[{"data":1,"prerenderedAt":7680},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-10775":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":320,"related":329},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":110,"artifactResolvedComponentCount":109,"exactManifestPinCount":111,"packageCount":112,"ecosystems":113,"aiPackageCount":115,"licenseExpressionCount":116,"unknownLicensePackageCount":111,"advisoryIds":117,"advisoryCount":318,"providers":319},"opencode:10775","opencode-10775",10775,"Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision","A project experimenting with training costs associated with computer vision model training for object counting tasks. Keywords: uba, umweltbundesamt, ki-lab, computer vision, object counting","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fcommit\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae","2026-05-12T12:59:42.012Z","2026-05-12T12:57:19.000Z",{"complete":89,"entryCount":90,"truncated":45},true,62,[92,102],{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"errorCode":100,"error":101,"componentCount":37},"sbom.json","sbom-json","f6616dd603138e46577a68bafffdf922a23e25aa","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fsbom.json","5ae12d5615c84d40c25d23a8c2e2306ea5f3f1f75a14a27e1c36426ce966c99f",476141,"parse_error","invalid_json","KI Dependency Atlas: SBOM is not valid JSON",{"path":54,"kind":103,"blobSha":104,"sourceUrl":105,"commitSha":84,"contentSha256":106,"byteCount":107,"state":108,"componentCount":109},"uv-lock","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","e2f86442aaca182ff71abf8a0d916c515193ed063af29d024bd5365c66c3aa2c",778375,"parsed",242,244,2,227,[114],"pypi",7,23,[118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317],"GHSA-248v-346w-9cwc","GHSA-27jp-wm6q-gp25","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2f96-g7mh-g2hx","GHSA-2g68-c3qc-8985","GHSA-2h4p-vjrc-8xpq","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3rp5-jjmw-4wv2","GHSA-3x9g-8vmp-wqvf","GHSA-42h5-h8qh-vv9v","GHSA-43qf-4rqw-9q2g","GHSA-45hq-cxwh-f6vc","GHSA-46r5-x6jq-v8g6","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4x5p-f36r-mxxr","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-539m-9xh6-q6rr","GHSA-53q9-r3pm-6pq6","GHSA-59p9-h35m-wg4g","GHSA-5qmp-p3c4-72qj","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-62q4-447f-wv8h","GHSA-63vm-454h-vhhq","GHSA-65h7-c7c4-mghx","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-69w3-r845-3855","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6w46-j5rx-g56g","GHSA-7545-fcxq-7j24","GHSA-75cm-x2w3-8mgf","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-7qhf-v65m-g5f3","GHSA-7rxf-gvfg-47g4","GHSA-82w8-qh3p-5jfq","GHSA-84pr-m4jr-85g5","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8c7q-86fq-vvmh","GHSA-8m59-7xv8-735h","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-8vgw-p6qm-5gr7","GHSA-9356-575x-2w9m","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-9xwg-3r6f-jcx2","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2m9-wcf4-cwwx","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-fgcw-684q-jj6r","GHSA-fh64-r2vc-xvhr","GHSA-fhff-qmm8-h2fp","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fjrm-76x2-c4q4","GHSA-fpwr-67px-3qhx","GHSA-g35p-px32-whv6","GHSA-g6cj-pr64-35w5","GHSA-g6pg-52vf-843h","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm37-52c6-37mw","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq3w-7jj3-x7gr","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-hh9p-6wh2-4mfc","GHSA-hm4w-wwcw-mr6r","GHSA-hmq2-w58f-27jc","GHSA-hxwh-jpp2-84pm","GHSA-hxxf-235m-72v3","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm78-9fvv-mhgr","GHSA-jp82-jpqv-5vv3","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m4p7-r5rc-7g4j","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mv93-w799-cj2w","GHSA-p423-j2cm-9vmq","GHSA-p538-c434-8v24","GHSA-pg7v-jwj7-p798","GHSA-pgqp-8h46-6x4j","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2r8-vmq7-fpx2","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r23q-823p-vmf7","GHSA-r5m9-wm49-959f","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rvhj-8chj-8v3c","GHSA-rwj8-pgh3-r573","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-vgrw-7cvw-pwgx","GHSA-vhcx-3pq2-4fvc","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-w5xq-c4pf-ghq7","GHSA-w853-jp5j-5j7f","GHSA-wf7f-8fxf-xfxc","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-wvpp-8hx9-p66j","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xch3-2f9x-wh9f","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286",200,[],{"files":321,"occurrenceCount":110},[322,327,328],{"path":323,"kind":324,"sourceUrl":325,"commitSha":84,"blobSha":326,"state":108,"componentCount":111},"pyproject.toml","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fpyproject.toml","d0cfb5226b0a23dc8e2f95f26b3acccdf2c3e09f",{"path":93,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":84,"contentSha256":97,"byteCount":98,"state":99,"errorCode":100,"error":101,"componentCount":37},{"path":54,"kind":103,"blobSha":104,"sourceUrl":105,"commitSha":84,"contentSha256":106,"byteCount":107,"state":108,"componentCount":109},{"packages":330,"vulnerabilities":2395},[331,345,357,367,377,386,395,405,414,424,436,445,456,466,475,484,494,504,513,523,532,541,551,560,569,578,588,597,606,615,624,633,642,651,660,669,678,687,696,705,714,724,733,742,751,760,769,778,787,796,805,814,823,832,841,850,858,867,876,886,895,903,912,921,930,939,948,957,966,975,984,993,1002,1011,1020,1029,1038,1047,1056,1065,1074,1083,1094,1103,1112,1121,1130,1139,1148,1157,1166,1175,1184,1193,1202,1210,1219,1228,1237,1246,1255,1264,1273,1282,1291,1300,1308,1317,1326,1335,1344,1353,1362,1371,1380,1389,1398,1406,1414,1423,1432,1441,1450,1459,1468,1478,1488,1498,1508,1516,1526,1536,1546,1556,1566,1576,1586,1595,1605,1614,1623,1631,1639,1647,1656,1664,1672,1681,1690,1700,1709,1718,1727,1736,1744,1753,1762,1770,1780,1789,1798,1807,1815,1824,1832,1841,1850,1859,1868,1877,1886,1894,1903,1912,1921,1930,1939,1948,1957,1966,1975,1985,1994,2003,2012,2021,2029,2038,2047,2056,2065,2074,2083,2092,2102,2111,2119,2127,2136,2145,2154,2163,2172,2180,2189,2198,2207,2216,2225,2234,2243,2252,2261,2270,2278,2288,2296,2305,2314,2323,2333,2341,2350,2359,2368,2377,2386],{"id":332,"slug":333,"identity":334,"label":335,"aiRelevant":89,"provider":336,"advisoryCount":339,"licenseExpressions":340,"versions":342,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":344},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":337,"label":338},"hugging-face","Hugging Face",25,[341],"Apache-2.0",[343],"4.57.4",[54],{"id":346,"slug":347,"identity":348,"label":349,"aiRelevant":89,"provider":350,"advisoryCount":116,"licenseExpressions":351,"versions":353,"dossier":89,"occurrenceCount":111,"directOccurrenceCount":32,"evidenceFiles":356},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,[352],"BSD-3-Clause",[354,355],"2.7.1+cpu","2.9.1",[323,54],{"id":358,"slug":359,"identity":360,"label":361,"aiRelevant":89,"provider":350,"advisoryCount":37,"licenseExpressions":362,"versions":364,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":366},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",[363],"MIT",[365],"3.2.1",[54],{"id":368,"slug":369,"identity":370,"label":371,"aiRelevant":89,"provider":350,"advisoryCount":37,"licenseExpressions":372,"versions":374,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":376},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[373],"non-standard",[375],"0.22.2",[54],{"id":378,"slug":379,"identity":380,"label":381,"aiRelevant":89,"provider":350,"advisoryCount":37,"licenseExpressions":382,"versions":383,"dossier":89,"occurrenceCount":111,"directOccurrenceCount":32,"evidenceFiles":385},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[341],[384],"4.11.0.86",[323,54],{"id":387,"slug":388,"identity":389,"label":390,"aiRelevant":89,"provider":350,"advisoryCount":37,"licenseExpressions":391,"versions":392,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":394},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[352,373],[393],"1.8.0",[54],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":89,"provider":350,"advisoryCount":37,"licenseExpressions":400,"versions":402,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":404},"package:pypi:ultralytics","ultralytics-df6c7359","pypi:ultralytics","Ultralytics",[401],"AGPL-3.0",[403],"8.3.252",[54],{"id":406,"slug":407,"identity":408,"label":409,"aiRelevant":45,"provider":350,"advisoryCount":116,"licenseExpressions":410,"versions":411,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":413},"package:pypi:mlflow","mlflow-43f98b3c","pypi:mlflow","mlflow",[373],[412],"3.8.1",[54],{"id":415,"slug":416,"identity":417,"label":418,"aiRelevant":45,"provider":350,"advisoryCount":419,"licenseExpressions":420,"versions":421,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":423},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",22,[352],[422],"3.1.46",[54],{"id":425,"slug":426,"identity":427,"label":428,"aiRelevant":45,"provider":350,"advisoryCount":429,"licenseExpressions":430,"versions":433,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":435},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[431,432],"HPND","MIT-CMU",[434],"12.1.0",[54],{"id":437,"slug":438,"identity":439,"label":440,"aiRelevant":45,"provider":350,"advisoryCount":40,"licenseExpressions":441,"versions":442,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":444},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[341],[443],"6.5.4",[54],{"id":446,"slug":447,"identity":448,"label":449,"aiRelevant":45,"provider":350,"advisoryCount":450,"licenseExpressions":451,"versions":453,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":455},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[452],"Apache-2.0 OR BSD-3-Clause",[454],"46.0.3",[54],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":45,"provider":350,"advisoryCount":461,"licenseExpressions":462,"versions":463,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":465},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",8,[352],[464],"0.50.0",[54],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":45,"provider":350,"advisoryCount":115,"licenseExpressions":471,"versions":472,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":474},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[363],[473],"2.6.3",[54],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":45,"provider":350,"advisoryCount":64,"licenseExpressions":480,"versions":481,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":483},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[352,373],[482],"3.1.5",[54],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":45,"provider":350,"advisoryCount":489,"licenseExpressions":490,"versions":491,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":493},"package:pypi:flask-cors","flask-cors-348fb6bb","pypi:flask-cors","flask-cors",5,[363],[492],"6.0.2",[54],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":45,"provider":350,"advisoryCount":489,"licenseExpressions":499,"versions":501,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":503},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[500],"BSD-2-Clause",[502],"0.6.1",[54],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":45,"provider":350,"advisoryCount":34,"licenseExpressions":509,"versions":510,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":512},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[352,373],[511],"3.1.6",[54],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":45,"provider":350,"advisoryCount":518,"licenseExpressions":519,"versions":520,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":522},"package:pypi:pymdown-extensions","pymdown-extensions-74c5b54c","pypi:pymdown-extensions","pymdown-extensions",3,[363],[521],"10.21.2",[54],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":45,"provider":350,"advisoryCount":518,"licenseExpressions":528,"versions":529,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":531},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[341],[530],"2.32.5",[54],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":45,"provider":350,"advisoryCount":518,"licenseExpressions":537,"versions":538,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":540},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[363],[539],"80.9.0",[54],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":45,"provider":350,"advisoryCount":111,"licenseExpressions":546,"versions":548,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":550},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[363,547],"Unlicense",[549],"3.20.3",[54],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":45,"provider":350,"advisoryCount":111,"licenseExpressions":556,"versions":557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[363],[558],"1.3.10",[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":350,"advisoryCount":111,"licenseExpressions":565,"versions":566,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[352],[567],"6.33.4",[54],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":350,"advisoryCount":111,"licenseExpressions":574,"versions":575,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":577},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[341],[576],"1.55.0",[54],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":583,"versions":585,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":587},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[584],"MPL-2.0",[586],"2026.1.4",[54],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":593,"versions":594,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":596},"package:pypi:click","click-ef97f731","pypi:click","click",[352,373],[595],"8.3.1",[54],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":602,"versions":603,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":605},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[352,373],[604],"3.1.2",[54],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":611,"versions":612,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":614},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[363],[613],"4.61.1",[54],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":620,"versions":621,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":623},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[363],[622],"0.16.0",[54],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":629,"versions":630,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":632},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[352,373],[631],"3.11",[54],{"id":634,"slug":635,"identity":636,"label":637,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":638,"versions":639,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":641},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[352,373],[640],"5.9.1",[54],{"id":643,"slug":644,"identity":645,"label":646,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":647,"versions":648,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":650},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[373],[649],"1.5.6",[54],{"id":652,"slug":653,"identity":654,"label":655,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":656,"versions":657,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":659},"package:pypi:marimo","marimo-47407878","pypi:marimo","marimo",[341],[658],"0.23.4",[54],{"id":661,"slug":662,"identity":663,"label":664,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":665,"versions":666,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":668},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[352],[667],"3.10",[54],{"id":670,"slug":671,"identity":672,"label":673,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":674,"versions":675,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":677},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[341,373],[676],"22.0.0",[54],{"id":679,"slug":680,"identity":681,"label":682,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":683,"versions":684,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":686},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[500],[685],"2.19.2",[54],{"id":688,"slug":689,"identity":690,"label":691,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":692,"versions":693,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":695},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[363],[694],"9.0.2",[54],{"id":697,"slug":698,"identity":699,"label":700,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":701,"versions":702,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":704},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[352],[703],"1.2.1",[54],{"id":706,"slug":707,"identity":708,"label":709,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":710,"versions":711,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":713},"package:pypi:sqlparse","sqlparse-96380dda","pypi:sqlparse","sqlparse",[373],[712],"0.5.5",[54],{"id":715,"slug":716,"identity":717,"label":718,"aiRelevant":45,"provider":350,"advisoryCount":32,"licenseExpressions":719,"versions":721,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":723},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[720],"MIT AND MPL-2.0",[722],"4.67.1",[54],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":729,"versions":730,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":732},"package:pypi:absl-py","absl-py-50126725","pypi:absl-py","absl-py",[341],[731],"2.3.1",[54],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":738,"versions":739,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":741},"package:pypi:addict","addict-db588a7d","pypi:addict","addict",[363],[740],"2.4.0",[54],{"id":743,"slug":744,"identity":745,"label":746,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":747,"versions":748,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":750},"package:pypi:albucore","albucore-2d92e9fa","pypi:albucore","albucore",[373],[749],"0.0.24",[54],{"id":752,"slug":753,"identity":754,"label":755,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":756,"versions":757,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":759},"package:pypi:albumentations","albumentations-d333cb03","pypi:albumentations","albumentations",[373],[758],"2.0.8",[54],{"id":761,"slug":762,"identity":763,"label":764,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":765,"versions":766,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":768},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[363],[767],"1.18.0",[54],{"id":770,"slug":771,"identity":772,"label":773,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":774,"versions":775,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":777},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[373],[776],"6.0.0",[54],{"id":779,"slug":780,"identity":781,"label":782,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":783,"versions":784,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":786},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[363],[785],"0.0.4",[54],{"id":788,"slug":789,"identity":790,"label":791,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":792,"versions":793,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":795},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[363],[794],"0.7.0",[54],{"id":797,"slug":798,"identity":799,"label":800,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":801,"versions":802,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":804},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[373],[803],"4.9.3",[54],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":810,"versions":811,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":813},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[363],[812],"4.12.1",[54],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":819,"versions":820,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":822},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[373],[821],"0.1.4",[54],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":828,"versions":829,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":831},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[373],[830],"1.4.0",[54],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":837,"versions":838,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":840},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[341],[839],"3.0.1",[54],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":846,"versions":847,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":849},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[363],[848],"25.4.0",[54],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":855,"versions":856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":857},"package:pypi:autograd","autograd-3303bc3f","pypi:autograd","autograd",[373],[393],[54],{"id":859,"slug":860,"identity":861,"label":862,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":863,"versions":864,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":866},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[363],[865],"1.9.0",[54],{"id":868,"slug":869,"identity":870,"label":871,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":872,"versions":873,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":875},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[363],[874],"6.2.4",[54],{"id":877,"slug":878,"identity":879,"label":880,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":881,"versions":883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":885},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[363,882],"MIT-0",[884],"2.0.0",[54],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":891,"versions":892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":894},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[363],[893],"3.4.4",[54],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":900,"versions":901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":902},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[352],[604],[54],{"id":904,"slug":905,"identity":906,"label":907,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":908,"versions":909,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":911},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[373],[910],"0.4.6",[54],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":917,"versions":918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":920},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[363],[919],"6.10.1",[54],{"id":922,"slug":923,"identity":924,"label":925,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":926,"versions":927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":929},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[373],[928],"0.2.3",[54],{"id":931,"slug":932,"identity":933,"label":934,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":935,"versions":936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":938},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[373],[937],"1.3.3",[54],{"id":940,"slug":941,"identity":942,"label":943,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":944,"versions":945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":947},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[373],[946],"0.12.1",[54],{"id":949,"slug":950,"identity":951,"label":952,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":953,"versions":954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":956},"package:pypi:databricks-sdk","databricks-sdk-26867d3a","pypi:databricks-sdk","databricks-sdk",[373],[955],"0.77.0",[54],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":962,"versions":963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":965},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[363],[964],"1.8.19",[54],{"id":967,"slug":968,"identity":969,"label":970,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":971,"versions":972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":974},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[500,373],[973],"5.2.1",[54],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":980,"versions":981,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":983},"package:pypi:docker","docker-fa61cb72","pypi:docker","docker",[341],[982],"7.1.0",[54],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":989,"versions":990,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":992},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[373],[991],"0.22.4",[54],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":998,"versions":999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1001},"package:pypi:escnn","escnn-7e2e5c8e","pypi:escnn","escnn",[373],[1000],"1.0.11",[54],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1007,"versions":1008,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1010},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[363],[1009],"2.2.1",[54],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1016,"versions":1017,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1019},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[363],[1018],"0.128.0",[54],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1025,"versions":1026,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1028},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[363],[1027],"0.20.0",[54],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1034,"versions":1035,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1037},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[352,373],[1036],"2026.1.0",[54],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1043,"versions":1044,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1046},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[373],[1045],"4.0.12",[54],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1052,"versions":1053,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1055},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[341],[1054],"2.47.0",[54],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1061,"versions":1062,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1064},"package:pypi:graphene","graphene-e89251f5","pypi:graphene","graphene",[363],[1063],"3.4.3",[54],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1070,"versions":1071,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1073},"package:pypi:graphql-core","graphql-core-6d217145","pypi:graphql-core","graphql-core",[363],[1072],"3.2.7",[54],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1079,"versions":1080,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1082},"package:pypi:graphql-relay","graphql-relay-f4584f38","pypi:graphql-relay","graphql-relay",[363],[1081],"3.2.0",[54],{"id":1084,"slug":1085,"identity":1086,"label":1087,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1088,"versions":1091,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1093},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[363,1089,1090],"MIT AND PSF-2.0","MIT AND Python-2.0",[1092],"3.3.0",[54],{"id":1095,"slug":1096,"identity":1097,"label":1098,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1099,"versions":1100,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1102},"package:pypi:groundingdino-py","groundingdino-py-f92a519c","pypi:groundingdino-py","groundingdino-py",[373],[1101],"0.4.0",[54],{"id":1104,"slug":1105,"identity":1106,"label":1107,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1108,"versions":1109,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1111},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[341],[1110],"1.76.0",[54],{"id":1113,"slug":1114,"identity":1115,"label":1116,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1117,"versions":1118,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1120},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[363],[1119],"23.0.0",[54],{"id":1122,"slug":1123,"identity":1124,"label":1125,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1126,"versions":1127,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1129},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[341],[1128],"1.2.0",[54],{"id":1131,"slug":1132,"identity":1133,"label":1134,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1135,"versions":1136,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1138},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[352],[1137],"1.0.9",[54],{"id":1140,"slug":1141,"identity":1142,"label":1143,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1144,"versions":1145,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1147},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[352],[1146],"0.27.2",[54],{"id":1149,"slug":1150,"identity":1151,"label":1152,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1153,"versions":1154,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1156},"package:pypi:huey","huey-1045cc1e","pypi:huey","huey",[363],[1155],"2.6.0",[54],{"id":1158,"slug":1159,"identity":1160,"label":1161,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1162,"versions":1163,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1165},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[341,373],[1164],"0.36.0",[54],{"id":1167,"slug":1168,"identity":1169,"label":1170,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1171,"versions":1172,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1174},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[363],[1173],"1.3.2",[54],{"id":1176,"slug":1177,"identity":1178,"label":1179,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1180,"versions":1181,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1183},"package:pypi:imageio","imageio-b31e54e3","pypi:imageio","imageio",[500],[1182],"2.37.2",[54],{"id":1185,"slug":1186,"identity":1187,"label":1188,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1189,"versions":1190,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1192},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[341,373],[1191],"8.7.1",[54],{"id":1194,"slug":1195,"identity":1196,"label":1197,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1198,"versions":1199,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1201},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[363],[1200],"2.3.0",[54],{"id":1203,"slug":1204,"identity":1205,"label":1206,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1207,"versions":1208,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1209},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[352,373],[982],[54],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1215,"versions":1216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1218},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[352],[1217],"9.9.0",[54],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1224,"versions":1225,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1227},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[373],[1226],"1.1.1",[54],{"id":1229,"slug":1230,"identity":1231,"label":1232,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1233,"versions":1234,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1236},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[352],[1235],"8.1.8",[54],{"id":1238,"slug":1239,"identity":1240,"label":1241,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1242,"versions":1243,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1245},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[352,373],[1244],"2.2.0",[54],{"id":1247,"slug":1248,"identity":1249,"label":1250,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1251,"versions":1252,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1254},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[363],[1253],"0.19.2",[54],{"id":1256,"slug":1257,"identity":1258,"label":1259,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1260,"versions":1261,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1263},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[352],[1262],"1.5.3",[54],{"id":1265,"slug":1266,"identity":1267,"label":1268,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1269,"versions":1270,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1272},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[363],[1271],"4.26.0",[54],{"id":1274,"slug":1275,"identity":1276,"label":1277,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1278,"versions":1279,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1281},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[363],[1280],"2025.9.1",[54],{"id":1283,"slug":1284,"identity":1285,"label":1286,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1287,"versions":1288,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1290},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[373],[1289],"8.8.0",[54],{"id":1292,"slug":1293,"identity":1294,"label":1295,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1296,"versions":1297,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1299},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[352,373],[1298],"3.0.16",[54],{"id":1301,"slug":1302,"identity":1303,"label":1304,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1305,"versions":1306,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1307},"package:pypi:jwt","jwt-16a64554","pypi:jwt","jwt",[373],[830],[54],{"id":1309,"slug":1310,"identity":1311,"label":1312,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1313,"versions":1314,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1316},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[373],[1315],"1.4.9",[54],{"id":1318,"slug":1319,"identity":1320,"label":1321,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1322,"versions":1323,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1325},"package:pypi:lazy-loader","lazy-loader-5e67832b","pypi:lazy-loader","lazy-loader",[373],[1324],"0.4",[54],{"id":1327,"slug":1328,"identity":1329,"label":1330,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1331,"versions":1332,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1334},"package:pypi:lie-learn","lie-learn-02b94107","pypi:lie-learn","lie-learn",[373],[1333],"0.0.2",[54],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1340,"versions":1341,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1343},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[341],[1342],"0.15.2",[54],{"id":1345,"slug":1346,"identity":1347,"label":1348,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1349,"versions":1350,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1352},"package:pypi:loro","loro-52ec71d9","pypi:loro","loro",[],[1351],"1.10.3",[54],{"id":1354,"slug":1355,"identity":1356,"label":1357,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1358,"versions":1359,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1361},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[363],[1360],"4.0.0",[54],{"id":1363,"slug":1364,"identity":1365,"label":1366,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1367,"versions":1368,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1370},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[352,373],[1369],"3.0.3",[54],{"id":1372,"slug":1373,"identity":1374,"label":1375,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1376,"versions":1377,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1379},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[373],[1378],"3.10.8",[54],{"id":1381,"slug":1382,"identity":1383,"label":1384,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1385,"versions":1386,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1388},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[352,373],[1387],"0.2.1",[54],{"id":1390,"slug":1391,"identity":1392,"label":1393,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1394,"versions":1395,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1397},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[363],[1396],"0.1.2",[54],{"id":1399,"slug":1400,"identity":1401,"label":1402,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1403,"versions":1404,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1405},"package:pypi:mlflow-skinny","mlflow-skinny-05e8b169","pypi:mlflow-skinny","mlflow-skinny",[373],[412],[54],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1411,"versions":1412,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1413},"package:pypi:mlflow-tracing","mlflow-tracing-6ac72d11","pypi:mlflow-tracing","mlflow-tracing",[373],[412],[54],{"id":1415,"slug":1416,"identity":1417,"label":1418,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1419,"versions":1420,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1422},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[373],[1421],"1.3.0",[54],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1428,"versions":1429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1431},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[352,373],[1430],"0.21.1",[54],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1437,"versions":1438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1440},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[341],[1439],"6.7.1",[54],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1446,"versions":1447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1449},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[363,373],[1448],"2.16.0",[54],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1455,"versions":1456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1458},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[373],[1457],"1.6.0",[54],{"id":1460,"slug":1461,"identity":1462,"label":1463,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1464,"versions":1465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1467},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[352,373],[1466],"3.6.1",[54],{"id":1469,"slug":1470,"identity":1471,"label":1472,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1473,"versions":1475,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1477},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1474,373],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1476],"1.26.4",[54],{"id":1479,"slug":1480,"identity":1481,"label":1482,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1483,"versions":1484,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1487},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[373],[1485,1486],"12.6.4.1","12.8.4.1",[54],{"id":1489,"slug":1490,"identity":1491,"label":1492,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1493,"versions":1494,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1497},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[373],[1495,1496],"12.6.80","12.8.90",[54],{"id":1499,"slug":1500,"identity":1501,"label":1502,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1503,"versions":1504,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1507},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[373],[1505,1506],"12.6.77","12.8.93",[54],{"id":1509,"slug":1510,"identity":1511,"label":1512,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1513,"versions":1514,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1515},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[373],[1505,1496],[54],{"id":1517,"slug":1518,"identity":1519,"label":1520,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1521,"versions":1522,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1525},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[373],[1523,1524],"9.10.2.21","9.5.1.17",[54],{"id":1527,"slug":1528,"identity":1529,"label":1530,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1531,"versions":1532,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1535},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[373],[1533,1534],"11.3.0.4","11.3.3.83",[54],{"id":1537,"slug":1538,"identity":1539,"label":1540,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1541,"versions":1542,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1545},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[373],[1543,1544],"1.11.1.6","1.13.1.3",[54],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1551,"versions":1552,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1555},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[373],[1553,1554],"10.3.7.77","10.3.9.90",[54],{"id":1557,"slug":1558,"identity":1559,"label":1560,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1561,"versions":1562,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1565},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[373],[1563,1564],"11.7.1.2","11.7.3.90",[54],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1571,"versions":1572,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1575},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[373],[1573,1574],"12.5.4.2","12.5.8.93",[54],{"id":1577,"slug":1578,"identity":1579,"label":1580,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1581,"versions":1582,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1585},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[373],[1583,1584],"0.6.3","0.7.1",[54],{"id":1587,"slug":1588,"identity":1589,"label":1590,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1591,"versions":1592,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1594},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[373],[1593],"13.590.44",[54],{"id":1596,"slug":1597,"identity":1598,"label":1599,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1600,"versions":1601,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1604},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[352,373],[1602,1603],"2.26.2","2.27.5",[54],{"id":1606,"slug":1607,"identity":1608,"label":1609,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1610,"versions":1611,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1613},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[373],[1612,1506],"12.6.85",[54],{"id":1615,"slug":1616,"identity":1617,"label":1618,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1619,"versions":1620,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1622},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[352,373],[1621],"3.3.20",[54],{"id":1624,"slug":1625,"identity":1626,"label":1627,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1628,"versions":1629,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":1630},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[341,373],[1505,1496],[54],{"id":1632,"slug":1633,"identity":1634,"label":1635,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1636,"versions":1637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1638},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[352],[1200],[54],{"id":1640,"slug":1641,"identity":1642,"label":1643,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1644,"versions":1645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1646},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[341],[384],[54],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1652,"versions":1653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1655},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[341],[1654],"1.39.1",[54],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1661,"versions":1662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1663},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[341],[1654],[54],{"id":1665,"slug":1666,"identity":1667,"label":1668,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1669,"versions":1670,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1671},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[341],[1654],[54],{"id":1673,"slug":1674,"identity":1675,"label":1676,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1677,"versions":1678,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1680},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[341],[1679],"0.60b1",[54],{"id":1682,"slug":1683,"identity":1684,"label":1685,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1686,"versions":1687,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1689},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[352,363],[1688],"4.6.0",[54],{"id":1691,"slug":1692,"identity":1693,"label":1694,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1695,"versions":1697,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1699},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1696,373],"Apache-2.0 OR BSD-2-Clause",[1698],"25.0",[54],{"id":1701,"slug":1702,"identity":1703,"label":1704,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1705,"versions":1706,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1708},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[373],[1707],"2.3.3",[54],{"id":1710,"slug":1711,"identity":1712,"label":1713,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1714,"versions":1715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1717},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[363],[1716],"0.8.5",[54],{"id":1719,"slug":1720,"identity":1721,"label":1722,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1723,"versions":1724,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1726},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[373],[1725],"4.9.0",[54],{"id":1728,"slug":1729,"identity":1730,"label":1731,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1732,"versions":1733,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1735},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[363],[1734],"4.5.1",[54],{"id":1737,"slug":1738,"identity":1739,"label":1740,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1741,"versions":1742,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1743},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[363],[1457],[54],{"id":1745,"slug":1746,"identity":1747,"label":1748,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1749,"versions":1750,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1752},"package:pypi:plyer","plyer-d8181744","pypi:plyer","plyer",[363],[1751],"2.1.0",[54],{"id":1754,"slug":1755,"identity":1756,"label":1757,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1758,"versions":1759,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1761},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[363,373],[1760],"1.37.1",[54],{"id":1763,"slug":1764,"identity":1765,"label":1766,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1767,"versions":1768,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1769},"package:pypi:polars-runtime-32","polars-runtime-32-7674b461","pypi:polars-runtime-32","polars-runtime-32",[363],[1760],[54],{"id":1771,"slug":1772,"identity":1773,"label":1774,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1775,"versions":1777,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1779},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[341,1776],"Apache-2.0 AND BSD-2-Clause",[1778],"0.24.0",[54],{"id":1781,"slug":1782,"identity":1783,"label":1784,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1785,"versions":1786,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1788},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[352,373],[1787],"3.0.52",[54],{"id":1790,"slug":1791,"identity":1792,"label":1793,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1794,"versions":1795,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1797},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[352],[1796],"7.2.1",[54],{"id":1799,"slug":1800,"identity":1801,"label":1802,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1803,"versions":1805,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1806},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1804],"ISC",[794],[54],{"id":1808,"slug":1809,"identity":1810,"label":1811,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1812,"versions":1813,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1814},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[363],[928],[54],{"id":1816,"slug":1817,"identity":1818,"label":1819,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1820,"versions":1821,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1823},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[363],[1822],"9.0.0",[54],{"id":1825,"slug":1826,"identity":1827,"label":1828,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1829,"versions":1830,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1831},"package:pypi:py3nj","py3nj-c13787b2","pypi:py3nj","py3nj",[373],[1387],[54],{"id":1833,"slug":1834,"identity":1835,"label":1836,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1837,"versions":1838,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1840},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[373],[1839],"0.4.2",[54],{"id":1842,"slug":1843,"identity":1844,"label":1845,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1846,"versions":1847,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1849},"package:pypi:pycocotools","pycocotools-65bdc5df","pypi:pycocotools","pycocotools",[373],[1848],"2.0.11",[54],{"id":1851,"slug":1852,"identity":1853,"label":1854,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1855,"versions":1856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1858},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[352],[1857],"2.23",[54],{"id":1860,"slug":1861,"identity":1862,"label":1863,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1864,"versions":1865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1867},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[363],[1866],"2.12.5",[54],{"id":1869,"slug":1870,"identity":1871,"label":1872,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1873,"versions":1874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1876},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[363],[1875],"2.41.5",[54],{"id":1878,"slug":1879,"identity":1880,"label":1881,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1882,"versions":1883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1885},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[341],[1884],"0.9.1",[54],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1891,"versions":1892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1893},"package:pypi:pymanopt","pymanopt-8143db2d","pypi:pymanopt","pymanopt",[352],[1009],[54],{"id":1895,"slug":1896,"identity":1897,"label":1898,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1899,"versions":1900,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1902},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[363],[1901],"3.3.1",[54],{"id":1904,"slug":1905,"identity":1906,"label":1907,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1908,"versions":1909,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1911},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[373],[1910],"2.9.0.post0",[54],{"id":1913,"slug":1914,"identity":1915,"label":1916,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1917,"versions":1918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1920},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[363],[1919],"2025.2",[54],{"id":1922,"slug":1923,"identity":1924,"label":1925,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1926,"versions":1927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1929},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1928],"311",[54],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1935,"versions":1936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1938},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[363],[1937],"6.0.3",[54],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1944,"versions":1945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1947},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[373],[1946],"27.1.0",[54],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1953,"versions":1954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1956},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[363],[1955],"2.1.1",[54],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1962,"versions":1963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1965},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[363],[1964],"3.14.3",[54],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1971,"versions":1972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1974},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[363],[1973],"0.37.0",[54],{"id":1976,"slug":1977,"identity":1978,"label":1979,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1980,"versions":1982,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1984},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1981,373],"Apache-2.0 AND CNRI-Python",[1983],"2025.11.3",[54],{"id":1986,"slug":1987,"identity":1988,"label":1989,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1990,"versions":1991,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1993},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[363],[1992],"14.2.0",[54],{"id":1995,"slug":1996,"identity":1997,"label":1998,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":1999,"versions":2000,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2002},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[363],[2001],"0.30.0",[54],{"id":2004,"slug":2005,"identity":2006,"label":2007,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2008,"versions":2009,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2011},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[341],[2010],"4.9.1",[54],{"id":2013,"slug":2014,"identity":2015,"label":2016,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2017,"versions":2018,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2020},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[363],[2019],"0.14.11",[54],{"id":2022,"slug":2023,"identity":2024,"label":2025,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2026,"versions":2027,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2028},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[373],[794],[54],{"id":2030,"slug":2031,"identity":2032,"label":2033,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2034,"versions":2035,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2037},"package:pypi:scikit-image","scikit-image-a25c228c","pypi:scikit-image","scikit-image",[373],[2036],"0.26.0",[54],{"id":2039,"slug":2040,"identity":2041,"label":2042,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2043,"versions":2044,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2046},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[373],[2045],"1.16.3",[54],{"id":2048,"slug":2049,"identity":2050,"label":2051,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2052,"versions":2053,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2055},"package:pypi:seaborn","seaborn-1018de9a","pypi:seaborn","seaborn",[373],[2054],"0.13.2",[54],{"id":2057,"slug":2058,"identity":2059,"label":2060,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2061,"versions":2062,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2064},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[373],[2063],"1.5.4",[54],{"id":2066,"slug":2067,"identity":2068,"label":2069,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2070,"versions":2071,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2073},"package:pypi:simsimd","simsimd-7089790e","pypi:simsimd","simsimd",[341],[2072],"6.5.12",[54],{"id":2075,"slug":2076,"identity":2077,"label":2078,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2079,"versions":2080,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2082},"package:pypi:six","six-3c3888bd","pypi:six","six",[363],[2081],"1.17.0",[54],{"id":2084,"slug":2085,"identity":2086,"label":2087,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2088,"versions":2089,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2091},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[352],[2090],"5.0.2",[54],{"id":2093,"slug":2094,"identity":2095,"label":2096,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2097,"versions":2099,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2101},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2098],"Apache-2.0 OR MIT",[2100],"1.3.1",[54],{"id":2103,"slug":2104,"identity":2105,"label":2106,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2107,"versions":2108,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2110},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[363],[2109],"2.0.45",[54],{"id":2112,"slug":2113,"identity":2114,"label":2115,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2116,"versions":2117,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2118},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[363],[1583],[54],{"id":2120,"slug":2121,"identity":2122,"label":2123,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2124,"versions":2125,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2126},"package:pypi:stringzilla","stringzilla-f268dc86","pypi:stringzilla","stringzilla",[341],[1688],[54],{"id":2128,"slug":2129,"identity":2130,"label":2131,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2132,"versions":2133,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2135},"package:pypi:supervision","supervision-c48208b7","pypi:supervision","supervision",[363],[2134],"0.6.0",[54],{"id":2137,"slug":2138,"identity":2139,"label":2140,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2141,"versions":2142,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2144},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[373],[2143],"1.14.0",[54],{"id":2146,"slug":2147,"identity":2148,"label":2149,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2150,"versions":2151,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2153},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[341],[2152],"9.1.4",[54],{"id":2155,"slug":2156,"identity":2157,"label":2158,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2159,"versions":2160,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2162},"package:pypi:tensorboard","tensorboard-f5e14cf1","pypi:tensorboard","tensorboard",[341],[2161],"2.20.0",[54],{"id":2164,"slug":2165,"identity":2166,"label":2167,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2168,"versions":2169,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2171},"package:pypi:tensorboard-data-server","tensorboard-data-server-d2a4e5d5","pypi:tensorboard-data-server","tensorboard-data-server",[341],[2170],"0.7.2",[54],{"id":2173,"slug":2174,"identity":2175,"label":2176,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2177,"versions":2178,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2179},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[363],[1092],[54],{"id":2181,"slug":2182,"identity":2183,"label":2184,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2185,"versions":2186,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2188},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[352],[2187],"3.6.0",[54],{"id":2190,"slug":2191,"identity":2192,"label":2193,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2194,"versions":2195,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2197},"package:pypi:tifffile","tifffile-6dc31d57","pypi:tifffile","tifffile",[352],[2196],"2025.12.20",[54],{"id":2199,"slug":2200,"identity":2201,"label":2202,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2203,"versions":2204,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2206},"package:pypi:timm","timm-4594fb75","pypi:timm","timm",[341],[2205],"1.0.24",[54],{"id":2208,"slug":2209,"identity":2210,"label":2211,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2212,"versions":2213,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2215},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[363],[2214],"0.10.2",[54],{"id":2217,"slug":2218,"identity":2219,"label":2220,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2221,"versions":2222,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2224},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[363],[2223],"0.14.0",[54],{"id":2226,"slug":2227,"identity":2228,"label":2229,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2230,"versions":2231,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2233},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[341],[2232],"1.8.2",[54],{"id":2235,"slug":2236,"identity":2237,"label":2238,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2239,"versions":2240,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2242},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[373],[2241],"0.24.1",[54],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2248,"versions":2249,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2251},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[373],[2250],"5.14.3",[54],{"id":2253,"slug":2254,"identity":2255,"label":2256,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2257,"versions":2258,"dossier":45,"occurrenceCount":111,"directOccurrenceCount":37,"evidenceFiles":2260},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[363],[1901,2259],"3.5.1",[54],{"id":2262,"slug":2263,"identity":2264,"label":2265,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2266,"versions":2267,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2269},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[363],[2268],"0.0.11",[54],{"id":2271,"slug":2272,"identity":2273,"label":2274,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2275,"versions":2276,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2277},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[363],[1430],[54],{"id":2279,"slug":2280,"identity":2281,"label":2282,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2283,"versions":2285,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2287},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[2284,373],"PSF-2.0",[2286],"4.15.0",[54],{"id":2289,"slug":2290,"identity":2291,"label":2292,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2293,"versions":2294,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2295},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[363],[1839],[54],{"id":2297,"slug":2298,"identity":2299,"label":2300,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2301,"versions":2302,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2304},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[341],[2303],"2025.3",[54],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2310,"versions":2311,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2313},"package:pypi:ultralytics-thop","ultralytics-thop-5d33dc12","pypi:ultralytics-thop","ultralytics-thop",[401],[2312],"2.0.18",[54],{"id":2315,"slug":2316,"identity":2317,"label":2318,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2319,"versions":2320,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2322},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[352],[2321],"0.40.0",[54],{"id":2324,"slug":2325,"identity":2326,"label":2327,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2328,"versions":2330,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2332},"package:pypi:waitress","waitress-e47950e2","pypi:waitress","waitress",[2329],"ZPL-2.1",[2331],"3.0.2",[54],{"id":2334,"slug":2335,"identity":2336,"label":2337,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2338,"versions":2339,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2340},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[341],[776],[54],{"id":2342,"slug":2343,"identity":2344,"label":2345,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2346,"versions":2347,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2349},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[363],[2348],"0.2.14",[54],{"id":2351,"slug":2352,"identity":2353,"label":2354,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2355,"versions":2356,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2358},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[352],[2357],"16.0",[54],{"id":2360,"slug":2361,"identity":2362,"label":2363,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2364,"versions":2365,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2367},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[352],[2366],"4.0.15",[54],{"id":2369,"slug":2370,"identity":2371,"label":2372,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2373,"versions":2374,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2376},"package:pypi:yapf","yapf-c7689856","pypi:yapf","yapf",[373],[2375],"0.43.0",[54],{"id":2378,"slug":2379,"identity":2380,"label":2381,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2382,"versions":2383,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2385},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[363],[2384],"3.4.0",[54],{"id":2387,"slug":2388,"identity":2389,"label":2390,"aiRelevant":45,"provider":350,"advisoryCount":37,"licenseExpressions":2391,"versions":2392,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2394},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[363],[2393],"3.23.0",[54],[2396,2435,2457,2489,2520,2552,2578,2611,2643,2675,2702,2745,2771,2798,2819,2839,2868,2898,2930,2964,2998,3024,3044,3070,3099,3124,3162,3185,3204,3230,3253,3293,3328,3358,3381,3404,3434,3461,3515,3539,3566,3595,3622,3643,3669,3692,3728,3751,3775,3806,3836,3864,3889,3920,3959,3986,4008,4034,4052,4079,4130,4154,4193,4225,4258,4281,4313,4336,4362,4387,4406,4427,4461,4487,4505,4535,4561,4593,4617,4673,4705,4729,4761,4786,4820,4846,4874,4913,4944,4971,4999,5017,5043,5066,5097,5125,5149,5182,5210,5233,5256,5284,5312,5346,5361,5394,5418,5436,5457,5479,5518,5548,5570,5597,5622,5640,5662,5709,5734,5760,5783,5805,5827,5858,5879,5896,5917,5938,5965,5992,6017,6041,6065,6089,6104,6130,6154,6176,6203,6237,6256,6292,6318,6350,6377,6404,6431,6456,6509,6537,6555,6582,6612,6632,6664,6691,6712,6732,6758,6786,6810,6837,6864,6905,6928,6958,6980,7032,7055,7089,7114,7132,7155,7187,7206,7233,7260,7285,7305,7322,7341,7358,7379,7395,7410,7427,7442,7459,7476,7493,7506,7519,7532,7545,7558,7571,7584,7597,7619,7650],{"id":118,"slug":2397,"dossier":45,"summary":2398,"aliases":2399,"sourceIds":2402,"published":2403,"modified":2404,"checkedAt":7,"severity":2405,"references":2409,"versionKeys":2433,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2400,2401],"CVE-2024-39689","PYSEC-2024-230",[118,2401],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2406],{"type":2407,"score":2408},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2410,2413,2415,2418,2421,2424,2427,2429,2431],{"type":2411,"url":2412},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2411,"url":2414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2416,"url":2417},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2419,"url":2420},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2422,"url":2423},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2425,"url":2426},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2422,"url":2428},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2411,"url":2430},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2411,"url":2432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2434],"pypi:certifi@2024.6.2",{"id":119,"slug":2436,"dossier":45,"summary":2437,"aliases":2438,"sourceIds":2439,"published":2440,"modified":2441,"checkedAt":7,"severity":2442,"references":2446,"versionKeys":2455,"packageCount":32,"repositoryCount":111},"ghsa-27jp-wm6q-gp25-5ce03f88","sqlparse: formatting list of tuples leads to denial of service",[],[119],"2026-02-13T16:16:11Z","2026-02-19T02:59:07.083683Z",[2443],{"type":2444,"score":2445},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2447,2449,2451,2453],{"type":2422,"url":2448},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fsecurity\u002Fadvisories\u002FGHSA-27jp-wm6q-gp25",{"type":2422,"url":2450},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fcommit\u002F40ed3aa958657fa4a82055927fa9de70ab903360",{"type":2419,"url":2452},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse",{"type":2422,"url":2454},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Freleases\u002Ftag\u002F0.5.4",[2456],"pypi:sqlparse@0.5.3",{"id":120,"slug":2458,"dossier":45,"summary":2459,"aliases":2460,"sourceIds":2463,"published":2464,"modified":2465,"checkedAt":7,"severity":2466,"references":2469,"versionKeys":2481,"packageCount":32,"repositoryCount":461},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2461,2462],"CVE-2026-4372","PYSEC-2026-2289",[120,2462],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2467],{"type":2407,"score":2468},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2470,2472,2474,2476,2479],{"type":2411,"url":2471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2416,"url":2473},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2419,"url":2475},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2477,"url":2478},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2411,"url":2480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2482,2483,2484,2485,2486,2487,2488],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":121,"slug":2490,"dossier":45,"summary":2491,"aliases":2492,"sourceIds":2495,"published":2496,"modified":2497,"checkedAt":7,"severity":2498,"references":2503,"versionKeys":2514,"packageCount":32,"repositoryCount":64},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2493,2494],"CVE-2026-27199","PYSEC-2026-2320",[121,2494],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2499,2501],{"type":2444,"score":2500},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2407,"score":2502},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2504,2506,2508,2510,2512],{"type":2411,"url":2505},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2411,"url":2507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2416,"url":2509},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2419,"url":2511},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2411,"url":2513},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2515,2516,2517,2518,2519],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":122,"slug":2521,"dossier":45,"summary":2522,"aliases":2523,"sourceIds":2526,"published":2527,"modified":2528,"checkedAt":7,"severity":2529,"references":2531,"versionKeys":2548,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2524,2525],"CVE-2025-54121","PYSEC-2026-1941",[122,2525],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2530],{"type":2407,"score":2502},[2532,2534,2536,2538,2540,2542,2544,2546],{"type":2422,"url":2533},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2411,"url":2535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2416,"url":2537},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2419,"url":2539},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2422,"url":2541},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2422,"url":2543},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2419,"url":2545},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2411,"url":2547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2549,2550,2551],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":123,"slug":2553,"dossier":45,"summary":2554,"aliases":2555,"sourceIds":2557,"published":2558,"modified":2559,"checkedAt":7,"severity":2560,"references":2563,"versionKeys":2574,"packageCount":32,"repositoryCount":34},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[2556],"CVE-2026-67325",[123],"2026-07-21T19:43:43Z","2026-08-02T03:56:45.052208380Z",[2561],{"type":2407,"score":2562},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2564,2566,2568,2570,2572],{"type":2422,"url":2565},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":2422,"url":2567},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":2422,"url":2569},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":2419,"url":2571},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2422,"url":2573},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",[2575,2576,2577],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":124,"slug":2579,"dossier":45,"summary":2580,"aliases":2581,"sourceIds":2584,"published":2585,"modified":2586,"checkedAt":7,"severity":2587,"references":2590,"versionKeys":2610,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2582,2583],"CVE-2024-34069","PYSEC-2026-2043",[124,2583],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2588],{"type":2407,"score":2589},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2591,2593,2595,2597,2598,2600,2602,2604,2606,2608],{"type":2422,"url":2592},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2411,"url":2594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2422,"url":2596},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2419,"url":2511},{"type":2422,"url":2599},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2422,"url":2601},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2422,"url":2603},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2422,"url":2605},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2419,"url":2607},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2411,"url":2609},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2515],{"id":125,"slug":2612,"dossier":45,"summary":2613,"aliases":2614,"sourceIds":2617,"published":2618,"modified":2619,"checkedAt":7,"severity":2620,"references":2623,"versionKeys":2640,"packageCount":32,"repositoryCount":489},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2615,2616],"CVE-2026-44307","PYSEC-2026-2617",[125,2616],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2621],{"type":2444,"score":2622},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2624,2626,2628,2630,2632,2634,2636,2638],{"type":2422,"url":2625},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2411,"url":2627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2422,"url":2629},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2422,"url":2631},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2419,"url":2633},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2422,"url":2635},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2419,"url":2637},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2411,"url":2639},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2641,2642],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":126,"slug":2644,"dossier":89,"summary":2645,"aliases":2646,"sourceIds":2649,"published":2650,"modified":2651,"checkedAt":7,"severity":2652,"references":2655,"versionKeys":2668,"packageCount":32,"repositoryCount":2674},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2647,2648],"CVE-2025-66471","PYSEC-2026-1994",[126,2648],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2653],{"type":2444,"score":2654},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2656,2658,2660,2662,2664,2666],{"type":2422,"url":2657},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2411,"url":2659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2416,"url":2661},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2419,"url":2663},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2419,"url":2665},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2411,"url":2667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2669,2670,2671,2672,2673],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":127,"slug":2676,"dossier":45,"summary":2677,"aliases":2678,"sourceIds":2681,"published":2682,"modified":2683,"checkedAt":7,"severity":2684,"references":2687,"versionKeys":2700,"packageCount":32,"repositoryCount":111},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[2679,2680],"CVE-2025-30167","PYSEC-2026-1477",[127,2680],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[2685],{"type":2407,"score":2686},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2688,2690,2692,2694,2696,2698],{"type":2422,"url":2689},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2411,"url":2691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2422,"url":2693},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2419,"url":2695},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2419,"url":2697},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2411,"url":2699},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[2701],"pypi:jupyter-core@5.7.2",{"id":128,"slug":2703,"dossier":45,"summary":2704,"aliases":2705,"sourceIds":2709,"published":2710,"modified":2711,"checkedAt":7,"severity":2712,"references":2719,"versionKeys":2741,"packageCount":32,"repositoryCount":518},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2706,2707,2708],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[128,2708],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2713,2715,2717],{"type":2407,"score":2714},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2444,"score":2716},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2407,"score":2718},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2720,2722,2725,2727,2729,2731,2733,2735,2737,2739],{"type":2411,"url":2721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2723,"url":2724},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2723,"url":2726},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2422,"url":2728},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2419,"url":2730},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2422,"url":2732},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2723,"url":2734},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2411,"url":2736},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2411,"url":2738},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2411,"url":2740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2742,2743,2744],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":129,"slug":2746,"dossier":45,"summary":2747,"aliases":2748,"sourceIds":2751,"published":2752,"modified":2753,"checkedAt":7,"severity":2754,"references":2756,"versionKeys":2770,"packageCount":32,"repositoryCount":111},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2749,2750],"CVE-2025-3933","PYSEC-2026-1977",[129,2750],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2755],{"type":2407,"score":2502},[2757,2759,2761,2763,2764,2766,2768],{"type":2411,"url":2758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2422,"url":2760},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2422,"url":2762},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2419,"url":2475},{"type":2422,"url":2765},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2419,"url":2767},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2411,"url":2769},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2482,2483],{"id":130,"slug":2772,"dossier":89,"summary":2773,"aliases":2774,"sourceIds":2777,"published":2778,"modified":2779,"checkedAt":7,"severity":2780,"references":2784,"versionKeys":2797,"packageCount":32,"repositoryCount":2674},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2775,2776],"CVE-2026-21441","PYSEC-2026-1996",[130,2776],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2781,2783],{"type":2407,"score":2782},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2444,"score":2654},[2785,2787,2789,2791,2792,2794,2795],{"type":2422,"url":2786},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2411,"url":2788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2416,"url":2790},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2419,"url":2663},{"type":2422,"url":2793},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2419,"url":2665},{"type":2411,"url":2796},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2669,2670,2671,2672,2673],{"id":131,"slug":2799,"dossier":45,"summary":2800,"aliases":2801,"sourceIds":2802,"published":2803,"modified":2804,"checkedAt":7,"severity":2805,"references":2808,"versionKeys":2818,"packageCount":32,"repositoryCount":34},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[],[131],"2026-08-03T20:09:56Z","2026-08-08T03:26:54.875954204Z",[2806],{"type":2407,"score":2807},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2809,2811,2813,2815,2816],{"type":2422,"url":2810},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":2422,"url":2812},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":2422,"url":2814},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":2419,"url":2571},{"type":2422,"url":2817},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",[2575,2576,2577],{"id":132,"slug":2820,"dossier":45,"summary":2821,"aliases":2822,"sourceIds":2824,"published":2825,"modified":2826,"checkedAt":7,"severity":2827,"references":2830,"versionKeys":2838,"packageCount":32,"repositoryCount":34},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[2823],"CVE-2026-69097",[132],"2026-07-24T16:22:02Z","2026-08-04T05:41:05.585188057Z",[2828],{"type":2407,"score":2829},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2831,2833,2835,2836],{"type":2422,"url":2832},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":2422,"url":2834},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":2419,"url":2571},{"type":2422,"url":2837},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",[2575,2576,2577],{"id":133,"slug":2840,"dossier":45,"summary":2841,"aliases":2842,"sourceIds":2845,"published":2846,"modified":2847,"checkedAt":7,"severity":2848,"references":2851,"versionKeys":2862,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[2843,2844],"CVE-2026-49853","PYSEC-2026-3387",[133,2844],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[2849],{"type":2407,"score":2850},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2852,2854,2856,2858,2860],{"type":2422,"url":2853},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2419,"url":2855},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2419,"url":2857},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2411,"url":2859},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2411,"url":2861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[2863,2864,2865,2866,2867],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":134,"slug":2869,"dossier":45,"summary":2870,"aliases":2871,"sourceIds":2875,"published":2876,"modified":2877,"checkedAt":7,"severity":2878,"references":2881,"versionKeys":2894,"packageCount":32,"repositoryCount":518},"ghsa-42h5-h8qh-vv9v-4d35a1ef","MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem",[2872,2873,2874],"BIT-mlflow-2026-2614","CVE-2026-2614","PYSEC-2026-2654",[134,2874],"2026-05-11T21:31:35Z","2026-07-13T16:42:45.636199436Z",[2879],{"type":2407,"score":2880},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2882,2884,2886,2888,2890,2892],{"type":2411,"url":2883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2614",{"type":2422,"url":2885},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6e801f4259d96804c73107315b24cef0f6aa115a",{"type":2419,"url":2887},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow",{"type":2422,"url":2889},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F19380271-3fbf-4beb-987e-6fd7069c55e6",{"type":2419,"url":2891},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmlflow",{"type":2411,"url":2893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42h5-h8qh-vv9v",[2895,2896,2897],"pypi:mlflow@3.1.1","pypi:mlflow@3.4.0","pypi:mlflow@3.8.1",{"id":135,"slug":2899,"dossier":45,"summary":2900,"aliases":2901,"sourceIds":2904,"published":2905,"modified":2906,"checkedAt":7,"severity":2907,"references":2910,"versionKeys":2927,"packageCount":32,"repositoryCount":111},"ghsa-43qf-4rqw-9q2g-2b94f083","Flask-CORS vulnerable to Improper Handling of Case Sensitivity",[2902,2903],"CVE-2024-6866","PYSEC-2026-1383",[135,2903],"2025-03-20T12:32:45Z","2026-07-07T17:57:18.348501785Z",[2908],{"type":2407,"score":2909},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2911,2913,2915,2917,2919,2921,2923,2925],{"type":2411,"url":2912},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6866",{"type":2422,"url":2914},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Feb39516a3c96b90d0ae5f51293972395ec3ef358",{"type":2419,"url":2916},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors",{"type":2422,"url":2918},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fextension.py#L195",{"type":2422,"url":2920},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F808c11af-faee-43a8-824b-b5ab4f62b9e6",{"type":2422,"url":2922},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00049.html",{"type":2419,"url":2924},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fflask-cors",{"type":2411,"url":2926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-43qf-4rqw-9q2g",[2928,2929],"pypi:flask-cors@4.0.0","pypi:flask-cors@5.0.1",{"id":136,"slug":2931,"dossier":89,"summary":2932,"aliases":2933,"sourceIds":2937,"published":2938,"modified":2939,"checkedAt":7,"severity":2940,"references":2942,"versionKeys":2955,"packageCount":32,"repositoryCount":2674},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2934,2935,2936],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[136,2936],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[2941],{"type":2407,"score":2782},[2943,2945,2947,2949,2951,2953],{"type":2477,"url":2944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2411,"url":2946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2416,"url":2948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2422,"url":2950},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2419,"url":2952},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2411,"url":2954},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2956,2957,2958,2959,2960,2961,2962,2963],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":137,"slug":2965,"dossier":45,"summary":2966,"aliases":2967,"sourceIds":2971,"published":2972,"modified":2973,"checkedAt":7,"severity":2974,"references":2979,"versionKeys":2997,"packageCount":32,"repositoryCount":518},"ghsa-46r5-x6jq-v8g6-fda1ffbe","MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",[2968,2969,2970],"BIT-mlflow-2026-33866","CVE-2026-33866","PYSEC-2026-94",[137,2970],"2026-04-07T13:16:47Z","2026-06-10T17:02:20.749690187Z",[2975,2977],{"type":2407,"score":2976},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2444,"score":2978},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2980,2982,2984,2986,2988,2990,2991,2993,2995],{"type":2411,"url":2981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33866",{"type":2416,"url":2983},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21708",{"type":2422,"url":2985},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F005b959cacda05d1423356cfcbd9ebeda8ff96a7",{"type":2477,"url":2987},"https:\u002F\u002Fafine.com\u002Fblogs\u002Fattacking-mlflow-how-ml-artifacts-become-attack-vectors",{"type":2422,"url":2989},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865",{"type":2419,"url":2887},{"type":2422,"url":2992},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-94.yaml",{"type":2411,"url":2994},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865\u002F",{"type":2411,"url":2996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-46r5-x6jq-v8g6",[2895,2896,2897],{"id":138,"slug":2999,"dossier":45,"summary":3000,"aliases":3001,"sourceIds":3004,"published":3005,"modified":3006,"checkedAt":7,"severity":3007,"references":3010,"versionKeys":3023,"packageCount":32,"repositoryCount":115},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3002,3003],"CVE-2025-50182","PYSEC-2026-1997",[138,3003],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3008],{"type":2407,"score":3009},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3011,3013,3015,3017,3018,3020,3021],{"type":2422,"url":3012},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2411,"url":3014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2416,"url":3016},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2419,"url":2663},{"type":2422,"url":3019},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2419,"url":2665},{"type":2411,"url":3022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2669,2670,2671,2672],{"id":139,"slug":3025,"dossier":45,"summary":3026,"aliases":3027,"sourceIds":3028,"published":3029,"modified":3030,"checkedAt":7,"severity":3031,"references":3033,"versionKeys":3043,"packageCount":32,"repositoryCount":34},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[],[139],"2026-08-07T15:33:57Z","2026-08-09T02:56:50.755731198Z",[3032],{"type":2407,"score":2807},[3034,3036,3038,3040,3041],{"type":2422,"url":3035},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":2422,"url":3037},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":2422,"url":3039},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":2419,"url":2571},{"type":2422,"url":3042},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",[2575,2576,2577],{"id":140,"slug":3045,"dossier":45,"summary":3046,"aliases":3047,"sourceIds":3050,"published":3051,"modified":3052,"checkedAt":7,"severity":3053,"references":3056,"versionKeys":3069,"packageCount":32,"repositoryCount":111},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3048,3049],"CVE-2025-6921","PYSEC-2026-1980",[140,3049],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[3054],{"type":2407,"score":3055},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3057,3059,3061,3063,3064,3066,3067],{"type":2411,"url":3058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2422,"url":3060},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2422,"url":3062},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2419,"url":2475},{"type":2422,"url":3065},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2419,"url":2767},{"type":2411,"url":3068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2482,2483],{"id":141,"slug":3071,"dossier":89,"summary":3072,"aliases":3073,"sourceIds":3077,"published":3078,"modified":3079,"checkedAt":7,"severity":3080,"references":3083,"versionKeys":3098,"packageCount":32,"repositoryCount":2674},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3074,3075,3076],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[141,3076],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3081],{"type":2407,"score":3082},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3084,3086,3088,3090,3092,3094,3096,3097],{"type":2477,"url":3085},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2411,"url":3087},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2416,"url":3089},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2416,"url":3091},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2416,"url":3093},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2422,"url":3095},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2419,"url":2952},{"type":2411,"url":2954},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":142,"slug":3100,"dossier":45,"summary":3101,"aliases":3102,"sourceIds":3106,"published":3107,"modified":3108,"checkedAt":7,"severity":3109,"references":3112,"versionKeys":3123,"packageCount":32,"repositoryCount":32},"ghsa-4x5p-f36r-mxxr-f02b9eff","mlflow Creates of Temporary File in Directory with Insecure Permissions",[3103,3104,3105],"BIT-mlflow-2025-10279","CVE-2025-10279","PYSEC-2026-1639",[142,3105],"2026-02-02T12:31:14Z","2026-07-07T17:56:10.135090160Z",[3110],{"type":2407,"score":3111},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3113,3115,3117,3118,3120,3121],{"type":2411,"url":3114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-10279",{"type":2422,"url":3116},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a",{"type":2419,"url":2887},{"type":2422,"url":3119},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F01d3b81e-13d1-43aa-b91a-443aec68bdc8",{"type":2419,"url":2891},{"type":2411,"url":3122},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4x5p-f36r-mxxr",[2895],{"id":143,"slug":3125,"dossier":89,"summary":3126,"aliases":3127,"sourceIds":3130,"published":3131,"modified":3132,"checkedAt":7,"severity":3133,"references":3136,"versionKeys":3159,"packageCount":32,"repositoryCount":2674},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3128,3129],"CVE-2026-4539","PYSEC-2026-2987",[143,3129],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3134,3135],{"type":2407,"score":2714},{"type":2444,"score":2716},[3137,3139,3141,3143,3145,3147,3149,3151,3153,3155,3157],{"type":2411,"url":3138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2422,"url":3140},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2422,"url":3142},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2422,"url":3144},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2419,"url":3146},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2422,"url":3148},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2422,"url":3150},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2422,"url":3152},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2422,"url":3154},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2419,"url":3156},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2411,"url":3158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3160,3161],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":144,"slug":3163,"dossier":45,"summary":3164,"aliases":3165,"sourceIds":3166,"published":3167,"modified":3168,"checkedAt":7,"severity":3169,"references":3171,"versionKeys":3178,"packageCount":32,"repositoryCount":115},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[144],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3170],{"type":2407,"score":2782},[3172,3174,3176],{"type":2422,"url":3173},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2419,"url":3175},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2422,"url":3177},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3179,3180,3181,3182,3183,3184],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":145,"slug":3186,"dossier":45,"summary":3187,"aliases":3188,"sourceIds":3189,"published":3190,"modified":3191,"checkedAt":7,"severity":3192,"references":3195,"versionKeys":3203,"packageCount":32,"repositoryCount":34},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[],[145],"2026-08-03T20:14:28Z","2026-08-08T03:26:54.618366791Z",[3193],{"type":2407,"score":3194},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3196,3198,3199,3201,3202],{"type":2422,"url":3197},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":2422,"url":2812},{"type":2422,"url":3200},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":2419,"url":2571},{"type":2422,"url":2817},[2575,2576,2577],{"id":146,"slug":3205,"dossier":45,"summary":3206,"aliases":3207,"sourceIds":3211,"published":3212,"modified":3213,"checkedAt":7,"severity":3214,"references":3219,"versionKeys":3229,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3208,3209,3210],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[146,3210],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3215,3217],{"type":2444,"score":3216},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2407,"score":3218},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3220,3222,3224,3226,3228],{"type":2411,"url":3221},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2411,"url":3223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2422,"url":3225},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2422,"url":3227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2419,"url":2730},[2742],{"id":147,"slug":3231,"dossier":45,"summary":3232,"aliases":3233,"sourceIds":3236,"published":3237,"modified":3238,"checkedAt":7,"severity":3239,"references":3241,"versionKeys":3252,"packageCount":32,"repositoryCount":111},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3234,3235],"CVE-2025-6638","PYSEC-2026-1981",[147,3235],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3240],{"type":2407,"score":3055},[3242,3244,3245,3246,3247,3249,3250],{"type":2411,"url":3243},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2422,"url":3060},{"type":2422,"url":3062},{"type":2419,"url":2475},{"type":2422,"url":3248},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2419,"url":2767},{"type":2411,"url":3251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2482,2483],{"id":148,"slug":3254,"dossier":45,"summary":3255,"aliases":3256,"sourceIds":3260,"published":3261,"modified":3262,"checkedAt":7,"severity":3263,"references":3270,"versionKeys":3292,"packageCount":32,"repositoryCount":518},"ghsa-5qmp-p3c4-72qj-0f202987","MLflow: Deterministic sampling in dataset digest enables predictable collisions",[3257,3258,3259],"BIT-mlflow-2026-10803","CVE-2026-10803","PYSEC-2026-195",[148,3259],"2026-06-04T12:16:24.440Z","2026-07-23T15:00:15.414047693Z",[3264,3266,3268],{"type":2407,"score":3265},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2444,"score":3267},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2444,"score":3269},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3271,3273,3275,3277,3278,3280,3282,3284,3286,3288,3290],{"type":2411,"url":3272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10803",{"type":2723,"url":3274},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fissues\u002F22419",{"type":2723,"url":3276},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F22420",{"type":2419,"url":2887},{"type":2422,"url":3279},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-195.yaml",{"type":2411,"url":3281},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10803",{"type":2411,"url":3283},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831462",{"type":2411,"url":3285},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252",{"type":2723,"url":3287},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252\u002Fcti",{"type":2422,"url":3289},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002F",{"type":2411,"url":3291},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qmp-p3c4-72qj",[2895,2896,2897],{"id":149,"slug":3294,"dossier":45,"summary":3295,"aliases":3296,"sourceIds":3300,"published":3301,"modified":3302,"checkedAt":7,"severity":3303,"references":3307,"versionKeys":3324,"packageCount":32,"repositoryCount":518},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3297,3298,3299],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[149,3299],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3304,3306],{"type":2444,"score":3305},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2407,"score":2562},[3308,3310,3312,3314,3316,3318,3320,3322],{"type":2477,"url":3309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2411,"url":3311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2723,"url":3313},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2416,"url":3315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2422,"url":3317},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2419,"url":3319},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2422,"url":3321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2425,"url":3323},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3325,3326,3327],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":150,"slug":3329,"dossier":45,"summary":3330,"aliases":3331,"sourceIds":3334,"published":3335,"modified":3336,"checkedAt":7,"severity":3337,"references":3341,"versionKeys":3356,"packageCount":32,"repositoryCount":111},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[3332,3333],"CVE-2025-69534","PYSEC-2026-89",[150,3333],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[3338,3339],{"type":2407,"score":2782},{"type":2444,"score":3340},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3342,3344,3346,3348,3350,3352,3354],{"type":2411,"url":3343},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":2723,"url":3345},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":2422,"url":3347},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":2419,"url":3349},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":2422,"url":3351},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":2422,"url":3353},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":2411,"url":3355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[3357],"pypi:markdown@3.8",{"id":151,"slug":3359,"dossier":89,"summary":3360,"aliases":3361,"sourceIds":3365,"published":3366,"modified":3367,"checkedAt":7,"severity":3368,"references":3370,"versionKeys":3380,"packageCount":32,"repositoryCount":2674},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3362,3363,3364],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[151,3364],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[3369],{"type":2407,"score":2782},[3371,3373,3375,3376,3378,3379],{"type":2477,"url":3372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2411,"url":3374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2416,"url":2948},{"type":2422,"url":3377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2419,"url":2952},{"type":2411,"url":2954},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":152,"slug":3382,"dossier":45,"summary":3383,"aliases":3384,"sourceIds":3388,"published":3389,"modified":3390,"checkedAt":7,"severity":3391,"references":3395,"versionKeys":3403,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3385,3386,3387],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[152,3387],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3392,3393],{"type":2407,"score":2718},{"type":2444,"score":3394},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3396,3398,3400,3401],{"type":2411,"url":3397},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2411,"url":3399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2419,"url":2952},{"type":2411,"url":3402},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2959,2960,2961,2962,2963],{"id":153,"slug":3405,"dossier":89,"summary":3406,"aliases":3407,"sourceIds":3411,"published":3412,"modified":3413,"checkedAt":7,"severity":3414,"references":3417,"versionKeys":3433,"packageCount":32,"repositoryCount":2674},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3408,3409,3410],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[153,3410],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[3415],{"type":2444,"score":3416},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3418,3420,3422,3424,3426,3427,3429,3431],{"type":2422,"url":3419},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2411,"url":3421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2422,"url":3423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2422,"url":3425},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2419,"url":2952},{"type":2422,"url":3428},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2419,"url":3430},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2411,"url":3432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":154,"slug":3435,"dossier":45,"summary":3436,"aliases":3437,"sourceIds":3440,"published":3441,"modified":3442,"checkedAt":7,"severity":3443,"references":3446,"versionKeys":3459,"packageCount":32,"repositoryCount":32},"ghsa-62q4-447f-wv8h-ddd02de0","Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path",[3438,3439],"CVE-2026-46338","PYSEC-2026-2999",[154,3439],"2026-05-19T20:00:29Z","2026-07-13T16:43:07.559134562Z",[3444],{"type":2407,"score":3445},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3447,3449,3451,3453,3455,3457],{"type":2422,"url":3448},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":2422,"url":3450},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fpull\u002F2039",{"type":2419,"url":3452},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions",{"type":2419,"url":3454},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpymdown-extensions",{"type":2411,"url":3456},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":2411,"url":3458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-46338",[3460],"pypi:pymdown-extensions@10.21.2",{"id":155,"slug":3462,"dossier":45,"summary":3463,"aliases":3464,"sourceIds":3467,"published":3468,"modified":3469,"checkedAt":7,"severity":3470,"references":3472,"versionKeys":3513,"packageCount":32,"repositoryCount":115},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3465,3466],"CVE-2026-23490","PYSEC-2026-1810",[155,3466],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[3471],{"type":2407,"score":2782},[3473,3475,3477,3479,3481,3483,3485,3487,3489,3491,3493,3495,3497,3499,3501,3503,3505,3507,3509,3511],{"type":2422,"url":3474},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2411,"url":3476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2422,"url":3478},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2422,"url":3480},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2422,"url":3482},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":2422,"url":3484},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":2422,"url":3486},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":2422,"url":3488},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":2422,"url":3490},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":2422,"url":3492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":2422,"url":3494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":2422,"url":3496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":2422,"url":3498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":2422,"url":3500},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":2422,"url":3502},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":2422,"url":3504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":2419,"url":3506},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2422,"url":3508},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2422,"url":3510},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2422,"url":3512},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[3514],"pypi:pyasn1@0.6.1",{"id":156,"slug":3516,"dossier":45,"summary":3517,"aliases":3518,"sourceIds":3522,"published":3523,"modified":3524,"checkedAt":7,"severity":3525,"references":3528,"versionKeys":3538,"packageCount":32,"repositoryCount":518},"ghsa-65h7-c7c4-mghx-fc09466d","MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability",[3519,3520,3521],"BIT-mlflow-2026-2393","CVE-2026-2393","PYSEC-2026-2219",[156,3521],"2026-05-11T18:16:31.500Z","2026-07-13T16:45:08.114491424Z",[3526],{"type":2407,"score":3527},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3529,3531,3533,3534,3536],{"type":2411,"url":3530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2393",{"type":2416,"url":3532},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F64aa0ab7207f9c649b59ba1a5f40d82196817389",{"type":2419,"url":2887},{"type":2477,"url":3535},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F04ef100d-06b5-4a70-95b1-b7be23aa8150",{"type":2411,"url":3537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-65h7-c7c4-mghx",[2895,2896,2897],{"id":157,"slug":3540,"dossier":89,"summary":3541,"aliases":3542,"sourceIds":3545,"published":3546,"modified":3547,"checkedAt":7,"severity":3548,"references":3552,"versionKeys":3561,"packageCount":32,"repositoryCount":3565},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3543,3544],"CVE-2026-45409","PYSEC-2026-215",[157,3544],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3549,3550],{"type":2407,"score":2502},{"type":2444,"score":3551},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3553,3555,3557,3559],{"type":2411,"url":3554},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2411,"url":3556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2419,"url":3558},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2422,"url":3560},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3562,3563,3564],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":158,"slug":3567,"dossier":45,"summary":3568,"aliases":3569,"sourceIds":3572,"published":3573,"modified":3574,"checkedAt":7,"severity":3575,"references":3579,"versionKeys":3590,"packageCount":32,"repositoryCount":64},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[3570,3571],"CVE-2026-27205","PYSEC-2026-2151",[158,3571],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[3576,3578],{"type":2444,"score":3577},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2407,"score":3445},[3580,3582,3584,3586,3588],{"type":2411,"url":3581},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2411,"url":3583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2416,"url":3585},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2419,"url":3587},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2411,"url":3589},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[3591,3592,3593,3594],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":159,"slug":3596,"dossier":45,"summary":3597,"aliases":3598,"sourceIds":3601,"published":3602,"modified":3603,"checkedAt":7,"severity":3604,"references":3609,"versionKeys":3621,"packageCount":32,"repositoryCount":461},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3599,3600],"CVE-2026-1839","PYSEC-2026-2288",[159,3600],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3605,3607],{"type":2407,"score":3606},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2407,"score":3608},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3610,3612,3614,3615,3617,3619],{"type":2411,"url":3611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2416,"url":3613},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2419,"url":2475},{"type":2422,"url":3616},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2477,"url":3618},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2411,"url":3620},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2482,2483,2484,2485,2486,2487,2488],{"id":160,"slug":3623,"dossier":45,"summary":3624,"aliases":3625,"sourceIds":3626,"published":3627,"modified":3628,"checkedAt":7,"severity":3629,"references":3632,"versionKeys":3642,"packageCount":32,"repositoryCount":34},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[],[160],"2026-07-24T16:42:09Z","2026-07-25T21:44:40.055637633Z",[3630],{"type":2407,"score":3631},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3633,3635,3637,3639,3640],{"type":2422,"url":3634},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":2422,"url":3636},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":2422,"url":3638},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":2419,"url":2571},{"type":2422,"url":3641},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",[2575,2576,2577],{"id":161,"slug":3644,"dossier":89,"summary":3645,"aliases":3646,"sourceIds":3650,"published":3651,"modified":3652,"checkedAt":7,"severity":3653,"references":3655,"versionKeys":3668,"packageCount":32,"repositoryCount":2674},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[3647,3648,3649],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[161,3649],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[3654],{"type":2407,"score":2782},[3656,3658,3660,3662,3664,3666,3667],{"type":2477,"url":3657},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2411,"url":3659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2416,"url":3661},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2416,"url":3663},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2422,"url":3665},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2419,"url":2952},{"type":2411,"url":3428},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":162,"slug":3670,"dossier":45,"summary":3671,"aliases":3672,"sourceIds":3675,"published":3676,"modified":3677,"checkedAt":7,"severity":3678,"references":3680,"versionKeys":3691,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3673,3674],"CVE-2024-12720","PYSEC-2026-1982",[162,3674],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3679],{"type":2407,"score":3055},[3681,3683,3685,3686,3688,3689],{"type":2411,"url":3682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2422,"url":3684},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2419,"url":2475},{"type":2422,"url":3687},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2419,"url":2767},{"type":2411,"url":3690},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2482],{"id":163,"slug":3693,"dossier":45,"summary":3694,"aliases":3695,"sourceIds":3698,"published":3699,"modified":3700,"checkedAt":7,"severity":3701,"references":3704,"versionKeys":3723,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[3696,3697],"CVE-2025-71176","PYSEC-2026-1845",[163,3697],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[3702],{"type":2407,"score":3703},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[3705,3707,3709,3711,3713,3715,3717,3719,3721],{"type":2411,"url":3706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":2422,"url":3708},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":2422,"url":3710},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":2422,"url":3712},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":2419,"url":3714},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":2422,"url":3716},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":2422,"url":3718},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":2419,"url":3720},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":2411,"url":3722},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[3724,3725,3726,3727],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":164,"slug":3729,"dossier":45,"summary":3730,"aliases":3731,"sourceIds":3734,"published":3735,"modified":3736,"checkedAt":7,"severity":3737,"references":3742,"versionKeys":3750,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[3732,3733],"CVE-2026-44243","PYSEC-2026-2162",[164,3733],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[3738,3740],{"type":2407,"score":3739},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2444,"score":3741},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3743,3745,3747,3748],{"type":2477,"url":3744},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2411,"url":3746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2419,"url":2571},{"type":2416,"url":3749},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[2575,2576,2577],{"id":165,"slug":3752,"dossier":45,"summary":3753,"aliases":3754,"sourceIds":3758,"published":3759,"modified":3760,"checkedAt":7,"severity":3761,"references":3764,"versionKeys":3774,"packageCount":32,"repositoryCount":518},"ghsa-75cm-x2w3-8mgf-213b4d71","MLflow: unauthenticated access to certain FastAPI routes",[3755,3756,3757],"BIT-mlflow-2026-2652","CVE-2026-2652","PYSEC-2026-2221",[165,3757],"2026-05-15T03:16:23.127Z","2026-07-13T16:45:09.381556404Z",[3762],{"type":2407,"score":3763},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[3765,3767,3769,3770,3772],{"type":2411,"url":3766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2652",{"type":2416,"url":3768},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa",{"type":2419,"url":2887},{"type":2477,"url":3771},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756",{"type":2411,"url":3773},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-75cm-x2w3-8mgf",[2895,2896,2897],{"id":166,"slug":3776,"dossier":45,"summary":3777,"aliases":3778,"sourceIds":3781,"published":3782,"modified":3783,"checkedAt":7,"severity":3784,"references":3787,"versionKeys":3800,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[3779,3780],"CVE-2025-66034","PYSEC-2026-1389",[166,3780],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[3785],{"type":2407,"score":3786},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[3788,3790,3792,3794,3796,3798],{"type":2422,"url":3789},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2411,"url":3791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2422,"url":3793},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2419,"url":3795},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2419,"url":3797},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2411,"url":3799},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[3801,3802,3803,3804,3805],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":167,"slug":3807,"dossier":45,"summary":3808,"aliases":3809,"sourceIds":3813,"published":3814,"modified":3815,"checkedAt":7,"severity":3816,"references":3823,"versionKeys":3835,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[3810,3811,3812],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[167,3811,3812],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[3817,3819,3821],{"type":2407,"score":3818},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2407,"score":3820},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2407,"score":3822},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3824,3826,3828,3829,3831,3833],{"type":2411,"url":3825},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2422,"url":3827},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2419,"url":2855},{"type":2422,"url":3830},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2411,"url":3832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2411,"url":3834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[2863,2864,2865,2866],{"id":168,"slug":3837,"dossier":45,"summary":3164,"aliases":3838,"sourceIds":3841,"published":3842,"modified":3843,"checkedAt":7,"severity":3844,"references":3845,"versionKeys":3863,"packageCount":32,"repositoryCount":518},"ghsa-79v4-65xg-pq4g-b911b371",[3839,3840],"CVE-2024-12797","PYSEC-2026-1284",[168,3840],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[3846,3848,3850,3852,3854,3856,3857,3859,3861],{"type":2422,"url":3847},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2411,"url":3849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2422,"url":3851},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2422,"url":3853},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2422,"url":3855},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2419,"url":3175},{"type":2422,"url":3858},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2419,"url":3860},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2411,"url":3862},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3179,3180,3181],{"id":169,"slug":3865,"dossier":45,"summary":3866,"aliases":3867,"sourceIds":3870,"published":3871,"modified":3872,"checkedAt":7,"severity":3873,"references":3875,"versionKeys":3888,"packageCount":32,"repositoryCount":111},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[3868,3869],"CVE-2025-47287","PYSEC-2026-1974",[169,3869],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[3874],{"type":2407,"score":2782},[3876,3878,3880,3882,3883,3885,3886],{"type":2422,"url":3877},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2411,"url":3879},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2422,"url":3881},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2419,"url":2855},{"type":2422,"url":3884},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2419,"url":2857},{"type":2411,"url":3887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[2863],{"id":170,"slug":3890,"dossier":45,"summary":3891,"aliases":3892,"sourceIds":3895,"published":3896,"modified":3897,"checkedAt":7,"severity":3898,"references":3900,"versionKeys":3917,"packageCount":32,"repositoryCount":489},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3893,3894],"CVE-2025-62727","PYSEC-2026-1942",[170,3894],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3899],{"type":2407,"score":2782},[3901,3903,3905,3907,3910,3912,3914,3915],{"type":2422,"url":3902},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2411,"url":3904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2416,"url":3906},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3908,"url":3909},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2419,"url":3911},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2422,"url":3913},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2419,"url":2545},{"type":2411,"url":3916},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2550,2551,3918,3919],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":171,"slug":3921,"dossier":45,"summary":3922,"aliases":3923,"sourceIds":3926,"published":3927,"modified":3928,"checkedAt":7,"severity":3929,"references":3932,"versionKeys":3949,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3924,3925],"CVE-2026-0994","PYSEC-2026-1805",[171,3925],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3930],{"type":2444,"score":3931},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3933,3935,3937,3939,3941,3943,3945,3947],{"type":2411,"url":3934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2422,"url":3936},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2422,"url":3938},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2422,"url":3940},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2422,"url":3942},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2419,"url":3944},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2419,"url":3946},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2411,"url":3948},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3950,3951,3952,3953,3954,3955,3956,3957,3958],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":172,"slug":3960,"dossier":45,"summary":3961,"aliases":3962,"sourceIds":3965,"published":3966,"modified":3967,"checkedAt":7,"severity":3968,"references":3973,"versionKeys":3984,"packageCount":32,"repositoryCount":32},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[3963,3964],"CVE-2026-33682","PYSEC-2026-2285",[172,3964],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[3969,3971],{"type":2407,"score":3970},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2407,"score":3972},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3974,3976,3978,3980,3982],{"type":2411,"url":3975},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":2411,"url":3977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":2416,"url":3979},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":2419,"url":3981},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":2411,"url":3983},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[3985],"pypi:streamlit@1.49.0",{"id":173,"slug":3987,"dossier":45,"summary":3988,"aliases":3989,"sourceIds":3992,"published":3993,"modified":3994,"checkedAt":7,"severity":3995,"references":3998,"versionKeys":4007,"packageCount":32,"repositoryCount":518},"ghsa-7qhf-v65m-g5f3-235f2d72","mlflow: FastAPI job endpoints under `\u002Fajax-api\u002F3.0\u002Fjobs\u002F*` are not protected by authentication or authorization",[3990,3991],"CVE-2026-0545","PYSEC-2026-419",[173,3991],"2026-04-03T18:31:23Z","2026-07-01T20:22:58.301401Z",[3996],{"type":2407,"score":3997},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3999,4001,4002,4004,4005],{"type":2411,"url":4000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0545",{"type":2419,"url":2887},{"type":2422,"url":4003},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fb2e5b028-9541-4d29-8703-a76f1a3734d8",{"type":2419,"url":2891},{"type":2411,"url":4006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7qhf-v65m-g5f3",[2895,2896,2897],{"id":174,"slug":4009,"dossier":45,"summary":4010,"aliases":4011,"sourceIds":4014,"published":2905,"modified":4015,"checkedAt":7,"severity":4016,"references":4019,"versionKeys":4033,"packageCount":32,"repositoryCount":111},"ghsa-7rxf-gvfg-47g4-171801e8","Flask-CORS improper regex path matching vulnerability",[4012,4013],"CVE-2024-6839","PYSEC-2026-1384",[174,4013],"2026-07-07T17:57:28.129199523Z",[4017],{"type":2407,"score":4018},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4020,4022,4024,4025,4027,4029,4030,4031],{"type":2411,"url":4021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6839",{"type":2422,"url":4023},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fe970988bea563e05e8b8f53fa7bcc134b5bf5c5f",{"type":2419,"url":2916},{"type":2422,"url":4026},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fcore.py#L73",{"type":2422,"url":4028},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F403eb1fc-86f4-4820-8eba-0f3dfae9f2b4",{"type":2422,"url":2922},{"type":2419,"url":2924},{"type":2411,"url":4032},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7rxf-gvfg-47g4",[2928,2929],{"id":175,"slug":4035,"dossier":45,"summary":4036,"aliases":4037,"sourceIds":4040,"published":4041,"modified":4042,"checkedAt":7,"severity":4043,"references":4045,"versionKeys":4049,"packageCount":32,"repositoryCount":461},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4038,4039],"CVE-2026-54283","PYSEC-2026-249",[175,4039],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[4044],{"type":2407,"score":2782},[4046,4048],{"type":2411,"url":4047},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2419,"url":3911},[2549,2550,2551,3918,3919,4050,4051],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":176,"slug":4053,"dossier":45,"summary":4054,"aliases":4055,"sourceIds":4058,"published":4059,"modified":4060,"checkedAt":7,"severity":4061,"references":4065,"versionKeys":4078,"packageCount":32,"repositoryCount":32},"ghsa-84pr-m4jr-85g5-4a9795ee","flask-cors vulnerable to log injection when the log level is set to debug",[4056,4057],"CVE-2024-1681","PYSEC-2024-271",[176,4057],"2024-04-19T20:15:09.273Z","2026-06-10T17:01:16.365143709Z",[4062,4064],{"type":2407,"score":4063},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2407,"score":3822},[4066,4068,4069,4071,4073,4075,4076],{"type":2411,"url":4067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-1681",{"type":2419,"url":2916},{"type":2422,"url":4070},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F40acc8092332dfed4bb54d7a4f89a6d479466de7\u002Fflask_cors\u002Fextension.py#L194",{"type":2422,"url":4072},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-271.yaml",{"type":2477,"url":4074},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25a7a0ba-9fa2-4777-acb6-03e5539bb644",{"type":2422,"url":2922},{"type":2411,"url":4077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-84pr-m4jr-85g5",[2928],{"id":177,"slug":4080,"dossier":45,"summary":4081,"aliases":4082,"sourceIds":4086,"published":4087,"modified":4088,"checkedAt":7,"severity":4089,"references":4092,"versionKeys":4129,"packageCount":32,"repositoryCount":461},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4083,4084,4085],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[177,4084],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[4090],{"type":2407,"score":4091},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4093,4095,4097,4099,4101,4103,4105,4107,4109,4111,4112,4114,4117,4119,4121,4123,4125,4127],{"type":2411,"url":4094},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2411,"url":4096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2416,"url":4098},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2422,"url":4100},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2425,"url":4102},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2422,"url":4104},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2422,"url":4106},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2422,"url":4108},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2422,"url":4110},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2419,"url":3911},{"type":2422,"url":4113},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4115,"url":4116},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2422,"url":4118},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2422,"url":4120},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2422,"url":4122},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2422,"url":4124},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2425,"url":4126},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2411,"url":4128},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2549,2550,2551,3918,3919,4050,4051],{"id":178,"slug":4131,"dossier":45,"summary":4132,"aliases":4133,"sourceIds":4136,"published":4137,"modified":4138,"checkedAt":7,"severity":4139,"references":4142,"versionKeys":4153,"packageCount":32,"repositoryCount":489},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[4134,4135],"CVE-2026-21860","PYSEC-2026-2044",[178,4135],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[4140,4141],{"type":2407,"score":2502},{"type":2444,"score":2500},[4143,4145,4147,4149,4150,4151],{"type":2422,"url":4144},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2411,"url":4146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2422,"url":4148},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2419,"url":2511},{"type":2419,"url":2607},{"type":2411,"url":4152},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2515,2516,2517,2518],{"id":179,"slug":4155,"dossier":45,"summary":4156,"aliases":4157,"sourceIds":4161,"published":4162,"modified":4163,"checkedAt":7,"severity":4164,"references":4168,"versionKeys":4190,"packageCount":32,"repositoryCount":115},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4158,4159,4160],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[179,4160],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[4165,4166],{"type":2407,"score":2714},{"type":2444,"score":4167},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4169,4171,4173,4175,4177,4179,4180,4182,4184,4186,4188],{"type":2411,"url":4170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2422,"url":4172},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2422,"url":4174},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2422,"url":4176},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2422,"url":4178},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2419,"url":2730},{"type":2422,"url":4181},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2422,"url":4183},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2422,"url":4185},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2419,"url":4187},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2411,"url":4189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2742,2743,2744,4191,4192],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":180,"slug":4194,"dossier":45,"summary":4195,"aliases":4196,"sourceIds":4200,"published":4201,"modified":4202,"checkedAt":7,"severity":4203,"references":4208,"versionKeys":4224,"packageCount":32,"repositoryCount":518},"ghsa-8c7q-86fq-vvmh-be4df9cc","MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled",[4197,4198,4199],"BIT-mlflow-2026-2651","CVE-2026-2651","PYSEC-2026-2220",[180,4199],"2026-05-25T07:16:15.100Z","2026-07-14T05:30:20.380332392Z",[4204,4206],{"type":2407,"score":4205},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2407,"score":4207},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4209,4211,4213,4215,4217,4218,4220,4222],{"type":2411,"url":4210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2651",{"type":2416,"url":4212},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fd7290811d8f3c95366d80109424edc1fb1ad966f",{"type":2422,"url":4214},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-2651",{"type":2723,"url":4216},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481117",{"type":2419,"url":2887},{"type":2477,"url":4219},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F65beb119-d3e0-4e03-af2f-fa98f78f83dc",{"type":2422,"url":4221},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-2651.json",{"type":2411,"url":4223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8c7q-86fq-vvmh",[2895,2896,2897],{"id":181,"slug":4226,"dossier":45,"summary":4227,"aliases":4228,"sourceIds":4231,"published":4232,"modified":4233,"checkedAt":7,"severity":4234,"references":4239,"versionKeys":4256,"packageCount":32,"repositoryCount":32},"ghsa-8m59-7xv8-735h-61716faa","marimo contains a reflected cross-site scripting vulnerability in the notebook page",[4229,4230],"CVE-2026-54386","PYSEC-2026-2619",[181,4230],"2026-06-18T00:32:36Z","2026-07-13T16:43:20.650813439Z",[4235,4237],{"type":2407,"score":4236},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2444,"score":4238},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4240,4242,4244,4246,4248,4250,4252,4254],{"type":2411,"url":4241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54386",{"type":2422,"url":4243},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Fpull\u002F9789",{"type":2422,"url":4245},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Fcommit\u002Ffdd55c8cf6260ae23bb411dc9d9269def5cf75d6",{"type":2419,"url":4247},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo",{"type":2422,"url":4249},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Freleases\u002Ftag\u002F0.23.9",{"type":2422,"url":4251},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fmarimo-xss-via-file-query-parameter-in-assets-py",{"type":2419,"url":4253},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarimo",{"type":2411,"url":4255},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8m59-7xv8-735h",[4257],"pypi:marimo@0.23.4",{"id":182,"slug":4259,"dossier":45,"summary":4260,"aliases":4261,"sourceIds":4264,"published":4265,"modified":4266,"checkedAt":7,"severity":4267,"references":4269,"versionKeys":4279,"packageCount":32,"repositoryCount":461},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[4262,4263],"CVE-2026-59885","PYSEC-2026-3456",[182,4263],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[4268],{"type":2407,"score":2782},[4270,4272,4274,4276,4277],{"type":2411,"url":4271},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":2411,"url":4273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":2416,"url":4275},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":2419,"url":3506},{"type":2411,"url":4278},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[3514,4280],"pypi:pyasn1@0.6.3",{"id":183,"slug":4282,"dossier":45,"summary":4283,"aliases":4284,"sourceIds":4287,"published":4288,"modified":4289,"checkedAt":7,"severity":4290,"references":4293,"versionKeys":4312,"packageCount":32,"repositoryCount":518},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4285,4286],"CVE-2025-4565","PYSEC-2026-1806",[183,4286],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[4291],{"type":2444,"score":4292},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4294,4296,4298,4300,4302,4303,4305,4307,4309,4310],{"type":2422,"url":4295},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2422,"url":4297},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2411,"url":4299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2422,"url":4301},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2419,"url":3944},{"type":2422,"url":4304},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2422,"url":4306},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2422,"url":4308},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2419,"url":3946},{"type":2411,"url":4311},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3950,3952,3953],{"id":184,"slug":4314,"dossier":89,"summary":4315,"aliases":4316,"sourceIds":4320,"published":4321,"modified":4322,"checkedAt":7,"severity":4323,"references":4325,"versionKeys":4335,"packageCount":32,"repositoryCount":2674},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[4317,4318,4319],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[184,4319],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[4324],{"type":2407,"score":2782},[4326,4328,4330,4331,4333,4334],{"type":2477,"url":4327},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2411,"url":4329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2416,"url":2948},{"type":2422,"url":4332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2419,"url":2952},{"type":2411,"url":2954},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":185,"slug":4337,"dossier":45,"summary":4338,"aliases":4339,"sourceIds":4342,"published":2905,"modified":4343,"checkedAt":7,"severity":4344,"references":4347,"versionKeys":4361,"packageCount":32,"repositoryCount":111},"ghsa-8vgw-p6qm-5gr7-be25d449","Flask-CORS allows for inconsistent CORS matching",[4340,4341],"CVE-2024-6844","PYSEC-2026-1385",[185,4341],"2026-07-07T17:57:07.966932476Z",[4345],{"type":2407,"score":4346},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4348,4350,4352,4353,4355,4357,4358,4359],{"type":2411,"url":4349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6844",{"type":2422,"url":4351},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F35d875319621bd129a38b2b823abf4a2f6cda536",{"type":2419,"url":2916},{"type":2422,"url":4354},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002Fmain\u002Fflask_cors\u002Fextension.py#L193",{"type":2422,"url":4356},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0",{"type":2422,"url":2922},{"type":2419,"url":2924},{"type":2411,"url":4360},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8vgw-p6qm-5gr7",[2928,2929],{"id":186,"slug":4363,"dossier":45,"summary":4364,"aliases":4365,"sourceIds":4368,"published":4369,"modified":4370,"checkedAt":7,"severity":4371,"references":4373,"versionKeys":4386,"packageCount":32,"repositoryCount":111},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4366,4367],"CVE-2025-5197","PYSEC-2026-1983",[186,4367],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4372],{"type":2407,"score":3055},[4374,4376,4378,4380,4381,4383,4384],{"type":2411,"url":4375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2422,"url":4377},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2422,"url":4379},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2419,"url":2475},{"type":2422,"url":4382},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2419,"url":2767},{"type":2411,"url":4385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2482,2483],{"id":187,"slug":4388,"dossier":45,"summary":4389,"aliases":4390,"sourceIds":4391,"published":4392,"modified":4393,"checkedAt":7,"severity":4394,"references":4397,"versionKeys":4405,"packageCount":32,"repositoryCount":34},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[],[187],"2026-07-24T21:45:16Z","2026-07-25T21:44:41.451010015Z",[4395],{"type":2407,"score":4396},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4398,4400,4402,4403],{"type":2422,"url":4399},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":2422,"url":4401},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":2419,"url":2571},{"type":2422,"url":4404},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",[2575,2576,2577],{"id":188,"slug":4407,"dossier":45,"summary":4408,"aliases":4409,"sourceIds":4411,"published":4412,"modified":4413,"checkedAt":7,"severity":4414,"references":4417,"versionKeys":4426,"packageCount":32,"repositoryCount":34},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[4410],"CVE-2026-67323",[188],"2026-07-21T20:10:06Z","2026-08-02T03:56:47.832026599Z",[4415],{"type":2407,"score":4416},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4418,4420,4422,4424,4425],{"type":2422,"url":4419},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":2422,"url":4421},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":2422,"url":4423},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":2419,"url":2571},{"type":2422,"url":2573},[2575,2576,2577],{"id":189,"slug":4428,"dossier":45,"summary":4429,"aliases":4430,"sourceIds":4433,"published":4434,"modified":4435,"checkedAt":7,"severity":4436,"references":4439,"versionKeys":4458,"packageCount":32,"repositoryCount":115},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4431,4432],"CVE-2024-47081","PYSEC-2026-1872",[189,4432],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4437],{"type":2407,"score":4438},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4440,4442,4444,4446,4448,4450,4452,4454,4456],{"type":2422,"url":4441},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2411,"url":4443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2422,"url":4445},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2416,"url":4447},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2419,"url":4449},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2422,"url":4451},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2422,"url":4453},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2419,"url":4455},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2411,"url":4457},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4459,4460],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":190,"slug":4462,"dossier":89,"summary":4463,"aliases":4464,"sourceIds":4468,"published":4469,"modified":4470,"checkedAt":7,"severity":4471,"references":4473,"versionKeys":4486,"packageCount":32,"repositoryCount":2674},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[4465,4466,4467],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[190,4467],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[4472],{"type":2407,"score":2782},[4474,4476,4478,4480,4482,4484,4485],{"type":2477,"url":4475},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2411,"url":4477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2416,"url":4479},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2416,"url":4481},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2422,"url":4483},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2419,"url":2952},{"type":2411,"url":3428},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":191,"slug":4488,"dossier":45,"summary":4489,"aliases":4490,"sourceIds":4491,"published":4492,"modified":4493,"checkedAt":7,"severity":4494,"references":4496,"versionKeys":4504,"packageCount":32,"repositoryCount":34},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[],[191],"2026-08-07T15:36:43Z","2026-08-09T02:56:51.068532802Z",[4495],{"type":2407,"score":3631},[4497,4499,4500,4502,4503],{"type":2422,"url":4498},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":2422,"url":3037},{"type":2422,"url":4501},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":2419,"url":2571},{"type":2422,"url":3042},[2575,2576,2577],{"id":192,"slug":4506,"dossier":45,"summary":4507,"aliases":4508,"sourceIds":4511,"published":4512,"modified":4513,"checkedAt":7,"severity":4514,"references":4517,"versionKeys":4534,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4509,4510],"CVE-2024-35195","PYSEC-2026-1873",[192,4510],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4515],{"type":2407,"score":4516},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4518,4520,4522,4524,4526,4527,4529,4531,4532],{"type":2422,"url":4519},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2411,"url":4521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2422,"url":4523},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2416,"url":4525},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2419,"url":4449},{"type":2422,"url":4528},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2422,"url":4530},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2419,"url":4455},{"type":2411,"url":4533},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4459],{"id":193,"slug":4536,"dossier":45,"summary":4537,"aliases":4538,"sourceIds":4541,"published":4542,"modified":4543,"checkedAt":7,"severity":4544,"references":4547,"versionKeys":4560,"packageCount":32,"repositoryCount":32},"ghsa-9xwg-3r6f-jcx2-8434e377","PyMdown Extensions: Path traversal in the b64 extension lets \u003Cimg src> read files outside base_path",[4539,4540],"CVE-2026-61632","PYSEC-2026-3609",[193,4540],"2026-07-24T16:18:33Z","2026-08-11T02:56:53.778103652Z",[4545],{"type":2407,"score":4546},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4548,4550,4552,4553,4555,4556,4558],{"type":2422,"url":4549},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":2422,"url":4551},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fedce35586d11a1ef78bb187bc60497fe6dbf3b64",{"type":2419,"url":3452},{"type":2422,"url":4554},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Freleases\u002Ftag\u002F11.0",{"type":2419,"url":3454},{"type":2411,"url":4557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":2411,"url":4559},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-61632",[3460],{"id":194,"slug":4562,"dossier":45,"summary":4563,"aliases":4564,"sourceIds":4568,"published":4569,"modified":4570,"checkedAt":7,"severity":4571,"references":4576,"versionKeys":4592,"packageCount":32,"repositoryCount":111},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4565,4566,4567],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[194],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4572,4574],{"type":2407,"score":4573},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2444,"score":4575},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4577,4579,4581,4583,4584,4586,4588,4590],{"type":2411,"url":4578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2422,"url":4580},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2422,"url":4582},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2419,"url":2730},{"type":2422,"url":4585},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2422,"url":4587},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2422,"url":4589},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2422,"url":4591},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2742,2743],{"id":195,"slug":4594,"dossier":45,"summary":4595,"aliases":4596,"sourceIds":4599,"published":4600,"modified":4601,"checkedAt":7,"severity":4602,"references":4604,"versionKeys":4616,"packageCount":32,"repositoryCount":489},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[4597,4598],"CVE-2025-67725","PYSEC-2025-266",[195,4598],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[4603],{"type":2407,"score":2782},[4605,4607,4609,4611,4613,4614],{"type":2411,"url":4606},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2411,"url":4608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":2416,"url":4610},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":2422,"url":4612},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":2419,"url":2855},{"type":2411,"url":4615},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[2863,2864,2865],{"id":196,"slug":4618,"dossier":45,"summary":4619,"aliases":4620,"sourceIds":4624,"published":4625,"modified":4626,"checkedAt":7,"severity":4627,"references":4631,"versionKeys":4671,"packageCount":32,"repositoryCount":4672},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4621,4622,4623],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[196,4623],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4628,4630],{"type":2444,"score":4629},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2407,"score":2782},[4632,4634,4636,4638,4640,4642,4643,4645,4647,4649,4651,4653,4655,4657,4659,4661,4663,4665,4667,4669],{"type":2422,"url":4633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2411,"url":4635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2422,"url":4637},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2422,"url":4639},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2422,"url":4641},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2419,"url":2952},{"type":2422,"url":4644},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2422,"url":4646},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2422,"url":4648},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2411,"url":4650},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2411,"url":4652},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2411,"url":4654},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2411,"url":4656},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2411,"url":4658},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2411,"url":4660},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2411,"url":4662},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2411,"url":4664},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2411,"url":4666},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2411,"url":4668},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2411,"url":4670},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2956,2957,2958,2959,2960,2961,2962],12,{"id":197,"slug":4674,"dossier":45,"summary":4675,"aliases":4676,"sourceIds":4679,"published":4680,"modified":4681,"checkedAt":7,"severity":4682,"references":4685,"versionKeys":4702,"packageCount":32,"repositoryCount":111},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4677,4678],"CVE-2025-27516","PYSEC-2026-1471",[197,4678],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4683],{"type":2444,"score":4684},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4686,4688,4690,4692,4694,4696,4698,4700],{"type":2422,"url":4687},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2411,"url":4689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2416,"url":4691},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2419,"url":4693},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2422,"url":4695},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2422,"url":4697},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2419,"url":4699},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2411,"url":4701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4703,4704],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":198,"slug":4706,"dossier":45,"summary":4707,"aliases":4708,"sourceIds":4711,"published":4712,"modified":4713,"checkedAt":7,"severity":4714,"references":4717,"versionKeys":4728,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[4709,4710],"CVE-2026-49854","PYSEC-2026-3388",[198,4710],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[4715],{"type":2407,"score":4716},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4718,4720,4721,4723,4724,4726],{"type":2422,"url":4719},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2419,"url":2855},{"type":2422,"url":4722},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2419,"url":2857},{"type":2411,"url":4725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2411,"url":4727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[2863,2864,2865,2866,2867],{"id":199,"slug":4730,"dossier":45,"summary":4731,"aliases":4732,"sourceIds":4736,"published":4737,"modified":4738,"checkedAt":7,"severity":4739,"references":4744,"versionKeys":4760,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4733,4734,4735],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[199,4735],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4740,4742],{"type":2407,"score":4741},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2444,"score":4743},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4745,4747,4749,4751,4752,4754,4756,4758],{"type":2411,"url":4746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2422,"url":4748},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2422,"url":4750},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2419,"url":3319},{"type":2422,"url":4753},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2422,"url":4755},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2419,"url":4757},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2411,"url":4759},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3325],{"id":200,"slug":4762,"dossier":45,"summary":4763,"aliases":4764,"sourceIds":4768,"published":4769,"modified":4770,"checkedAt":7,"severity":4771,"references":4773,"versionKeys":4785,"packageCount":32,"repositoryCount":518},"ghsa-f2m9-wcf4-cwwx-e7c3cfb2","MLFlow Creates a Temporary File With Insecure Permissions",[4765,4766,4767],"BIT-mlflow-2026-4137","CVE-2026-4137","PYSEC-2026-2655",[200,4767],"2026-05-18T21:31:53Z","2026-07-13T16:43:33.416174314Z",[4772],{"type":2407,"score":3111},[4774,4776,4778,4779,4780,4782,4783],{"type":2411,"url":4775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4137",{"type":2422,"url":4777},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1dcbb0c2fbd1f446c328830e601ca13a28219b8a",{"type":2411,"url":3122},{"type":2419,"url":2887},{"type":2422,"url":4781},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F648dc30b-76c7-4433-86b8-f43d926fd8d6",{"type":2419,"url":2891},{"type":2411,"url":4784},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2m9-wcf4-cwwx",[2895,2896,2897],{"id":201,"slug":4787,"dossier":45,"summary":4788,"aliases":4789,"sourceIds":4793,"published":4794,"modified":4795,"checkedAt":7,"severity":4796,"references":4801,"versionKeys":4819,"packageCount":32,"repositoryCount":111},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4790,4791,4792],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[201],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4797,4799],{"type":2407,"score":4798},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2444,"score":4800},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4802,4804,4806,4808,4810,4812,4813,4815,4817],{"type":2411,"url":4803},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2422,"url":4805},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2422,"url":4807},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2422,"url":4809},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2422,"url":4811},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2419,"url":2730},{"type":2422,"url":4814},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2422,"url":4816},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2422,"url":4818},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2742,2743],{"id":202,"slug":4821,"dossier":45,"summary":4822,"aliases":4823,"sourceIds":4826,"published":4827,"modified":4828,"checkedAt":7,"severity":4829,"references":4834,"versionKeys":4845,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4824,4825],"CVE-2024-47874","PYSEC-2026-1943",[202,4825],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4830,4832],{"type":2407,"score":4831},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2444,"score":4833},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4835,4837,4839,4841,4842,4843],{"type":2422,"url":4836},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2411,"url":4838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2416,"url":4840},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2419,"url":2539},{"type":2419,"url":2545},{"type":2411,"url":4844},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2549],{"id":203,"slug":4847,"dossier":45,"summary":4848,"aliases":4849,"sourceIds":4852,"published":4853,"modified":4854,"checkedAt":7,"severity":4855,"references":4858,"versionKeys":4873,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[4850,4851],"CVE-2024-49766","PYSEC-2026-2045",[203,4851],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[4856],{"type":2444,"score":4857},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4859,4861,4863,4865,4866,4868,4870,4871],{"type":2422,"url":4860},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2411,"url":4862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2416,"url":4864},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2419,"url":2511},{"type":2422,"url":4867},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2422,"url":4869},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2419,"url":2607},{"type":2411,"url":4872},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2515],{"id":204,"slug":4875,"dossier":45,"summary":4876,"aliases":4877,"sourceIds":4880,"published":4881,"modified":4882,"checkedAt":7,"severity":4883,"references":4888,"versionKeys":4912,"packageCount":32,"repositoryCount":461},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4878,4879],"CVE-2026-5241","PYSEC-2026-2290",[204,4879],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[4884,4886],{"type":2407,"score":4885},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2407,"score":4887},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4889,4891,4893,4895,4897,4899,4901,4903,4904,4906,4908,4910],{"type":2411,"url":4890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2416,"url":4892},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2411,"url":4894},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2411,"url":4896},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2422,"url":4898},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2422,"url":4900},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2723,"url":4902},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2419,"url":2475},{"type":2422,"url":4905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2477,"url":4907},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2422,"url":4909},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2411,"url":4911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2482,2483,2484,2485,2486,2487,2488],{"id":205,"slug":4914,"dossier":45,"summary":4915,"aliases":4916,"sourceIds":4920,"published":4921,"modified":4922,"checkedAt":7,"severity":4923,"references":4928,"versionKeys":4943,"packageCount":32,"repositoryCount":518},"ghsa-fh64-r2vc-xvhr-8b7ea4aa","MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface",[4917,4918,4919],"BIT-mlflow-2026-33865","CVE-2026-33865","PYSEC-2026-93",[205,4919],"2026-04-07T13:16:46.840Z","2026-06-10T17:02:20.155874108Z",[4924,4926],{"type":2407,"score":4925},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2444,"score":4927},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4929,4931,4933,4935,4936,4937,4938,4940,4941],{"type":2411,"url":4930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33865",{"type":2416,"url":4932},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21435",{"type":2422,"url":4934},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Faca4dd0ec88a12f7655155c224371280e9b45dda",{"type":2477,"url":2987},{"type":2422,"url":2989},{"type":2419,"url":2887},{"type":2422,"url":4939},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-93.yaml",{"type":2411,"url":2994},{"type":2411,"url":4942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh64-r2vc-xvhr",[2895,2896,2897],{"id":206,"slug":4945,"dossier":45,"summary":4946,"aliases":4947,"sourceIds":4951,"published":4952,"modified":4953,"checkedAt":7,"severity":4954,"references":4957,"versionKeys":4970,"packageCount":32,"repositoryCount":518},"ghsa-fhff-qmm8-h2fp-244bab2b","Arbitrary file write via tar traversal in mlflow",[4948,4949,4950],"BIT-mlflow-2025-15031","CVE-2025-15031","PYSEC-2026-2656",[206,4950],"2026-03-19T00:30:20Z","2026-07-13T16:43:21.433539748Z",[4955],{"type":2407,"score":4956},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4958,4960,4962,4963,4965,4967,4968],{"type":2411,"url":4959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15031",{"type":2422,"url":4961},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346",{"type":2419,"url":2887},{"type":2422,"url":4964},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Ffe4d9be330426904283401f1d2ed914238b6fc37\u002Fmlflow\u002Fpyfunc\u002Fdbconnect_artifact_cache.py#L140",{"type":2422,"url":4966},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F09856f77-f968-446f-a930-657d126efe4e",{"type":2419,"url":2891},{"type":2411,"url":4969},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fhff-qmm8-h2fp",[2895,2896,2897],{"id":207,"slug":4972,"dossier":89,"summary":4973,"aliases":4974,"sourceIds":4978,"published":4979,"modified":4980,"checkedAt":7,"severity":4981,"references":4984,"versionKeys":4998,"packageCount":32,"repositoryCount":2674},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[4975,4976,4977],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[207,4977],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[4982],{"type":2407,"score":4983},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[4985,4987,4989,4991,4993,4994,4995,4996],{"type":2422,"url":4986},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2411,"url":4988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2422,"url":4990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2422,"url":4992},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2419,"url":2952},{"type":2422,"url":3428},{"type":2419,"url":3430},{"type":2411,"url":4997},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":208,"slug":5000,"dossier":45,"summary":5001,"aliases":5002,"sourceIds":5003,"published":5004,"modified":5005,"checkedAt":7,"severity":5006,"references":5008,"versionKeys":5016,"packageCount":32,"repositoryCount":34},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[],[208],"2026-07-24T16:41:20Z","2026-07-25T21:44:39.974035175Z",[5007],{"type":2407,"score":2807},[5009,5011,5012,5014,5015],{"type":2422,"url":5010},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":2422,"url":3636},{"type":2422,"url":5013},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":2419,"url":2571},{"type":2422,"url":3641},[2575,2576,2577],{"id":209,"slug":5018,"dossier":45,"summary":5019,"aliases":5020,"sourceIds":5023,"published":5024,"modified":5025,"checkedAt":7,"severity":5026,"references":5028,"versionKeys":5041,"packageCount":32,"repositoryCount":518},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[5021,5022],"CVE-2026-39373","PYSEC-2026-70",[209,5022],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[5027],{"type":2407,"score":2502},[5029,5031,5033,5035,5037,5039],{"type":2477,"url":5030},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":2411,"url":5032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":2422,"url":5034},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":2419,"url":5036},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":2422,"url":5038},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":2422,"url":5040},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[5042],"pypi:jwcrypto@1.5.6",{"id":210,"slug":5044,"dossier":45,"summary":3671,"aliases":5045,"sourceIds":5048,"published":5049,"modified":5050,"checkedAt":7,"severity":5051,"references":5054,"versionKeys":5065,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5046,5047],"CVE-2025-1194","PYSEC-2026-1984",[210,5047],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[5052],{"type":2407,"score":5053},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5055,5057,5059,5060,5062,5063],{"type":2411,"url":5056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2422,"url":5058},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2419,"url":2475},{"type":2422,"url":5061},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2419,"url":2767},{"type":2411,"url":5064},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2482],{"id":211,"slug":5067,"dossier":45,"summary":5068,"aliases":5069,"sourceIds":5073,"published":5074,"modified":5075,"checkedAt":7,"severity":5076,"references":5080,"versionKeys":5096,"packageCount":32,"repositoryCount":518},"ghsa-g35p-px32-whv6-8b66e41b","MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration",[5070,5071,5072],"BIT-mlflow-2026-4035","CVE-2026-4035","PYSEC-2026-2222",[211,5072],"2026-06-03T09:16:13.083Z","2026-07-13T16:45:04.877817766Z",[5077,5079],{"type":2407,"score":5078},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:L",{"type":2407,"score":2850},[5081,5083,5085,5087,5089,5090,5092,5094],{"type":2411,"url":5082},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4035",{"type":2416,"url":5084},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3",{"type":2422,"url":5086},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-4035",{"type":2723,"url":5088},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484318",{"type":2419,"url":2887},{"type":2477,"url":5091},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff8e591a0-0f19-4910-b82e-16c9956f2233",{"type":2422,"url":5093},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-4035.json",{"type":2411,"url":5095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g35p-px32-whv6",[2895,2896,2897],{"id":212,"slug":5098,"dossier":45,"summary":5099,"aliases":5100,"sourceIds":5103,"published":5104,"modified":5105,"checkedAt":7,"severity":5106,"references":5109,"versionKeys":5122,"packageCount":32,"repositoryCount":115},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[5101,5102],"CVE-2026-69247","PYSEC-2026-3552",[212,5102],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[5107],{"type":2444,"score":5108},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5110,5112,5114,5116,5117,5118,5120],{"type":2422,"url":5111},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2422,"url":5113},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2422,"url":5115},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2419,"url":3175},{"type":2419,"url":3860},{"type":2411,"url":5119},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2411,"url":5121},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[3181,3182,3183,3184,5123,5124],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":213,"slug":5126,"dossier":45,"summary":5127,"aliases":5128,"sourceIds":5131,"published":5132,"modified":5133,"checkedAt":7,"severity":5134,"references":5137,"versionKeys":5148,"packageCount":32,"repositoryCount":518},"ghsa-g6pg-52vf-843h-da352526","MLFlow allows Tracing + Assessments Access",[5129,5130],"CVE-2025-15381","PYSEC-2026-2657",[213,5130],"2026-03-27T18:31:27Z","2026-07-13T16:43:42.935139106Z",[5135],{"type":2407,"score":5136},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5138,5140,5141,5143,5145,5146],{"type":2411,"url":5139},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15381",{"type":2419,"url":2887},{"type":2422,"url":5142},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Fb569ebc74c14af593c326143bee2df44a5d59edf\u002Fmlflow\u002Fserver\u002Fauth\u002F__init__.py#L752",{"type":2422,"url":5144},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F149fb2f9-ef4b-4136-a25c-20563451904c",{"type":2419,"url":2891},{"type":2411,"url":5147},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6pg-52vf-843h",[2895,2896,2897],{"id":214,"slug":5150,"dossier":45,"summary":5151,"aliases":5152,"sourceIds":5155,"published":5156,"modified":5157,"checkedAt":7,"severity":5158,"references":5161,"versionKeys":5180,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5153,5154],"CVE-2024-34062","PYSEC-2026-1976",[214,5154],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[5159],{"type":2407,"score":5160},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5162,5164,5166,5168,5170,5172,5174,5176,5178],{"type":2422,"url":5163},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2411,"url":5165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2422,"url":5167},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2419,"url":5169},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2422,"url":5171},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2422,"url":5173},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2422,"url":5175},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2419,"url":5177},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2411,"url":5179},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5181],"pypi:tqdm@4.66.2",{"id":215,"slug":5183,"dossier":89,"summary":5184,"aliases":5185,"sourceIds":5188,"published":5189,"modified":5190,"checkedAt":7,"severity":5191,"references":5196,"versionKeys":5206,"packageCount":32,"repositoryCount":5209},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5186,5187],"CVE-2026-25645","PYSEC-2026-2275",[215,5187],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[5192,5194],{"type":2407,"score":5193},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2407,"score":5195},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5197,5199,5201,5203,5204],{"type":2411,"url":5198},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2411,"url":5200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2416,"url":5202},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2419,"url":4449},{"type":2411,"url":5205},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4459,4460,5207,5208],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":216,"slug":5211,"dossier":45,"summary":5212,"aliases":5213,"sourceIds":5216,"published":5217,"modified":5218,"checkedAt":7,"severity":5219,"references":5221,"versionKeys":5232,"packageCount":32,"repositoryCount":32},"ghsa-gm37-52c6-37mw-5e0593eb","pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors",[5214,5215],"CVE-2026-67422","PYSEC-2026-3654",[216,5215],"2026-08-07T18:26:07Z","2026-08-11T02:56:53.617757636Z",[5220],{"type":2407,"score":2782},[5222,5224,5226,5228,5229,5230],{"type":2422,"url":5223},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",{"type":2411,"url":5225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67422",{"type":2422,"url":5227},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fc68498598d7b13011bb4571350b6e3612a4ce44b",{"type":2419,"url":3452},{"type":2419,"url":3454},{"type":2411,"url":5231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",[3460],{"id":217,"slug":5234,"dossier":89,"summary":5235,"aliases":5236,"sourceIds":5239,"published":5240,"modified":5241,"checkedAt":7,"severity":5242,"references":5244,"versionKeys":5255,"packageCount":32,"repositoryCount":2674},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5237,5238],"CVE-2025-66418","PYSEC-2026-1998",[217,5238],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[5243],{"type":2444,"score":2654},[5245,5247,5249,5251,5252,5253],{"type":2422,"url":5246},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2411,"url":5248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2416,"url":5250},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2419,"url":2663},{"type":2419,"url":2665},{"type":2411,"url":5254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2669,2670,2671,2672,2673],{"id":218,"slug":5257,"dossier":45,"summary":5258,"aliases":5259,"sourceIds":5262,"published":5263,"modified":5264,"checkedAt":7,"severity":5265,"references":5268,"versionKeys":5283,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5260,5261],"CVE-2024-56201","PYSEC-2026-1472",[218,5261],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[5266,5267],{"type":2407,"score":2562},{"type":2444,"score":4684},[5269,5271,5273,5275,5277,5278,5280,5281],{"type":2422,"url":5270},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2411,"url":5272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2422,"url":5274},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2416,"url":5276},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2419,"url":4693},{"type":2422,"url":5279},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2419,"url":4699},{"type":2411,"url":5282},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4703],{"id":219,"slug":5285,"dossier":45,"summary":5286,"aliases":5287,"sourceIds":5290,"published":5291,"modified":5292,"checkedAt":7,"severity":5293,"references":5296,"versionKeys":5311,"packageCount":32,"repositoryCount":111},"ghsa-gq3w-7jj3-x7gr-f80b7f86","MLflow Use of Default Password Authentication Bypass Vulnerability",[5288,5289],"CVE-2026-2635","PYSEC-2026-421",[219,5289],"2026-02-21T00:31:43Z","2026-07-01T20:22:58.325967Z",[5294],{"type":2407,"score":5295},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5297,5299,5301,5303,5304,5306,5308,5309],{"type":2411,"url":5298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2635",{"type":2422,"url":5300},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19260",{"type":2422,"url":5302},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F5bf2ec2bd4222a18d78631183ac7f6b752afe8a4",{"type":2419,"url":2887},{"type":2422,"url":5305},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Freleases\u002Ftag\u002Fv3.8.0rc0",{"type":2422,"url":5307},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-111",{"type":2419,"url":2891},{"type":2411,"url":5310},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gq3w-7jj3-x7gr",[2895,2896],{"id":220,"slug":5313,"dossier":89,"summary":5314,"aliases":5315,"sourceIds":5319,"published":5320,"modified":5321,"checkedAt":7,"severity":5322,"references":5325,"versionKeys":5337,"packageCount":32,"repositoryCount":5345},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[5316,5317,5318],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[220,5318],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[5323],{"type":2407,"score":5324},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[5326,5328,5330,5332,5334,5335],{"type":2477,"url":5327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2411,"url":5329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2416,"url":5331},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2422,"url":5333},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2419,"url":3319},{"type":2411,"url":5336},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3325,3326,3327,5338,5339,5340,5341,5342,5343,5344],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":221,"slug":5347,"dossier":45,"summary":5348,"aliases":5349,"sourceIds":5350,"published":5351,"modified":5352,"checkedAt":7,"severity":5353,"references":5354,"versionKeys":5360,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[221],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[5355,5357,5358],{"type":2422,"url":5356},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2419,"url":3175},{"type":2422,"url":5359},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3179],{"id":222,"slug":5362,"dossier":45,"summary":5363,"aliases":5364,"sourceIds":5367,"published":5368,"modified":5369,"checkedAt":7,"severity":5370,"references":5372,"versionKeys":5393,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5365,5366],"CVE-2024-34064","PYSEC-2026-1474",[222,5366],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[5371],{"type":2407,"score":3818},[5373,5375,5377,5379,5380,5382,5384,5386,5388,5390,5391],{"type":2422,"url":5374},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2411,"url":5376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2416,"url":5378},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2419,"url":4693},{"type":2422,"url":5381},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2422,"url":5383},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2422,"url":5385},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2422,"url":5387},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2422,"url":5389},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2419,"url":4699},{"type":2411,"url":5392},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4703],{"id":223,"slug":5395,"dossier":45,"summary":2491,"aliases":5396,"sourceIds":5399,"published":5400,"modified":5401,"checkedAt":7,"severity":5402,"references":5404,"versionKeys":5417,"packageCount":32,"repositoryCount":489},"ghsa-hgf8-39gv-g3f2-0469b394",[5397,5398],"CVE-2025-66221","PYSEC-2026-2046",[223,5398],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[5403],{"type":2444,"score":2500},[5405,5407,5409,5411,5412,5414,5415],{"type":2422,"url":5406},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2411,"url":5408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2422,"url":5410},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2419,"url":2511},{"type":2422,"url":5413},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2419,"url":2607},{"type":2411,"url":5416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2515,2516,2517,2518],{"id":224,"slug":5419,"dossier":45,"summary":5420,"aliases":5421,"sourceIds":5422,"published":5423,"modified":5424,"checkedAt":7,"severity":5425,"references":5427,"versionKeys":5435,"packageCount":32,"repositoryCount":34},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[],[224],"2026-08-07T15:43:56Z","2026-08-09T02:56:50.509044228Z",[5426],{"type":2407,"score":3194},[5428,5430,5431,5433,5434],{"type":2422,"url":5429},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":2422,"url":3037},{"type":2422,"url":5432},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":2419,"url":2571},{"type":2422,"url":3042},[2575,2576,2577],{"id":225,"slug":5437,"dossier":45,"summary":5438,"aliases":5439,"sourceIds":5442,"published":5443,"modified":5444,"checkedAt":7,"severity":5445,"references":5447,"versionKeys":5456,"packageCount":32,"repositoryCount":461},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[5440,5441],"CVE-2026-59886","PYSEC-2026-3457",[225,5441],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[5446],{"type":2407,"score":2782},[5448,5450,5452,5454,5455],{"type":2411,"url":5449},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":2411,"url":5451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":2416,"url":5453},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":2419,"url":3506},{"type":2411,"url":4278},[3514,4280],{"id":226,"slug":5458,"dossier":45,"summary":5459,"aliases":5460,"sourceIds":5461,"published":5462,"modified":5463,"checkedAt":7,"severity":5464,"references":5467,"versionKeys":5478,"packageCount":32,"repositoryCount":34},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[],[226],"2026-08-07T15:45:39Z","2026-08-09T02:56:50.891058419Z",[5465],{"type":2407,"score":5466},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[5468,5470,5472,5474,5476,5477],{"type":2422,"url":5469},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":2422,"url":5471},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":2422,"url":5473},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":2422,"url":5475},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":2419,"url":2571},{"type":2422,"url":3042},[2575,2576,2577],{"id":227,"slug":5480,"dossier":45,"summary":5481,"aliases":5482,"sourceIds":5485,"published":5486,"modified":5487,"checkedAt":7,"severity":5488,"references":5491,"versionKeys":5517,"packageCount":32,"repositoryCount":32},"ghsa-hxwh-jpp2-84pm-85ca3470","Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default",[5483,5484],"CVE-2024-6221","PYSEC-2024-71",[227,5484],"2024-08-18T19:15:00Z","2026-07-09T16:56:25.795378335Z",[5489,5490],{"type":2407,"score":4396},{"type":2444,"score":2622},[5492,5494,5496,5498,5500,5502,5504,5506,5507,5509,5511,5513,5515],{"type":2411,"url":5493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6221",{"type":2422,"url":5495},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fissues\u002F362",{"type":2422,"url":5497},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F363",{"type":2422,"url":5499},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F368",{"type":2422,"url":5501},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F03aa3f8e2256437f7bad96422a747b98ab5e31bf",{"type":2422,"url":5503},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F7ae310c56ac30e0b94fb42129aa377bf633256ec",{"type":2422,"url":5505},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fc8514760cf03fcce16d77f6db7007aad429c4548",{"type":2419,"url":2916},{"type":2422,"url":5508},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Freleases",{"type":2422,"url":5510},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-260.yaml",{"type":2422,"url":5512},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-71.yaml",{"type":2422,"url":5514},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa42935fc-6f57-4818-bca4-3d528235df4d",{"type":2411,"url":5516},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxwh-jpp2-84pm",[2928],{"id":228,"slug":5519,"dossier":45,"summary":5520,"aliases":5521,"sourceIds":5524,"published":5525,"modified":5526,"checkedAt":7,"severity":5527,"references":5531,"versionKeys":5547,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5522,5523],"CVE-2024-11394","PYSEC-2024-229",[228,5523],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[5528,5530],{"type":2407,"score":5529},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2407,"score":4741},[5532,5534,5536,5538,5539,5541,5543,5545],{"type":2411,"url":5533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2422,"url":5535},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2422,"url":5537},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2419,"url":2475},{"type":2422,"url":5540},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2422,"url":5542},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2411,"url":5544},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2411,"url":5546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2482],{"id":229,"slug":5549,"dossier":45,"summary":5550,"aliases":5551,"sourceIds":5554,"published":5555,"modified":5556,"checkedAt":7,"severity":5557,"references":5559,"versionKeys":5569,"packageCount":32,"repositoryCount":489},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[5552,5553],"CVE-2025-67726","PYSEC-2025-267",[229,5553],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[5558],{"type":2407,"score":2782},[5560,5562,5564,5565,5567,5568],{"type":2411,"url":5561},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2411,"url":5563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":2416,"url":4610},{"type":2422,"url":5566},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":2419,"url":2855},{"type":2411,"url":4615},[2863,2864,2865],{"id":230,"slug":5571,"dossier":89,"summary":5572,"aliases":5573,"sourceIds":5577,"published":5578,"modified":5579,"checkedAt":7,"severity":5580,"references":5582,"versionKeys":5596,"packageCount":32,"repositoryCount":2674},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[5574,5575,5576],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[230,5576],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[5581],{"type":2407,"score":2782},[5583,5585,5587,5589,5591,5592,5593,5594],{"type":2422,"url":5584},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2411,"url":5586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2422,"url":5588},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2422,"url":5590},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2419,"url":2952},{"type":2422,"url":3428},{"type":2419,"url":3430},{"type":2411,"url":5595},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":231,"slug":5598,"dossier":45,"summary":5599,"aliases":5600,"sourceIds":5603,"published":5604,"modified":5605,"checkedAt":7,"severity":5606,"references":5608,"versionKeys":5621,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[5601,5602],"CVE-2025-3264","PYSEC-2026-1985",[231,5602],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[5607],{"type":2407,"score":3055},[5609,5611,5613,5615,5616,5618,5619],{"type":2411,"url":5610},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2422,"url":5612},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2422,"url":5614},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2419,"url":2475},{"type":2422,"url":5617},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2419,"url":2767},{"type":2411,"url":5620},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2482],{"id":232,"slug":5623,"dossier":45,"summary":5624,"aliases":5625,"sourceIds":5626,"published":5627,"modified":5628,"checkedAt":7,"severity":5629,"references":5631,"versionKeys":5639,"packageCount":32,"repositoryCount":34},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[],[232],"2026-08-07T15:46:35Z","2026-08-09T02:56:51.296995647Z",[5630],{"type":2407,"score":2562},[5632,5634,5635,5637,5638],{"type":2422,"url":5633},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":2422,"url":3037},{"type":2422,"url":5636},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":2419,"url":2571},{"type":2422,"url":3042},[2575,2576,2577],{"id":233,"slug":5641,"dossier":45,"summary":5642,"aliases":5643,"sourceIds":5646,"published":5647,"modified":5648,"checkedAt":7,"severity":5649,"references":5653,"versionKeys":5661,"packageCount":32,"repositoryCount":461},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[5644,5645],"CVE-2026-54282","PYSEC-2026-248",[233,5645],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[5650,5652],{"type":2407,"score":5651},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2407,"score":3822},[5654,5656,5658,5659],{"type":2411,"url":5655},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2411,"url":5657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2419,"url":3911},{"type":2422,"url":5660},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2549,2550,2551,3918,3919,4050,4051],{"id":234,"slug":5663,"dossier":45,"summary":5664,"aliases":5665,"sourceIds":5668,"published":5669,"modified":5670,"checkedAt":7,"severity":5671,"references":5675,"versionKeys":5708,"packageCount":32,"repositoryCount":115},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[5666,5667],"CVE-2026-30922","PYSEC-2026-2263",[234,5667],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[5672,5674],{"type":2407,"score":5673},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2407,"score":2782},[5676,5678,5680,5682,5684,5685,5687,5689,5691,5693,5694,5696,5698,5700,5702,5704,5706],{"type":2477,"url":5677},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2411,"url":5679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2422,"url":5681},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2416,"url":5683},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2422,"url":4650},{"type":2422,"url":5686},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":2422,"url":5688},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":2422,"url":5690},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2422,"url":5692},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2422,"url":4896},{"type":2422,"url":5695},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":2422,"url":5697},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2422,"url":5699},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2422,"url":5701},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2422,"url":5703},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2422,"url":5705},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":2422,"url":5707},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3514],{"id":235,"slug":5710,"dossier":45,"summary":5711,"aliases":5712,"sourceIds":5715,"published":5716,"modified":5717,"checkedAt":7,"severity":5718,"references":5720,"versionKeys":5733,"packageCount":32,"repositoryCount":461},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[5713,5714],"CVE-2026-69249","PYSEC-2026-3553",[235,5714],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[5719],{"type":2444,"score":4833},[5721,5723,5725,5727,5728,5729,5731],{"type":2422,"url":5722},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2422,"url":5724},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2422,"url":5726},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2419,"url":3175},{"type":2419,"url":3860},{"type":2411,"url":5730},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2411,"url":5732},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[3179,3180,3181,3182,3183,3184,5123],{"id":236,"slug":5735,"dossier":45,"summary":5736,"aliases":5737,"sourceIds":5740,"published":5741,"modified":5742,"checkedAt":7,"severity":5743,"references":5746,"versionKeys":5759,"packageCount":32,"repositoryCount":461},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[5738,5739],"CVE-2026-69248","PYSEC-2026-3554",[236,5739],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[5744],{"type":2444,"score":5745},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5747,5749,5751,5753,5754,5755,5757],{"type":2422,"url":5748},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2422,"url":5750},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2422,"url":5752},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2419,"url":3175},{"type":2419,"url":3860},{"type":2411,"url":5756},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2411,"url":5758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[3179,3180,3181,3182,3183,3184,5123],{"id":237,"slug":5761,"dossier":45,"summary":5762,"aliases":5763,"sourceIds":5766,"published":5767,"modified":5768,"checkedAt":7,"severity":5769,"references":5771,"versionKeys":5782,"packageCount":32,"repositoryCount":461},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[5764,5765],"CVE-2026-59884","PYSEC-2026-3455",[237,5765],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[5770],{"type":2407,"score":2782},[5772,5774,5776,5778,5779,5780],{"type":2411,"url":5773},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":2411,"url":5775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":2416,"url":5777},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":2419,"url":3506},{"type":2411,"url":4278},{"type":2422,"url":5781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[3514,4280],{"id":238,"slug":5784,"dossier":45,"summary":5785,"aliases":5786,"sourceIds":5789,"published":5790,"modified":5791,"checkedAt":7,"severity":5792,"references":5796,"versionKeys":5804,"packageCount":32,"repositoryCount":115},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[5787,5788],"CVE-2026-34073","PYSEC-2026-35",[238,5788],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[5793,5794],{"type":2407,"score":3822},{"type":2444,"score":5795},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5797,5799,5801,5802],{"type":2411,"url":5798},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2411,"url":5800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2419,"url":3175},{"type":2422,"url":5803},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3179,3180,3181,3182,3183,3184],{"id":239,"slug":5806,"dossier":45,"summary":5807,"aliases":5808,"sourceIds":5811,"published":5812,"modified":5813,"checkedAt":7,"severity":5814,"references":5817,"versionKeys":5825,"packageCount":32,"repositoryCount":518},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[5809,5810],"CVE-2026-44432","PYSEC-2026-142",[239,5810],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[5815,5816],{"type":2407,"score":2782},{"type":2444,"score":2654},[5818,5820,5822,5824],{"type":2411,"url":5819},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2411,"url":5821},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2422,"url":5823},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2419,"url":2663},[5826],"pypi:urllib3@2.6.3",{"id":240,"slug":5828,"dossier":45,"summary":5829,"aliases":5830,"sourceIds":5833,"published":5834,"modified":5835,"checkedAt":7,"severity":5836,"references":5839,"versionKeys":5852,"packageCount":32,"repositoryCount":5857},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[5831,5832],"CVE-2026-28684","PYSEC-2026-2270",[240,5832],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[5837],{"type":2407,"score":5838},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5840,5842,5844,5846,5848,5850],{"type":2416,"url":5841},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2411,"url":5843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2416,"url":5845},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2422,"url":5847},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2419,"url":5849},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2411,"url":5851},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[5853,5854,5855,5856],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":241,"slug":5859,"dossier":45,"summary":5860,"aliases":5861,"sourceIds":5864,"published":5865,"modified":5866,"checkedAt":7,"severity":5867,"references":5869,"versionKeys":5878,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[5862,5863],"CVE-2026-49855","PYSEC-2026-3389",[241,5863],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[5868],{"type":2407,"score":2782},[5870,5872,5873,5874,5876],{"type":2422,"url":5871},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2419,"url":2855},{"type":2419,"url":2857},{"type":2411,"url":5875},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2411,"url":5877},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[2863,2864,2865,2866,2867],{"id":242,"slug":5880,"dossier":45,"summary":5881,"aliases":5882,"sourceIds":5884,"published":5885,"modified":5886,"checkedAt":7,"severity":5887,"references":5889,"versionKeys":5895,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[5883],"CVE-2026-67326",[242],"2026-05-08T23:19:02Z","2026-08-02T03:56:45.346497199Z",[5888],{"type":2407,"score":2829},[5890,5892,5894],{"type":2422,"url":5891},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2411,"url":5893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2419,"url":2571},[2575,2576,2577],{"id":243,"slug":5897,"dossier":45,"summary":5898,"aliases":5899,"sourceIds":5902,"published":5903,"modified":5904,"checkedAt":7,"severity":5905,"references":5908,"versionKeys":5916,"packageCount":32,"repositoryCount":518},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[5900,5901],"CVE-2026-39892","PYSEC-2026-36",[243,5901],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[5906,5907],{"type":2444,"score":3551},{"type":2407,"score":3218},[5909,5911,5913,5914],{"type":2411,"url":5910},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2411,"url":5912},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2419,"url":3175},{"type":2422,"url":5915},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3183,3184],{"id":244,"slug":5918,"dossier":45,"summary":5919,"aliases":5920,"sourceIds":5921,"published":5922,"modified":5923,"checkedAt":7,"severity":5924,"references":5927,"versionKeys":5937,"packageCount":32,"repositoryCount":34},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[],[244],"2026-08-03T20:23:17Z","2026-08-08T03:26:54.523343843Z",[5925],{"type":2407,"score":5926},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[5928,5930,5932,5934,5935],{"type":2422,"url":5929},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":2422,"url":5931},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":2422,"url":5933},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":2419,"url":2571},{"type":2422,"url":5936},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",[2575,2576,2577],{"id":245,"slug":5939,"dossier":45,"summary":5940,"aliases":5941,"sourceIds":5945,"published":5946,"modified":5947,"checkedAt":7,"severity":5948,"references":5951,"versionKeys":5964,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[5942,5943,5944],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[245,5944],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[5949,5950],{"type":2407,"score":2502},{"type":2407,"score":2782},[5952,5954,5956,5958,5960,5962,5963],{"type":2477,"url":5953},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2411,"url":5955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2416,"url":5957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2416,"url":5959},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2422,"url":5961},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2419,"url":2952},{"type":2411,"url":3428},[2961,2962,2963],{"id":246,"slug":5966,"dossier":45,"summary":5967,"aliases":5968,"sourceIds":5972,"published":5973,"modified":5974,"checkedAt":7,"severity":5975,"references":5978,"versionKeys":5991,"packageCount":32,"repositoryCount":111},"ghsa-pgqp-8h46-6x4j-303ca0ec","MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation",[5969,5970,5971],"BIT-mlflow-2025-14279","CVE-2025-14279","PYSEC-2026-1656",[246,5971],"2026-01-12T09:30:31Z","2026-07-07T17:56:18.060826978Z",[5976],{"type":2407,"score":5977},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5979,5981,5983,5985,5986,5988,5989],{"type":2411,"url":5980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14279",{"type":2422,"url":5982},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F17910",{"type":2422,"url":5984},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fb0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3",{"type":2419,"url":2887},{"type":2422,"url":5987},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fef478f72-2e4f-44dc-8055-fc06bef03108",{"type":2419,"url":2891},{"type":2411,"url":5990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pgqp-8h46-6x4j",[2895,2896],{"id":247,"slug":5993,"dossier":45,"summary":5994,"aliases":5995,"sourceIds":5998,"published":5604,"modified":5999,"checkedAt":7,"severity":6000,"references":6003,"versionKeys":6016,"packageCount":32,"repositoryCount":111},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5996,5997],"CVE-2025-3777","PYSEC-2026-1986",[247,5997],"2026-07-07T17:56:47.225461188Z",[6001],{"type":2407,"score":6002},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6004,6006,6008,6009,6011,6013,6014],{"type":2411,"url":6005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2422,"url":6007},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2419,"url":2475},{"type":2422,"url":6010},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2422,"url":6012},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2419,"url":2767},{"type":2411,"url":6015},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2482,2483],{"id":248,"slug":6018,"dossier":89,"summary":6019,"aliases":6020,"sourceIds":6024,"published":6025,"modified":6026,"checkedAt":7,"severity":6027,"references":6029,"versionKeys":6040,"packageCount":32,"repositoryCount":2674},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[6021,6022,6023],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[248,6023],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[6028],{"type":2407,"score":2782},[6030,6032,6034,6036,6038,6039],{"type":2477,"url":6031},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2411,"url":6033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2416,"url":6035},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2422,"url":6037},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2419,"url":2952},{"type":2411,"url":2954},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":249,"slug":6042,"dossier":45,"summary":6043,"aliases":6044,"sourceIds":6047,"published":6048,"modified":6049,"checkedAt":7,"severity":6050,"references":6052,"versionKeys":6064,"packageCount":32,"repositoryCount":115},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[6045,6046],"CVE-2025-50181","PYSEC-2026-1999",[249,6046],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[6051],{"type":2407,"score":3009},[6053,6055,6057,6059,6060,6061,6062],{"type":2422,"url":6054},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2411,"url":6056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2416,"url":6058},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2419,"url":2663},{"type":2422,"url":3019},{"type":2419,"url":2665},{"type":2411,"url":6063},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2669,2670,2671,2672],{"id":250,"slug":6066,"dossier":45,"summary":6067,"aliases":6068,"sourceIds":6071,"published":6072,"modified":6073,"checkedAt":7,"severity":6074,"references":6077,"versionKeys":6088,"packageCount":32,"repositoryCount":489},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[6069,6070],"CVE-2025-67724","PYSEC-2025-265",[250,6070],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[6075,6076],{"type":2407,"score":3818},{"type":2407,"score":4236},[6078,6080,6082,6084,6086,6087],{"type":2411,"url":6079},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2411,"url":6081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":2416,"url":6083},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":2422,"url":6085},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":2419,"url":2855},{"type":2411,"url":4615},[2863,2864,2865],{"id":251,"slug":6090,"dossier":45,"summary":6091,"aliases":6092,"sourceIds":6093,"published":6094,"modified":6095,"checkedAt":7,"severity":6096,"references":6099,"versionKeys":6103,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[251],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[6097],{"type":2407,"score":6098},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6100,6102],{"type":2422,"url":6101},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2419,"url":2855},[2863,2864,2865,2866,2867],{"id":252,"slug":6105,"dossier":89,"summary":6106,"aliases":6107,"sourceIds":6111,"published":6112,"modified":6113,"checkedAt":7,"severity":6114,"references":6117,"versionKeys":6129,"packageCount":32,"repositoryCount":2674},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[6108,6109,6110],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[252,6110],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[6115,6116],{"type":2444,"score":4629},{"type":2407,"score":3608},[6118,6119,6121,6123,6125,6127,6128],{"type":2422,"url":4633},{"type":2416,"url":6120},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2411,"url":6122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2416,"url":6124},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2416,"url":6126},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2419,"url":2952},{"type":2411,"url":3402},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":253,"slug":6131,"dossier":45,"summary":6132,"aliases":6133,"sourceIds":6136,"published":5291,"modified":6137,"checkedAt":7,"severity":6138,"references":6141,"versionKeys":6153,"packageCount":32,"repositoryCount":111},"ghsa-q2r8-vmq7-fpx2-63c75ef0","MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability",[6134,6135],"CVE-2026-2033","PYSEC-2026-2658",[253,6135],"2026-07-13T16:43:16.528255849Z",[6139],{"type":2407,"score":6140},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6142,6144,6145,6146,6147,6148,6150,6151],{"type":2411,"url":6143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2033",{"type":2422,"url":5300},{"type":2422,"url":5302},{"type":2419,"url":2887},{"type":2422,"url":5305},{"type":2422,"url":6149},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-105",{"type":2419,"url":2891},{"type":2411,"url":6152},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2r8-vmq7-fpx2",[2895,2896],{"id":254,"slug":6155,"dossier":45,"summary":6156,"aliases":6157,"sourceIds":6160,"published":5604,"modified":6161,"checkedAt":7,"severity":6162,"references":6164,"versionKeys":6175,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[6158,6159],"CVE-2025-3263","PYSEC-2026-1987",[254,6159],"2026-07-07T17:56:57.889099913Z",[6163],{"type":2407,"score":3055},[6165,6167,6168,6169,6170,6172,6173],{"type":2411,"url":6166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2422,"url":5612},{"type":2422,"url":5614},{"type":2419,"url":2475},{"type":2422,"url":6171},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2419,"url":2767},{"type":2411,"url":6174},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2482],{"id":255,"slug":6177,"dossier":45,"summary":6178,"aliases":6179,"sourceIds":6182,"published":6183,"modified":6184,"checkedAt":7,"severity":6185,"references":6189,"versionKeys":6202,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[6180,6181],"CVE-2024-56326","PYSEC-2026-1475",[255,6181],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[6186,6188],{"type":2407,"score":6187},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2444,"score":4684},[6190,6192,6194,6196,6197,6198,6199,6200],{"type":2422,"url":6191},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2411,"url":6193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2416,"url":6195},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2419,"url":4693},{"type":2422,"url":5279},{"type":2422,"url":4695},{"type":2419,"url":4699},{"type":2411,"url":6201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4703],{"id":256,"slug":6204,"dossier":45,"summary":6205,"aliases":6206,"sourceIds":6210,"published":6211,"modified":6212,"checkedAt":7,"severity":6213,"references":6216,"versionKeys":6236,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[6207,6208,6209],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[256,6209],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[6214,6215],{"type":2407,"score":2782},{"type":2444,"score":3551},[6217,6219,6221,6223,6225,6227,6229,6230,6231,6233,6234],{"type":2422,"url":6218},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2411,"url":6220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2422,"url":6222},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2422,"url":6224},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2422,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2422,"url":6228},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2419,"url":2511},{"type":2422,"url":4867},{"type":2422,"url":6232},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2419,"url":2607},{"type":2411,"url":6235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2515],{"id":257,"slug":6238,"dossier":89,"summary":6239,"aliases":6240,"sourceIds":6243,"published":6244,"modified":6245,"checkedAt":7,"severity":6246,"references":6249,"versionKeys":6255,"packageCount":32,"repositoryCount":5209},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[6241,6242],"CVE-2026-44431","PYSEC-2026-141",[257,6242],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[6247,6248],{"type":2407,"score":4546},{"type":2444,"score":5108},[6250,6252,6254],{"type":2411,"url":6251},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2411,"url":6253},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2419,"url":2663},[2669,2670,2671,2672,2673,5826],{"id":258,"slug":6257,"dossier":45,"summary":6258,"aliases":6259,"sourceIds":6263,"published":6264,"modified":6265,"checkedAt":7,"severity":6266,"references":6270,"versionKeys":6288,"packageCount":32,"repositoryCount":450},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[6260,6261,6262],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[258],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[6267,6268],{"type":2407,"score":4798},{"type":2444,"score":6269},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6271,6273,6275,6277,6279,6281,6282,6284,6286],{"type":2411,"url":6272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2422,"url":6274},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2422,"url":6276},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2422,"url":6278},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2422,"url":6280},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2419,"url":2730},{"type":2422,"url":6283},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2422,"url":6285},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2422,"url":6287},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2742,2743,2744,4191,4192,6289,6290,6291],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":259,"slug":6293,"dossier":45,"summary":6294,"aliases":6295,"sourceIds":6298,"published":6299,"modified":6300,"checkedAt":7,"severity":6301,"references":6304,"versionKeys":6317,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[6296,6297],"CVE-2026-31958","PYSEC-2026-140",[259,6297],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[6302,6303],{"type":2407,"score":2782},{"type":2444,"score":4833},[6305,6307,6309,6311,6313,6314,6315],{"type":2411,"url":6306},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2411,"url":6308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2422,"url":6310},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2422,"url":6312},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2419,"url":2855},{"type":2422,"url":3830},{"type":2422,"url":6316},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[2863,2864,2865,2866],{"id":260,"slug":6319,"dossier":45,"summary":6320,"aliases":6321,"sourceIds":6324,"published":6325,"modified":6326,"checkedAt":7,"severity":6327,"references":6330,"versionKeys":6345,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[6322,6323],"CVE-2026-22701","PYSEC-2026-1374",[260,6323],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[6328],{"type":2407,"score":6329},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6331,6333,6335,6337,6339,6341,6343],{"type":2422,"url":6332},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2411,"url":6334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2422,"url":6336},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2422,"url":6338},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2419,"url":6340},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2419,"url":6342},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2411,"url":6344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[6346,6347,6348,6349],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":261,"slug":6351,"dossier":45,"summary":6352,"aliases":6353,"sourceIds":6356,"published":6357,"modified":6358,"checkedAt":7,"severity":6359,"references":6362,"versionKeys":6376,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[6354,6355],"CVE-2025-2099","PYSEC-2025-40",[261,6355],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[6360,6361],{"type":2407,"score":3055},{"type":2407,"score":2782},[6363,6365,6367,6369,6370,6372,6374],{"type":2411,"url":6364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2422,"url":6366},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2416,"url":6368},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2419,"url":2475},{"type":2422,"url":6371},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2422,"url":6373},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2411,"url":6375},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2482],{"id":262,"slug":6378,"dossier":45,"summary":5520,"aliases":6379,"sourceIds":6382,"published":6383,"modified":6384,"checkedAt":7,"severity":6385,"references":6389,"versionKeys":6403,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[6380,6381],"CVE-2024-11392","PYSEC-2024-227",[262,6381],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[6386,6388],{"type":2407,"score":6387},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2407,"score":4741},[6390,6392,6393,6394,6395,6397,6399,6401],{"type":2411,"url":6391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2422,"url":5535},{"type":2422,"url":5537},{"type":2419,"url":2475},{"type":2422,"url":6396},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2422,"url":6398},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2411,"url":6400},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2411,"url":6402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2482],{"id":263,"slug":6405,"dossier":45,"summary":6406,"aliases":6407,"sourceIds":6411,"published":6412,"modified":6413,"checkedAt":7,"severity":6414,"references":6417,"versionKeys":6430,"packageCount":32,"repositoryCount":111},"ghsa-r23q-823p-vmf7-9a5ef709","MLflow Command Injection vulnerability",[6408,6409,6410],"BIT-mlflow-2025-15379","CVE-2025-15379","PYSEC-2026-423",[263,6410],"2026-03-30T09:31:28Z","2026-07-01T20:22:58.350388Z",[6415],{"type":2407,"score":6416},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6418,6420,6422,6424,6425,6427,6428],{"type":2411,"url":6419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15379",{"type":2422,"url":6421},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F361b6f620adf98385c6721e384fb5ef9a30bb05e",{"type":2422,"url":6423},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fa22ce7157f646bdce4c95106fc38ccc9ca289205",{"type":2419,"url":2887},{"type":2422,"url":6426},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdc9c1c20-7879-4050-87df-4d095fe5ca75",{"type":2419,"url":2891},{"type":2411,"url":6429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r23q-823p-vmf7",[2895,2896],{"id":264,"slug":6432,"dossier":45,"summary":6433,"aliases":6434,"sourceIds":6438,"published":6439,"modified":6440,"checkedAt":7,"severity":6441,"references":6444,"versionKeys":6455,"packageCount":32,"repositoryCount":518},"ghsa-r5m9-wm49-959f-62964e46","MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",[6435,6436,6437],"BIT-mlflow-2026-3198","CVE-2026-3198","PYSEC-2026-2659",[264,6437],"2026-06-02T06:30:26Z","2026-07-13T16:42:37.733340178Z",[6442],{"type":2407,"score":6443},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6445,6447,6449,6450,6452,6453],{"type":2411,"url":6446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3198",{"type":2422,"url":6448},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6989066af33fdcb03588fd71a1a67f8fc5ef12c9",{"type":2419,"url":2887},{"type":2422,"url":6451},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe57db731-97d3-40c3-a429-831ee959807f",{"type":2419,"url":2891},{"type":2411,"url":6454},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r5m9-wm49-959f",[2895,2896,2897],{"id":265,"slug":6457,"dossier":45,"summary":6458,"aliases":6459,"sourceIds":6462,"published":6463,"modified":6464,"checkedAt":7,"severity":6465,"references":6470,"versionKeys":6508,"packageCount":32,"repositoryCount":115},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[6460,6461],"CVE-2026-26007","PYSEC-2026-2141",[265,6461],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[6466,6468],{"type":2444,"score":6467},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2407,"score":6469},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6471,6473,6475,6477,6478,6480,6482,6484,6485,6487,6489,6491,6493,6495,6497,6499,6501,6503,6505,6507],{"type":2422,"url":6472},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2411,"url":6474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2422,"url":6476},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2419,"url":3175},{"type":2422,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2422,"url":6481},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2422,"url":6483},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2411,"url":4650},{"type":2411,"url":6486},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2411,"url":6488},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2411,"url":6490},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2411,"url":6492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2411,"url":6494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2411,"url":6496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2411,"url":6498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2411,"url":6500},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2411,"url":6502},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2411,"url":6504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2411,"url":6506},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2411,"url":4670},[3179,3180,3181,3182,3183,3184],{"id":266,"slug":6510,"dossier":45,"summary":6511,"aliases":6512,"sourceIds":6516,"published":6517,"modified":6518,"checkedAt":7,"severity":6519,"references":6522,"versionKeys":6536,"packageCount":32,"repositoryCount":2674},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[6513,6514,6515],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[266,6515],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[6520,6521],{"type":2407,"score":2718},{"type":2444,"score":3394},[6523,6525,6527,6529,6531,6532,6533,6534],{"type":2422,"url":6524},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2411,"url":6526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2422,"url":6528},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2422,"url":6530},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2419,"url":2952},{"type":2422,"url":3402},{"type":2419,"url":3430},{"type":2411,"url":6535},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":267,"slug":6538,"dossier":45,"summary":6539,"aliases":6540,"sourceIds":6541,"published":6542,"modified":6543,"checkedAt":7,"severity":6544,"references":6546,"versionKeys":6554,"packageCount":32,"repositoryCount":34},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[],[267],"2026-07-24T16:42:57Z","2026-07-25T21:44:41.709665254Z",[6545],{"type":2407,"score":2562},[6547,6549,6550,6552,6553],{"type":2422,"url":6548},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":2422,"url":3636},{"type":2422,"url":6551},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":2419,"url":2571},{"type":2422,"url":3641},[2575,2576,2577],{"id":268,"slug":6556,"dossier":45,"summary":6557,"aliases":6558,"sourceIds":6561,"published":6562,"modified":6563,"checkedAt":7,"severity":6564,"references":6566,"versionKeys":6581,"packageCount":32,"repositoryCount":111},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[6559,6560],"CVE-2025-6051","PYSEC-2026-1988",[268,6560],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[6565],{"type":2407,"score":3055},[6567,6569,6571,6573,6575,6576,6578,6579],{"type":2411,"url":6568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2422,"url":6570},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2422,"url":6572},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2422,"url":6574},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2419,"url":2475},{"type":2422,"url":6577},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2419,"url":2767},{"type":2411,"url":6580},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2482,2483],{"id":269,"slug":6583,"dossier":45,"summary":6584,"aliases":6585,"sourceIds":6588,"published":6589,"modified":6590,"checkedAt":7,"severity":6591,"references":6594,"versionKeys":6607,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[6586,6587],"CVE-2026-25087","PYSEC-2026-113",[269,6587],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[6592],{"type":2407,"score":6593},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[6595,6597,6599,6601,6603,6605],{"type":2411,"url":6596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2416,"url":6598},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2419,"url":6600},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2422,"url":6602},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2411,"url":6604},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2411,"url":6606},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[6608,6609,6610,6611],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":270,"slug":6613,"dossier":45,"summary":6614,"aliases":6615,"sourceIds":6618,"published":6619,"modified":6620,"checkedAt":7,"severity":6621,"references":6623,"versionKeys":6631,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[6616,6617],"CVE-2026-42215","PYSEC-2026-2160",[270,6617],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[6622],{"type":2407,"score":2562},[6624,6626,6628,6629],{"type":2477,"url":6625},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2411,"url":6627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2419,"url":2571},{"type":2416,"url":6630},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[2575,2576,2577],{"id":271,"slug":6633,"dossier":45,"summary":6634,"aliases":6635,"sourceIds":6639,"published":4794,"modified":6640,"checkedAt":7,"severity":6641,"references":6644,"versionKeys":6662,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[6636,6637,6638],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[271],"2026-07-17T17:15:51.452848951Z",[6642,6643],{"type":2407,"score":4798},{"type":2444,"score":6269},[6645,6647,6649,6651,6653,6655,6656,6658,6660],{"type":2411,"url":6646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2422,"url":6648},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2422,"url":6650},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2422,"url":6652},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2422,"url":6654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2419,"url":2730},{"type":2422,"url":6657},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2422,"url":6659},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2422,"url":6661},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[6663,2742,2743,2744,4191,4192,6289,6290,6291],"pypi:torch@2.10.0",{"id":272,"slug":6665,"dossier":45,"summary":6666,"aliases":6667,"sourceIds":6671,"published":6672,"modified":6673,"checkedAt":7,"severity":6674,"references":6677,"versionKeys":6690,"packageCount":32,"repositoryCount":518},"ghsa-rvhj-8chj-8v3c-edfd1899","Mlflow: Command Injection when serving models with enable_mlserver=True",[6668,6669,6670],"BIT-mlflow-2026-0596","CVE-2026-0596","PYSEC-2026-424",[272,6670],"2026-03-31T15:31:56Z","2026-07-01T20:22:58.365246Z",[6675],{"type":2407,"score":6676},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6678,6680,6682,6684,6685,6687,6688],{"type":2411,"url":6679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0596",{"type":2422,"url":6681},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19738",{"type":2422,"url":6683},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F202fac4c83ccc8544c087c142b80196d0e60695c",{"type":2419,"url":2887},{"type":2422,"url":6686},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2e905add-f9f5-4309-a3db-b17de5981285",{"type":2419,"url":2891},{"type":2411,"url":6689},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rvhj-8chj-8v3c",[2895,2896,2897],{"id":273,"slug":6692,"dossier":45,"summary":6693,"aliases":6694,"sourceIds":6696,"published":6697,"modified":6698,"checkedAt":7,"severity":6699,"references":6701,"versionKeys":6711,"packageCount":32,"repositoryCount":34},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[6695],"CVE-2026-67322",[273],"2026-07-21T22:06:09Z","2026-08-02T03:56:46.931996040Z",[6700],{"type":2407,"score":4396},[6702,6704,6706,6708,6709],{"type":2422,"url":6703},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":2422,"url":6705},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":2422,"url":6707},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":2419,"url":2571},{"type":2422,"url":6710},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",[2575,2576,2577],{"id":274,"slug":6713,"dossier":45,"summary":6714,"aliases":6715,"sourceIds":6718,"published":6719,"modified":6720,"checkedAt":7,"severity":6721,"references":6723,"versionKeys":6731,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[6716,6717],"CVE-2026-44244","PYSEC-2026-2163",[274,6717],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[6722],{"type":2407,"score":6187},[6724,6726,6728,6729],{"type":2477,"url":6725},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2411,"url":6727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2419,"url":2571},{"type":2416,"url":6730},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[2575,2576,2577],{"id":275,"slug":6733,"dossier":45,"summary":6734,"aliases":6735,"sourceIds":6738,"published":6739,"modified":6740,"checkedAt":7,"severity":6741,"references":6745,"versionKeys":6757,"packageCount":32,"repositoryCount":489},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[6736,6737],"CVE-2026-41205","PYSEC-2026-88",[275,6737],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[6742,6743],{"type":2407,"score":4396},{"type":2444,"score":6744},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6746,6748,6750,6752,6754,6755],{"type":2411,"url":6747},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2411,"url":6749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2422,"url":6751},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2422,"url":6753},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2419,"url":2633},{"type":2422,"url":6756},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2641,2642],{"id":276,"slug":6759,"dossier":45,"summary":6760,"aliases":6761,"sourceIds":6765,"published":4794,"modified":6766,"checkedAt":7,"severity":6767,"references":6770,"versionKeys":6785,"packageCount":32,"repositoryCount":461},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[6762,6763,6764],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[276],"2026-06-10T17:41:15.774477397Z",[6768,6769],{"type":2407,"score":4798},{"type":2444,"score":4800},[6771,6773,6774,6775,6776,6778,6779,6781,6783],{"type":2411,"url":6772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2422,"url":4805},{"type":2422,"url":4807},{"type":2422,"url":4809},{"type":2422,"url":6777},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2419,"url":2730},{"type":2422,"url":6780},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2422,"url":6782},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2422,"url":6784},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2742,2743,2744,4191,4192,6289],{"id":277,"slug":6787,"dossier":45,"summary":6788,"aliases":6789,"sourceIds":6793,"published":6794,"modified":6795,"checkedAt":7,"severity":6796,"references":6799,"versionKeys":6809,"packageCount":32,"repositoryCount":518},"ghsa-vhcx-3pq2-4fvc-4147c43c","MLFlow path traversal vulnerability",[6790,6791,6792],"BIT-mlflow-2025-15036","CVE-2025-15036","PYSEC-2026-425",[277,6792],"2026-03-30T03:30:19Z","2026-07-01T20:22:58.380148Z",[6797],{"type":2407,"score":6798},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6800,6802,6803,6804,6806,6807],{"type":2411,"url":6801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15036",{"type":2422,"url":4961},{"type":2419,"url":2887},{"type":2422,"url":6805},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0",{"type":2419,"url":2891},{"type":2411,"url":6808},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vhcx-3pq2-4fvc",[2895,2896,2897],{"id":278,"slug":6811,"dossier":45,"summary":6812,"aliases":6813,"sourceIds":6817,"published":6818,"modified":6819,"checkedAt":7,"severity":6820,"references":6822,"versionKeys":6836,"packageCount":32,"repositoryCount":2674},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[6814,6815,6816],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[278,6816],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[6821],{"type":2444,"score":4833},[6823,6825,6827,6829,6831,6832,6833,6834],{"type":2422,"url":6824},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2411,"url":6826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2422,"url":6828},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2422,"url":6830},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2419,"url":2952},{"type":2422,"url":3428},{"type":2419,"url":3430},{"type":2411,"url":6835},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":279,"slug":6838,"dossier":45,"summary":6839,"aliases":6840,"sourceIds":6843,"published":6844,"modified":6845,"checkedAt":7,"severity":6846,"references":6849,"versionKeys":6862,"packageCount":32,"repositoryCount":518},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[6841,6842],"CVE-2025-43859","PYSEC-2026-348",[279,6842],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[6847],{"type":2407,"score":6848},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6850,6852,6854,6856,6858,6860],{"type":2422,"url":6851},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2411,"url":6853},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2422,"url":6855},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2419,"url":6857},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2419,"url":6859},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2411,"url":6861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[6863],"pypi:h11@0.14.0",{"id":280,"slug":6865,"dossier":45,"summary":6866,"aliases":6867,"sourceIds":6870,"published":6871,"modified":6872,"checkedAt":7,"severity":6873,"references":6878,"versionKeys":6904,"packageCount":32,"repositoryCount":32},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[6868,6869],"CVE-2026-10804","PYSEC-2026-212",[280,6869],"2026-06-04T12:16:24.620Z","2026-07-23T15:00:23.893493649Z",[6874,6875,6876],{"type":2407,"score":3265},{"type":2444,"score":3267},{"type":2407,"score":6877},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6879,6881,6883,6885,6887,6889,6891,6892,6894,6896,6898,6900,6902],{"type":2411,"url":6880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":2416,"url":6882},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":2416,"url":6884},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":2422,"url":6886},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":2422,"url":6888},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":2422,"url":6890},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":2419,"url":3981},{"type":2411,"url":6893},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":2411,"url":6895},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":2411,"url":6897},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":2723,"url":6899},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":2422,"url":6901},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",{"type":2411,"url":6903},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqwp-45wm-r9r5",[3985],{"id":281,"slug":6906,"dossier":45,"summary":6907,"aliases":6908,"sourceIds":6912,"published":6913,"modified":6914,"checkedAt":7,"severity":6915,"references":6917,"versionKeys":6927,"packageCount":32,"repositoryCount":518},"ghsa-w5xq-c4pf-ghq7-a926672a","MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks",[6909,6910,6911],"BIT-mlflow-2026-2734","CVE-2026-2734","PYSEC-2026-2660",[281,6911],"2026-05-21T06:31:31Z","2026-07-13T16:43:34.965176091Z",[6916],{"type":2407,"score":6443},[6918,6920,6921,6922,6924,6925],{"type":2411,"url":6919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2734",{"type":2422,"url":6448},{"type":2419,"url":2887},{"type":2422,"url":6923},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd632f783-b2c7-4a3b-af5e-1d693e841c08",{"type":2419,"url":2891},{"type":2411,"url":6926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w5xq-c4pf-ghq7",[2895,2896,2897],{"id":282,"slug":6929,"dossier":45,"summary":6930,"aliases":6931,"sourceIds":6934,"published":6935,"modified":6936,"checkedAt":7,"severity":6937,"references":6940,"versionKeys":6957,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[6932,6933],"CVE-2025-68146","PYSEC-2026-1375",[282,6933],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[6938],{"type":2407,"score":6939},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6941,6943,6945,6946,6948,6950,6952,6953,6955],{"type":2422,"url":6942},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2422,"url":6944},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2419,"url":6340},{"type":2422,"url":6947},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2422,"url":6949},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2422,"url":6951},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2419,"url":6342},{"type":2411,"url":6954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2411,"url":6956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[6346,6347,6348,6349],{"id":283,"slug":6959,"dossier":45,"summary":6960,"aliases":6961,"sourceIds":6965,"published":6966,"modified":6967,"checkedAt":7,"severity":6968,"references":6970,"versionKeys":6979,"packageCount":32,"repositoryCount":111},"ghsa-wf7f-8fxf-xfxc-07509bf2","MLFlow unsafe deserialization",[6962,6963,6964],"BIT-mlflow-2024-37059","CVE-2024-37059","PYSEC-2026-1660",[283,6964],"2024-06-04T12:31:05Z","2026-07-07T17:56:49.672624556Z",[6969],{"type":2407,"score":4741},[6971,6973,6974,6976,6977],{"type":2411,"url":6972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-37059",{"type":2419,"url":2887},{"type":2422,"url":6975},"https:\u002F\u002Fhiddenlayer.com\u002Fsai-security-advisory\u002Fmlflow-june2024",{"type":2419,"url":2891},{"type":2411,"url":6978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf7f-8fxf-xfxc",[2895,2896],{"id":284,"slug":6981,"dossier":45,"summary":6982,"aliases":6983,"sourceIds":6987,"published":6988,"modified":6989,"checkedAt":7,"severity":6990,"references":6993,"versionKeys":7031,"packageCount":32,"repositoryCount":2674},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6984,6985,6986],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[284,6986],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6991,6992],{"type":2407,"score":2782},{"type":2444,"score":4833},[6994,6996,6998,7000,7002,7003,7005,7007,7009,7011,7013,7015,7016,7018,7020,7022,7023,7025,7027,7029],{"type":2422,"url":6995},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2411,"url":6997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2422,"url":6999},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2422,"url":7001},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2419,"url":2952},{"type":2422,"url":7004},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2422,"url":7006},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2422,"url":7008},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2411,"url":7010},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2411,"url":7012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2411,"url":7014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2411,"url":4656},{"type":2411,"url":7017},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2411,"url":7019},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2411,"url":7021},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2411,"url":4658},{"type":2411,"url":7024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2411,"url":7026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2411,"url":7028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2411,"url":7030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2956,2957,2958,2959,2960,2961,2962,2963],{"id":285,"slug":7033,"dossier":45,"summary":7034,"aliases":7035,"sourceIds":7039,"published":7040,"modified":7041,"checkedAt":7,"severity":7042,"references":7045,"versionKeys":7054,"packageCount":32,"repositoryCount":2674},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[7036,7037,7038],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[285,7038],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[7043,7044],{"type":2407,"score":2718},{"type":2444,"score":3394},[7046,7048,7050,7052,7053],{"type":2411,"url":7047},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2411,"url":7049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2422,"url":7051},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2419,"url":2952},{"type":2411,"url":3402},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":286,"slug":7056,"dossier":45,"summary":7057,"aliases":7058,"sourceIds":7061,"published":7062,"modified":7063,"checkedAt":7,"severity":7064,"references":7066,"versionKeys":7088,"packageCount":32,"repositoryCount":461},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[7059,7060],"CVE-2026-48818","PYSEC-2026-2281",[286,7060],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[7065],{"type":2407,"score":4396},[7067,7069,7070,7072,7074,7076,7078,7080,7082,7084,7086],{"type":2411,"url":7068},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2419,"url":3911},{"type":2422,"url":7071},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2422,"url":7073},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2411,"url":7075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2411,"url":7077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2411,"url":7079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2411,"url":7081},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2723,"url":7083},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2416,"url":7085},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2416,"url":7087},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2549,2550,2551,3918,3919,4050,4051],{"id":287,"slug":7090,"dossier":45,"summary":5520,"aliases":7091,"sourceIds":7094,"published":5525,"modified":7095,"checkedAt":7,"severity":7096,"references":7099,"versionKeys":7113,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[7092,7093],"CVE-2024-11393","PYSEC-2024-228",[287,7093],"2026-06-10T17:00:13.252500033Z",[7097,7098],{"type":2407,"score":5529},{"type":2407,"score":4741},[7100,7102,7103,7104,7105,7107,7109,7111],{"type":2411,"url":7101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2422,"url":5535},{"type":2422,"url":5537},{"type":2419,"url":2475},{"type":2422,"url":7106},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2422,"url":7108},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2411,"url":7110},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2411,"url":7112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2482],{"id":288,"slug":7115,"dossier":45,"summary":7116,"aliases":7117,"sourceIds":7118,"published":7119,"modified":7120,"checkedAt":7,"severity":7121,"references":7123,"versionKeys":7131,"packageCount":32,"repositoryCount":34},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[],[288],"2026-08-07T15:49:07Z","2026-08-09T02:56:51.363626854Z",[7122],{"type":2407,"score":2562},[7124,7126,7127,7129,7130],{"type":2422,"url":7125},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":2422,"url":3037},{"type":2422,"url":7128},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":2419,"url":2571},{"type":2422,"url":3042},[2575,2576,2577],{"id":289,"slug":7133,"dossier":45,"summary":7134,"aliases":7135,"sourceIds":7138,"published":7139,"modified":7140,"checkedAt":7,"severity":7141,"references":7145,"versionKeys":7154,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[7136,7137],"CVE-2026-42284","PYSEC-2026-2161",[289,7137],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[7142,7144],{"type":2407,"score":7143},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2407,"score":3218},[7146,7148,7150,7151,7152],{"type":2477,"url":7147},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2411,"url":7149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2419,"url":2571},{"type":2416,"url":6630},{"type":2422,"url":7153},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[2575,2576,2577],{"id":290,"slug":7156,"dossier":45,"summary":7157,"aliases":7158,"sourceIds":7162,"published":7163,"modified":7164,"checkedAt":7,"severity":7165,"references":7170,"versionKeys":7186,"packageCount":32,"repositoryCount":111},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[7159,7160,7161],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[290],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[7166,7168],{"type":2407,"score":7167},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2444,"score":7169},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7171,7173,7175,7177,7179,7180,7182,7184],{"type":2411,"url":7172},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2422,"url":7174},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2422,"url":7176},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2422,"url":7178},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2419,"url":2730},{"type":2422,"url":7181},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2422,"url":7183},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2422,"url":7185},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2742,2743],{"id":291,"slug":7188,"dossier":45,"summary":7189,"aliases":7190,"sourceIds":7193,"published":7194,"modified":7195,"checkedAt":7,"severity":7196,"references":7198,"versionKeys":7205,"packageCount":32,"repositoryCount":461},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[7191,7192],"CVE-2026-48817","PYSEC-2026-2280",[291,7192],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[7197],{"type":2407,"score":3822},[7199,7201,7203,7204],{"type":2411,"url":7200},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2411,"url":7202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2419,"url":3911},{"type":2411,"url":7081},[2549,2550,2551,3918,3919,4050,4051],{"id":292,"slug":7207,"dossier":45,"summary":7208,"aliases":7209,"sourceIds":7213,"published":7214,"modified":7215,"checkedAt":7,"severity":7216,"references":7218,"versionKeys":7232,"packageCount":32,"repositoryCount":111},"ghsa-xch3-2f9x-wh9f-70e88660","MLflow has a command injection in mlflow\u002Fsagemaker\u002F__init__.py",[7210,7211,7212],"BIT-mlflow-2025-14287","CVE-2025-14287","PYSEC-2026-2661",[292,7212],"2026-03-16T15:30:41Z","2026-07-13T16:42:49.591762139Z",[7217],{"type":2407,"score":6387},[7219,7221,7223,7225,7226,7227,7229,7230],{"type":2411,"url":7220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14287",{"type":2422,"url":7222},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19277",{"type":2422,"url":7224},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F8b8792a7034fb33a14b0b31cabcaa9b912d3485f",{"type":2419,"url":2887},{"type":2422,"url":5305},{"type":2422,"url":7228},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F229cd526-41aa-4819-b6f0-e2d0371c89e3",{"type":2419,"url":2891},{"type":2411,"url":7231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xch3-2f9x-wh9f",[2895,2896],{"id":293,"slug":7234,"dossier":45,"summary":7235,"aliases":7236,"sourceIds":7240,"published":7241,"modified":7242,"checkedAt":7,"severity":7243,"references":7245,"versionKeys":7259,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[7237,7238,7239],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[293,7239],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[7244],{"type":2407,"score":3739},[7246,7248,7250,7252,7254,7256,7257],{"type":2411,"url":7247},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2411,"url":7249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2422,"url":7251},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2416,"url":7253},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2422,"url":7255},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2419,"url":2952},{"type":2422,"url":7258},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2959],{"id":294,"slug":7261,"dossier":45,"summary":7262,"aliases":7263,"sourceIds":7267,"published":7268,"modified":7269,"checkedAt":7,"severity":7270,"references":7273,"versionKeys":7284,"packageCount":32,"repositoryCount":2674},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[7264,7265,7266],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[294,7266],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[7271],{"type":2407,"score":7272},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7274,7276,7278,7280,7282,7283],{"type":2477,"url":7275},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2411,"url":7277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2416,"url":7279},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2416,"url":7281},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2419,"url":2952},{"type":2411,"url":3428},[2956,2957,2958,2959,2960,2961,2962,2963],{"id":295,"slug":7286,"dossier":45,"summary":350,"aliases":7287,"sourceIds":7290,"published":7291,"modified":7292,"checkedAt":7,"severity":7293,"references":7295,"versionKeys":7304,"packageCount":32,"repositoryCount":111},"pysec-2025-198-62b25ed4",[7288,7289],"BIT-pytorch-2025-46148","CVE-2025-46148",[295],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[7294],{"type":2407,"score":4546},[7296,7298,7300,7302],{"type":2411,"url":7297},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2411,"url":7299},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2723,"url":7301},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2416,"url":7303},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2742,2743],{"id":296,"slug":7306,"dossier":45,"summary":350,"aliases":7307,"sourceIds":7310,"published":7311,"modified":7312,"checkedAt":7,"severity":7313,"references":7315,"versionKeys":7321,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[7308,7309],"BIT-pytorch-2025-46149","CVE-2025-46149",[296],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[7314],{"type":2407,"score":4546},[7316,7317,7319],{"type":2411,"url":7297},{"type":2723,"url":7318},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2416,"url":7320},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2743],{"id":297,"slug":7323,"dossier":45,"summary":350,"aliases":7324,"sourceIds":7327,"published":7328,"modified":7329,"checkedAt":7,"severity":7330,"references":7332,"versionKeys":7340,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[7325,7326],"BIT-pytorch-2025-46150","CVE-2025-46150",[297],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[7331],{"type":2407,"score":4546},[7333,7334,7336,7338],{"type":2411,"url":7297},{"type":2723,"url":7335},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2723,"url":7337},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2416,"url":7339},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2743],{"id":298,"slug":7342,"dossier":45,"summary":350,"aliases":7343,"sourceIds":7346,"published":7347,"modified":7348,"checkedAt":7,"severity":7349,"references":7351,"versionKeys":7357,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[7344,7345],"BIT-pytorch-2025-46152","CVE-2025-46152",[298],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[7350],{"type":2407,"score":2502},[7352,7353,7355],{"type":2411,"url":7297},{"type":2723,"url":7354},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2416,"url":7356},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2743],{"id":299,"slug":7359,"dossier":45,"summary":350,"aliases":7360,"sourceIds":7363,"published":7364,"modified":7365,"checkedAt":7,"severity":7366,"references":7368,"versionKeys":7378,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[7361,7362],"BIT-pytorch-2025-46153","CVE-2025-46153",[299],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[7367],{"type":2407,"score":4546},[7369,7371,7372,7374,7376],{"type":2422,"url":7370},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2411,"url":7297},{"type":2411,"url":7373},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2723,"url":7375},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2416,"url":7377},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2743],{"id":300,"slug":7380,"dossier":45,"summary":350,"aliases":7381,"sourceIds":7384,"published":7385,"modified":7386,"checkedAt":7,"severity":7387,"references":7389,"versionKeys":7394,"packageCount":32,"repositoryCount":461},"pysec-2025-203-2febb201",[7382,7383],"BIT-pytorch-2025-55551","CVE-2025-55551",[300],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[7388],{"type":2407,"score":2782},[7390,7392],{"type":2411,"url":7391},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2723,"url":7393},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2742,2743,2744,4191,4192,6289],{"id":301,"slug":7396,"dossier":45,"summary":350,"aliases":7397,"sourceIds":7400,"published":7401,"modified":7402,"checkedAt":7,"severity":7403,"references":7405,"versionKeys":7409,"packageCount":32,"repositoryCount":461},"pysec-2025-204-cdae47da",[7398,7399],"BIT-pytorch-2025-55552","CVE-2025-55552",[301],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[7404],{"type":2407,"score":2782},[7406,7407],{"type":2411,"url":7391},{"type":2723,"url":7408},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2742,2743,2744,4191,4192,6289],{"id":302,"slug":7411,"dossier":45,"summary":350,"aliases":7412,"sourceIds":7415,"published":7416,"modified":7417,"checkedAt":7,"severity":7418,"references":7420,"versionKeys":7426,"packageCount":32,"repositoryCount":518},"pysec-2025-205-fd5e58fd",[7413,7414],"BIT-pytorch-2025-55553","CVE-2025-55553",[302],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[7419],{"type":2407,"score":2782},[7421,7422,7424],{"type":2411,"url":7391},{"type":2723,"url":7423},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2416,"url":7425},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2742,2743,2744],{"id":303,"slug":7428,"dossier":45,"summary":350,"aliases":7429,"sourceIds":7432,"published":7433,"modified":7434,"checkedAt":7,"severity":7435,"references":7437,"versionKeys":7441,"packageCount":32,"repositoryCount":461},"pysec-2025-206-58322476",[7430,7431],"BIT-pytorch-2025-55554","CVE-2025-55554",[303],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[7436],{"type":2407,"score":2502},[7438,7439],{"type":2411,"url":7391},{"type":2723,"url":7440},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2742,2743,2744,4191,4192,6289],{"id":304,"slug":7443,"dossier":45,"summary":350,"aliases":7444,"sourceIds":7447,"published":7448,"modified":7449,"checkedAt":7,"severity":7450,"references":7452,"versionKeys":7458,"packageCount":32,"repositoryCount":518},"pysec-2025-207-2abef3fc",[7445,7446],"BIT-pytorch-2025-55557","CVE-2025-55557",[304],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[7451],{"type":2407,"score":2782},[7453,7454,7456],{"type":2411,"url":7391},{"type":2723,"url":7455},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2416,"url":7457},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2742,2743,2744],{"id":305,"slug":7460,"dossier":45,"summary":350,"aliases":7461,"sourceIds":7464,"published":7465,"modified":7466,"checkedAt":7,"severity":7467,"references":7469,"versionKeys":7475,"packageCount":32,"repositoryCount":518},"pysec-2025-208-6e93fe9d",[7462,7463],"BIT-pytorch-2025-55558","CVE-2025-55558",[305],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[7468],{"type":2407,"score":2782},[7470,7471,7473],{"type":2411,"url":7391},{"type":2723,"url":7472},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2416,"url":7474},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2742,2743,2744],{"id":306,"slug":7477,"dossier":45,"summary":350,"aliases":7478,"sourceIds":7481,"published":7482,"modified":7483,"checkedAt":7,"severity":7484,"references":7486,"versionKeys":7492,"packageCount":32,"repositoryCount":518},"pysec-2025-209-e6f352b0",[7479,7480],"BIT-pytorch-2025-55560","CVE-2025-55560",[306],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[7485],{"type":2407,"score":2782},[7487,7488,7490],{"type":2411,"url":7391},{"type":2723,"url":7489},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2416,"url":7491},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2742,2743,2744],{"id":307,"slug":7494,"dossier":45,"summary":350,"aliases":7495,"sourceIds":7497,"published":7498,"modified":7499,"checkedAt":7,"severity":7500,"references":7502,"versionKeys":7505,"packageCount":32,"repositoryCount":518},"pysec-2025-211-d8bd15de",[7496],"CVE-2025-14920",[307],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[7501],{"type":2407,"score":2468},[7503],{"type":2411,"url":7504},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2482,2483,2484],{"id":308,"slug":7507,"dossier":45,"summary":350,"aliases":7508,"sourceIds":7510,"published":7511,"modified":7512,"checkedAt":7,"severity":7513,"references":7515,"versionKeys":7518,"packageCount":32,"repositoryCount":518},"pysec-2025-212-a011b97d",[7509],"CVE-2025-14921",[308],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[7514],{"type":2407,"score":2468},[7516],{"type":2411,"url":7517},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2482,2483,2484],{"id":309,"slug":7520,"dossier":45,"summary":350,"aliases":7521,"sourceIds":7523,"published":7524,"modified":7525,"checkedAt":7,"severity":7526,"references":7528,"versionKeys":7531,"packageCount":32,"repositoryCount":518},"pysec-2025-213-9043dc9b",[7522],"CVE-2025-14924",[309],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[7527],{"type":2407,"score":2468},[7529],{"type":2411,"url":7530},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2482,2483,2484],{"id":310,"slug":7533,"dossier":45,"summary":350,"aliases":7534,"sourceIds":7536,"published":7537,"modified":7538,"checkedAt":7,"severity":7539,"references":7541,"versionKeys":7544,"packageCount":32,"repositoryCount":518},"pysec-2025-214-eb241255",[7535],"CVE-2025-14926",[310],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[7540],{"type":2407,"score":2468},[7542],{"type":2411,"url":7543},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2482,2483,2484],{"id":311,"slug":7546,"dossier":45,"summary":350,"aliases":7547,"sourceIds":7549,"published":7550,"modified":7551,"checkedAt":7,"severity":7552,"references":7554,"versionKeys":7557,"packageCount":32,"repositoryCount":518},"pysec-2025-215-6064f491",[7548],"CVE-2025-14927",[311],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[7553],{"type":2407,"score":2468},[7555],{"type":2411,"url":7556},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2482,2483,2484],{"id":312,"slug":7559,"dossier":45,"summary":350,"aliases":7560,"sourceIds":7562,"published":7563,"modified":7564,"checkedAt":7,"severity":7565,"references":7567,"versionKeys":7570,"packageCount":32,"repositoryCount":518},"pysec-2025-216-5708ed01",[7561],"CVE-2025-14928",[312],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[7566],{"type":2407,"score":2468},[7568],{"type":2411,"url":7569},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2482,2483,2484],{"id":313,"slug":7572,"dossier":45,"summary":350,"aliases":7573,"sourceIds":7575,"published":7576,"modified":7577,"checkedAt":7,"severity":7578,"references":7580,"versionKeys":7583,"packageCount":32,"repositoryCount":461},"pysec-2025-217-2c1ad388",[7574],"CVE-2025-14929",[313],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[7579],{"type":2407,"score":2468},[7581],{"type":2411,"url":7582},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2482,2483,2484,2485,2486,2487,2488],{"id":314,"slug":7585,"dossier":45,"summary":350,"aliases":7586,"sourceIds":7588,"published":7589,"modified":7590,"checkedAt":7,"severity":7591,"references":7593,"versionKeys":7596,"packageCount":32,"repositoryCount":489},"pysec-2025-218-39811fc3",[7587],"CVE-2025-14930",[314],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[7592],{"type":2407,"score":2468},[7594],{"type":2411,"url":7595},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2482,2483,2484,2485],{"id":315,"slug":7598,"dossier":45,"summary":350,"aliases":7599,"sourceIds":7602,"published":7603,"modified":7604,"checkedAt":7,"severity":7605,"references":7607,"versionKeys":7618,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[7600,7601],"BIT-pytorch-2026-4538","CVE-2026-4538",[315],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[7606],{"type":2407,"score":6187},[7608,7610,7612,7614,7616],{"type":2422,"url":7609},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2411,"url":7611},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2411,"url":7613},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2723,"url":7615},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2416,"url":7617},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[6663,2742,2743,2744,4191,4192,6289,6290,6291],{"id":316,"slug":7620,"dossier":89,"summary":350,"aliases":7621,"sourceIds":7624,"published":7625,"modified":7626,"checkedAt":7,"severity":7627,"references":7630,"versionKeys":7643,"packageCount":32,"repositoryCount":5345},"pysec-2026-2132-627bf7c7",[7622,7623],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[316],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[7628],{"type":2407,"score":7629},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7631,7633,7635,7636,7637,7639,7641],{"type":2422,"url":7632},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2422,"url":7634},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2411,"url":5690},{"type":2411,"url":5692},{"type":2723,"url":7638},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2416,"url":7640},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2477,"url":7642},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[7644,7645,7646,7647,7648,7649],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":317,"slug":7651,"dossier":45,"summary":350,"aliases":7652,"sourceIds":7657,"published":7658,"modified":7659,"checkedAt":7,"severity":7660,"references":7662,"versionKeys":7679,"packageCount":32,"repositoryCount":450},"pysec-2026-2286-8795b007",[7653,7654,7655,7656],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[317],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[7661],{"type":2407,"score":4741},[7663,7665,7667,7669,7671,7673,7675,7677],{"type":2422,"url":7664},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2422,"url":7666},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2411,"url":7668},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2411,"url":7670},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2411,"url":7672},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2723,"url":7674},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2723,"url":7676},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2416,"url":7678},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2742,2743,2744,4191,4192,6289,6290,6291],1786591830106]