"checkedAt":162,"publishedAt":163,"deprecated":45,"deprecatedReason":82,"licenses":164,"advisoryIds":165,"links":176,"relatedProjects":183,"attestations":189,"verifiedAttestation":98,"projectStatus":193},"resolved","2026-08-13T02:29:21.454Z","2024-11-22T03:06:27Z",[86],[88,89,90,91,92,166,93,94,95,96,97,167,168,169,170,171,172,173,174,175],"GHSA-fqwm-6jpj-5wxc","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267","PYSEC-2026-140","PYSEC-2026-1974","PYSEC-2026-2287","PYSEC-2026-3387","PYSEC-2026-3388","PYSEC-2026-3389",[177,180],{"label":178,"url":179},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"label":181,"url":182},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.4.2\u002Ftornado-6.4.2-cp38-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[184,187],{"id":185,"relationType":178,"relationProvenance":186},"github.com\u002Ftornadoweb\u002Ftornado","UNVERIFIED_METADATA",{"id":185,"relationType":178,"relationProvenance":188},"PYPI_PUBLISH_ATTESTATION",[190],{"type":191,"url":182,"verified":98,"sourceRepository":179,"commit":192},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","a5ecfab15e52202a46d34638aad93cddca86d87b","active",{"version":129,"repositoryCount":32,"occurrenceCount":32,"ageDays":195,"advisoryIds":196,"metadata":197},447,[88,89,91,92,93,94,95,96,97],{"state":161,"checkedAt":162,"publishedAt":198,"deprecated":45,"deprecatedReason":82,"licenses":199,"advisoryIds":200,"links":201,"relatedProjects":205,"attestations":208,"verifiedAttestation":98,"projectStatus":193},"2025-05-22T18:15:27Z",[86],[88,89,91,92,166,93,94,95,96,97,167,168,169,170,172,173,174,175],[202,203],{"label":178,"url":179},{"label":181,"url":204},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.1\u002Ftornado-6.5.1-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[206,207],{"id":185,"relationType":178,"relationProvenance":186},{"id":185,"relationType":178,"relationProvenance":188},[209],{"type":191,"url":204,"verified":98,"sourceRepository":179,"commit":210},"b5586f3f2956308a9dff1fba2c3ddbbbe1ab29d0",{"version":114,"repositoryCount":116,"occurrenceCount":116,"ageDays":212,"advisoryIds":213,"metadata":214},369,[88,89,91,92,93,94,95,96,97],{"state":161,"checkedAt":162,"publishedAt":215,"deprecated":45,"deprecatedReason":82,"licenses":216,"advisoryIds":217,"links":218,"relatedProjects":222,"attestations":225,"verifiedAttestation":98,"projectStatus":193},"2025-08-08T18:26:50Z",[86],[88,89,91,92,166,93,94,95,96,97,167,168,169,170,172,173,174,175],[219,220],{"label":178,"url":179},{"label":181,"url":221},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.2\u002Ftornado-6.5.2-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[223,224],{"id":185,"relationType":178,"relationProvenance":186},{"id":185,"relationType":178,"relationProvenance":188},[226],{"type":191,"url":221,"verified":98,"sourceRepository":179,"commit":227},"547e6d86972238f1f5333a85f12b17fb33626899",{"version":143,"repositoryCount":32,"occurrenceCount":32,"ageDays":229,"advisoryIds":230,"metadata":231},240,[88,89,92,94,96,97],{"state":161,"checkedAt":162,"publishedAt":232,"deprecated":45,"deprecatedReason":82,"licenses":233,"advisoryIds":234,"links":235,"relatedProjects":239,"attestations":242,"verifiedAttestation":98,"projectStatus":193},"2025-12-15T19:20:53Z",[86],[88,89,92,166,94,96,97,170,172,173,174,175],[236,237],{"label":178,"url":179},{"label":181,"url":238},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.4\u002Ftornado-6.5.4-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[240,241],{"id":185,"relationType":178,"relationProvenance":186},{"id":185,"relationType":178,"relationProvenance":188},[243],{"type":191,"url":238,"verified":98,"sourceRepository":179,"commit":244},"63d4df4eefa6750bb14efa1ebffe67b8c54fbad4",{"version":115,"repositoryCount":32,"occurrenceCount":32,"ageDays":246,"advisoryIds":247,"metadata":248},155,[88,92,94,96],{"state":161,"checkedAt":162,"publishedAt":249,"deprecated":45,"deprecatedReason":82,"licenses":250,"advisoryIds":251,"links":252,"relatedProjects":256,"attestations":259,"verifiedAttestation":98,"projectStatus":193},"2026-03-10T21:30:48Z",[86],[88,92,94,96,173,174,175],[253,254],{"label":178,"url":179},{"label":181,"url":255},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.5\u002Ftornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[257,258],{"id":185,"relationType":178,"relationProvenance":186},{"id":185,"relationType":178,"relationProvenance":188},[260],{"type":191,"url":255,"verified":98,"sourceRepository":179,"commit":261},"7d6465056ceb7a054b3f64cf1c18271753b10482",{"version":106,"repositoryCount":116,"occurrenceCount":34,"ageDays":263,"advisoryIds":264,"metadata":265},65,[],{"state":161,"checkedAt":162,"publishedAt":266,"deprecated":45,"deprecatedReason":82,"licenses":267,"advisoryIds":268,"links":269,"relatedProjects":273,"attestations":276,"verifiedAttestation":98,"projectStatus":193},"2026-06-08T17:34:41Z",[86],[],[270,271],{"label":178,"url":179},{"label":181,"url":272},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.7\u002Ftornado-6.5.7-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[274,275],{"id":185,"relationType":178,"relationProvenance":186},{"id":185,"relationType":178,"relationProvenance":188},[277],{"type":191,"url":272,"verified":98,"sourceRepository":179,"commit":278},"48fc2d43d1f48b8b3b0be5dcf6a7634c6f45b1c4",{"occurrences":280,"occurrenceCount":84},[281,288,294,300,305,309,315,321,329,334,341],{"id":282,"repositoryId":124,"repositorySlug":125,"repositoryName":126,"repositoryPathWithNamespace":127,"ecosystem":80,"name":81,"identity":79,"version":129,"versionKey":283,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":285,"sourceUrl":286,"commitSha":287},"component:0ebc7f5aeae55a8fc846df38","pypi:tornado@6.5.1","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":289,"repositoryId":118,"repositorySlug":119,"repositoryName":120,"repositoryPathWithNamespace":121,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":290,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:468e216727412da95f47a2ef","pypi:tornado@6.5.7","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":295,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":290,"direct":82,"development":82,"sourceKind":284,"filePath":296,"blobSha":297,"sourceUrl":298,"commitSha":299},"component:25284362925a0f2ac3a8d70f","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-assistant-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"id":301,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":290,"direct":82,"development":82,"sourceKind":284,"filePath":302,"blobSha":303,"sourceUrl":304,"commitSha":299},"component:ea9ab0d043bbd9de3e117f21","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock",{"id":306,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":290,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":307,"sourceUrl":308,"commitSha":299},"component:127e332d31295197d407a5e4","77989726989ea666c8557d105b2bf2c064daa319","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fuv.lock",{"id":310,"repositoryId":131,"repositorySlug":132,"repositoryName":133,"repositoryPathWithNamespace":134,"ecosystem":80,"name":81,"identity":79,"version":136,"versionKey":311,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":312,"sourceUrl":313,"commitSha":314},"component:81e1d700a9a12b3a5200a276","pypi:tornado@6.4.2","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":316,"repositoryId":138,"repositorySlug":139,"repositoryName":140,"repositoryPathWithNamespace":141,"ecosystem":80,"name":81,"identity":79,"version":143,"versionKey":317,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":318,"sourceUrl":319,"commitSha":320},"component:88e1d813595963166665c683","pypi:tornado@6.5.4","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":322,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":80,"name":81,"identity":79,"version":114,"versionKey":323,"direct":82,"development":45,"sourceKind":324,"filePath":325,"blobSha":326,"sourceUrl":327,"commitSha":328},"component:fe3e87d6682474c2a27cc6b4","pypi:tornado@6.5.2","poetry-lock","blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":330,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":80,"name":81,"identity":79,"version":115,"versionKey":331,"direct":82,"development":45,"sourceKind":324,"filePath":55,"blobSha":332,"sourceUrl":333,"commitSha":328},"component:bfc165cd163f99483cdc3aa8","pypi:tornado@6.5.5","6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock",{"id":335,"repositoryId":145,"repositorySlug":146,"repositoryName":147,"repositoryPathWithNamespace":148,"ecosystem":80,"name":81,"identity":79,"version":136,"versionKey":311,"direct":82,"development":82,"sourceKind":336,"filePath":337,"blobSha":338,"sourceUrl":339,"commitSha":340},"component:647ae8d2994ca9e39738a930","sbom-json","sbom.json","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":342,"repositoryId":151,"repositorySlug":152,"repositoryName":153,"repositoryPathWithNamespace":154,"ecosystem":80,"name":81,"identity":79,"version":114,"versionKey":323,"direct":82,"development":82,"sourceKind":284,"filePath":54,"blobSha":343,"sourceUrl":344,"commitSha":345},"component:96eb4b63e8d21246865d2b37","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","d72ec94b58729e8b5e32caa9484867ec13add189",{"repositories":347,"vulnerabilities":364},[348,350,352,354,356,358,360,362],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":349,"evidenceCount":107},[106],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":351,"evidenceCount":116},[114,115],{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":353,"evidenceCount":32},[106],{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":355,"evidenceCount":32},[129],{"id":131,"slug":132,"name":133,"pathWithNamespace":134,"versions":357,"evidenceCount":32},[136],{"id":138,"slug":139,"name":140,"pathWithNamespace":141,"versions":359,"evidenceCount":32},[143],{"id":145,"slug":146,"name":147,"pathWithNamespace":148,"versions":361,"evidenceCount":32},[136],{"id":151,"slug":152,"name":153,"pathWithNamespace":154,"versions":363,"evidenceCount":32},[114],[365,391,419,444,469,492,513,533,557,572],{"id":88,"slug":366,"dossier":45,"summary":367,"aliases":368,"sourceIds":370,"published":371,"modified":372,"checkedAt":7,"severity":373,"references":377,"versionKeys":390,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[369,173],"CVE-2026-49853",[88,173],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[374],{"type":375,"score":376},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[378,381,383,385,388],{"type":379,"url":380},"WEB","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":382,"url":179},"PACKAGE",{"type":382,"url":384},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":386,"url":387},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":386,"url":389},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[311,283,323,317,331],{"id":89,"slug":392,"dossier":45,"summary":393,"aliases":394,"sourceIds":396,"published":397,"modified":398,"checkedAt":7,"severity":399,"references":406,"versionKeys":418,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[395,166,172],"CVE-2026-35536",[89,166,172],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[400,402,404],{"type":375,"score":401},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":375,"score":403},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":375,"score":405},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[407,409,411,412,414,416],{"type":386,"url":408},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":379,"url":410},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":382,"url":179},{"type":379,"url":413},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":386,"url":415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":386,"url":417},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[311,283,323,317],{"id":90,"slug":420,"dossier":45,"summary":421,"aliases":422,"sourceIds":424,"published":425,"modified":426,"checkedAt":7,"severity":427,"references":430,"versionKeys":443,"packageCount":32,"repositoryCount":116},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[423,171],"CVE-2025-47287",[90,171],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[428],{"type":375,"score":429},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[431,433,435,437,438,440,441],{"type":379,"url":432},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":386,"url":434},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":379,"url":436},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":382,"url":179},{"type":379,"url":439},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":382,"url":384},{"type":386,"url":442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[311],{"id":91,"slug":445,"dossier":45,"summary":446,"aliases":447,"sourceIds":449,"published":450,"modified":451,"checkedAt":7,"severity":452,"references":454,"versionKeys":467,"packageCount":32,"repositoryCount":468},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[448,168],"CVE-2025-67725",[91,168],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[453],{"type":375,"score":429},[455,457,459,462,464,465],{"type":386,"url":456},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":386,"url":458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":460,"url":461},"FIX","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":379,"url":463},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":382,"url":179},{"type":386,"url":466},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[311,283,323],5,{"id":92,"slug":470,"dossier":45,"summary":471,"aliases":472,"sourceIds":474,"published":475,"modified":476,"checkedAt":7,"severity":477,"references":480,"versionKeys":491,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[473,174],"CVE-2026-49854",[92,174],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[478],{"type":375,"score":479},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[481,483,484,486,487,489],{"type":379,"url":482},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":382,"url":179},{"type":379,"url":485},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":382,"url":384},{"type":386,"url":488},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":386,"url":490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[311,283,323,317,331],{"id":93,"slug":493,"dossier":45,"summary":494,"aliases":495,"sourceIds":497,"published":498,"modified":499,"checkedAt":7,"severity":500,"references":502,"versionKeys":512,"packageCount":32,"repositoryCount":468},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[496,169],"CVE-2025-67726",[93,169],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[501],{"type":375,"score":429},[503,505,507,508,510,511],{"type":386,"url":504},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":386,"url":506},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":460,"url":461},{"type":379,"url":509},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":382,"url":179},{"type":386,"url":466},[311,283,323],{"id":94,"slug":514,"dossier":45,"summary":515,"aliases":516,"sourceIds":518,"published":519,"modified":520,"checkedAt":7,"severity":521,"references":523,"versionKeys":532,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[517,175],"CVE-2026-49855",[94,175],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[522],{"type":375,"score":429},[524,526,527,528,530],{"type":379,"url":525},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":382,"url":179},{"type":382,"url":384},{"type":386,"url":529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":386,"url":531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[311,283,323,317,331],{"id":95,"slug":534,"dossier":45,"summary":535,"aliases":536,"sourceIds":538,"published":539,"modified":540,"checkedAt":7,"severity":541,"references":545,"versionKeys":556,"packageCount":32,"repositoryCount":468},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[537,167],"CVE-2025-67724",[95,167],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[542,543],{"type":375,"score":401},{"type":375,"score":544},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[546,548,550,552,554,555],{"type":386,"url":547},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":386,"url":549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":460,"url":551},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":379,"url":553},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":382,"url":179},{"type":386,"url":466},[311,283,323],{"id":96,"slug":558,"dossier":45,"summary":559,"aliases":560,"sourceIds":561,"published":562,"modified":563,"checkedAt":7,"severity":564,"references":567,"versionKeys":571,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[96],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[565],{"type":375,"score":566},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[568,570],{"type":379,"url":569},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":382,"url":179},[311,283,323,317,331],{"id":97,"slug":573,"dossier":45,"summary":574,"aliases":575,"sourceIds":577,"published":578,"modified":579,"checkedAt":7,"severity":580,"references":585,"versionKeys":598,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[576,170],"CVE-2026-31958",[97,170],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[581,582],{"type":375,"score":429},{"type":583,"score":584},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[586,588,590,592,594,595,596],{"type":386,"url":587},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":386,"url":589},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":379,"url":591},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":379,"url":593},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":382,"url":179},{"type":379,"url":413},{"type":379,"url":597},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[311,283,323,317],1786593601993]