[{"data":1,"prerenderedAt":915},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-transformers-65289303":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":287,"related":354},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-12T14:25:03.090Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-12T14:23:04.538Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":88,"occurrenceCount":89,"directRepositoryCount":37,"versionCount":90,"licenseExpressions":91,"advisoryIds":93,"advisoryCount":119,"verifiedAttestation":45,"repositories":120,"versions":176},"package:pypi:transformers","transformers-65289303","pypi:transformers","pypi","transformers","Transformers","model-runtime",true,{"id":86,"label":87},"hugging-face","Hugging Face",8,11,7,[92],"Apache-2.0",[94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118],"GHSA-29pf-2h5f-8g72","GHSA-37mw-44qp-f5jm","GHSA-4w7r-h757-3r74","GHSA-59p9-h35m-wg4g","GHSA-69w3-r845-3855","GHSA-6rvg-6v2m-4j46","GHSA-9356-575x-2w9m","GHSA-fgcw-684q-jj6r","GHSA-fpwr-67px-3qhx","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-phhr-52qp-3mj4","GHSA-q2wp-rjmx-x6x9","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-rcv9-qm8p-9p6j","GHSA-wrfc-pvp9-mr9g","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218",25,[121,128,135,142,149,156,163,170],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":34},"opencode:8712","opencode-8712","F13-RAG","landeshauptstadt-muenchen\u002Ff-13-rag",[127],"4.57.3",{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[134],"4.57.1",{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":140,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[141],"4.53.1",{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":147,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[148],"4.57.6",{"id":150,"slug":151,"name":152,"pathWithNamespace":153,"versions":154,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[155],"4.51.3",{"id":157,"slug":158,"name":159,"pathWithNamespace":160,"versions":161,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[162],"4.47.1",{"id":164,"slug":165,"name":166,"pathWithNamespace":167,"versions":168,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[169],"4.57.4",{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":175,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[134],[177,214,226,238,251,263,275],{"version":162,"repositoryCount":32,"occurrenceCount":32,"ageDays":178,"advisoryIds":179,"metadata":180},602,[94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118],{"state":181,"checkedAt":182,"publishedAt":183,"deprecated":45,"deprecatedReason":184,"licenses":185,"advisoryIds":186,"links":204,"relatedProjects":208,"attestations":212,"verifiedAttestation":45,"projectStatus":213},"resolved","2026-08-12T03:23:44.487Z","2024-12-17T15:42:35Z",null,[92],[94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,187,188,189,111,112,113,114,115,116,117,118,190,191,192,193,194,195,196,197,198,199,200,201,202,203],"PYSEC-2024-227","PYSEC-2024-228","PYSEC-2024-229","PYSEC-2025-40","PYSEC-2026-1977","PYSEC-2026-1980","PYSEC-2026-1981","PYSEC-2026-1982","PYSEC-2026-1983","PYSEC-2026-1984","PYSEC-2026-1985","PYSEC-2026-1986","PYSEC-2026-1987","PYSEC-2026-1988","PYSEC-2026-2288","PYSEC-2026-2289","PYSEC-2026-2290",[205],{"label":206,"url":207},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",[209],{"id":210,"relationType":206,"relationProvenance":211},"github.com\u002Fhuggingface\u002Ftransformers","UNVERIFIED_METADATA",[],"active",{"version":155,"repositoryCount":32,"occurrenceCount":32,"ageDays":215,"advisoryIds":216,"metadata":217},485,[94,95,96,97,98,100,101,105,109,111,112,113,114,115,116,117,118],{"state":181,"checkedAt":182,"publishedAt":218,"deprecated":45,"deprecatedReason":184,"licenses":219,"advisoryIds":220,"links":221,"relatedProjects":223,"attestations":225,"verifiedAttestation":45,"projectStatus":213},"2025-04-14T08:13:43Z",[92],[94,95,96,97,98,100,101,105,109,111,112,113,114,115,116,117,118,191,192,193,195,198,200,201,202,203],[222],{"label":206,"url":207},[224],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":141,"repositoryCount":32,"occurrenceCount":32,"ageDays":227,"advisoryIds":228,"metadata":229},404,[94,98,101,111,112,113,114,115,116,117,118],{"state":181,"checkedAt":182,"publishedAt":230,"deprecated":45,"deprecatedReason":184,"licenses":231,"advisoryIds":232,"links":233,"relatedProjects":235,"attestations":237,"verifiedAttestation":45,"projectStatus":213},"2025-07-04T08:28:37Z",[92],[94,98,101,111,112,113,114,115,116,117,118,201,202,203],[234],{"label":206,"url":207},[236],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":134,"repositoryCount":239,"occurrenceCount":239,"ageDays":240,"advisoryIds":241,"metadata":242},2,301,[94,98,101,117,118],{"state":181,"checkedAt":182,"publishedAt":243,"deprecated":45,"deprecatedReason":184,"licenses":244,"advisoryIds":245,"links":246,"relatedProjects":248,"attestations":250,"verifiedAttestation":45,"projectStatus":213},"2025-10-14T15:39:23Z",[92],[94,98,101,117,118,201,202,203],[247],{"label":206,"url":207},[249],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":127,"repositoryCount":32,"occurrenceCount":34,"ageDays":252,"advisoryIds":253,"metadata":254},259,[94,98,101,117],{"state":181,"checkedAt":182,"publishedAt":255,"deprecated":45,"deprecatedReason":184,"licenses":256,"advisoryIds":257,"links":258,"relatedProjects":260,"attestations":262,"verifiedAttestation":45,"projectStatus":213},"2025-11-25T15:51:26Z",[92],[94,98,101,117,201,202,203],[259],{"label":206,"url":207},[261],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":169,"repositoryCount":32,"occurrenceCount":32,"ageDays":264,"advisoryIds":265,"metadata":266},211,[94,98,101,117],{"state":181,"checkedAt":182,"publishedAt":267,"deprecated":45,"deprecatedReason":184,"licenses":268,"advisoryIds":269,"links":270,"relatedProjects":272,"attestations":274,"verifiedAttestation":45,"projectStatus":213},"2026-01-13T11:04:40Z",[92],[94,98,101,117,201,202,203],[271],{"label":206,"url":207},[273],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":148,"repositoryCount":32,"occurrenceCount":32,"ageDays":276,"advisoryIds":277,"metadata":278},208,[94,98,101,117],{"state":181,"checkedAt":182,"publishedAt":279,"deprecated":45,"deprecatedReason":184,"licenses":280,"advisoryIds":281,"links":282,"relatedProjects":284,"attestations":286,"verifiedAttestation":45,"projectStatus":213},"2026-01-16T10:38:31Z",[92],[94,98,101,117,201,202,203],[283],{"label":206,"url":207},[285],{"id":210,"relationType":206,"relationProvenance":211},[],{"occurrences":288,"occurrenceCount":89},[289,296,304,309,314,319,325,331,337,343,349],{"id":290,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":80,"name":81,"identity":79,"version":134,"versionKey":291,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":293,"sourceUrl":294,"commitSha":295},"component:395be99a5328f264667dc515","pypi:transformers@4.57.1","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":297,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":298,"direct":45,"development":45,"sourceKind":299,"filePath":300,"blobSha":301,"sourceUrl":302,"commitSha":303},"component:fbf0f55fa357a51198ac661d","pypi:transformers@4.57.3","exact-manifest-pin","requirements-dev.txt","76efb9a752987481ba23ef081e7e3a05d59ed513","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-dev.txt","ddae51bb41a08acf9c1bcdee5dc8ce92df04649c",{"id":305,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":298,"direct":45,"development":45,"sourceKind":299,"filePath":306,"blobSha":307,"sourceUrl":308,"commitSha":303},"component:a12ccf7f1c803c76a6843ed7","requirements-gpu.txt","8c2dfe24b230ff6ad5cc0779e7e45ce51a1e20a1","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.txt",{"id":310,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":298,"direct":45,"development":45,"sourceKind":299,"filePath":311,"blobSha":312,"sourceUrl":313,"commitSha":303},"component:a6094080ecd81390ad348adc","requirements-testing.txt","a62dcf771b99cedee4157c93a2e50d10f678e585","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-testing.txt",{"id":315,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":298,"direct":45,"development":45,"sourceKind":299,"filePath":316,"blobSha":317,"sourceUrl":318,"commitSha":303},"component:1cf39a2552c7bf1805db6df0","requirements.txt","da215299c628b804b28789cb8267236418948d82","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements.txt",{"id":320,"repositoryId":136,"repositorySlug":137,"repositoryName":138,"repositoryPathWithNamespace":139,"ecosystem":80,"name":81,"identity":79,"version":141,"versionKey":321,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":322,"sourceUrl":323,"commitSha":324},"component:0444c983afc1c7181c1da8e2","pypi:transformers@4.53.1","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":326,"repositoryId":143,"repositorySlug":144,"repositoryName":145,"repositoryPathWithNamespace":146,"ecosystem":80,"name":81,"identity":79,"version":148,"versionKey":327,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":328,"sourceUrl":329,"commitSha":330},"component:2fe8dcf72a2ed6b598e18dd1","pypi:transformers@4.57.6","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":332,"repositoryId":150,"repositorySlug":151,"repositoryName":152,"repositoryPathWithNamespace":153,"ecosystem":80,"name":81,"identity":79,"version":155,"versionKey":333,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":334,"sourceUrl":335,"commitSha":336},"component:78195b67a2c175e3450ff0ef","pypi:transformers@4.51.3","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":338,"repositoryId":157,"repositorySlug":158,"repositoryName":159,"repositoryPathWithNamespace":160,"ecosystem":80,"name":81,"identity":79,"version":162,"versionKey":339,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":340,"sourceUrl":341,"commitSha":342},"component:07e6d714743f77c8dacbbd3f","pypi:transformers@4.47.1","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":344,"repositoryId":164,"repositorySlug":165,"repositoryName":166,"repositoryPathWithNamespace":167,"ecosystem":80,"name":81,"identity":79,"version":169,"versionKey":345,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":346,"sourceUrl":347,"commitSha":348},"component:bec14d97b4bcaa8d5c3cd7c3","pypi:transformers@4.57.4","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":350,"repositoryId":171,"repositorySlug":172,"repositoryName":173,"repositoryPathWithNamespace":174,"ecosystem":80,"name":81,"identity":79,"version":134,"versionKey":291,"direct":184,"development":184,"sourceKind":292,"filePath":54,"blobSha":351,"sourceUrl":352,"commitSha":353},"component:a51c3ed3ad058dae4245dc1b","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"repositories":355,"vulnerabilities":372},[356,358,360,362,364,366,368,370],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":357,"evidenceCount":34},[127],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":359,"evidenceCount":32},[134],{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":361,"evidenceCount":32},[141],{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":363,"evidenceCount":32},[148],{"id":150,"slug":151,"name":152,"pathWithNamespace":153,"versions":365,"evidenceCount":32},[155],{"id":157,"slug":158,"name":159,"pathWithNamespace":160,"versions":367,"evidenceCount":32},[162],{"id":164,"slug":165,"name":166,"pathWithNamespace":167,"versions":369,"evidenceCount":32},[169],{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":371,"evidenceCount":32},[134],[373,400,427,452,474,500,522,546,585,607,637,661,685,706,733,759,785,809,823,836,849,862,875,888,901],{"id":94,"slug":374,"dossier":45,"summary":375,"aliases":376,"sourceIds":378,"published":379,"modified":380,"checkedAt":7,"severity":381,"references":385,"versionKeys":399,"packageCount":32,"repositoryCount":88},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[377,202],"CVE-2026-4372",[94,202],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[382],{"type":383,"score":384},"CVSS_V3","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[386,389,392,394,397],{"type":387,"url":388},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":390,"url":391},"FIX","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":393,"url":207},"PACKAGE",{"type":395,"url":396},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":387,"url":398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[339,333,321,291,298,345,327],{"id":95,"slug":401,"dossier":45,"summary":402,"aliases":403,"sourceIds":405,"published":406,"modified":407,"checkedAt":7,"severity":408,"references":411,"versionKeys":426,"packageCount":32,"repositoryCount":239},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[404,191],"CVE-2025-3933",[95,191],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[409],{"type":383,"score":410},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[412,414,417,419,420,422,424],{"type":387,"url":413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":415,"url":416},"WEB","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":415,"url":418},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":393,"url":207},{"type":415,"url":421},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":393,"url":423},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":387,"url":425},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[339,333],{"id":96,"slug":428,"dossier":45,"summary":429,"aliases":430,"sourceIds":432,"published":433,"modified":434,"checkedAt":7,"severity":435,"references":438,"versionKeys":451,"packageCount":32,"repositoryCount":239},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[431,192],"CVE-2025-6921",[96,192],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[436],{"type":383,"score":437},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[439,441,443,445,446,448,449],{"type":387,"url":440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":415,"url":442},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":415,"url":444},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":393,"url":207},{"type":415,"url":447},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":393,"url":423},{"type":387,"url":450},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[339,333],{"id":97,"slug":453,"dossier":45,"summary":454,"aliases":455,"sourceIds":457,"published":458,"modified":459,"checkedAt":7,"severity":460,"references":462,"versionKeys":473,"packageCount":32,"repositoryCount":239},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[456,193],"CVE-2025-6638",[97,193],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[461],{"type":383,"score":437},[463,465,466,467,468,470,471],{"type":387,"url":464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":415,"url":442},{"type":415,"url":444},{"type":393,"url":207},{"type":415,"url":469},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":393,"url":423},{"type":387,"url":472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[339,333],{"id":98,"slug":475,"dossier":45,"summary":476,"aliases":477,"sourceIds":479,"published":480,"modified":481,"checkedAt":7,"severity":482,"references":487,"versionKeys":499,"packageCount":32,"repositoryCount":88},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[478,201],"CVE-2026-1839",[98,201],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[483,485],{"type":383,"score":484},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":383,"score":486},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[488,490,492,493,495,497],{"type":387,"url":489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":390,"url":491},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":393,"url":207},{"type":415,"url":494},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":395,"url":496},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":387,"url":498},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[339,333,321,291,298,345,327],{"id":99,"slug":501,"dossier":45,"summary":502,"aliases":503,"sourceIds":505,"published":506,"modified":507,"checkedAt":7,"severity":508,"references":510,"versionKeys":521,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[504,194],"CVE-2024-12720",[99,194],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[509],{"type":383,"score":437},[511,513,515,516,518,519],{"type":387,"url":512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":415,"url":514},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":393,"url":207},{"type":415,"url":517},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":393,"url":423},{"type":387,"url":520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[339],{"id":100,"slug":523,"dossier":45,"summary":524,"aliases":525,"sourceIds":527,"published":528,"modified":529,"checkedAt":7,"severity":530,"references":532,"versionKeys":545,"packageCount":32,"repositoryCount":239},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[526,195],"CVE-2025-5197",[100,195],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[531],{"type":383,"score":437},[533,535,537,539,540,542,543],{"type":387,"url":534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":415,"url":536},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":415,"url":538},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":393,"url":207},{"type":415,"url":541},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":393,"url":423},{"type":387,"url":544},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[339,333],{"id":101,"slug":547,"dossier":45,"summary":548,"aliases":549,"sourceIds":551,"published":552,"modified":553,"checkedAt":7,"severity":554,"references":559,"versionKeys":584,"packageCount":32,"repositoryCount":88},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[550,203],"CVE-2026-5241",[101,203],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[555,557],{"type":383,"score":556},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":383,"score":558},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[560,562,564,566,568,570,572,575,576,578,580,582],{"type":387,"url":561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":390,"url":563},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":387,"url":565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":387,"url":567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":415,"url":569},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":415,"url":571},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":573,"url":574},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":393,"url":207},{"type":415,"url":577},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":395,"url":579},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":415,"url":581},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":387,"url":583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[339,333,321,291,298,345,327],{"id":102,"slug":586,"dossier":45,"summary":502,"aliases":587,"sourceIds":589,"published":590,"modified":591,"checkedAt":7,"severity":592,"references":595,"versionKeys":606,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[588,196],"CVE-2025-1194",[102,196],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[593],{"type":383,"score":594},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[596,598,600,601,603,604],{"type":387,"url":597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":415,"url":599},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":393,"url":207},{"type":415,"url":602},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":393,"url":423},{"type":387,"url":605},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[339],{"id":103,"slug":608,"dossier":45,"summary":609,"aliases":610,"sourceIds":612,"published":613,"modified":614,"checkedAt":7,"severity":615,"references":620,"versionKeys":636,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[611,189],"CVE-2024-11394",[103,189],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[616,618],{"type":383,"score":617},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":383,"score":619},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[621,623,625,627,628,630,632,634],{"type":387,"url":622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":415,"url":624},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":415,"url":626},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":393,"url":207},{"type":415,"url":629},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":415,"url":631},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":387,"url":633},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":387,"url":635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[339],{"id":104,"slug":638,"dossier":45,"summary":639,"aliases":640,"sourceIds":642,"published":643,"modified":644,"checkedAt":7,"severity":645,"references":647,"versionKeys":660,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[641,197],"CVE-2025-3264",[104,197],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[646],{"type":383,"score":437},[648,650,652,654,655,657,658],{"type":387,"url":649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":415,"url":651},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":415,"url":653},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":393,"url":207},{"type":415,"url":656},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":393,"url":423},{"type":387,"url":659},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[339],{"id":105,"slug":662,"dossier":45,"summary":663,"aliases":664,"sourceIds":666,"published":643,"modified":667,"checkedAt":7,"severity":668,"references":671,"versionKeys":684,"packageCount":32,"repositoryCount":239},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[665,198],"CVE-2025-3777",[105,198],"2026-07-07T17:56:47.225461188Z",[669],{"type":383,"score":670},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[672,674,676,677,679,681,682],{"type":387,"url":673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":415,"url":675},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":393,"url":207},{"type":415,"url":678},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":415,"url":680},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":393,"url":423},{"type":387,"url":683},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[339,333],{"id":106,"slug":686,"dossier":45,"summary":687,"aliases":688,"sourceIds":690,"published":643,"modified":691,"checkedAt":7,"severity":692,"references":694,"versionKeys":705,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[689,199],"CVE-2025-3263",[106,199],"2026-07-07T17:56:57.889099913Z",[693],{"type":383,"score":437},[695,697,698,699,700,702,703],{"type":387,"url":696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":415,"url":651},{"type":415,"url":653},{"type":393,"url":207},{"type":415,"url":701},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":393,"url":423},{"type":387,"url":704},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[339],{"id":107,"slug":707,"dossier":45,"summary":708,"aliases":709,"sourceIds":711,"published":712,"modified":713,"checkedAt":7,"severity":714,"references":718,"versionKeys":732,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[710,190],"CVE-2025-2099",[107,190],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[715,716],{"type":383,"score":437},{"type":383,"score":717},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[719,721,723,725,726,728,730],{"type":387,"url":720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":415,"url":722},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":390,"url":724},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":393,"url":207},{"type":415,"url":727},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":415,"url":729},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":387,"url":731},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[339],{"id":108,"slug":734,"dossier":45,"summary":609,"aliases":735,"sourceIds":737,"published":738,"modified":739,"checkedAt":7,"severity":740,"references":744,"versionKeys":758,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[736,187],"CVE-2024-11392",[108,187],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[741,743],{"type":383,"score":742},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":383,"score":619},[745,747,748,749,750,752,754,756],{"type":387,"url":746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":415,"url":624},{"type":415,"url":626},{"type":393,"url":207},{"type":415,"url":751},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":415,"url":753},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":387,"url":755},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":387,"url":757},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[339],{"id":109,"slug":760,"dossier":45,"summary":761,"aliases":762,"sourceIds":764,"published":765,"modified":766,"checkedAt":7,"severity":767,"references":769,"versionKeys":784,"packageCount":32,"repositoryCount":239},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[763,200],"CVE-2025-6051",[109,200],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[768],{"type":383,"score":437},[770,772,774,776,778,779,781,782],{"type":387,"url":771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":415,"url":773},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":415,"url":775},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":415,"url":777},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":393,"url":207},{"type":415,"url":780},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":393,"url":423},{"type":387,"url":783},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[339,333],{"id":110,"slug":786,"dossier":45,"summary":609,"aliases":787,"sourceIds":789,"published":613,"modified":790,"checkedAt":7,"severity":791,"references":794,"versionKeys":808,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[788,188],"CVE-2024-11393",[110,188],"2026-06-10T17:00:13.252500033Z",[792,793],{"type":383,"score":617},{"type":383,"score":619},[795,797,798,799,800,802,804,806],{"type":387,"url":796},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":415,"url":624},{"type":415,"url":626},{"type":393,"url":207},{"type":415,"url":801},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":415,"url":803},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":387,"url":805},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":387,"url":807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[339],{"id":111,"slug":810,"dossier":45,"summary":184,"aliases":811,"sourceIds":813,"published":814,"modified":815,"checkedAt":7,"severity":816,"references":818,"versionKeys":821,"packageCount":32,"repositoryCount":822},"pysec-2025-211-d8bd15de",[812],"CVE-2025-14920",[111],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[817],{"type":383,"score":384},[819],{"type":387,"url":820},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[339,333,321],3,{"id":112,"slug":824,"dossier":45,"summary":184,"aliases":825,"sourceIds":827,"published":828,"modified":829,"checkedAt":7,"severity":830,"references":832,"versionKeys":835,"packageCount":32,"repositoryCount":822},"pysec-2025-212-a011b97d",[826],"CVE-2025-14921",[112],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[831],{"type":383,"score":384},[833],{"type":387,"url":834},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[339,333,321],{"id":113,"slug":837,"dossier":45,"summary":184,"aliases":838,"sourceIds":840,"published":841,"modified":842,"checkedAt":7,"severity":843,"references":845,"versionKeys":848,"packageCount":32,"repositoryCount":822},"pysec-2025-213-9043dc9b",[839],"CVE-2025-14924",[113],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[844],{"type":383,"score":384},[846],{"type":387,"url":847},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[339,333,321],{"id":114,"slug":850,"dossier":45,"summary":184,"aliases":851,"sourceIds":853,"published":854,"modified":855,"checkedAt":7,"severity":856,"references":858,"versionKeys":861,"packageCount":32,"repositoryCount":822},"pysec-2025-214-eb241255",[852],"CVE-2025-14926",[114],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[857],{"type":383,"score":384},[859],{"type":387,"url":860},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[339,333,321],{"id":115,"slug":863,"dossier":45,"summary":184,"aliases":864,"sourceIds":866,"published":867,"modified":868,"checkedAt":7,"severity":869,"references":871,"versionKeys":874,"packageCount":32,"repositoryCount":822},"pysec-2025-215-6064f491",[865],"CVE-2025-14927",[115],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[870],{"type":383,"score":384},[872],{"type":387,"url":873},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[339,333,321],{"id":116,"slug":876,"dossier":45,"summary":184,"aliases":877,"sourceIds":879,"published":880,"modified":881,"checkedAt":7,"severity":882,"references":884,"versionKeys":887,"packageCount":32,"repositoryCount":822},"pysec-2025-216-5708ed01",[878],"CVE-2025-14928",[116],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[883],{"type":383,"score":384},[885],{"type":387,"url":886},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[339,333,321],{"id":117,"slug":889,"dossier":45,"summary":184,"aliases":890,"sourceIds":892,"published":893,"modified":894,"checkedAt":7,"severity":895,"references":897,"versionKeys":900,"packageCount":32,"repositoryCount":88},"pysec-2025-217-2c1ad388",[891],"CVE-2025-14929",[117],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[896],{"type":383,"score":384},[898],{"type":387,"url":899},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[339,333,321,291,298,345,327],{"id":118,"slug":902,"dossier":45,"summary":184,"aliases":903,"sourceIds":905,"published":906,"modified":907,"checkedAt":7,"severity":908,"references":910,"versionKeys":913,"packageCount":32,"repositoryCount":914},"pysec-2025-218-39811fc3",[904],"CVE-2025-14930",[118],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[909],{"type":383,"score":384},[911],{"type":387,"url":912},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[339,333,321,291],5,1786545166355]