[{"data":1,"prerenderedAt":11587},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11299":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":430,"related":433},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-10-01T04:34:15.142Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-10-01T04:32:18.676Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},44,43,1,24,4,27,41,39,38,0,4135,4124,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2467,50,7265,9,55,2433,34,852,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5454545454545454,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":428,"providers":429},"opencode:11299","opencode-11299",11299,"URBAN.KI SmartEnergie","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie","8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fcommit\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","2026-09-15T13:09:00.895Z","2026-09-14T08:20:45.000Z",{"complete":90,"entryCount":91,"truncated":47},true,928,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","b999006073eed3c4ff84d359c9b073b0b3899f18","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fblob\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129\u002Fuv.lock","5bc9c3742e46d283568bac153a2117227cbb749c54f13f479c74214dc47187f6",968814,"parsed",328,[102],"pypi",12,22,2,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427],"GHSA-23w6-3w8w-8484","GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g59-m95p-pgfq","GHSA-2gx3-rcp4-g85q","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3936-cmfr-pm3m","GHSA-3crg-w4f6-42mx","GHSA-3gq4-3j92-5w49","GHSA-3gqm-fcw5-w839","GHSA-3hhw-38pf-pxj6","GHSA-3hv7-mjh2-fv65","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-42vr-xj54-vc7v","GHSA-45hq-cxwh-f6vc","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4jhm-jv67-739f","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-568f-pv23-39p4","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5gh2-94qg-qppq","GHSA-5hgr-hg42-57jg","GHSA-5p39-cfhj-2xmp","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5w7q-77mv-v69f","GHSA-5wp5-5229-5g6q","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6hm5-jgcp-p838","GHSA-6hwm-xvph-95vm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6w46-j5rx-g56g","GHSA-6ww7-3frv-cqxh","GHSA-72r2-7mfr-5xr9","GHSA-752w-5fwx-jx9f","GHSA-763m-79hh-57f2","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7p94-766c-hgjp","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-848c-c2cx-j7qx","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8mgp-746c-j5xp","GHSA-8mpw-7fpc-4gqj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-8wjv-2p76-3863","GHSA-9356-575x-2w9m","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-97qj-x29f-37w7","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9f4q-q82q-4359","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9v7f-9g4p-ffgj","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c2m8-h5v5-343r","GHSA-c39v-8hrw-h448","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cgwc-pv48-fhj5","GHSA-chx6-46f5-w4vp","GHSA-cj93-chg6-vgv8","GHSA-cjqg-rq2h-2fvj","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cr42-rg2m-mq4q","GHSA-cv22-g7mw-8v73","GHSA-cw6x-m8jw-qmrh","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f794-5jv7-7672","GHSA-f833-7jw8-xwrv","GHSA-f96h-pmfr-66vw","GHSA-fc8x-2rww-xw9m","GHSA-ff5c-cp5c-9wjf","GHSA-ffc3-869f-jxw9","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fj7x-q9j7-g6q6","GHSA-fp3f-mc75-235c","GHSA-fpwr-67px-3qhx","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gh4c-6fx4-qh6g","GHSA-gjv8-xp57-g29c","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-gvp8-978c-rx2q","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hvfh-5mj3-5f3j","GHSA-hw26-mmpg-fqfg","GHSA-hxm8-2xgr-2p9m","GHSA-hxxf-235m-72v3","GHSA-j543-4vmf-qm7v","GHSA-j5xp-7m2f-49jv","GHSA-j934-xhv5-fg8f","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jmmv-h3mp-59v8","GHSA-jp53-mhqp-8xcg","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jwrc-g2q2-pq5p","GHSA-m2v9-299j-rv96","GHSA-m42h-3232-vpv3","GHSA-m449-cwjh-6pw7","GHSA-m4rf-3fr8-xwx3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m88r-rg27-5xfg","GHSA-m9gh-vj53-gvh9","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mpf4-983q-p7j4","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p3m8-78j2-g5p3","GHSA-p4g4-x82p-q773","GHSA-p4gq-832x-fm9v","GHSA-p4rw-rvv2-7xwr","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q29v-xc37-wh5m","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qvv7-cg9c-w4x3","GHSA-qx2g-xrx7-vfh8","GHSA-qxrp-vhvm-j765","GHSA-r3xg-rg9j-67fv","GHSA-r6gq-whwq-mvg9","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rhp5-r9x4-f5g2","GHSA-rrmf-rvhw-rf47","GHSA-rrv8-h7p8-rx55","GHSA-v492-6xx2-p57g","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vp2x-qp44-57v7","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vxq7-64xx-v4gw","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w3fx-mc44-mf6j","GHSA-w3v8-gmh9-3wv7","GHSA-w6j9-cwv2-h6wq","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-ww6m-cw3f-q94g","GHSA-wwv5-g3v4-889x","GHSA-x284-j5p8-9c5p","GHSA-x3gm-94wq-g975","GHSA-x5ph-mj9p-rfr8","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-x8wg-4xgc-vr54","GHSA-x99w-6fgc-pmfw","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","GHSA-xvp8-3mhv-424c","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2120","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3954","PYSEC-2026-3955","PYSEC-2026-4013","PYSEC-2026-4014","PYSEC-2026-598","PYSEC-2026-99",321,[],{"files":431,"occurrenceCount":100},[432],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":434,"vulnerabilities":3331},[435,448,459,469,482,491,500,509,518,528,537,546,555,565,574,585,597,606,616,626,636,645,655,664,674,683,692,702,711,720,729,738,747,756,765,775,784,793,803,812,821,830,839,848,857,866,875,885,894,903,912,921,931,940,950,959,968,977,986,995,1004,1013,1022,1031,1040,1049,1058,1067,1077,1086,1095,1104,1113,1122,1131,1140,1149,1158,1167,1176,1185,1194,1203,1212,1221,1230,1238,1247,1256,1265,1274,1282,1290,1299,1308,1317,1326,1335,1344,1353,1362,1371,1380,1391,1401,1410,1418,1428,1437,1446,1454,1463,1472,1481,1490,1499,1508,1517,1526,1535,1544,1553,1562,1571,1580,1589,1598,1607,1616,1624,1632,1641,1650,1658,1667,1676,1685,1693,1702,1710,1719,1728,1737,1745,1753,1761,1769,1777,1785,1794,1803,1811,1820,1829,1838,1846,1855,1864,1872,1881,1890,1899,1908,1918,1927,1936,1945,1953,1962,1971,1980,1989,1998,2007,2015,2024,2032,2041,2049,2058,2066,2075,2084,2092,2100,2108,2116,2125,2134,2142,2150,2158,2166,2174,2182,2190,2198,2206,2214,2222,2230,2238,2246,2254,2262,2270,2278,2286,2294,2302,2310,2318,2326,2334,2342,2350,2358,2366,2374,2382,2390,2398,2406,2414,2422,2430,2439,2447,2457,2466,2474,2484,2493,2502,2511,2520,2528,2537,2545,2554,2563,2572,2581,2589,2598,2606,2614,2623,2632,2641,2650,2659,2668,2676,2685,2694,2703,2711,2719,2727,2735,2744,2753,2761,2770,2778,2787,2796,2805,2814,2823,2832,2841,2850,2859,2869,2877,2886,2895,2904,2913,2922,2931,2940,2949,2957,2966,2975,2983,2992,3001,3010,3019,3028,3037,3046,3055,3064,3072,3081,3090,3099,3108,3116,3125,3134,3142,3151,3159,3167,3176,3185,3194,3202,3211,3219,3227,3235,3244,3253,3261,3270,3278,3287,3296,3304,3313,3322],{"id":436,"slug":437,"identity":438,"label":439,"aiRelevant":90,"provider":440,"advisoryCount":35,"licenseExpressions":443,"versions":445,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":447},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":441,"label":442},"hugging-face","Hugging Face",[444],"Apache-2.0",[446],"4.57.1",[56],{"id":449,"slug":450,"identity":451,"label":452,"aiRelevant":90,"provider":83,"advisoryCount":453,"licenseExpressions":454,"versions":456,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":458},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[455],"BSD-3-Clause",[457],"2.9.0",[56],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":464,"versions":466,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":468},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[465],"non-standard",[467],"1.11.0",[56],{"id":470,"slug":471,"identity":472,"label":473,"aiRelevant":90,"provider":474,"advisoryCount":39,"licenseExpressions":477,"versions":479,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":481},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":475,"label":476},"anthropic","Anthropic",[478],"MIT",[480],"0.72.0",[56],{"id":72,"slug":73,"identity":483,"label":74,"aiRelevant":90,"provider":484,"advisoryCount":39,"licenseExpressions":487,"versions":488,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":490},"pypi:openai",{"id":485,"label":486},"openai","OpenAI",[444],[489],"1.109.1",[56],{"id":492,"slug":493,"identity":494,"label":495,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":496,"versions":497,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":499},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[465],[498],"0.22.1",[56],{"id":501,"slug":502,"identity":503,"label":504,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":505,"versions":506,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":508},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[478],[507],"0.14.6",[56],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":514,"versions":515,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":517},"package:pypi:llama-index-llms-openai","llama-index-llms-openai-9155387e","pypi:llama-index-llms-openai","LlamaIndex · Llms OpenAI",[478],[516],"0.6.6",[56],{"id":519,"slug":520,"identity":521,"label":522,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":523,"versions":525,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":527},"package:pypi:llama-index-readers-web","llama-index-readers-web-ef09483c","pypi:llama-index-readers-web","LlamaIndex · Readers Web",[524],"GPL-3.0-or-later",[526],"0.5.5",[56],{"id":529,"slug":530,"identity":531,"label":532,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":533,"versions":534,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":536},"package:pypi:llama-index-vector-stores-lancedb","llama-index-vector-stores-lancedb-d8d9098c","pypi:llama-index-vector-stores-lancedb","LlamaIndex · Vector Stores Lancedb",[478],[535],"0.4.1",[56],{"id":538,"slug":539,"identity":540,"label":541,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":542,"versions":543,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":545},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[444],[544],"4.11.0.86",[56],{"id":547,"slug":548,"identity":549,"label":550,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":551,"versions":552,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":554},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[465],[553],"0.12.0",[56],{"id":556,"slug":557,"identity":558,"label":559,"aiRelevant":47,"provider":83,"advisoryCount":560,"licenseExpressions":561,"versions":562,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":564},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",47,[444],[563],"3.9.2",[56],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":47,"provider":83,"advisoryCount":36,"licenseExpressions":570,"versions":571,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":573},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",[455,465],[572],"6.1.3",[56],{"id":575,"slug":576,"identity":577,"label":578,"aiRelevant":47,"provider":83,"advisoryCount":579,"licenseExpressions":580,"versions":582,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":584},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[444,581],"Apache-2.0 AND MIT",[583],"3.13.2",[56],{"id":586,"slug":587,"identity":588,"label":589,"aiRelevant":47,"provider":83,"advisoryCount":590,"licenseExpressions":591,"versions":594,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":596},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[592,593],"HPND","MIT-CMU",[595],"11.3.0",[56],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":47,"provider":83,"advisoryCount":590,"licenseExpressions":602,"versions":603,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":605},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",[478],[604],"2.10.1",[56],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":47,"provider":83,"advisoryCount":611,"licenseExpressions":612,"versions":613,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":615},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",16,[444],[614],"6.5.2",[56],{"id":617,"slug":618,"identity":619,"label":620,"aiRelevant":47,"provider":83,"advisoryCount":621,"licenseExpressions":622,"versions":623,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":625},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[478],[624],"2.5.0",[56],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":47,"provider":83,"advisoryCount":631,"licenseExpressions":632,"versions":633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":635},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[444],[634],"0.0.20",[56],{"id":637,"slug":638,"identity":639,"label":640,"aiRelevant":47,"provider":83,"advisoryCount":631,"licenseExpressions":641,"versions":642,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":644},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[455],[643],"0.48.0",[56],{"id":646,"slug":647,"identity":648,"label":649,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":651,"versions":652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":654},"package:pypi:chainlit","chainlit-b11abd2e","pypi:chainlit","chainlit",6,[444],[653],"2.8.3",[56],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":660,"versions":661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":663},"package:pypi:docling","docling-61c4e452","pypi:docling","docling",[478],[662],"2.58.0",[56],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":47,"provider":83,"advisoryCount":669,"licenseExpressions":670,"versions":671,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":673},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",5,[478],[672],"20.35.4",[56],{"id":675,"slug":676,"identity":677,"label":678,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":679,"versions":680,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":682},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[455,465],[681],"3.1.6",[56],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":688,"versions":689,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":691},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[478],[690],"2.8",[56],{"id":693,"slug":694,"identity":695,"label":696,"aiRelevant":47,"provider":83,"advisoryCount":697,"licenseExpressions":698,"versions":699,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":701},"package:pypi:black","black-af583dd9","pypi:black","black",3,[478],[700],"25.9.0",[56],{"id":703,"slug":704,"identity":705,"label":706,"aiRelevant":47,"provider":83,"advisoryCount":697,"licenseExpressions":707,"versions":708,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":710},"package:pypi:lxml-html-clean","lxml-html-clean-a658348a","pypi:lxml-html-clean","lxml-html-clean",[455],[709],"0.4.3",[56],{"id":712,"slug":713,"identity":714,"label":715,"aiRelevant":47,"provider":83,"advisoryCount":697,"licenseExpressions":716,"versions":717,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":719},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[478],[718],"1.19.0",[56],{"id":721,"slug":722,"identity":723,"label":724,"aiRelevant":47,"provider":83,"advisoryCount":697,"licenseExpressions":725,"versions":726,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":728},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[444],[727],"2.32.5",[56],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":47,"provider":83,"advisoryCount":697,"licenseExpressions":734,"versions":735,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":737},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[478],[736],"80.9.0",[56],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":743,"versions":744,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":746},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[478],[745],"4.11.0",[56],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":752,"versions":753,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":755},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",[478],[754],"2.2.0",[56],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":761,"versions":762,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":764},"package:pypi:docling-core","docling-core-f56a60f5","pypi:docling-core","docling-core",[478],[763],"2.49.0",[56],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":770,"versions":772,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":774},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[478,771],"Unlicense",[773],"3.20.0",[56],{"id":776,"slug":777,"identity":778,"label":779,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":780,"versions":781,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":783},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[455],[782],"6.33.0",[56],{"id":785,"slug":786,"identity":787,"label":788,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":789,"versions":790,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":792},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[478],[791],"4.12.3",[56],{"id":794,"slug":795,"identity":796,"label":797,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":798,"versions":800,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":802},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[799],"MPL-2.0",[801],"2025.10.5",[56],{"id":804,"slug":805,"identity":806,"label":807,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":808,"versions":809,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":811},"package:pypi:click","click-ef97f731","pypi:click","click",[455,465],[810],"8.3.0",[56],{"id":813,"slug":814,"identity":815,"label":816,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":817,"versions":818,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":820},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[478],[819],"0.16.0",[56],{"id":822,"slug":823,"identity":824,"label":825,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":826,"versions":827,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":829},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[455,465],[828],"3.11",[56],{"id":831,"slug":832,"identity":833,"label":834,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":835,"versions":836,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":838},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[455,465],[837],"5.9.1",[56],{"id":840,"slug":841,"identity":842,"label":843,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":844,"versions":845,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":847},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[455],[846],"5.4.0",[56],{"id":849,"slug":850,"identity":851,"label":852,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":853,"versions":854,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":856},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[478],[855],"3.26.1",[56],{"id":858,"slug":859,"identity":860,"label":861,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":862,"versions":863,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":865},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[444,465],[864],"22.0.0",[56],{"id":867,"slug":868,"identity":869,"label":870,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":871,"versions":872,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":874},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[478],[873],"2.11.0",[56],{"id":876,"slug":877,"identity":878,"label":879,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":880,"versions":882,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":884},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[881],"BSD-2-Clause",[883],"2.19.2",[56],{"id":886,"slug":887,"identity":888,"label":889,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":890,"versions":891,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":893},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[465],[892],"3.0.1",[56],{"id":895,"slug":896,"identity":897,"label":898,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":899,"versions":900,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":902},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[478],[901],"8.4.2",[56],{"id":904,"slug":905,"identity":906,"label":907,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":908,"versions":909,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":911},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[455],[910],"1.2.1",[56],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":917,"versions":918,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":920},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[478],[919],"5.14.3",[56],{"id":922,"slug":923,"identity":924,"label":925,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":926,"versions":928,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":930},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[927],"MIT AND MPL-2.0",[929],"4.67.1",[56],{"id":932,"slug":933,"identity":934,"label":935,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":936,"versions":937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":939},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[444],[938],"24.1.0",[56],{"id":941,"slug":942,"identity":943,"label":944,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":945,"versions":947,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":949},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[946],"PSF-2.0",[948],"2.6.1",[56],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":955,"versions":956,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":958},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[444],[957],"1.4.0",[56],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":964,"versions":965,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":967},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[478],[966],"0.21.0",[56],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":973,"versions":974,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":976},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[478],[975],"0.7.0",[56],{"id":978,"slug":979,"identity":980,"label":981,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":982,"versions":983,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":985},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[465],[984],"4.9.3",[56],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":991,"versions":992,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":994},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[465],[993],"0.1.4",[56],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1000,"versions":1001,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1003},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[478],[1002],"3.11.0",[56],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1009,"versions":1010,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1012},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[444],[1011],"3.0.0",[56],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1018,"versions":1019,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1021},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[478],[1020],"0.0.10",[56],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1027,"versions":1028,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1030},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[478],[1029],"25.4.0",[56],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1036,"versions":1037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1039},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[946],[1038],"0.2.2",[56],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1045,"versions":1046,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1048},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[478],[1047],"2.2.1",[56],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1054,"versions":1055,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1057},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[478],[1056],"4.14.2",[56],{"id":1059,"slug":1060,"identity":1061,"label":1062,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1063,"versions":1064,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1066},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[465],[1065],"0.23.1",[56],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1072,"versions":1074,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1076},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[478,1073],"MIT-0",[1075],"2.0.0",[56],{"id":1078,"slug":1079,"identity":1080,"label":1081,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1082,"versions":1083,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1085},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[478],[1084],"3.4.0",[56],{"id":1087,"slug":1088,"identity":1089,"label":1090,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1091,"versions":1092,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1094},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[478],[1093],"3.4.4",[56],{"id":1096,"slug":1097,"identity":1098,"label":1099,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1100,"versions":1101,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1103},"package:pypi:chevron","chevron-e2cf8dfd","pypi:chevron","chevron",[478],[1102],"0.14.0",[56],{"id":1105,"slug":1106,"identity":1107,"label":1108,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1109,"versions":1110,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1112},"package:pypi:chromedriver-autoinstaller","chromedriver-autoinstaller-c57f66e8","pypi:chromedriver-autoinstaller","chromedriver-autoinstaller",[478],[1111],"0.6.4",[56],{"id":1114,"slug":1115,"identity":1116,"label":1117,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1118,"versions":1119,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1121},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[465],[1120],"0.4.6",[56],{"id":1123,"slug":1124,"identity":1125,"label":1126,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1127,"versions":1128,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1130},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[478],[1129],"6.10.1",[56],{"id":1132,"slug":1133,"identity":1134,"label":1135,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1136,"versions":1137,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1139},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[465],[1138],"0.2.3",[56],{"id":1141,"slug":1142,"identity":1143,"label":1144,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1145,"versions":1146,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1148},"package:pypi:cssselect","cssselect-2437b3c5","pypi:cssselect","cssselect",[465],[1147],"1.3.0",[56],{"id":1150,"slug":1151,"identity":1152,"label":1153,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1154,"versions":1155,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1157},"package:pypi:cuid","cuid-297d1f96","pypi:cuid","cuid",[465],[1156],"0.4",[56],{"id":1159,"slug":1160,"identity":1161,"label":1162,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1163,"versions":1164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1166},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[478],[1165],"0.6.7",[56],{"id":1168,"slug":1169,"identity":1170,"label":1171,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1172,"versions":1173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1175},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[478],[1174],"1.8.17",[56],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1181,"versions":1182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1184},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[881,465],[1183],"5.2.1",[56],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1190,"versions":1191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1193},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[465],[1192],"0.7.1",[56],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1199,"versions":1200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1202},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[478],[1201],"1.2.18",[56],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1208,"versions":1209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1211},"package:pypi:deprecation","deprecation-c367808e","pypi:deprecation","deprecation",[444],[1210],"2.1.0",[56],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1217,"versions":1218,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1220},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[455],[1219],"0.4.0",[56],{"id":1222,"slug":1223,"identity":1224,"label":1225,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1226,"versions":1227,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1229},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[478],[1228],"1.0.8",[56],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1235,"versions":1236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1237},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[946],[1219],[56],{"id":1239,"slug":1240,"identity":1241,"label":1242,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1243,"versions":1244,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1246},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[444],[1245],"1.9.0",[56],{"id":1248,"slug":1249,"identity":1250,"label":1251,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1252,"versions":1253,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1255},"package:pypi:docling-ibm-models","docling-ibm-models-4f15d6af","pypi:docling-ibm-models","docling-ibm-models",[478],[1254],"3.10.2",[56],{"id":1257,"slug":1258,"identity":1259,"label":1260,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1261,"versions":1262,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1264},"package:pypi:docling-parse","docling-parse-b9af4bcb","pypi:docling-parse","docling-parse",[478],[1263],"4.7.0",[56],{"id":1266,"slug":1267,"identity":1268,"label":1269,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1270,"versions":1271,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1273},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[478],[1272],"0.17.0",[56],{"id":1275,"slug":1276,"identity":1277,"label":1278,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1279,"versions":1280,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1281},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[478],[1075],[56],{"id":1283,"slug":1284,"identity":1285,"label":1286,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1287,"versions":1288,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1289},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[478],[1047],[56],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1295,"versions":1296,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1298},"package:pypi:faker","faker-af8bb74a","pypi:faker","faker",[478],[1297],"37.12.0",[56],{"id":1300,"slug":1301,"identity":1302,"label":1303,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1304,"versions":1305,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1307},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[478],[1306],"0.116.2",[56],{"id":1309,"slug":1310,"identity":1311,"label":1312,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1313,"versions":1314,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1316},"package:pypi:feedfinder2","feedfinder2-a2efca90","pypi:feedfinder2","feedfinder2",[478],[1315],"0.0.4",[56],{"id":1318,"slug":1319,"identity":1320,"label":1321,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1322,"versions":1323,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1325},"package:pypi:feedparser","feedparser-7de97965","pypi:feedparser","feedparser",[881],[1324],"6.0.12",[56],{"id":1327,"slug":1328,"identity":1329,"label":1330,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1331,"versions":1332,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1334},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[478],[1333],"1.2.0",[56],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1340,"versions":1341,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1343},"package:pypi:firecrawl-py","firecrawl-py-2dd84658","pypi:firecrawl-py","firecrawl-py",[478],[1342],"4.5.0",[56],{"id":1345,"slug":1346,"identity":1347,"label":1348,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1349,"versions":1350,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1352},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[478],[1351],"7.3.0",[56],{"id":1354,"slug":1355,"identity":1356,"label":1357,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1358,"versions":1359,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1361},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[444],[1360],"1.8.0",[56],{"id":1363,"slug":1364,"identity":1365,"label":1366,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1367,"versions":1368,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1370},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[455,465],[1369],"2025.9.0",[56],{"id":1372,"slug":1373,"identity":1374,"label":1375,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1376,"versions":1377,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1379},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[444],[1378],"1.71.0",[56],{"id":1381,"slug":1382,"identity":1383,"label":1384,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1385,"versions":1388,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1390},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[478,1386,1387],"MIT AND PSF-2.0","MIT AND Python-2.0",[1389],"3.2.4",[56],{"id":1392,"slug":1393,"identity":1394,"label":1395,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1396,"versions":1398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1400},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[1397],"ISC",[1399],"1.14.0",[56],{"id":1402,"slug":1403,"identity":1404,"label":1405,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1406,"versions":1407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1409},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[444],[1408],"1.76.0",[56],{"id":1411,"slug":1412,"identity":1413,"label":1414,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1415,"versions":1416,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1417},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[444],[1333],[56],{"id":1419,"slug":1420,"identity":1421,"label":1422,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1423,"versions":1425,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1427},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1424],"GPL-3.0",[1426],"2024.2.26",[56],{"id":1429,"slug":1430,"identity":1431,"label":1432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1433,"versions":1434,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1436},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[455],[1435],"1.0.9",[56],{"id":1438,"slug":1439,"identity":1440,"label":1441,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1442,"versions":1443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1445},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[455],[1444],"0.28.1",[56],{"id":1447,"slug":1448,"identity":1449,"label":1450,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1451,"versions":1452,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1453},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[478],[709],[56],{"id":1455,"slug":1456,"identity":1457,"label":1458,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1459,"versions":1460,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1462},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[444,465],[1461],"0.36.0",[56],{"id":1464,"slug":1465,"identity":1466,"label":1467,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1468,"versions":1469,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1471},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[478],[1470],"2.6.15",[56],{"id":1473,"slug":1474,"identity":1475,"label":1476,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1477,"versions":1478,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1480},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[444,465],[1479],"8.7.0",[56],{"id":1482,"slug":1483,"identity":1484,"label":1485,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1486,"versions":1487,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1489},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[478],[1488],"0.5.1",[56],{"id":1491,"slug":1492,"identity":1493,"label":1494,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1495,"versions":1496,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1498},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[478],[1497],"2.3.0",[56],{"id":1500,"slug":1501,"identity":1502,"label":1503,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1504,"versions":1505,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1507},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[455,465],[1506],"7.1.0",[56],{"id":1509,"slug":1510,"identity":1511,"label":1512,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1513,"versions":1514,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1516},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[455],[1515],"9.6.0",[56],{"id":1518,"slug":1519,"identity":1520,"label":1521,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1522,"versions":1523,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1525},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[465],[1524],"1.1.1",[56],{"id":1527,"slug":1528,"identity":1529,"label":1530,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1531,"versions":1532,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1534},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[478],[1533],"7.0.0",[56],{"id":1536,"slug":1537,"identity":1538,"label":1539,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1540,"versions":1541,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1543},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[478],[1542],"0.19.2",[56],{"id":1545,"slug":1546,"identity":1547,"label":1548,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1549,"versions":1550,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1552},"package:pypi:jieba3k","jieba3k-2ef848d4","pypi:jieba3k","jieba3k",[],[1551],"0.35.1",[56],{"id":1554,"slug":1555,"identity":1556,"label":1557,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1558,"versions":1559,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1561},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[478],[1560],"0.11.1",[56],{"id":1563,"slug":1564,"identity":1565,"label":1566,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1567,"versions":1568,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1570},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[455],[1569],"1.5.2",[56],{"id":1572,"slug":1573,"identity":1574,"label":1575,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1576,"versions":1577,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1579},"package:pypi:jsonlines","jsonlines-779d1204","pypi:jsonlines","jsonlines",[465],[1578],"4.0.0",[56],{"id":1581,"slug":1582,"identity":1583,"label":1584,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1585,"versions":1586,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1588},"package:pypi:jsonref","jsonref-181eaf53","pypi:jsonref","jsonref",[478],[1587],"1.1.0",[56],{"id":1590,"slug":1591,"identity":1592,"label":1593,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1594,"versions":1595,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1597},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[478],[1596],"4.25.1",[56],{"id":1599,"slug":1600,"identity":1601,"label":1602,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1603,"versions":1604,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1606},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[478],[1605],"2025.9.1",[56],{"id":1608,"slug":1609,"identity":1610,"label":1611,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1612,"versions":1613,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1615},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[465],[1614],"8.6.3",[56],{"id":1617,"slug":1618,"identity":1619,"label":1620,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1621,"versions":1622,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1623},"package:pypi:lance-namespace","lance-namespace-70425b3b","pypi:lance-namespace","lance-namespace",[444],[634],[56],{"id":1625,"slug":1626,"identity":1627,"label":1628,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1629,"versions":1630,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1631},"package:pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client-1a0b30f8","pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client",[444],[634],[56],{"id":1633,"slug":1634,"identity":1635,"label":1636,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1637,"versions":1638,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1640},"package:pypi:lancedb","lancedb-b5c306b5","pypi:lancedb","lancedb",[465],[1639],"0.25.2",[56],{"id":1642,"slug":1643,"identity":1644,"label":1645,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1646,"versions":1647,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1649},"package:pypi:latex2mathml","latex2mathml-4b5e6391","pypi:latex2mathml","latex2mathml",[478],[1648],"3.78.1",[56],{"id":1651,"slug":1652,"identity":1653,"label":1654,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1655,"versions":1656,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1657},"package:pypi:lazify","lazify-bfb0197d","pypi:lazify","lazify",[465],[1219],[56],{"id":1659,"slug":1660,"identity":1661,"label":1662,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1663,"versions":1664,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1666},"package:pypi:literalai","literalai-7854f46d","pypi:literalai","literalai",[444],[1665],"0.1.201",[56],{"id":1668,"slug":1669,"identity":1670,"label":1671,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1672,"versions":1673,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1675},"package:pypi:llama-cloud","llama-cloud-b191f0f9","pypi:llama-cloud","llama-cloud",[478],[1674],"0.1.35",[56],{"id":1677,"slug":1678,"identity":1679,"label":1680,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1681,"versions":1682,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1684},"package:pypi:llama-cloud-services","llama-cloud-services-bef88366","pypi:llama-cloud-services","llama-cloud-services",[478],[1683],"0.6.54",[56],{"id":1686,"slug":1687,"identity":1688,"label":1689,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1690,"versions":1691,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1692},"package:pypi:llama-index","llama-index-0f867dab","pypi:llama-index","llama-index",[478],[507],[56],{"id":1694,"slug":1695,"identity":1696,"label":1697,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1698,"versions":1699,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1701},"package:pypi:llama-index-cli","llama-index-cli-03ecd5c5","pypi:llama-index-cli","llama-index-cli",[478],[1700],"0.5.3",[56],{"id":1703,"slug":1704,"identity":1705,"label":1706,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1707,"versions":1708,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1709},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[478],[1488],[56],{"id":1711,"slug":1712,"identity":1713,"label":1714,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1715,"versions":1716,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1718},"package:pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud-ddf42c36","pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud",[478],[1717],"0.9.4",[56],{"id":1720,"slug":1721,"identity":1722,"label":1723,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1724,"versions":1725,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1727},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[478],[1726],"0.4.2",[56],{"id":1729,"slug":1730,"identity":1731,"label":1732,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1733,"versions":1734,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1736},"package:pypi:llama-index-readers-file","llama-index-readers-file-c8a58a84","pypi:llama-index-readers-file","llama-index-readers-file",[478],[1735],"0.5.4",[56],{"id":1738,"slug":1739,"identity":1740,"label":1741,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1742,"versions":1743,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1744},"package:pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse-58739d42","pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse",[478],[1488],[56],{"id":1746,"slug":1747,"identity":1748,"label":1749,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1750,"versions":1751,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1752},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[478],[457],[56],{"id":1754,"slug":1755,"identity":1756,"label":1757,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1758,"versions":1759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1760},"package:pypi:llama-parse","llama-parse-f89f5dbf","pypi:llama-parse","llama-parse",[478],[1683],[56],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1766,"versions":1767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1768},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[478],[1578],[56],{"id":1770,"slug":1771,"identity":1772,"label":1773,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1774,"versions":1775,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1776},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[478],[1333],[56],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1782,"versions":1783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1784},"package:pypi:marko","marko-cf8df36c","pypi:marko","marko",[478],[1047],[56],{"id":1786,"slug":1787,"identity":1788,"label":1789,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1790,"versions":1791,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1793},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[455,465],[1792],"3.0.3",[56],{"id":1795,"slug":1796,"identity":1797,"label":1798,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1799,"versions":1800,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1802},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[455,465],[1801],"0.2.1",[56],{"id":1804,"slug":1805,"identity":1806,"label":1807,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1808,"versions":1809,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1810},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[465],[975],[56],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1816,"versions":1817,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1819},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[478],[1818],"0.1.2",[56],{"id":1821,"slug":1822,"identity":1823,"label":1824,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1825,"versions":1826,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1828},"package:pypi:monotonic","monotonic-c3c6b23a","pypi:monotonic","monotonic",[465],[1827],"1.6",[56],{"id":1830,"slug":1831,"identity":1832,"label":1833,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1834,"versions":1835,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1837},"package:pypi:mpire","mpire-1706081d","pypi:mpire","mpire",[478],[1836],"2.10.2",[56],{"id":1839,"slug":1840,"identity":1841,"label":1842,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1843,"versions":1844,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1845},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[465],[1147],[56],{"id":1847,"slug":1848,"identity":1849,"label":1850,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1851,"versions":1852,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1854},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[444],[1853],"6.7.0",[56],{"id":1856,"slug":1857,"identity":1858,"label":1859,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1860,"versions":1861,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1863},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[455],[1862],"0.70.18",[56],{"id":1865,"slug":1866,"identity":1867,"label":1868,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1869,"versions":1870,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1871},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[478],[1587],[56],{"id":1873,"slug":1874,"identity":1875,"label":1876,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1877,"versions":1878,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1880},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[465],[1879],"1.6.0",[56],{"id":1882,"slug":1883,"identity":1884,"label":1885,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1886,"versions":1887,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1889},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[455,465],[1888],"3.5",[56],{"id":1891,"slug":1892,"identity":1893,"label":1894,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1895,"versions":1896,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1898},"package:pypi:newspaper3k","newspaper3k-139e17f3","pypi:newspaper3k","newspaper3k",[478],[1897],"0.2.8",[56],{"id":1900,"slug":1901,"identity":1902,"label":1903,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1904,"versions":1905,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1907},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[465],[1906],"1.9.1",[56],{"id":1909,"slug":1910,"identity":1911,"label":1912,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1913,"versions":1915,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1917},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1914,465],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1916],"2.3.4",[56],{"id":1919,"slug":1920,"identity":1921,"label":1922,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1923,"versions":1924,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1926},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[465],[1925],"12.8.4.1",[56],{"id":1928,"slug":1929,"identity":1930,"label":1931,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1932,"versions":1933,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1935},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[465],[1934],"12.8.90",[56],{"id":1937,"slug":1938,"identity":1939,"label":1940,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1941,"versions":1942,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1944},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[465],[1943],"12.8.93",[56],{"id":1946,"slug":1947,"identity":1948,"label":1949,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1950,"versions":1951,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1952},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[465],[1934],[56],{"id":1954,"slug":1955,"identity":1956,"label":1957,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1958,"versions":1959,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1961},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[465],[1960],"9.10.2.21",[56],{"id":1963,"slug":1964,"identity":1965,"label":1966,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1967,"versions":1968,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1970},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[465],[1969],"11.3.3.83",[56],{"id":1972,"slug":1973,"identity":1974,"label":1975,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1976,"versions":1977,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1979},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[465],[1978],"1.13.1.3",[56],{"id":1981,"slug":1982,"identity":1983,"label":1984,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1985,"versions":1986,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1988},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[465],[1987],"10.3.9.90",[56],{"id":1990,"slug":1991,"identity":1992,"label":1993,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1994,"versions":1995,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1997},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[465],[1996],"11.7.3.90",[56],{"id":1999,"slug":2000,"identity":2001,"label":2002,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2003,"versions":2004,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2006},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[465],[2005],"12.5.8.93",[56],{"id":2008,"slug":2009,"identity":2010,"label":2011,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2012,"versions":2013,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2014},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[465],[1192],[56],{"id":2016,"slug":2017,"identity":2018,"label":2019,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2020,"versions":2021,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2023},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[455,465],[2022],"2.27.5",[56],{"id":2025,"slug":2026,"identity":2027,"label":2028,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2029,"versions":2030,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2031},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[465],[1943],[56],{"id":2033,"slug":2034,"identity":2035,"label":2036,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2037,"versions":2038,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2040},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[455,465],[2039],"3.3.20",[56],{"id":2042,"slug":2043,"identity":2044,"label":2045,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2046,"versions":2047,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2048},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[444,465],[1934],[56],{"id":2050,"slug":2051,"identity":2052,"label":2053,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2054,"versions":2055,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2057},"package:pypi:ocrmac","ocrmac-7acc3c55","pypi:ocrmac","ocrmac",[478],[2056],"1.0.0",[56],{"id":2059,"slug":2060,"identity":2061,"label":2062,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2063,"versions":2064,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2065},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[455],[1497],[56],{"id":2067,"slug":2068,"identity":2069,"label":2070,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2071,"versions":2072,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2074},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[478],[2073],"3.1.5",[56],{"id":2076,"slug":2077,"identity":2078,"label":2079,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2080,"versions":2081,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2083},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[444],[2082],"1.38.0",[56],{"id":2085,"slug":2086,"identity":2087,"label":2088,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2089,"versions":2090,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2091},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[444],[2082],[56],{"id":2093,"slug":2094,"identity":2095,"label":2096,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2097,"versions":2098,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2099},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[444],[2082],[56],{"id":2101,"slug":2102,"identity":2103,"label":2104,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2105,"versions":2106,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2107},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[444],[2082],[56],{"id":2109,"slug":2110,"identity":2111,"label":2112,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2113,"versions":2114,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2115},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[444],[2082],[56],{"id":2117,"slug":2118,"identity":2119,"label":2120,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2121,"versions":2122,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2124},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[444],[2123],"0.59b0",[56],{"id":2126,"slug":2127,"identity":2128,"label":2129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2130,"versions":2131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2133},"package:pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha-b1a8b6f5","pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha",[444],[2132],"0.47.5",[56],{"id":2135,"slug":2136,"identity":2137,"label":2138,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2139,"versions":2140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2141},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[444],[2132],[56],{"id":2143,"slug":2144,"identity":2145,"label":2146,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2147,"versions":2148,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2149},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[444],[2132],[56],{"id":2151,"slug":2152,"identity":2153,"label":2154,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2155,"versions":2156,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2157},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[444],[2132],[56],{"id":2159,"slug":2160,"identity":2161,"label":2162,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2163,"versions":2164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2165},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[444],[2132],[56],{"id":2167,"slug":2168,"identity":2169,"label":2170,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2171,"versions":2172,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2173},"package:pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai-236cb6a6","pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai",[444],[2132],[56],{"id":2175,"slug":2176,"identity":2177,"label":2178,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2179,"versions":2180,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2181},"package:pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai-dd555f24","pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai",[444],[2132],[56],{"id":2183,"slug":2184,"identity":2185,"label":2186,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2187,"versions":2188,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2189},"package:pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq-a9bf4841","pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq",[444],[2132],[56],{"id":2191,"slug":2192,"identity":2193,"label":2194,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2195,"versions":2196,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2197},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[444],[2132],[56],{"id":2199,"slug":2200,"identity":2201,"label":2202,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2203,"versions":2204,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2205},"package:pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb-337c7f86","pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb",[444],[2132],[56],{"id":2207,"slug":2208,"identity":2209,"label":2210,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2211,"versions":2212,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2213},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[444],[2132],[56],{"id":2215,"slug":2216,"identity":2217,"label":2218,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2219,"versions":2220,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2221},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[444],[2132],[56],{"id":2223,"slug":2224,"identity":2225,"label":2226,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2227,"versions":2228,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2229},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[444],[2123],[56],{"id":2231,"slug":2232,"identity":2233,"label":2234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2235,"versions":2236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2237},"package:pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo-7fffb308","pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo",[444],[2132],[56],{"id":2239,"slug":2240,"identity":2241,"label":2242,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2243,"versions":2244,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2245},"package:pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp-6fbe8e0d","pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp",[444],[2132],[56],{"id":2247,"slug":2248,"identity":2249,"label":2250,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2251,"versions":2252,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2253},"package:pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus-dc786c2a","pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus",[444],[2132],[56],{"id":2255,"slug":2256,"identity":2257,"label":2258,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2259,"versions":2260,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2261},"package:pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai-af29742c","pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai",[444],[2132],[56],{"id":2263,"slug":2264,"identity":2265,"label":2266,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2267,"versions":2268,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2269},"package:pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama-2cbe8996","pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama",[444],[2132],[56],{"id":2271,"slug":2272,"identity":2273,"label":2274,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2275,"versions":2276,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2277},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[444],[2132],[56],{"id":2279,"slug":2280,"identity":2281,"label":2282,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2283,"versions":2284,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2285},"package:pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents-ac759c8f","pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents",[444],[2132],[56],{"id":2287,"slug":2288,"identity":2289,"label":2290,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2291,"versions":2292,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2293},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[444],[2132],[56],{"id":2295,"slug":2296,"identity":2297,"label":2298,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2299,"versions":2300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2301},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[444],[2132],[56],{"id":2303,"slug":2304,"identity":2305,"label":2306,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2307,"versions":2308,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2309},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[444],[2123],[56],{"id":2311,"slug":2312,"identity":2313,"label":2314,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2315,"versions":2316,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2317},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[444],[2132],[56],{"id":2319,"slug":2320,"identity":2321,"label":2322,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2323,"versions":2324,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2325},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[444],[2123],[56],{"id":2327,"slug":2328,"identity":2329,"label":2330,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2331,"versions":2332,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2333},"package:pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker-55be6260","pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker",[444],[2132],[56],{"id":2335,"slug":2336,"identity":2337,"label":2338,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2339,"versions":2340,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2341},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[444],[2123],[56],{"id":2343,"slug":2344,"identity":2345,"label":2346,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2347,"versions":2348,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2349},"package:pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading-8d47431d","pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading",[444],[2123],[56],{"id":2351,"slug":2352,"identity":2353,"label":2354,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2355,"versions":2356,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2357},"package:pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together-e40c9610","pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together",[444],[2132],[56],{"id":2359,"slug":2360,"identity":2361,"label":2362,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2363,"versions":2364,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2365},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[444],[2132],[56],{"id":2367,"slug":2368,"identity":2369,"label":2370,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2371,"versions":2372,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2373},"package:pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3-32a4545b","pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3",[444],[2123],[56],{"id":2375,"slug":2376,"identity":2377,"label":2378,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2379,"versions":2380,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2381},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[444],[2132],[56],{"id":2383,"slug":2384,"identity":2385,"label":2386,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2387,"versions":2388,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2389},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[444],[2132],[56],{"id":2391,"slug":2392,"identity":2393,"label":2394,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2395,"versions":2396,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2397},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[444],[2132],[56],{"id":2399,"slug":2400,"identity":2401,"label":2402,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2403,"versions":2404,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2405},"package:pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer-62ab002f","pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer",[444],[2132],[56],{"id":2407,"slug":2408,"identity":2409,"label":2410,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2411,"versions":2412,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2413},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[444],[2082],[56],{"id":2415,"slug":2416,"identity":2417,"label":2418,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2419,"versions":2420,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2421},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[444],[2082],[56],{"id":2423,"slug":2424,"identity":2425,"label":2426,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2427,"versions":2428,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2429},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[444],[2123],[56],{"id":2431,"slug":2432,"identity":2433,"label":2434,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2435,"versions":2436,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2438},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[444],[2437],"0.4.13",[56],{"id":2440,"slug":2441,"identity":2442,"label":2443,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2444,"versions":2445,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2446},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[444],[2123],[56],{"id":2448,"slug":2449,"identity":2450,"label":2451,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2452,"versions":2454,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2456},"package:pypi:outcome","outcome-807eda1a","pypi:outcome","outcome",[2453],"Apache-2.0 OR MIT",[2455],"1.3.0.post0",[56],{"id":2458,"slug":2459,"identity":2460,"label":2461,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2462,"versions":2463,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2465},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[444],[2464],"7.7.0",[56],{"id":2467,"slug":2468,"identity":2469,"label":2470,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2471,"versions":2472,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2473},"package:pypi:oxylabs","oxylabs-2206b7c8","pypi:oxylabs","oxylabs",[478],[1075],[56],{"id":2475,"slug":2476,"identity":2477,"label":2478,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2479,"versions":2481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2483},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2480,465],"Apache-2.0 OR BSD-2-Clause",[2482],"25.0",[56],{"id":2485,"slug":2486,"identity":2487,"label":2488,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2489,"versions":2490,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2492},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[465],[2491],"2.2.3",[56],{"id":2494,"slug":2495,"identity":2496,"label":2497,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2498,"versions":2499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2501},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[478],[2500],"0.8.5",[56],{"id":2503,"slug":2504,"identity":2505,"label":2506,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2507,"versions":2508,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2510},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[799],[2509],"0.12.1",[56],{"id":2512,"slug":2513,"identity":2514,"label":2515,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2516,"versions":2517,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2519},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[465],[2518],"4.9.0",[56],{"id":2521,"slug":2522,"identity":2523,"label":2524,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2525,"versions":2526,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2527},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[478],[1342],[56],{"id":2529,"slug":2530,"identity":2531,"label":2532,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2533,"versions":2534,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2536},"package:pypi:playwright","playwright-33f38203","pypi:playwright","playwright",[444],[2535],"1.55.0",[56],{"id":2538,"slug":2539,"identity":2540,"label":2541,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2542,"versions":2543,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2544},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[478],[1879],[56],{"id":2546,"slug":2547,"identity":2548,"label":2549,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2550,"versions":2551,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2553},"package:pypi:polyfactory","polyfactory-6f8eab4d","pypi:polyfactory","polyfactory",[478],[2552],"2.22.3",[56],{"id":2555,"slug":2556,"identity":2557,"label":2558,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2559,"versions":2560,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2562},"package:pypi:posthog","posthog-fa78df25","pypi:posthog","posthog",[478],[2561],"3.25.0",[56],{"id":2564,"slug":2565,"identity":2566,"label":2567,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2568,"versions":2569,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2571},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[478],[2570],"4.3.0",[56],{"id":2573,"slug":2574,"identity":2575,"label":2576,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2577,"versions":2578,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2580},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[455,465],[2579],"3.0.52",[56],{"id":2582,"slug":2583,"identity":2584,"label":2585,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2586,"versions":2587,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2588},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[444],[535],[56],{"id":2590,"slug":2591,"identity":2592,"label":2593,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2594,"versions":2595,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2597},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[455],[2596],"7.1.2",[56],{"id":2599,"slug":2600,"identity":2601,"label":2602,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2603,"versions":2604,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2605},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1397],[975],[56],{"id":2607,"slug":2608,"identity":2609,"label":2610,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2611,"versions":2612,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2613},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[478],[1138],[56],{"id":2615,"slug":2616,"identity":2617,"label":2618,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2619,"versions":2620,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2622},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[478],[2621],"1.3.0.post6",[56],{"id":2624,"slug":2625,"identity":2626,"label":2627,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2628,"versions":2629,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2631},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[478],[2630],"2.14.0",[56],{"id":2633,"slug":2634,"identity":2635,"label":2636,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2637,"versions":2638,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2640},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[455],[2639],"2.23",[56],{"id":2642,"slug":2643,"identity":2644,"label":2645,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2646,"versions":2647,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2649},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[478],[2648],"2.12.3",[56],{"id":2651,"slug":2652,"identity":2653,"label":2654,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2655,"versions":2656,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2658},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[478],[2657],"2.41.4",[56],{"id":2660,"slug":2661,"identity":2662,"label":2663,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2664,"versions":2665,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2667},"package:pypi:pyee","pyee-885d20c2","pypi:pyee","pyee",[478],[2666],"13.0.0",[56],{"id":2669,"slug":2670,"identity":2671,"label":2672,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2673,"versions":2674,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2675},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[478],[1084],[56],{"id":2677,"slug":2678,"identity":2679,"label":2680,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2681,"versions":2682,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2684},"package:pypi:pylance","pylance-da7c006a","pypi:pylance","pylance",[465],[2683],"0.38.3",[56],{"id":2686,"slug":2687,"identity":2688,"label":2689,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2690,"versions":2691,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2693},"package:pypi:pylatexenc","pylatexenc-e20f6acb","pypi:pylatexenc","pylatexenc",[478],[2692],"2.10",[56],{"id":2695,"slug":2696,"identity":2697,"label":2698,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2699,"versions":2700,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2702},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[478],[2701],"12.0",[56],{"id":2704,"slug":2705,"identity":2706,"label":2707,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2708,"versions":2709,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2710},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[478],[2701],[56],{"id":2712,"slug":2713,"identity":2714,"label":2715,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2716,"versions":2717,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2718},"package:pypi:pyobjc-framework-coreml","pyobjc-framework-coreml-5e7c3b2a","pypi:pyobjc-framework-coreml","pyobjc-framework-coreml",[478],[2701],[56],{"id":2720,"slug":2721,"identity":2722,"label":2723,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2724,"versions":2725,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2726},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[478],[2701],[56],{"id":2728,"slug":2729,"identity":2730,"label":2731,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2732,"versions":2733,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2734},"package:pypi:pyobjc-framework-vision","pyobjc-framework-vision-7145bcee","pypi:pyobjc-framework-vision","pyobjc-framework-vision",[478],[2701],[56],{"id":2736,"slug":2737,"identity":2738,"label":2739,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2740,"versions":2741,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2743},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[465],[2742],"4.30.0",[56],{"id":2745,"slug":2746,"identity":2747,"label":2748,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2749,"versions":2750,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2752},"package:pypi:pysocks","pysocks-7cd576a7","pypi:pysocks","pysocks",[465],[2751],"1.7.1",[56],{"id":2754,"slug":2755,"identity":2756,"label":2757,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2758,"versions":2759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2760},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[444],[1333],[56],{"id":2762,"slug":2763,"identity":2764,"label":2765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2766,"versions":2767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2769},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[465],[2768],"2.9.0.post0",[56],{"id":2771,"slug":2772,"identity":2773,"label":2774,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2775,"versions":2776,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2777},"package:pypi:python-docx","python-docx-734c6d0d","pypi:python-docx","python-docx",[478],[1333],[56],{"id":2779,"slug":2780,"identity":2781,"label":2782,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2783,"versions":2784,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2786},"package:pypi:python-pptx","python-pptx-8826554c","pypi:python-pptx","python-pptx",[478],[2785],"1.0.2",[56],{"id":2788,"slug":2789,"identity":2790,"label":2791,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2792,"versions":2793,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2795},"package:pypi:pytokens","pytokens-4f13eeb2","pypi:pytokens","pytokens",[478],[2794],"0.2.0",[56],{"id":2797,"slug":2798,"identity":2799,"label":2800,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2801,"versions":2802,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2804},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[478],[2803],"2025.2",[56],{"id":2806,"slug":2807,"identity":2808,"label":2809,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2810,"versions":2811,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2813},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2812],"311",[56],{"id":2815,"slug":2816,"identity":2817,"label":2818,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2819,"versions":2820,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2822},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[478],[2821],"6.0.3",[56],{"id":2824,"slug":2825,"identity":2826,"label":2827,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2828,"versions":2829,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2831},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[465],[2830],"27.1.0",[56],{"id":2833,"slug":2834,"identity":2835,"label":2836,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2837,"versions":2838,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2840},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[478],[2839],"3.14.1",[56],{"id":2842,"slug":2843,"identity":2844,"label":2845,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2846,"versions":2847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2849},"package:pypi:rapidocr","rapidocr-452b83bd","pypi:rapidocr","rapidocr",[444],[2848],"3.4.2",[56],{"id":2851,"slug":2852,"identity":2853,"label":2854,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2855,"versions":2856,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2858},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[478],[2857],"0.37.0",[56],{"id":2860,"slug":2861,"identity":2862,"label":2863,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2864,"versions":2866,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2868},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2865,465],"Apache-2.0 AND CNRI-Python",[2867],"2025.10.23",[56],{"id":2870,"slug":2871,"identity":2872,"label":2873,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2874,"versions":2875,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2876},"package:pypi:requests-file","requests-file-706ecfac","pypi:requests-file","requests-file",[444],[892],[56],{"id":2878,"slug":2879,"identity":2880,"label":2881,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2882,"versions":2883,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2885},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[478],[2884],"14.2.0",[56],{"id":2887,"slug":2888,"identity":2889,"label":2890,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2891,"versions":2892,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2894},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[478],[2893],"0.28.0",[56],{"id":2896,"slug":2897,"identity":2898,"label":2899,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2900,"versions":2901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2903},"package:pypi:rtree","rtree-0efed1c9","pypi:rtree","rtree",[478],[2902],"1.4.1",[56],{"id":2905,"slug":2906,"identity":2907,"label":2908,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2909,"versions":2910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2912},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[478],[2911],"0.14.2",[56],{"id":2914,"slug":2915,"identity":2916,"label":2917,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2918,"versions":2919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2921},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[465],[2920],"0.6.2",[56],{"id":2923,"slug":2924,"identity":2925,"label":2926,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2927,"versions":2928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2930},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[465],[2929],"1.16.3",[56],{"id":2932,"slug":2933,"identity":2934,"label":2935,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2936,"versions":2937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2939},"package:pypi:selenium","selenium-e3f15a24","pypi:selenium","selenium",[444],[2938],"4.38.0",[56],{"id":2941,"slug":2942,"identity":2943,"label":2944,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2945,"versions":2946,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2948},"package:pypi:semchunk","semchunk-c2c8e504","pypi:semchunk","semchunk",[478],[2947],"2.2.2",[56],{"id":2950,"slug":2951,"identity":2952,"label":2953,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2954,"versions":2955,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2956},"package:pypi:sgmllib3k","sgmllib3k-c3d7a6ca","pypi:sgmllib3k","sgmllib3k",[465],[2056],[56],{"id":2958,"slug":2959,"identity":2960,"label":2961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2962,"versions":2963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2965},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[455],[2964],"2.1.2",[56],{"id":2967,"slug":2968,"identity":2969,"label":2970,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2971,"versions":2972,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2974},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[465],[2973],"1.5.4",[56],{"id":2976,"slug":2977,"identity":2978,"label":2979,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2980,"versions":2981,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2982},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[478],[1587],[56],{"id":2984,"slug":2985,"identity":2986,"label":2987,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2988,"versions":2989,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2991},"package:pypi:six","six-3c3888bd","pypi:six","six",[478],[2990],"1.17.0",[56],{"id":2993,"slug":2994,"identity":2995,"label":2996,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2997,"versions":2998,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3000},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2453],[2999],"1.3.1",[56],{"id":3002,"slug":3003,"identity":3004,"label":3005,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3006,"versions":3007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3009},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[444],[3008],"2.4.0",[56],{"id":3011,"slug":3012,"identity":3013,"label":3014,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3015,"versions":3016,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3018},"package:pypi:spider-client","spider-client-04bbfc07","pypi:spider-client","spider-client",[478],[3017],"0.0.27",[56],{"id":3020,"slug":3021,"identity":3022,"label":3023,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3024,"versions":3025,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3027},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[478],[3026],"2.0.44",[56],{"id":3029,"slug":3030,"identity":3031,"label":3032,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3033,"versions":3034,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3036},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[455],[3035],"3.0.2",[56],{"id":3038,"slug":3039,"identity":3040,"label":3041,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3042,"versions":3043,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3045},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[478],[3044],"0.6.3",[56],{"id":3047,"slug":3048,"identity":3049,"label":3050,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3051,"versions":3052,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3054},"package:pypi:striprtf","striprtf-bb61a6b5","pypi:striprtf","striprtf",[455],[3053],"0.0.26",[56],{"id":3056,"slug":3057,"identity":3058,"label":3059,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3060,"versions":3061,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3063},"package:pypi:structlog","structlog-2a5a47ec","pypi:structlog","structlog",[2453],[3062],"25.5.0",[56],{"id":3065,"slug":3066,"identity":3067,"label":3068,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3069,"versions":3070,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3071},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[465],[1399],[56],{"id":3073,"slug":3074,"identity":3075,"label":3076,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3077,"versions":3078,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3080},"package:pypi:syncer","syncer-7ac13616","pypi:syncer","syncer",[478],[3079],"2.0.3",[56],{"id":3082,"slug":3083,"identity":3084,"label":3085,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3086,"versions":3087,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3089},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[478],[3088],"0.9.0",[56],{"id":3091,"slug":3092,"identity":3093,"label":3094,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3095,"versions":3096,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3098},"package:pypi:tantivy","tantivy-b8e058c3","pypi:tantivy","tantivy",[478],[3097],"0.25.0",[56],{"id":3100,"slug":3101,"identity":3102,"label":3103,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3104,"versions":3105,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3107},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[444],[3106],"9.1.2",[56],{"id":3109,"slug":3110,"identity":3111,"label":3112,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3113,"versions":3114,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3115},"package:pypi:thefuzz","thefuzz-77e9a0e0","pypi:thefuzz","thefuzz",[478],[498],[56],{"id":3117,"slug":3118,"identity":3119,"label":3120,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3121,"versions":3122,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3124},"package:pypi:tinysegmenter","tinysegmenter-eaea99bf","pypi:tinysegmenter","tinysegmenter",[465],[3123],"0.3",[56],{"id":3126,"slug":3127,"identity":3128,"label":3129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3130,"versions":3131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3133},"package:pypi:tldextract","tldextract-ed3c967e","pypi:tldextract","tldextract",[455],[3132],"5.3.0",[56],{"id":3135,"slug":3136,"identity":3137,"label":3138,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3139,"versions":3140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3141},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[478],[1497],[56],{"id":3143,"slug":3144,"identity":3145,"label":3146,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3147,"versions":3148,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3150},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[465],[3149],"0.24.0",[56],{"id":3152,"slug":3153,"identity":3154,"label":3155,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3156,"versions":3157,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3158},"package:pypi:traceloop-sdk","traceloop-sdk-64e27d1c","pypi:traceloop-sdk","traceloop-sdk",[444],[2132],[56],{"id":3160,"slug":3161,"identity":3162,"label":3163,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3164,"versions":3165,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3166},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[465],[919],[56],{"id":3168,"slug":3169,"identity":3170,"label":3171,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3172,"versions":3173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3175},"package:pypi:trio","trio-5952fcdf","pypi:trio","trio",[2453],[3174],"0.31.0",[56],{"id":3177,"slug":3178,"identity":3179,"label":3180,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3181,"versions":3182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3184},"package:pypi:trio-websocket","trio-websocket-71803d22","pypi:trio-websocket","trio-websocket",[478],[3183],"0.12.2",[56],{"id":3186,"slug":3187,"identity":3188,"label":3189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3190,"versions":3191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3193},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[478],[3192],"3.5.0",[56],{"id":3195,"slug":3196,"identity":3197,"label":3198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3199,"versions":3200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3201},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[478],[1542],[56],{"id":3203,"slug":3204,"identity":3205,"label":3206,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3207,"versions":3208,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3210},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[946,465],[3209],"4.15.0",[56],{"id":3212,"slug":3213,"identity":3214,"label":3215,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3216,"versions":3217,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3218},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[478],[3088],[56],{"id":3220,"slug":3221,"identity":3222,"label":3223,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3224,"versions":3225,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3226},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[478],[1726],[56],{"id":3228,"slug":3229,"identity":3230,"label":3231,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3232,"versions":3233,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3234},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[444],[2803],[56],{"id":3236,"slug":3237,"identity":3238,"label":3239,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3240,"versions":3241,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3243},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[478],[3242],"5.3.1",[56],{"id":3245,"slug":3246,"identity":3247,"label":3248,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3249,"versions":3250,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3252},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[455],[3251],"0.38.0",[56],{"id":3254,"slug":3255,"identity":3256,"label":3257,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3258,"versions":3259,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3260},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[478],[3149],[56],{"id":3262,"slug":3263,"identity":3264,"label":3265,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3266,"versions":3267,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3269},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[478],[3268],"0.2.14",[56],{"id":3271,"slug":3272,"identity":3273,"label":3274,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3275,"versions":3276,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3277},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[444],[1245],[56],{"id":3279,"slug":3280,"identity":3281,"label":3282,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3283,"versions":3284,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3286},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[455],[3285],"15.0.1",[56],{"id":3288,"slug":3289,"identity":3290,"label":3291,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3292,"versions":3293,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3295},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[465],[3294],"1.17.3",[56],{"id":3297,"slug":3298,"identity":3299,"label":3300,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3301,"versions":3302,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3303},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[478],[1333],[56],{"id":3305,"slug":3306,"identity":3307,"label":3308,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3309,"versions":3310,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3312},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[881],[3311],"3.2.9",[56],{"id":3314,"slug":3315,"identity":3316,"label":3317,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3318,"versions":3319,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3321},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[444],[3320],"1.22.0",[56],{"id":3323,"slug":3324,"identity":3325,"label":3326,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3327,"versions":3328,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3330},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[478],[3329],"3.23.0",[56],[3332,3369,3400,3435,3469,3502,3533,3566,3591,3618,3644,3669,3695,3730,3757,3800,3826,3852,3899,3928,3961,3992,4025,4055,4078,4100,4127,4148,4184,4216,4242,4269,4289,4325,4350,4368,4398,4431,4457,4486,4510,4528,4567,4593,4619,4644,4671,4707,4741,4769,4792,4821,4846,4877,4903,4940,4964,4988,5025,5048,5075,5097,5127,5154,5173,5200,5224,5247,5274,5295,5324,5347,5369,5392,5418,5441,5478,5506,5537,5559,5583,5612,5637,5669,5710,5737,5766,5795,5816,5835,5856,5879,5913,5964,5990,6029,6057,6096,6124,6156,6179,6199,6224,6255,6279,6302,6329,6352,6379,6403,6433,6461,6495,6521,6542,6569,6595,6615,6645,6665,6686,6711,6736,6768,6792,6845,6869,6893,6917,6947,6979,7008,7029,7059,7087,7111,7142,7169,7202,7234,7263,7288,7315,7341,7362,7383,7421,7445,7468,7496,7522,7548,7571,7597,7616,7649,7674,7701,7726,7754,7777,7797,7819,7842,7870,7896,7913,7947,7980,8007,8029,8051,8071,8098,8125,8145,8166,8196,8220,8247,8267,8294,8326,8348,8371,8399,8426,8451,8480,8499,8522,8549,8570,8602,8623,8643,8666,8699,8727,8753,8777,8796,8825,8846,8867,8897,8925,8946,8969,8994,9019,9042,9064,9092,9112,9141,9167,9189,9216,9241,9265,9286,9310,9334,9349,9375,9399,9421,9447,9466,9503,9529,9561,9586,9613,9635,9667,9694,9717,9748,9768,9796,9823,9848,9878,9908,9942,9971,10003,10024,10047,10075,10103,10130,10157,10184,10210,10236,10256,10276,10298,10321,10349,10370,10390,10420,10446,10498,10523,10546,10572,10606,10631,10656,10680,10705,10737,10765,10784,10811,10839,10864,10888,10907,10934,10954,10975,11000,11026,11046,11062,11082,11099,11118,11135,11156,11172,11187,11204,11219,11236,11253,11270,11283,11296,11309,11322,11335,11348,11361,11374,11397,11410,11426,11459,11488,11502,11516,11539,11559,11574],{"id":107,"slug":3333,"dossier":47,"summary":3334,"aliases":3335,"sourceIds":3338,"published":3339,"modified":3340,"checkedAt":7,"severity":3341,"references":3345,"versionKeys":3365,"packageCount":32,"repositoryCount":697},"ghsa-23w6-3w8w-8484-7e1b73d9","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving outlines",[3336,3337],"CVE-2026-84310","PYSEC-2026-3910",[107,3337],"2026-09-01T21:28:37Z","2026-09-10T12:25:45.197931157Z",[3342],{"type":3343,"score":3344},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3346,3349,3351,3353,3356,3358,3360,3363],{"type":3347,"url":3348},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3347,"url":3350},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3966",{"type":3347,"url":3352},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd91ab705fd81ed1a9cec175c6958600dea1a4942",{"type":3354,"url":3355},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3347,"url":3357},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.1",{"type":3354,"url":3359},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3361,"url":3362},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3361,"url":3364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84310",[3366,3367,3368],"pypi:pypdf@5.1.0","pypi:pypdf@6.1.3","pypi:pypdf@6.14.2",{"id":108,"slug":3370,"dossier":47,"summary":3371,"aliases":3372,"sourceIds":3375,"published":3376,"modified":3377,"checkedAt":7,"severity":3378,"references":3384,"versionKeys":3399,"packageCount":32,"repositoryCount":105},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3373,3374],"CVE-2026-48156","PYSEC-2026-3004",[108,3374],"2026-06-12T18:29:59Z","2026-09-10T03:51:07.304973624Z",[3379,3382],{"type":3380,"score":3381},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3343,"score":3383},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3385,3387,3389,3391,3393,3394,3396,3397],{"type":3347,"url":3386},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3361,"url":3388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3347,"url":3390},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3347,"url":3392},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3354,"url":3355},{"type":3347,"url":3395},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3354,"url":3359},{"type":3361,"url":3398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3366,3367],{"id":109,"slug":3401,"dossier":47,"summary":3402,"aliases":3403,"sourceIds":3406,"published":3407,"modified":3408,"checkedAt":7,"severity":3409,"references":3412,"versionKeys":3433,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3404,3405],"CVE-2024-39689","PYSEC-2024-230",[109,3405],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[3410],{"type":3380,"score":3411},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3413,3415,3417,3420,3422,3424,3427,3429,3431],{"type":3361,"url":3414},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3361,"url":3416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3418,"url":3419},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3354,"url":3421},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3347,"url":3423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3425,"url":3426},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3347,"url":3428},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3361,"url":3430},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3361,"url":3432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3434],"pypi:certifi@2024.6.2",{"id":110,"slug":3436,"dossier":47,"summary":3437,"aliases":3438,"sourceIds":3441,"published":3442,"modified":3443,"checkedAt":7,"severity":3444,"references":3447,"versionKeys":3459,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[3439,3440],"CVE-2026-4372","PYSEC-2026-2289",[110,3440],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[3445],{"type":3380,"score":3446},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3448,3450,3452,3454,3457],{"type":3361,"url":3449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":3418,"url":3451},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":3354,"url":3453},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":3455,"url":3456},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":3361,"url":3458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[3460,3461,3462,3463,3464,3465,3466,3467,3468],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":111,"slug":3470,"dossier":47,"summary":3471,"aliases":3472,"sourceIds":3475,"published":3476,"modified":3477,"checkedAt":7,"severity":3478,"references":3481,"versionKeys":3498,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3473,3474],"CVE-2025-54121","PYSEC-2026-1941",[111,3474],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[3479],{"type":3380,"score":3480},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3482,3484,3486,3488,3490,3492,3494,3496],{"type":3347,"url":3483},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3361,"url":3485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3418,"url":3487},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3354,"url":3489},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3347,"url":3491},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3347,"url":3493},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3354,"url":3495},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3361,"url":3497},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3499,3500,3501],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":112,"slug":3503,"dossier":47,"summary":3504,"aliases":3505,"sourceIds":3508,"published":3509,"modified":3510,"checkedAt":7,"severity":3511,"references":3516,"versionKeys":3523,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3506,3507],"CVE-2026-54279","PYSEC-2026-2112",[112,3507],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[3512,3514],{"type":3343,"score":3513},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3515},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3517,3519,3521],{"type":3361,"url":3518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3354,"url":3520},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3418,"url":3522},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[3524,3525,3526,3527,3528,3529,3530,3531,3532],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":113,"slug":3534,"dossier":47,"summary":3535,"aliases":3536,"sourceIds":3539,"published":3540,"modified":3541,"checkedAt":7,"severity":3542,"references":3547,"versionKeys":3564,"packageCount":32,"repositoryCount":32},"ghsa-2g59-m95p-pgfq-b960a1a2","Chainlit contain a server-side request forgery (SSRF) vulnerability",[3537,3538],"CVE-2026-22219","PYSEC-2026-1237",[113,3538],"2026-01-20T00:30:28Z","2026-07-07T17:57:22.370684872Z",[3543,3545],{"type":3380,"score":3544},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":3343,"score":3546},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[3548,3550,3552,3554,3556,3558,3560,3562],{"type":3361,"url":3549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22219",{"type":3347,"url":3551},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002Fffc3cce648b343b933e10e85ee5805c7e02ab3bf",{"type":3354,"url":3553},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit",{"type":3347,"url":3555},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.9.4",{"type":3347,"url":3557},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-sqlalchemy-data-layer-ssrf-via-project-element",{"type":3347,"url":3559},"https:\u002F\u002Fwww.zafran.io\u002Fresources\u002Fchainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",{"type":3354,"url":3561},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchainlit",{"type":3361,"url":3563},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g59-m95p-pgfq",[3565],"pypi:chainlit@2.8.3",{"id":114,"slug":3567,"dossier":47,"summary":3568,"aliases":3569,"sourceIds":3571,"published":3572,"modified":3573,"checkedAt":7,"severity":3574,"references":3576,"versionKeys":3587,"packageCount":32,"repositoryCount":669},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[3570],"CVE-2026-101917",[114],"2026-09-29T23:11:51Z","2026-09-29T23:15:08.573706550Z",[3575],{"type":3380,"score":3480},[3577,3579,3581,3583,3585],{"type":3347,"url":3578},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":3361,"url":3580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":3347,"url":3582},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":3354,"url":3584},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3347,"url":3586},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",[3588,3589,3590],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":115,"slug":3592,"dossier":47,"summary":3593,"aliases":3594,"sourceIds":3597,"published":3598,"modified":3599,"checkedAt":7,"severity":3600,"references":3602,"versionKeys":3617,"packageCount":32,"repositoryCount":105},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3595,3596],"CVE-2026-24688","PYSEC-2026-1827",[115,3596],"2026-01-26T23:37:57Z","2026-09-10T03:50:32.300137224Z",[3601],{"type":3343,"score":3383},[3603,3605,3607,3609,3611,3612,3614,3615],{"type":3347,"url":3604},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3361,"url":3606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3347,"url":3608},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3347,"url":3610},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3354,"url":3355},{"type":3347,"url":3613},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3354,"url":3359},{"type":3361,"url":3616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3366,3367],{"id":116,"slug":3619,"dossier":47,"summary":3620,"aliases":3621,"sourceIds":3624,"published":3625,"modified":3626,"checkedAt":7,"severity":3627,"references":3630,"versionKeys":3643,"packageCount":32,"repositoryCount":105},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3622,3623],"CVE-2026-27628","PYSEC-2026-3005",[116,3623],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3628],{"type":3343,"score":3629},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3631,3633,3635,3637,3639,3640,3641],{"type":3347,"url":3632},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3361,"url":3634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3347,"url":3636},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3347,"url":3638},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3354,"url":3355},{"type":3354,"url":3359},{"type":3361,"url":3642},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3366,3367],{"id":117,"slug":3645,"dossier":47,"summary":3646,"aliases":3647,"sourceIds":3650,"published":3651,"modified":3652,"checkedAt":7,"severity":3653,"references":3658,"versionKeys":3668,"packageCount":32,"repositoryCount":621},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3648,3649],"CVE-2026-34514","PYSEC-2026-2096",[117,3649],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[3654,3656],{"type":3343,"score":3655},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3657},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3659,3661,3663,3665,3666],{"type":3418,"url":3660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3361,"url":3662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3418,"url":3664},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3354,"url":3520},{"type":3361,"url":3667},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3524,3525,3526,3527,3528,3529,3530,3531],{"id":118,"slug":3670,"dossier":47,"summary":3671,"aliases":3672,"sourceIds":3675,"published":3676,"modified":3677,"checkedAt":7,"severity":3678,"references":3680,"versionKeys":3691,"packageCount":32,"repositoryCount":669},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3673,3674],"CVE-2026-49476","PYSEC-2026-3071",[118,3674],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[3679],{"type":3380,"score":3515},[3681,3683,3685,3687,3689],{"type":3347,"url":3682},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3354,"url":3684},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3354,"url":3686},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3361,"url":3688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3361,"url":3690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3692,3693,3694],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":119,"slug":3696,"dossier":90,"summary":3697,"aliases":3698,"sourceIds":3701,"published":3702,"modified":3703,"checkedAt":7,"severity":3704,"references":3707,"versionKeys":3724,"packageCount":32,"repositoryCount":611},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3699,3700],"CVE-2025-66471","PYSEC-2026-1994",[119,3700],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[3705],{"type":3343,"score":3706},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3708,3710,3712,3714,3716,3718,3720,3722],{"type":3347,"url":3709},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3361,"url":3711},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3418,"url":3713},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3347,"url":3715},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":3361,"url":3717},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3347,"url":3719},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":3354,"url":3721},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3354,"url":3723},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[3725,3726,3727,3728,3729],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":120,"slug":3731,"dossier":47,"summary":3732,"aliases":3733,"sourceIds":3736,"published":3737,"modified":3738,"checkedAt":7,"severity":3739,"references":3742,"versionKeys":3755,"packageCount":32,"repositoryCount":105},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3734,3735],"CVE-2025-30167","PYSEC-2026-1477",[120,3735],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[3740],{"type":3380,"score":3741},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3743,3745,3747,3749,3751,3753],{"type":3347,"url":3744},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3361,"url":3746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3347,"url":3748},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3354,"url":3750},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3354,"url":3752},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3361,"url":3754},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3756],"pypi:jupyter-core@5.7.2",{"id":121,"slug":3758,"dossier":47,"summary":3759,"aliases":3760,"sourceIds":3764,"published":3765,"modified":3766,"checkedAt":7,"severity":3767,"references":3774,"versionKeys":3796,"packageCount":32,"repositoryCount":697},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[3761,3762,3763],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[121,3763],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[3768,3770,3772],{"type":3380,"score":3769},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3343,"score":3771},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3380,"score":3773},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3775,3777,3780,3782,3784,3786,3788,3790,3792,3794],{"type":3361,"url":3776},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3778,"url":3779},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3778,"url":3781},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":3347,"url":3783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":3354,"url":3785},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":3347,"url":3787},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3778,"url":3789},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":3361,"url":3791},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":3361,"url":3793},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":3361,"url":3795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3797,3798,3799],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":122,"slug":3801,"dossier":47,"summary":3802,"aliases":3803,"sourceIds":3806,"published":3807,"modified":3808,"checkedAt":7,"severity":3809,"references":3811,"versionKeys":3825,"packageCount":32,"repositoryCount":697},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3804,3805],"CVE-2025-3933","PYSEC-2026-1977",[122,3805],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[3810],{"type":3380,"score":3480},[3812,3814,3816,3818,3819,3821,3823],{"type":3361,"url":3813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":3347,"url":3815},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":3347,"url":3817},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":3354,"url":3453},{"type":3347,"url":3820},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":3354,"url":3822},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":3361,"url":3824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[3460,3461,3462],{"id":123,"slug":3827,"dossier":47,"summary":3828,"aliases":3829,"sourceIds":3832,"published":3833,"modified":3834,"checkedAt":7,"severity":3835,"references":3838,"versionKeys":3851,"packageCount":32,"repositoryCount":611},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3830,3831],"CVE-2026-21441","PYSEC-2026-1996",[123,3831],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[3836,3837],{"type":3380,"score":3515},{"type":3343,"score":3706},[3839,3841,3843,3845,3846,3848,3849],{"type":3347,"url":3840},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3361,"url":3842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3418,"url":3844},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3354,"url":3721},{"type":3347,"url":3847},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3354,"url":3723},{"type":3361,"url":3850},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3725,3726,3727,3728,3729],{"id":124,"slug":3853,"dossier":47,"summary":3854,"aliases":3855,"sourceIds":3858,"published":3859,"modified":3860,"checkedAt":7,"severity":3861,"references":3865,"versionKeys":3896,"packageCount":32,"repositoryCount":105},"ghsa-3936-cmfr-pm3m-b8e96095","Black: Arbitrary file writes from unsanitized user input in cache file name",[3856,3857],"CVE-2026-32274","PYSEC-2026-2121",[124,3857],"2026-03-12T18:33:10Z","2026-09-10T03:50:36.703011526Z",[3862,3863],{"type":3380,"score":3411},{"type":3343,"score":3864},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3866,3868,3870,3872,3874,3876,3878,3880,3882,3884,3886,3888,3890,3892,3894],{"type":3361,"url":3867},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":3361,"url":3869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32274",{"type":3347,"url":3871},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F4176",{"type":3418,"url":3873},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",{"type":3418,"url":3875},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":3347,"url":3877},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fed770ba4dd50c419148a0fca2b43937a7447e1f9",{"type":3361,"url":3879},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3361,"url":3881},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3361,"url":3883},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3347,"url":3885},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":3778,"url":3887},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":3354,"url":3889},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":3361,"url":3891},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":3347,"url":3893},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2026-2121.yaml",{"type":3347,"url":3895},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",[3897,3898],"pypi:black@23.12.1","pypi:black@25.9.0",{"id":125,"slug":3900,"dossier":47,"summary":3901,"aliases":3902,"sourceIds":3905,"published":3906,"modified":3907,"checkedAt":7,"severity":3908,"references":3912,"versionKeys":3927,"packageCount":32,"repositoryCount":105},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3903,3904],"CVE-2026-40260","PYSEC-2026-3006",[125,3904],"2026-04-10T20:59:36Z","2026-09-10T03:50:42.398553260Z",[3909,3910],{"type":3380,"score":3480},{"type":3343,"score":3911},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3913,3915,3917,3919,3921,3922,3924,3925],{"type":3347,"url":3914},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3361,"url":3916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3347,"url":3918},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3347,"url":3920},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3354,"url":3355},{"type":3347,"url":3923},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3354,"url":3359},{"type":3361,"url":3926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3366,3367],{"id":126,"slug":3929,"dossier":47,"summary":3930,"aliases":3931,"sourceIds":3934,"published":3935,"modified":3936,"checkedAt":7,"severity":3937,"references":3942,"versionKeys":3957,"packageCount":32,"repositoryCount":669},"ghsa-3gq4-3j92-5w49-897f59b8","NLTK: Corpus Reader Sandbox Bypass",[3932,3933],"CVE-2026-79674","PYSEC-2026-3736",[126,3933],"2026-08-25T16:17:27.873Z","2026-09-08T17:15:03.431037417Z",[3938,3940],{"type":3343,"score":3939},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":3941},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3943,3945,3947,3949,3951,3953,3955],{"type":3455,"url":3944},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gq4-3j92-5w49",{"type":3361,"url":3946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79674",{"type":3347,"url":3948},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbc007200d123c1a98d74c2eb230f5e06c53886b8",{"type":3354,"url":3950},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3347,"url":3952},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.3",{"type":3347,"url":3954},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3736.yaml",{"type":3361,"url":3956},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-corpus-reader-constructors",[3958,3959,3960],"pypi:nltk@3.10.0","pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":127,"slug":3962,"dossier":47,"summary":3963,"aliases":3964,"sourceIds":3967,"published":3968,"modified":3969,"checkedAt":7,"severity":3970,"references":3975,"versionKeys":3991,"packageCount":32,"repositoryCount":34},"ghsa-3gqm-fcw5-w839-cc39684a","NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure",[3965,3966],"CVE-2026-63311","PYSEC-2026-3723",[127,3966],"2026-08-22T15:16:19.233Z","2026-09-02T16:00:17.562331221Z",[3971,3973],{"type":3343,"score":3972},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3343,"score":3974},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3976,3978,3980,3982,3984,3985,3987,3989],{"type":3455,"url":3977},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gqm-fcw5-w839",{"type":3361,"url":3979},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63311",{"type":3347,"url":3981},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3582",{"type":3347,"url":3983},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F4a820afa58810cd05049b6c6eae306694d6cfe65",{"type":3354,"url":3950},{"type":3347,"url":3986},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.0",{"type":3347,"url":3988},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3723.yaml",{"type":3361,"url":3990},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-via-dns-resolution-failure",[3959,3960],{"id":128,"slug":3993,"dossier":47,"summary":3994,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4008,"versionKeys":4024,"packageCount":32,"repositoryCount":32},"ghsa-3hhw-38pf-pxj6-71b22ab9","NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely",[3996,3997],"CVE-2026-62383","PYSEC-2026-3726",[128,3997],"2026-08-22T15:16:17.883Z","2026-09-08T16:45:03.602432270Z",[4002,4004,4006],{"type":3380,"score":4003},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3343,"score":4005},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":4007},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4009,4011,4013,4015,4017,4018,4020,4022],{"type":3455,"url":4010},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3hhw-38pf-pxj6",{"type":3361,"url":4012},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62383",{"type":3347,"url":4014},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3727",{"type":3347,"url":4016},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fee1a42e51982c4dce6ad3ee77ff1ac43894288ab",{"type":3354,"url":3950},{"type":3347,"url":4019},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.2",{"type":3347,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3726.yaml",{"type":3361,"url":4023},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-ipipancorpusreader-symlink-arbitrary-file-read",[3958],{"id":129,"slug":4026,"dossier":47,"summary":4027,"aliases":4028,"sourceIds":4029,"published":4030,"modified":4031,"checkedAt":7,"severity":4032,"references":4034,"versionKeys":4047,"packageCount":32,"repositoryCount":42},"ghsa-3hv7-mjh2-fv65-5be6c7b0","Tornado: Unbounded query-string argument count allows event-loop-stalling DoS",[],[129],"2026-09-30T23:49:25Z","2026-10-01T00:00:04.690479804Z",[4033],{"type":3380,"score":3480},[4035,4037,4039,4041,4043,4045],{"type":3347,"url":4036},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3hv7-mjh2-fv65",{"type":3347,"url":4038},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3719",{"type":3347,"url":4040},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F03945136ea9746eccf61caf88edae39642e59c93",{"type":3347,"url":4042},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8a61dd6005f42733015160f3c23a2bcffe200542",{"type":3354,"url":4044},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3347,"url":4046},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.9",[4048,4049,4050,4051,4052,4053,4054],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5","pypi:tornado@6.5.7","pypi:tornado@6.5.8",{"id":130,"slug":4056,"dossier":47,"summary":4057,"aliases":4058,"sourceIds":4061,"published":4062,"modified":4063,"checkedAt":7,"severity":4064,"references":4068,"versionKeys":4077,"packageCount":32,"repositoryCount":621},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[4059,4060],"CVE-2026-34517","PYSEC-2026-2099",[130,4060],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[4065,4067],{"type":3343,"score":4066},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3480},[4069,4071,4073,4075,4076],{"type":3418,"url":4070},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3361,"url":4072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3418,"url":4074},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":131,"slug":4079,"dossier":47,"summary":4080,"aliases":4081,"sourceIds":4084,"published":4085,"modified":4086,"checkedAt":7,"severity":4087,"references":4089,"versionKeys":4099,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[4082,4083],"CVE-2026-49853","PYSEC-2026-3387",[131,4083],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[4088],{"type":3380,"score":3544},[4090,4092,4093,4095,4097],{"type":3347,"url":4091},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3354,"url":4044},{"type":3354,"url":4094},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3361,"url":4096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3361,"url":4098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[4048,4049,4050,4051,4052],{"id":132,"slug":4101,"dossier":47,"summary":4102,"aliases":4103,"sourceIds":4106,"published":4107,"modified":4108,"checkedAt":7,"severity":4109,"references":4111,"versionKeys":4124,"packageCount":32,"repositoryCount":697},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[4104,4105],"CVE-2025-68480","PYSEC-2026-1605",[132,4105],"2025-12-22T20:20:07Z","2026-09-10T03:50:31.208550852Z",[4110],{"type":3380,"score":3480},[4112,4114,4116,4118,4120,4122],{"type":3347,"url":4113},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3361,"url":4115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3347,"url":4117},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3354,"url":4119},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3354,"url":4121},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3361,"url":4123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[4125,4126],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":133,"slug":4128,"dossier":47,"summary":4129,"aliases":4130,"sourceIds":4132,"published":4133,"modified":4134,"checkedAt":7,"severity":4135,"references":4137,"versionKeys":4147,"packageCount":32,"repositoryCount":669},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[4131],"CVE-2026-101918",[133],"2026-09-30T15:41:05Z","2026-09-30T16:00:09.812873551Z",[4136],{"type":3380,"score":3480},[4138,4140,4142,4144,4145],{"type":3347,"url":4139},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":3361,"url":4141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":3347,"url":4143},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":3354,"url":3584},{"type":3347,"url":4146},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",[3588,3589,3590],{"id":134,"slug":4149,"dossier":90,"summary":4150,"aliases":4151,"sourceIds":4155,"published":4156,"modified":4157,"checkedAt":7,"severity":4158,"references":4160,"versionKeys":4173,"packageCount":32,"repositoryCount":4183},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[4152,4153,4154],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[134,4154],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[4159],{"type":3380,"score":3515},[4161,4163,4165,4167,4169,4171],{"type":3455,"url":4162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3361,"url":4164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3418,"url":4166},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3347,"url":4168},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3354,"url":4170},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3361,"url":4172},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[4174,4175,4176,4177,4178,4179,4180,4181,4182],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",17,{"id":135,"slug":4185,"dossier":47,"summary":4186,"aliases":4187,"sourceIds":4190,"published":4191,"modified":4192,"checkedAt":7,"severity":4193,"references":4196,"versionKeys":4215,"packageCount":32,"repositoryCount":34},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[4188,4189],"CVE-2026-33236","PYSEC-2026-2237",[135,4189],"2026-03-19T12:42:42Z","2026-09-10T03:50:36.939520178Z",[4194],{"type":3380,"score":4195},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4197,4199,4201,4203,4204,4206,4208,4209,4211,4213],{"type":3455,"url":4198},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3361,"url":4200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3418,"url":4202},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3354,"url":3950},{"type":3347,"url":4205},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3347,"url":4207},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":3361,"url":3879},{"type":3361,"url":4210},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3361,"url":4212},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3778,"url":4214},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3959,3960],{"id":136,"slug":4217,"dossier":47,"summary":4218,"aliases":4219,"sourceIds":4222,"published":4223,"modified":4224,"checkedAt":7,"severity":4225,"references":4228,"versionKeys":4241,"packageCount":32,"repositoryCount":631},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[4220,4221],"CVE-2025-50182","PYSEC-2026-1997",[136,4221],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[4226],{"type":3380,"score":4227},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4229,4231,4233,4235,4236,4238,4239],{"type":3347,"url":4230},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3361,"url":4232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3418,"url":4234},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3354,"url":3721},{"type":3347,"url":4237},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3354,"url":3723},{"type":3361,"url":4240},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3725,3726,3727,3728],{"id":137,"slug":4243,"dossier":47,"summary":4244,"aliases":4245,"sourceIds":4248,"published":4249,"modified":4250,"checkedAt":7,"severity":4251,"references":4253,"versionKeys":4268,"packageCount":32,"repositoryCount":105},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[4246,4247],"CVE-2026-22691","PYSEC-2026-1828",[137,4247],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[4252],{"type":3343,"score":4066},[4254,4256,4258,4260,4262,4263,4265,4266],{"type":3347,"url":4255},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3361,"url":4257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3347,"url":4259},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3347,"url":4261},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3354,"url":3355},{"type":3347,"url":4264},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3354,"url":3359},{"type":3361,"url":4267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3366,3367],{"id":138,"slug":4270,"dossier":47,"summary":4271,"aliases":4272,"sourceIds":4275,"published":4276,"modified":4277,"checkedAt":7,"severity":4278,"references":4282,"versionKeys":4288,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[4273,4274],"CVE-2026-54273","PYSEC-2026-2107",[138,4274],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[4279,4281],{"type":3343,"score":4280},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3515},[4283,4285,4287],{"type":3361,"url":4284},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3418,"url":4286},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":139,"slug":4290,"dossier":47,"summary":4291,"aliases":4292,"sourceIds":4295,"published":4296,"modified":4297,"checkedAt":7,"severity":4298,"references":4303,"versionKeys":4320,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[4293,4294],"CVE-2026-69112","PYSEC-2026-3804",[139,4294],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[4299,4301],{"type":3380,"score":4300},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":3343,"score":4302},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4304,4306,4308,4310,4312,4314,4316,4318],{"type":3361,"url":4305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":3347,"url":4307},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":3347,"url":4309},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":3347,"url":4311},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":3354,"url":4313},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":3347,"url":4315},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":3354,"url":4317},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":3361,"url":4319},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[4321,4322,4323,4324],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":140,"slug":4326,"dossier":47,"summary":4327,"aliases":4328,"sourceIds":4331,"published":4332,"modified":4333,"checkedAt":7,"severity":4334,"references":4337,"versionKeys":4348,"packageCount":32,"repositoryCount":32},"ghsa-4jhm-jv67-739f-fdb585fa","`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes",[4329,4330],"CVE-2026-49825","PYSEC-2026-2614",[140,4330],"2026-07-08T20:23:22Z","2026-07-13T16:42:41.379452174Z",[4335],{"type":3380,"score":4336},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[4338,4340,4342,4344,4346],{"type":3347,"url":4339},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3354,"url":4341},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean",{"type":3354,"url":4343},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flxml-html-clean",{"type":3361,"url":4345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3361,"url":4347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49825",[4349],"pypi:lxml-html-clean@0.4.3",{"id":141,"slug":4351,"dossier":47,"summary":4352,"aliases":4353,"sourceIds":4356,"published":4357,"modified":4358,"checkedAt":7,"severity":4359,"references":4363,"versionKeys":4367,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[4354,4355],"CVE-2026-54275","PYSEC-2026-237",[141,4355],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[4360,4362],{"type":3343,"score":4361},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3515},[4364,4366],{"type":3361,"url":4365},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":142,"slug":4369,"dossier":47,"summary":4370,"aliases":4371,"sourceIds":4374,"published":4375,"modified":4376,"checkedAt":7,"severity":4377,"references":4382,"versionKeys":4397,"packageCount":32,"repositoryCount":105},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[4372,4373],"CVE-2026-41313","PYSEC-2026-3007",[142,4373],"2026-04-16T21:30:12Z","2026-09-10T03:50:42.729754195Z",[4378,4380],{"type":3380,"score":4379},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3343,"score":4381},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4383,4385,4387,4389,4391,4392,4394,4395],{"type":3347,"url":4384},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3361,"url":4386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3347,"url":4388},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3347,"url":4390},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3354,"url":3355},{"type":3347,"url":4393},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3354,"url":3359},{"type":3361,"url":4396},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3366,3367],{"id":143,"slug":4399,"dossier":47,"summary":4400,"aliases":4401,"sourceIds":4405,"published":4406,"modified":4407,"checkedAt":7,"severity":4408,"references":4411,"versionKeys":4429,"packageCount":32,"repositoryCount":105},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[4402,4403,4404],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[143,4403],"2023-06-30T20:33:57Z","2026-09-10T03:50:01.918644849Z",[4409],{"type":3380,"score":4410},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4412,4414,4416,4418,4420,4422,4423,4425,4427],{"type":3347,"url":4413},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":3361,"url":4415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":3347,"url":4417},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":3347,"url":4419},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":3418,"url":4421},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":3354,"url":3355},{"type":3347,"url":4424},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":3354,"url":4426},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":3361,"url":4428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[4430],"pypi:pypdf2@3.0.1",{"id":144,"slug":4432,"dossier":47,"summary":4433,"aliases":4434,"sourceIds":4437,"published":4438,"modified":4439,"checkedAt":7,"severity":4440,"references":4443,"versionKeys":4456,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[4435,4436],"CVE-2025-6921","PYSEC-2026-1980",[144,4436],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[4441],{"type":3380,"score":4442},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4444,4446,4448,4450,4451,4453,4454],{"type":3361,"url":4445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":3347,"url":4447},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":3347,"url":4449},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":3354,"url":3453},{"type":3347,"url":4452},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":3354,"url":3822},{"type":3361,"url":4455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[3460,3461,3462,3463],{"id":145,"slug":4458,"dossier":90,"summary":4459,"aliases":4460,"sourceIds":4464,"published":4465,"modified":4466,"checkedAt":7,"severity":4467,"references":4470,"versionKeys":4485,"packageCount":32,"repositoryCount":4183},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[4461,4462,4463],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[145,4463],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[4468],{"type":3380,"score":4469},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4471,4473,4475,4477,4479,4481,4483,4484],{"type":3455,"url":4472},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3361,"url":4474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3418,"url":4476},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3418,"url":4478},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3418,"url":4480},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3347,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3354,"url":4170},{"type":3361,"url":4172},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":146,"slug":4487,"dossier":47,"summary":4488,"aliases":4489,"sourceIds":4492,"published":4493,"modified":4494,"checkedAt":7,"severity":4495,"references":4497,"versionKeys":4509,"packageCount":32,"repositoryCount":105},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[4490,4491],"CVE-2026-22690","PYSEC-2026-1829",[146,4491],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[4496],{"type":3343,"score":4066},[4498,4500,4502,4503,4504,4505,4506,4507],{"type":3347,"url":4499},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3361,"url":4501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3347,"url":4259},{"type":3347,"url":4261},{"type":3354,"url":3355},{"type":3347,"url":4264},{"type":3354,"url":3359},{"type":3361,"url":4508},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3366,3367],{"id":147,"slug":4511,"dossier":47,"summary":4512,"aliases":4513,"sourceIds":4515,"published":4516,"modified":4517,"checkedAt":7,"severity":4518,"references":4521,"versionKeys":4526,"packageCount":32,"repositoryCount":105},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[4514],"CVE-2026-58203",[147],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[4519],{"type":3380,"score":4520},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4522,4524],{"type":3347,"url":4523},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3354,"url":4525},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[4527],"pypi:pydantic-settings@2.12.0",{"id":148,"slug":4529,"dossier":47,"summary":4530,"aliases":4531,"sourceIds":4534,"published":4535,"modified":4536,"checkedAt":7,"severity":4537,"references":4540,"versionKeys":4563,"packageCount":32,"repositoryCount":4566},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[4532,4533],"CVE-2026-4539","PYSEC-2026-2987",[148,4533],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[4538,4539],{"type":3380,"score":3769},{"type":3343,"score":3771},[4541,4543,4545,4547,4549,4551,4553,4555,4557,4559,4561],{"type":3361,"url":4542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3347,"url":4544},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3347,"url":4546},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3347,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3354,"url":4550},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3347,"url":4552},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3347,"url":4554},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3347,"url":4556},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3347,"url":4558},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3354,"url":4560},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3361,"url":4562},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[4564,4565],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":149,"slug":4568,"dossier":47,"summary":4569,"aliases":4570,"sourceIds":4573,"published":4574,"modified":4575,"checkedAt":7,"severity":4576,"references":4579,"versionKeys":4592,"packageCount":32,"repositoryCount":105},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[4571,4572],"CVE-2026-54530","PYSEC-2026-3009",[149,4572],"2026-06-16T14:05:40Z","2026-09-10T03:50:48.282377637Z",[4577],{"type":3343,"score":4578},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4580,4582,4584,4585,4587,4588,4590],{"type":3347,"url":4581},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3347,"url":4583},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3354,"url":3355},{"type":3347,"url":4586},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3354,"url":3359},{"type":3361,"url":4589},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3361,"url":4591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3366,3367],{"id":150,"slug":4594,"dossier":47,"summary":4595,"aliases":4596,"sourceIds":4600,"published":4601,"modified":4602,"checkedAt":7,"severity":4603,"references":4608,"versionKeys":4618,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[4597,4598,4599],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[150,4599],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[4604,4606],{"type":3343,"score":4605},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3380,"score":4607},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4609,4611,4613,4615,4617],{"type":3361,"url":4610},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":3361,"url":4612},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":3347,"url":4614},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":3347,"url":4616},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":3354,"url":3785},[3797],{"id":151,"slug":4620,"dossier":47,"summary":4621,"aliases":4622,"sourceIds":4625,"published":4626,"modified":4627,"checkedAt":7,"severity":4628,"references":4631,"versionKeys":4643,"packageCount":32,"repositoryCount":631},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[4623,4624],"CVE-2025-69226","PYSEC-2026-1097",[151,4624],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[4629],{"type":3343,"score":4630},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4632,4634,4636,4638,4639,4641],{"type":3347,"url":4633},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3361,"url":4635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3418,"url":4637},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3354,"url":3520},{"type":3354,"url":4640},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3361,"url":4642},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3524,3525,3526,3527,3528,3529,3530],{"id":152,"slug":4645,"dossier":47,"summary":4646,"aliases":4647,"sourceIds":4650,"published":4651,"modified":4652,"checkedAt":7,"severity":4653,"references":4655,"versionKeys":4670,"packageCount":32,"repositoryCount":105},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[4648,4649],"CVE-2026-59937","PYSEC-2026-3610",[152,4649],"2026-07-23T15:07:33Z","2026-09-10T03:50:12.272620075Z",[4654],{"type":3343,"score":3911},[4656,4658,4660,4662,4664,4665,4667,4668],{"type":3347,"url":4657},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3361,"url":4659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3347,"url":4661},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3347,"url":4663},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3354,"url":3355},{"type":3347,"url":4666},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3354,"url":3359},{"type":3361,"url":4669},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3366,3367],{"id":153,"slug":4672,"dossier":47,"summary":4673,"aliases":4674,"sourceIds":4677,"published":4678,"modified":4679,"checkedAt":7,"severity":4680,"references":4687,"versionKeys":4706,"packageCount":32,"repositoryCount":34},"ghsa-568f-pv23-39p4-570af882","NLTK: Stable FrameNet and NKJP readers parse outside-root XML",[4675,4676],"CVE-2026-62385","PYSEC-2026-3728",[153,4676],"2026-08-22T15:16:18.833Z","2026-09-08T16:45:03.600943920Z",[4681,4683,4685],{"type":3380,"score":4682},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3343,"score":4684},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3380,"score":4686},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4688,4690,4692,4694,4696,4698,4700,4701,4702,4704],{"type":3455,"url":4689},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-568f-pv23-39p4",{"type":3361,"url":4691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62385",{"type":3347,"url":4693},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3579",{"type":3347,"url":4695},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3581",{"type":3347,"url":4697},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7d1389d0789c1eca56bd0ed444089e0a3972e3ed",{"type":3347,"url":4699},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbf3bf32786791394a1008258b4917a7f2d4dbcda",{"type":3354,"url":3950},{"type":3347,"url":3986},{"type":3347,"url":4703},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3728.yaml",{"type":3361,"url":4705},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-framenet-and-nkjp-readers",[3959,3960],{"id":154,"slug":4708,"dossier":47,"summary":4709,"aliases":4710,"sourceIds":4714,"published":4715,"modified":4716,"checkedAt":7,"severity":4717,"references":4720,"versionKeys":4735,"packageCount":32,"repositoryCount":4740},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[4711,4712,4713],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[154,4713],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[4718],{"type":3380,"score":4719},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4721,4723,4725,4727,4729,4731,4733],{"type":3347,"url":4722},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":3361,"url":4724},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":3347,"url":4726},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":3418,"url":4728},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":3354,"url":4730},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":3354,"url":4732},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":3361,"url":4734},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[4736,4737,4738,4739],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",7,{"id":155,"slug":4742,"dossier":47,"summary":4743,"aliases":4744,"sourceIds":4747,"published":4748,"modified":4749,"checkedAt":7,"severity":4750,"references":4754,"versionKeys":4767,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[4745,4746],"CVE-2024-53981","PYSEC-2026-1851",[155,4746],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[4751,4752],{"type":3380,"score":3515},{"type":3343,"score":4753},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4755,4757,4759,4761,4763,4765],{"type":3347,"url":4756},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3361,"url":4758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3347,"url":4760},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3354,"url":4762},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3354,"url":4764},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3361,"url":4766},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[4768],"pypi:python-multipart@0.0.9",{"id":156,"slug":4770,"dossier":47,"summary":4771,"aliases":4772,"sourceIds":4775,"published":4776,"modified":4777,"checkedAt":7,"severity":4778,"references":4780,"versionKeys":4791,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[4773,4774],"CVE-2025-6638","PYSEC-2026-1981",[156,4774],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[4779],{"type":3380,"score":4442},[4781,4783,4784,4785,4786,4788,4789],{"type":3361,"url":4782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":3347,"url":4447},{"type":3347,"url":4449},{"type":3354,"url":3453},{"type":3347,"url":4787},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":3354,"url":3822},{"type":3361,"url":4790},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[3460,3461,3462,3463],{"id":157,"slug":4793,"dossier":47,"summary":4794,"aliases":4795,"sourceIds":4798,"published":4799,"modified":4800,"checkedAt":7,"severity":4801,"references":4806,"versionKeys":4820,"packageCount":32,"repositoryCount":32},"ghsa-5gh2-94qg-qppq-247161cc","NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution",[4796,4797],"CVE-2026-71513","PYSEC-2026-3867",[157,4797],"2026-08-22T15:31:03Z","2026-09-10T12:25:33.900504877Z",[4802,4804],{"type":3380,"score":4803},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3343,"score":4805},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4807,4809,4811,4812,4814,4816,4818],{"type":3361,"url":4808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71513",{"type":3347,"url":4810},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fc3e37113742a1ebeeb4f2ca58941f320f98805ea",{"type":3354,"url":3950},{"type":3347,"url":4813},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fpicklesec.py#L119-L124",{"type":3347,"url":4815},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass",{"type":3354,"url":4817},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3361,"url":4819},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gh2-94qg-qppq",[3958],{"id":158,"slug":4822,"dossier":47,"summary":4823,"aliases":4824,"sourceIds":4827,"published":4828,"modified":4829,"checkedAt":7,"severity":4830,"references":4832,"versionKeys":4845,"packageCount":32,"repositoryCount":105},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4825,4826],"CVE-2026-49460","PYSEC-2026-3010",[158,4826],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4831],{"type":3343,"score":3383},[4833,4835,4837,4838,4840,4841,4843],{"type":3347,"url":4834},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3347,"url":4836},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3354,"url":3355},{"type":3347,"url":4839},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3354,"url":3359},{"type":3361,"url":4842},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3361,"url":4844},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3366,3367],{"id":159,"slug":4847,"dossier":47,"summary":4848,"aliases":4849,"sourceIds":4851,"published":4852,"modified":4853,"checkedAt":7,"severity":4854,"references":4857,"versionKeys":4868,"packageCount":32,"repositoryCount":611},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[4850],"CVE-2026-64847",[159],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[4855],{"type":3343,"score":4856},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4858,4860,4862,4864,4866],{"type":3347,"url":4859},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3347,"url":4861},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":3347,"url":4863},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":3354,"url":4865},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":3347,"url":4867},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[4869,4870,4871,4872,4873,4874,4875,4876],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":160,"slug":4878,"dossier":47,"summary":4879,"aliases":4880,"sourceIds":4883,"published":4884,"modified":4885,"checkedAt":7,"severity":4886,"references":4888,"versionKeys":4902,"packageCount":32,"repositoryCount":105},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4881,4882],"CVE-2026-59938","PYSEC-2026-3611",[160,4882],"2026-07-23T15:06:58Z","2026-09-10T03:51:10.495417380Z",[4887],{"type":3343,"score":3911},[4889,4891,4893,4895,4897,4898,4899,4900],{"type":3347,"url":4890},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3361,"url":4892},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3347,"url":4894},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3347,"url":4896},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3354,"url":3355},{"type":3347,"url":4666},{"type":3354,"url":3359},{"type":3361,"url":4901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3366,3367],{"id":161,"slug":4904,"dossier":47,"summary":4905,"aliases":4906,"sourceIds":4910,"published":4911,"modified":4912,"checkedAt":7,"severity":4913,"references":4918,"versionKeys":4935,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4907,4908,4909],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[161,4909],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[4914,4916],{"type":3343,"score":4915},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3380,"score":4917},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4919,4921,4923,4925,4927,4929,4931,4933],{"type":3455,"url":4920},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3361,"url":4922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3778,"url":4924},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3418,"url":4926},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3347,"url":4928},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3354,"url":4930},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3347,"url":4932},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3425,"url":4934},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4936,4937,4938,4939],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":162,"slug":4941,"dossier":47,"summary":4942,"aliases":4943,"sourceIds":4946,"published":4947,"modified":4948,"checkedAt":7,"severity":4949,"references":4951,"versionKeys":4960,"packageCount":32,"repositoryCount":4740},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4944,4945],"CVE-2026-53539","PYSEC-2026-3036",[162,4945],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[4950],{"type":3380,"score":3515},[4952,4954,4955,4956,4958],{"type":3347,"url":4953},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3354,"url":4762},{"type":3354,"url":4764},{"type":3361,"url":4957},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3361,"url":4959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4961,4962,4963,4768],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":163,"slug":4965,"dossier":47,"summary":4966,"aliases":4967,"sourceIds":4970,"published":4971,"modified":4972,"checkedAt":7,"severity":4973,"references":4975,"versionKeys":4986,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[4968,4969],"CVE-2026-48804","PYSEC-2026-3042",[163,4969],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[4974],{"type":3380,"score":3515},[4976,4978,4980,4982,4984],{"type":3347,"url":4977},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3354,"url":4979},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":3354,"url":4981},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":3361,"url":4983},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3361,"url":4985},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[4987],"pypi:python-socketio@5.14.3",{"id":164,"slug":4989,"dossier":47,"summary":4990,"aliases":4991,"sourceIds":4996,"published":4997,"modified":4998,"checkedAt":7,"severity":4999,"references":5004,"versionKeys":5024,"packageCount":32,"repositoryCount":34},"ghsa-5wp5-5229-5g6q-fd7d105f","NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection",[4992,4993,4994,4995],"CVE-2026-12259","CVE-2026-63310","GHSA-gf32-cmjh-8m9v","PYSEC-2026-3729",[164,4995],"2026-08-22T15:16:19.100Z","2026-09-10T11:25:57.355843699Z",[5000,5002],{"type":3380,"score":5001},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3380,"score":5003},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[5005,5007,5009,5011,5013,5014,5016,5018,5020,5022],{"type":3455,"url":5006},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",{"type":3361,"url":5008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12259",{"type":3347,"url":5010},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3449",{"type":3347,"url":5012},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0e26734a61094b628d93e26dc18dd7302567ac46",{"type":3354,"url":3950},{"type":3347,"url":5015},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3347,"url":5017},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3729.yaml",{"type":3347,"url":5019},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F659ccf6d-12d4-4d4a-84c0-078633c35a5d",{"type":3361,"url":5021},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-missing-post-download-integrity-verification",{"type":3361,"url":5023},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",[3959,3960],{"id":165,"slug":5026,"dossier":90,"summary":5027,"aliases":5028,"sourceIds":5032,"published":5033,"modified":5034,"checkedAt":7,"severity":5035,"references":5037,"versionKeys":5047,"packageCount":32,"repositoryCount":4183},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[5029,5030,5031],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[165,5031],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[5036],{"type":3380,"score":3515},[5038,5040,5042,5043,5045,5046],{"type":3455,"url":5039},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3361,"url":5041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3418,"url":4166},{"type":3347,"url":5044},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3354,"url":4170},{"type":3361,"url":4172},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":166,"slug":5049,"dossier":47,"summary":5050,"aliases":5051,"sourceIds":5054,"published":5055,"modified":5056,"checkedAt":7,"severity":5057,"references":5059,"versionKeys":5074,"packageCount":32,"repositoryCount":105},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[5052,5053],"CVE-2026-59936","PYSEC-2026-3612",[166,5053],"2026-07-23T16:36:41Z","2026-09-10T03:51:10.501615101Z",[5058],{"type":3343,"score":4753},[5060,5062,5064,5066,5068,5069,5071,5072],{"type":3347,"url":5061},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3361,"url":5063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3347,"url":5065},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3347,"url":5067},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3354,"url":3355},{"type":3347,"url":5070},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3354,"url":3359},{"type":3361,"url":5073},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3366,3367],{"id":167,"slug":5076,"dossier":47,"summary":5077,"aliases":5078,"sourceIds":5082,"published":5083,"modified":5084,"checkedAt":7,"severity":5085,"references":5088,"versionKeys":5096,"packageCount":32,"repositoryCount":103},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[5079,5080,5081],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[167,5081],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[5086,5087],{"type":3380,"score":3773},{"type":3343,"score":3383},[5089,5091,5093,5094],{"type":3361,"url":5090},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3361,"url":5092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3354,"url":4170},{"type":3361,"url":5095},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[4177,4178,4179,4180,4181],{"id":168,"slug":5098,"dossier":90,"summary":5099,"aliases":5100,"sourceIds":5104,"published":5105,"modified":5106,"checkedAt":7,"severity":5107,"references":5110,"versionKeys":5126,"packageCount":32,"repositoryCount":4183},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[5101,5102,5103],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[168,5103],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[5108],{"type":3343,"score":5109},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5111,5113,5115,5117,5119,5120,5122,5124],{"type":3347,"url":5112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3361,"url":5114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3347,"url":5116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3347,"url":5118},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3354,"url":4170},{"type":3347,"url":5121},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3354,"url":5123},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3361,"url":5125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":169,"slug":5128,"dossier":47,"summary":5129,"aliases":5130,"sourceIds":5133,"published":5134,"modified":5135,"checkedAt":7,"severity":5136,"references":5142,"versionKeys":5153,"packageCount":32,"repositoryCount":621},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[5131,5132],"CVE-2026-34520","PYSEC-2026-2102",[169,5132],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[5137,5139,5140],{"type":3380,"score":5138},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3343,"score":3655},{"type":3343,"score":5141},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5143,5145,5147,5149,5150,5151],{"type":3418,"url":5144},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3361,"url":5146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3418,"url":5148},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3354,"url":3520},{"type":3361,"url":3667},{"type":3347,"url":5152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3524,3525,3526,3527,3528,3529,3530,3531],{"id":170,"slug":5155,"dossier":47,"summary":5156,"aliases":5157,"sourceIds":5160,"published":5161,"modified":5162,"checkedAt":7,"severity":5163,"references":5166,"versionKeys":5172,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[5158,5159],"CVE-2026-54277","PYSEC-2026-2110",[170,5159],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[5164,5165],{"type":3343,"score":4280},{"type":3380,"score":3515},[5167,5169,5171],{"type":3361,"url":5168},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3418,"url":5170},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":171,"slug":5174,"dossier":90,"summary":5175,"aliases":5176,"sourceIds":5179,"published":5180,"modified":5181,"checkedAt":7,"severity":5182,"references":5185,"versionKeys":5194,"packageCount":32,"repositoryCount":5199},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[5177,5178],"CVE-2026-45409","PYSEC-2026-215",[171,5178],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[5183,5184],{"type":3380,"score":3480},{"type":3343,"score":3911},[5186,5188,5190,5192],{"type":3361,"url":5187},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3361,"url":5189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3354,"url":5191},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3347,"url":5193},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[5195,5196,5197,5198],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":172,"slug":5201,"dossier":47,"summary":5202,"aliases":5203,"sourceIds":5206,"published":5207,"modified":5208,"checkedAt":7,"severity":5209,"references":5213,"versionKeys":5223,"packageCount":32,"repositoryCount":34},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[5204,5205],"CVE-2026-0847","PYSEC-2026-98",[172,5205],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[5210,5212],{"type":3380,"score":5211},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3380,"score":4686},[5214,5216,5217,5219,5221],{"type":3361,"url":5215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3354,"url":3950},{"type":3347,"url":5218},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3455,"url":5220},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3361,"url":5222},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3959,3960],{"id":173,"slug":5225,"dossier":47,"summary":5226,"aliases":5227,"sourceIds":5230,"published":5231,"modified":5232,"checkedAt":7,"severity":5233,"references":5235,"versionKeys":5246,"packageCount":32,"repositoryCount":631},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[5228,5229],"CVE-2025-69224","PYSEC-2026-1099",[173,5229],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[5234],{"type":3343,"score":3655},[5236,5238,5240,5242,5243,5244],{"type":3347,"url":5237},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3361,"url":5239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3418,"url":5241},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":5245},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3524,3525,3526,3527,3528,3529,3530],{"id":174,"slug":5248,"dossier":47,"summary":5249,"aliases":5250,"sourceIds":5253,"published":5254,"modified":5255,"checkedAt":7,"severity":5256,"references":5261,"versionKeys":5273,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[5251,5252],"CVE-2026-1839","PYSEC-2026-2288",[174,5252],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[5257,5259],{"type":3380,"score":5258},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":3380,"score":5260},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5262,5264,5266,5267,5269,5271],{"type":3361,"url":5263},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":3418,"url":5265},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":3354,"url":3453},{"type":3347,"url":5268},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":3455,"url":5270},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":3361,"url":5272},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[3460,3461,3462,3463,3464,3465,3466,3467,3468],{"id":175,"slug":5275,"dossier":47,"summary":5276,"aliases":5277,"sourceIds":5280,"published":5281,"modified":5282,"checkedAt":7,"severity":5283,"references":5285,"versionKeys":5294,"packageCount":32,"repositoryCount":34},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[5278,5279],"CVE-2026-12072","PYSEC-2026-3581",[175,5279],"2026-07-31T16:50:55Z","2026-09-10T03:51:10.746883878Z",[5284],{"type":3380,"score":4686},[5286,5288,5289,5290,5292],{"type":3347,"url":5287},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3354,"url":3950},{"type":3354,"url":4817},{"type":3361,"url":5291},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3361,"url":5293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3959,3960],{"id":176,"slug":5296,"dossier":47,"summary":5297,"aliases":5298,"sourceIds":5301,"published":5302,"modified":5303,"checkedAt":7,"severity":5304,"references":5309,"versionKeys":5323,"packageCount":32,"repositoryCount":669},"ghsa-6hwm-xvph-95vm-a4237eb0","NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary",[5299,5300],"CVE-2026-78680","PYSEC-2026-3868",[176,5300],"2026-09-01T20:27:20Z","2026-09-10T12:25:25.368160026Z",[5305,5307],{"type":3380,"score":5306},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3343,"score":5308},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5310,5312,5314,5316,5317,5318,5320,5321],{"type":3347,"url":5311},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",{"type":3361,"url":5313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78680",{"type":3347,"url":5315},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1a3cd1764ab3deb084fb66d0ffb4873717659538",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":5319},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-code-execution-via-graphviz-dot-binary",{"type":3354,"url":4817},{"type":3361,"url":5322},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",[3958,3959,3960],{"id":177,"slug":5325,"dossier":47,"summary":5326,"aliases":5327,"sourceIds":5330,"published":5331,"modified":5332,"checkedAt":7,"severity":5333,"references":5335,"versionKeys":5346,"packageCount":32,"repositoryCount":631},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[5328,5329],"CVE-2025-69228","PYSEC-2026-1100",[177,5329],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[5334],{"type":3343,"score":4280},[5336,5338,5340,5342,5343,5344],{"type":3347,"url":5337},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3361,"url":5339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3418,"url":5341},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":5345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3524,3525,3526,3527,3528,3529,3530],{"id":178,"slug":5348,"dossier":47,"summary":5349,"aliases":5350,"sourceIds":5353,"published":5354,"modified":5355,"checkedAt":7,"severity":5356,"references":5359,"versionKeys":5368,"packageCount":32,"repositoryCount":4740},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[5351,5352],"CVE-2026-53538","PYSEC-2026-3037",[178,5352],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[5357],{"type":3380,"score":5358},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[5360,5362,5363,5364,5366],{"type":3347,"url":5361},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3354,"url":4762},{"type":3354,"url":4764},{"type":3361,"url":5365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3361,"url":5367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4961,4962,4963,4768],{"id":179,"slug":5370,"dossier":47,"summary":5371,"aliases":5372,"sourceIds":5375,"published":5376,"modified":5377,"checkedAt":7,"severity":5378,"references":5380,"versionKeys":5391,"packageCount":32,"repositoryCount":631},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[5373,5374],"CVE-2025-69223","PYSEC-2026-1101",[179,5374],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[5379],{"type":3380,"score":3515},[5381,5383,5385,5387,5388,5389],{"type":3347,"url":5382},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3361,"url":5384},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3418,"url":5386},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":5390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3524,3525,3526,3527,3528,3529,3530],{"id":180,"slug":5393,"dossier":90,"summary":5394,"aliases":5395,"sourceIds":5399,"published":5400,"modified":5401,"checkedAt":7,"severity":5402,"references":5404,"versionKeys":5417,"packageCount":32,"repositoryCount":4183},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[5396,5397,5398],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[180,5398],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[5403],{"type":3380,"score":3515},[5405,5407,5409,5411,5413,5415,5416],{"type":3455,"url":5406},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3361,"url":5408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3418,"url":5410},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3418,"url":5412},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3347,"url":5414},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3354,"url":4170},{"type":3361,"url":5121},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":181,"slug":5419,"dossier":47,"summary":5420,"aliases":5421,"sourceIds":5424,"published":5425,"modified":5426,"checkedAt":7,"severity":5427,"references":5429,"versionKeys":5440,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[5422,5423],"CVE-2024-12720","PYSEC-2026-1982",[181,5423],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[5428],{"type":3380,"score":4442},[5430,5432,5434,5435,5437,5438],{"type":3361,"url":5431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":3347,"url":5433},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":3354,"url":3453},{"type":3347,"url":5436},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":3354,"url":3822},{"type":3361,"url":5439},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[3460],{"id":182,"slug":5442,"dossier":47,"summary":5443,"aliases":5444,"sourceIds":5447,"published":5448,"modified":5449,"checkedAt":7,"severity":5450,"references":5453,"versionKeys":5472,"packageCount":32,"repositoryCount":4740},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[5445,5446],"CVE-2025-71176","PYSEC-2026-1845",[182,5446],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[5451],{"type":3380,"score":5452},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[5454,5456,5458,5460,5462,5464,5466,5468,5470],{"type":3361,"url":5455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3347,"url":5457},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3347,"url":5459},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3347,"url":5461},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3354,"url":5463},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3347,"url":5465},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3347,"url":5467},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3354,"url":5469},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3361,"url":5471},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[5473,5474,5475,5476,5477],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":183,"slug":5479,"dossier":47,"summary":5480,"aliases":5481,"sourceIds":5484,"published":5485,"modified":5486,"checkedAt":7,"severity":5487,"references":5492,"versionKeys":5505,"packageCount":32,"repositoryCount":669},"ghsa-6ww7-3frv-cqxh-c6d40b97","NLTK: pathsec SSRF protection can be bypassed when a proxy is configured",[5482,5483],"CVE-2026-78682","PYSEC-2026-3733",[183,5483],"2026-08-25T02:16:52.890Z","2026-09-08T16:45:04.147588108Z",[5488,5490],{"type":3343,"score":5489},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":5491},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5493,5495,5497,5499,5500,5501,5503],{"type":3455,"url":5494},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6ww7-3frv-cqxh",{"type":3361,"url":5496},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78682",{"type":3347,"url":5498},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F767333a005a1cd3d82d2029215f2dbe66a5844d9",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":5502},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3733.yaml",{"type":3361,"url":5504},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-protection-bypass-via-proxy",[3958,3959,3960],{"id":184,"slug":5507,"dossier":47,"summary":5508,"aliases":5509,"sourceIds":5512,"published":5513,"modified":5514,"checkedAt":7,"severity":5515,"references":5520,"versionKeys":5536,"packageCount":32,"repositoryCount":34},"ghsa-72r2-7mfr-5xr9-919ee5d0","NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:\u002F\u002F protocol",[5510,5511],"CVE-2026-65915","PYSEC-2026-3731",[184,5511],"2026-08-22T15:16:19.500Z","2026-09-08T15:46:56.329043767Z",[5516,5518],{"type":3380,"score":5517},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3343,"score":5519},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5521,5523,5525,5527,5529,5530,5532,5534],{"type":3455,"url":5522},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-72r2-7mfr-5xr9",{"type":3361,"url":5524},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-65915",{"type":3347,"url":5526},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3522",{"type":3347,"url":5528},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F69db9911fdba914ceeaca7aec6e892d1b14586a9",{"type":3354,"url":3950},{"type":3347,"url":5531},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3731.yaml",{"type":3347,"url":5533},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa510de7b-ffaf-4a83-9bf8-fa7e63f4bd2d",{"type":3361,"url":5535},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-file-read-via-filesystempathpointer",[3959,3960],{"id":185,"slug":5538,"dossier":47,"summary":5539,"aliases":5540,"sourceIds":5543,"published":5544,"modified":5545,"checkedAt":7,"severity":5546,"references":5548,"versionKeys":5558,"packageCount":32,"repositoryCount":697},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[5541,5542],"CVE-2026-32597","PYSEC-2026-120",[185,5542],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[5547],{"type":3380,"score":3411},[5549,5551,5553,5554,5556],{"type":3455,"url":5550},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3361,"url":5552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3354,"url":3584},{"type":3347,"url":5555},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3347,"url":5557},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[3588,3590],{"id":186,"slug":5560,"dossier":47,"summary":5561,"aliases":5562,"sourceIds":5565,"published":5566,"modified":5567,"checkedAt":7,"severity":5568,"references":5570,"versionKeys":5582,"packageCount":32,"repositoryCount":697},"ghsa-763m-79hh-57f2-630348b0","pypdf: Possible long runtimes\u002Flarge memory usage when extracting XForm objects",[5563,5564],"CVE-2026-84311","PYSEC-2026-3911",[186,5564],"2026-09-01T21:27:22Z","2026-09-10T12:26:04.098858222Z",[5569],{"type":3343,"score":3344},[5571,5573,5574,5575,5576,5577,5578,5580],{"type":3347,"url":5572},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3347,"url":3350},{"type":3347,"url":3352},{"type":3354,"url":3355},{"type":3347,"url":3357},{"type":3354,"url":3359},{"type":3361,"url":5579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3361,"url":5581},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84311",[3366,3367,3368],{"id":187,"slug":5584,"dossier":47,"summary":5585,"aliases":5586,"sourceIds":5590,"published":5591,"modified":5592,"checkedAt":7,"severity":5593,"references":5599,"versionKeys":5611,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[5587,5588,5589],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[187,5588,5589],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[5594,5596,5598],{"type":3380,"score":5595},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3380,"score":5597},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3380,"score":3657},[5600,5602,5604,5605,5607,5609],{"type":3361,"url":5601},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3347,"url":5603},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3354,"url":4044},{"type":3347,"url":5606},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3361,"url":5608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3361,"url":5610},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[4048,4049,4050,4051],{"id":188,"slug":5613,"dossier":47,"summary":5614,"aliases":5615,"sourceIds":5618,"published":5619,"modified":5620,"checkedAt":7,"severity":5621,"references":5623,"versionKeys":5636,"packageCount":32,"repositoryCount":105},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[5616,5617],"CVE-2025-47287","PYSEC-2026-1974",[188,5617],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[5622],{"type":3380,"score":3515},[5624,5626,5628,5630,5631,5633,5634],{"type":3347,"url":5625},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3361,"url":5627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3347,"url":5629},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3354,"url":4044},{"type":3347,"url":5632},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3354,"url":4094},{"type":3361,"url":5635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[4048],{"id":189,"slug":5638,"dossier":47,"summary":5639,"aliases":5640,"sourceIds":5643,"published":5644,"modified":5645,"checkedAt":7,"severity":5646,"references":5648,"versionKeys":5665,"packageCount":32,"repositoryCount":650},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[5641,5642],"CVE-2025-62727","PYSEC-2026-1942",[189,5642],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[5647],{"type":3380,"score":3515},[5649,5651,5653,5655,5658,5660,5662,5663],{"type":3347,"url":5650},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3361,"url":5652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3418,"url":5654},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":5656,"url":5657},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3354,"url":5659},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3347,"url":5661},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3354,"url":3495},{"type":3361,"url":5664},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3500,3501,5666,5667,5668],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":190,"slug":5670,"dossier":47,"summary":5671,"aliases":5672,"sourceIds":5675,"published":5676,"modified":5677,"checkedAt":7,"severity":5678,"references":5681,"versionKeys":5698,"packageCount":32,"repositoryCount":5709},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[5673,5674],"CVE-2026-0994","PYSEC-2026-1805",[190,5674],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[5679],{"type":3343,"score":5680},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[5682,5684,5686,5688,5690,5692,5694,5696],{"type":3361,"url":5683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3347,"url":5685},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3347,"url":5687},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3347,"url":5689},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3347,"url":5691},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3354,"url":5693},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3354,"url":5695},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3361,"url":5697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[5699,5700,5701,5702,5703,5704,5705,5706,5707,5708],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",13,{"id":191,"slug":5711,"dossier":47,"summary":5712,"aliases":5713,"sourceIds":5716,"published":5717,"modified":5718,"checkedAt":7,"severity":5719,"references":5722,"versionKeys":5736,"packageCount":32,"repositoryCount":105},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[5714,5715],"CVE-2026-41312","PYSEC-2026-3011",[191,5715],"2026-04-16T21:30:00Z","2026-09-10T03:50:43.750842855Z",[5720,5721],{"type":3380,"score":4379},{"type":3343,"score":4381},[5723,5725,5727,5729,5731,5732,5733,5734],{"type":3347,"url":5724},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3361,"url":5726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3347,"url":5728},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3347,"url":5730},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3354,"url":3355},{"type":3347,"url":4393},{"type":3354,"url":3359},{"type":3361,"url":5735},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3366,3367],{"id":192,"slug":5738,"dossier":47,"summary":5739,"aliases":5740,"sourceIds":5743,"published":5744,"modified":5745,"checkedAt":7,"severity":5746,"references":5748,"versionKeys":5765,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[5741,5742],"CVE-2025-55197","PYSEC-2026-1830",[192,5742],"2025-08-13T19:51:24Z","2026-09-10T03:50:26.651449913Z",[5747],{"type":3343,"score":4280},[5749,5751,5753,5755,5757,5758,5760,5762,5763],{"type":3347,"url":5750},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3361,"url":5752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3347,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3347,"url":5756},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3354,"url":3355},{"type":3347,"url":5759},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3347,"url":5761},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3354,"url":3359},{"type":3361,"url":5764},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3366],{"id":193,"slug":5767,"dossier":47,"summary":5768,"aliases":5769,"sourceIds":5772,"published":5773,"modified":5774,"checkedAt":7,"severity":5775,"references":5778,"versionKeys":5794,"packageCount":32,"repositoryCount":34},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[5770,5771],"CVE-2025-14009","PYSEC-2026-96",[193,5771],"2026-02-18T18:24:19.410Z","2026-09-10T03:50:34.416389229Z",[5776],{"type":3380,"score":5777},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5779,5781,5783,5785,5786,5788,5790,5792],{"type":3361,"url":5780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3347,"url":5782},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3347,"url":5784},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3354,"url":3950},{"type":3347,"url":5787},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3347,"url":5789},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3455,"url":5791},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3361,"url":5793},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3959,3960],{"id":194,"slug":5796,"dossier":47,"summary":5797,"aliases":5798,"sourceIds":5800,"published":5801,"modified":5802,"checkedAt":7,"severity":5803,"references":5806,"versionKeys":5815,"packageCount":32,"repositoryCount":611},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[5799],"CVE-2026-63374",[194],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[5804],{"type":3343,"score":5805},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5807,5809,5811,5813,5814],{"type":3347,"url":5808},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3347,"url":5810},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":3347,"url":5812},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":3354,"url":4865},{"type":3347,"url":4867},[4869,4870,4871,4872,4873,4874,4875,4876],{"id":195,"slug":5817,"dossier":47,"summary":5818,"aliases":5819,"sourceIds":5822,"published":5823,"modified":5824,"checkedAt":7,"severity":5825,"references":5827,"versionKeys":5831,"packageCount":32,"repositoryCount":621},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5820,5821],"CVE-2026-54283","PYSEC-2026-249",[195,5821],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[5826],{"type":3380,"score":3515},[5828,5830],{"type":3361,"url":5829},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3354,"url":5659},[3499,3500,3501,5666,5667,5668,5832,5833,5834],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":196,"slug":5836,"dossier":47,"summary":5837,"aliases":5838,"sourceIds":5841,"published":5842,"modified":5843,"checkedAt":7,"severity":5844,"references":5846,"versionKeys":5855,"packageCount":32,"repositoryCount":669},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5839,5840],"CVE-2026-49477","PYSEC-2026-3072",[196,5840],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[5845],{"type":3380,"score":3515},[5847,5849,5850,5851,5853],{"type":3347,"url":5848},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3354,"url":3684},{"type":3354,"url":3686},{"type":3361,"url":5852},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3361,"url":5854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3692,3693,3694],{"id":197,"slug":5857,"dossier":47,"summary":5858,"aliases":5859,"sourceIds":5861,"published":5862,"modified":5863,"checkedAt":7,"severity":5864,"references":5866,"versionKeys":5878,"packageCount":32,"repositoryCount":621},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[5860],"CVE-2026-91990",[197],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[5865],{"type":3343,"score":3911},[5867,5869,5871,5873,5875,5876],{"type":3347,"url":5868},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":3347,"url":5870},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":3347,"url":5872},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":3347,"url":5874},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":3354,"url":4044},{"type":3347,"url":5877},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[4048,4049,4050,4051,4052,4053],{"id":198,"slug":5880,"dossier":47,"summary":5881,"aliases":5882,"sourceIds":5885,"published":5886,"modified":5887,"checkedAt":7,"severity":5888,"references":5893,"versionKeys":5912,"packageCount":32,"repositoryCount":34},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[5883,5884],"CVE-2025-71408","PYSEC-2026-3657",[198,5884],"2026-07-24T22:16:50.063Z","2026-08-19T12:15:03.319052318Z",[5889,5890,5891],{"type":3380,"score":5306},{"type":3343,"score":5308},{"type":3343,"score":5892},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5894,5896,5898,5900,5902,5903,5904,5906,5908,5910],{"type":3361,"url":5895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3418,"url":5897},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3418,"url":5899},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3347,"url":5901},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3354,"url":3950},{"type":3361,"url":5015},{"type":3347,"url":5905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3418,"url":5907},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3455,"url":5909},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",{"type":3361,"url":5911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-848c-c2cx-j7qx",[3959,3960],{"id":199,"slug":5914,"dossier":47,"summary":5915,"aliases":5916,"sourceIds":5920,"published":5921,"modified":5922,"checkedAt":7,"severity":5923,"references":5926,"versionKeys":5963,"packageCount":32,"repositoryCount":621},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5917,5918,5919],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[199,5918],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[5924],{"type":3380,"score":5925},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5927,5929,5931,5933,5935,5937,5939,5941,5943,5945,5946,5948,5951,5953,5955,5957,5959,5961],{"type":3361,"url":5928},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3361,"url":5930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3418,"url":5932},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3347,"url":5934},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3425,"url":5936},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3347,"url":5938},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3347,"url":5940},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3347,"url":5942},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3347,"url":5944},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3354,"url":5659},{"type":3347,"url":5947},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5949,"url":5950},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3347,"url":5952},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3347,"url":5954},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":3347,"url":5956},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3347,"url":5958},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3425,"url":5960},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3361,"url":5962},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3499,3500,3501,5666,5667,5668,5832,5833,5834],{"id":200,"slug":5965,"dossier":47,"summary":5966,"aliases":5967,"sourceIds":5970,"published":5971,"modified":5972,"checkedAt":7,"severity":5973,"references":5976,"versionKeys":5989,"packageCount":32,"repositoryCount":105},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5968,5969],"CVE-2026-33699","PYSEC-2026-3012",[200,5969],"2026-03-25T20:05:22Z","2026-09-10T03:51:00.069856672Z",[5974],{"type":3343,"score":5975},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5977,5979,5981,5983,5984,5986,5987],{"type":3347,"url":5978},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3361,"url":5980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3347,"url":5982},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3354,"url":3355},{"type":3347,"url":5985},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3354,"url":3359},{"type":3361,"url":5988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3366,3367],{"id":201,"slug":5991,"dossier":47,"summary":5992,"aliases":5993,"sourceIds":5997,"published":5998,"modified":5999,"checkedAt":7,"severity":6000,"references":6004,"versionKeys":6026,"packageCount":32,"repositoryCount":631},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[5994,5995,5996],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[201,5996],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[6001,6002],{"type":3380,"score":3769},{"type":3343,"score":6003},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6005,6007,6009,6011,6013,6015,6016,6018,6020,6022,6024],{"type":3361,"url":6006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":3347,"url":6008},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":3347,"url":6010},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":3347,"url":6012},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":3347,"url":6014},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":3354,"url":3785},{"type":3347,"url":6017},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":3347,"url":6019},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":3347,"url":6021},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":3354,"url":6023},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":3361,"url":6025},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3797,3798,3799,6027,6028],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":202,"slug":6030,"dossier":90,"summary":6031,"aliases":6032,"sourceIds":6034,"published":6035,"modified":6036,"checkedAt":7,"severity":6037,"references":6040,"versionKeys":6054,"packageCount":32,"repositoryCount":104},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[6033],"CVE-2026-97687",[202],"2026-09-30T14:46:04Z","2026-09-30T15:00:05.369237042Z",[6038],{"type":3343,"score":6039},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6041,6043,6045,6047,6049,6051,6052],{"type":3347,"url":6042},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":3361,"url":6044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":3347,"url":6046},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":3347,"url":6048},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":3347,"url":6050},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":3354,"url":3721},{"type":3347,"url":6053},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",[3725,3726,3727,3728,3729,6055,6056],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":203,"slug":6058,"dossier":47,"summary":6059,"aliases":6060,"sourceIds":6063,"published":6064,"modified":6065,"checkedAt":7,"severity":6066,"references":6073,"versionKeys":6095,"packageCount":32,"repositoryCount":669},"ghsa-8mgp-746c-j5xp-7f3a80b8","NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots",[6061,6062],"CVE-2026-81726","PYSEC-2026-3740",[203,6062],"2026-08-27T17:21:03.387Z","2026-09-02T14:45:06.878867805Z",[6067,6069,6071],{"type":3380,"score":6068},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3343,"score":6070},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":6072},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6074,6076,6078,6080,6082,6084,6086,6088,6090,6091,6093],{"type":3455,"url":6075},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mgp-746c-j5xp",{"type":3361,"url":6077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81726",{"type":3347,"url":6079},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3757",{"type":3347,"url":6081},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3759",{"type":3347,"url":6083},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3813",{"type":3347,"url":6085},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2a92b71827d754ae8920261e7ed0c4bb283ab2d7",{"type":3347,"url":6087},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fa44a7af69bca87e92d9c4a701fcbbe4512e8d450",{"type":3347,"url":6089},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcbc98458b43de5f792f0382583c16df39e5c5117",{"type":3354,"url":3950},{"type":3347,"url":6092},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3740.yaml",{"type":3361,"url":6094},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-3.10.3-path-traversal-via-model-artifact-apis",[3958,3959,3960],{"id":204,"slug":6097,"dossier":47,"summary":6098,"aliases":6099,"sourceIds":6102,"published":6103,"modified":6104,"checkedAt":7,"severity":6105,"references":6110,"versionKeys":6123,"packageCount":32,"repositoryCount":669},"ghsa-8mpw-7fpc-4gqj-e47ea3c3","NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks",[6100,6101],"CVE-2026-81725","PYSEC-2026-3752",[204,6101],"2026-08-27T17:21:03.247Z","2026-09-08T20:45:04.346016767Z",[6106,6108],{"type":3343,"score":6107},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":6109},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6111,6113,6115,6117,6118,6119,6121],{"type":3455,"url":6112},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpw-7fpc-4gqj",{"type":3361,"url":6114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81725",{"type":3347,"url":6116},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7808692d451b962711005d954859bb83aabcf8fa",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":6120},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3752.yaml",{"type":3361,"url":6122},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-regular-expression-denial-of-service-via-pl196xcorpusreader",[3958,3959,3960],{"id":205,"slug":6125,"dossier":47,"summary":6126,"aliases":6127,"sourceIds":6130,"published":6131,"modified":6132,"checkedAt":7,"severity":6133,"references":6136,"versionKeys":6155,"packageCount":32,"repositoryCount":697},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[6128,6129],"CVE-2025-4565","PYSEC-2026-1806",[205,6129],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[6134],{"type":3343,"score":6135},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6137,6139,6141,6143,6145,6146,6148,6150,6152,6153],{"type":3347,"url":6138},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3347,"url":6140},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3361,"url":6142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3347,"url":6144},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3354,"url":5693},{"type":3347,"url":6147},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3347,"url":6149},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3347,"url":6151},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3354,"url":5695},{"type":3361,"url":6154},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[5699,5701,5702],{"id":206,"slug":6157,"dossier":90,"summary":6158,"aliases":6159,"sourceIds":6163,"published":6164,"modified":6165,"checkedAt":7,"severity":6166,"references":6168,"versionKeys":6178,"packageCount":32,"repositoryCount":4183},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[6160,6161,6162],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[206,6162],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[6167],{"type":3380,"score":3515},[6169,6171,6173,6174,6176,6177],{"type":3455,"url":6170},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3361,"url":6172},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3418,"url":4166},{"type":3347,"url":6175},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3354,"url":4170},{"type":3361,"url":4172},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":207,"slug":6180,"dossier":47,"summary":6181,"aliases":6182,"sourceIds":6184,"published":6185,"modified":6186,"checkedAt":7,"severity":6187,"references":6189,"versionKeys":6198,"packageCount":32,"repositoryCount":105},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[6183],"CVE-2026-102265",[207],"2026-09-29T23:43:06Z","2026-09-29T23:45:37.333342767Z",[6188],{"type":3380,"score":3480},[6190,6192,6194,6196,6197],{"type":3347,"url":6191},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":3361,"url":6193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":3347,"url":6195},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":3354,"url":3584},{"type":3347,"url":3586},[3589],{"id":208,"slug":6200,"dossier":47,"summary":6201,"aliases":6202,"sourceIds":6205,"published":6206,"modified":6207,"checkedAt":7,"severity":6208,"references":6210,"versionKeys":6223,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[6203,6204],"CVE-2025-5197","PYSEC-2026-1983",[208,6204],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[6209],{"type":3380,"score":4442},[6211,6213,6215,6217,6218,6220,6221],{"type":3361,"url":6212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":3347,"url":6214},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":3347,"url":6216},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":3354,"url":3453},{"type":3347,"url":6219},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":3354,"url":3822},{"type":3361,"url":6222},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[3460,3461,3462,3463],{"id":209,"slug":6225,"dossier":47,"summary":6226,"aliases":6227,"sourceIds":6230,"published":6231,"modified":6232,"checkedAt":7,"severity":6233,"references":6236,"versionKeys":6251,"packageCount":32,"repositoryCount":66},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[6228,6229],"CVE-2026-102930","PYSEC-2026-4011",[209,6229],"2026-09-18T01:41:45Z","2026-10-01T00:00:04.703718723Z",[6234],{"type":3343,"score":6235},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6237,6239,6241,6243,6245,6247,6248,6250],{"type":3347,"url":6238},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":3361,"url":6240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":3347,"url":6242},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":3418,"url":6244},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":3347,"url":6246},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":3354,"url":4730},{"type":3347,"url":6249},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":3354,"url":4732},[4736,4737,4738,4739,6252,6253,6254],"pypi:virtualenv@21.2.4","pypi:virtualenv@21.3.1","pypi:virtualenv@21.7.1",{"id":210,"slug":6256,"dossier":47,"summary":6257,"aliases":6258,"sourceIds":6261,"published":6262,"modified":6263,"checkedAt":7,"severity":6264,"references":6267,"versionKeys":6278,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[6259,6260],"CVE-2025-53643","PYSEC-2026-1104",[210,6260],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[6265],{"type":3343,"score":6266},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6268,6270,6272,6274,6275,6276],{"type":3347,"url":6269},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3361,"url":6271},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3418,"url":6273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":6277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3524,3525,3526,3527],{"id":211,"slug":6280,"dossier":47,"summary":6281,"aliases":6282,"sourceIds":6285,"published":6286,"modified":6287,"checkedAt":7,"severity":6288,"references":6292,"versionKeys":6301,"packageCount":32,"repositoryCount":621},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[6283,6284],"CVE-2026-34518","PYSEC-2026-2100",[211,6284],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[6289,6291],{"type":3380,"score":6290},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3343,"score":4630},[6293,6295,6297,6299,6300],{"type":3418,"url":6294},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3361,"url":6296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3418,"url":6298},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":212,"slug":6303,"dossier":47,"summary":6304,"aliases":6305,"sourceIds":6308,"published":6309,"modified":6310,"checkedAt":7,"severity":6311,"references":6315,"versionKeys":6328,"packageCount":32,"repositoryCount":669},"ghsa-97qj-x29f-37w7-98509369","NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses",[6306,6307],"CVE-2026-78681","PYSEC-2026-3748",[212,6307],"2026-08-25T02:16:52.750Z","2026-09-08T16:45:04.193148017Z",[6312,6313],{"type":3343,"score":4753},{"type":3343,"score":6314},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6316,6318,6320,6322,6323,6324,6326],{"type":3455,"url":6317},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-97qj-x29f-37w7",{"type":3361,"url":6319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78681",{"type":3347,"url":6321},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe91789c9a043296ad04912ce171c22776d45963b",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":6325},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3748.yaml",{"type":3361,"url":6327},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-entity-expansion-dos-via-elementtree",[3958,3959,3960],{"id":213,"slug":6330,"dossier":47,"summary":6331,"aliases":6332,"sourceIds":6335,"published":6336,"modified":6337,"checkedAt":7,"severity":6338,"references":6341,"versionKeys":6351,"packageCount":32,"repositoryCount":697},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[6333,6334],"CVE-2026-48522","PYSEC-2026-175",[213,6334],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[6339],{"type":3380,"score":6340},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6342,6344,6346,6348,6349],{"type":3455,"url":6343},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3361,"url":6345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3347,"url":6347},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3354,"url":3584},{"type":3347,"url":6350},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[3588,3590],{"id":214,"slug":6353,"dossier":47,"summary":6354,"aliases":6355,"sourceIds":6358,"published":6359,"modified":6360,"checkedAt":7,"severity":6361,"references":6363,"versionKeys":6378,"packageCount":32,"repositoryCount":105},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[6356,6357],"CVE-2026-27024","PYSEC-2026-3013",[214,6357],"2026-02-18T22:40:49Z","2026-09-10T03:50:34.616221084Z",[6362],{"type":3343,"score":4578},[6364,6366,6368,6370,6372,6373,6375,6376],{"type":3347,"url":6365},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3361,"url":6367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3347,"url":6369},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3347,"url":6371},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3354,"url":3355},{"type":3347,"url":6374},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3354,"url":3359},{"type":3361,"url":6377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3366,3367],{"id":215,"slug":6380,"dossier":47,"summary":6381,"aliases":6382,"sourceIds":6385,"published":6386,"modified":6387,"checkedAt":7,"severity":6388,"references":6390,"versionKeys":6401,"packageCount":32,"repositoryCount":32},"ghsa-9f4q-q82q-4359-c9ca91c1","Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks",[6383,6384],"CVE-2026-31248","PYSEC-2026-2454",[215,6384],"2026-05-11T18:31:44Z","2026-07-13T16:43:41.210892318Z",[6389],{"type":3380,"score":3515},[6391,6393,6395,6397,6399],{"type":3361,"url":6392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31248",{"type":3354,"url":6394},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling",{"type":3347,"url":6396},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31248-35d1e1393188818585b2ce3b9ce24686",{"type":3354,"url":6398},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling",{"type":3361,"url":6400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9f4q-q82q-4359",[6402],"pypi:docling@2.58.0",{"id":216,"slug":6404,"dossier":47,"summary":6405,"aliases":6406,"sourceIds":6409,"published":6410,"modified":6411,"checkedAt":7,"severity":6412,"references":6414,"versionKeys":6429,"packageCount":32,"repositoryCount":697},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[6407,6408],"CVE-2025-66416","PYSEC-2026-1617",[216,6408],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[6413],{"type":3343,"score":6039},[6415,6417,6419,6421,6423,6425,6427],{"type":3347,"url":6416},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3361,"url":6418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3347,"url":6420},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3361,"url":6422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3354,"url":6424},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3347,"url":6426},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3354,"url":6428},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[6430,6431,6432],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0",{"id":217,"slug":6434,"dossier":47,"summary":6435,"aliases":6436,"sourceIds":6439,"published":6440,"modified":6441,"checkedAt":7,"severity":6442,"references":6445,"versionKeys":6460,"packageCount":32,"repositoryCount":66},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[6437,6438],"CVE-2026-102938","PYSEC-2026-4012",[217,6438],"2026-09-17T16:42:47Z","2026-10-01T00:00:04.697773611Z",[6443],{"type":3343,"score":6444},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6446,6448,6450,6452,6454,6456,6457,6459],{"type":3347,"url":6447},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":3361,"url":6449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":3347,"url":6451},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":3418,"url":6453},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":3347,"url":6455},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":3354,"url":4730},{"type":3347,"url":6458},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":3354,"url":4732},[4736,4737,4738,4739,6252,6253,6254],{"id":218,"slug":6462,"dossier":47,"summary":6463,"aliases":6464,"sourceIds":6467,"published":6468,"modified":6469,"checkedAt":7,"severity":6470,"references":6473,"versionKeys":6492,"packageCount":32,"repositoryCount":631},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[6465,6466],"CVE-2024-47081","PYSEC-2026-1872",[218,6466],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[6471],{"type":3380,"score":6472},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6474,6476,6478,6480,6482,6484,6486,6488,6490],{"type":3347,"url":6475},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3361,"url":6477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3347,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3418,"url":6481},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3354,"url":6483},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3347,"url":6485},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3347,"url":6487},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":3354,"url":6489},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3361,"url":6491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[6493,6494],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":219,"slug":6496,"dossier":90,"summary":6497,"aliases":6498,"sourceIds":6502,"published":6503,"modified":6504,"checkedAt":7,"severity":6505,"references":6507,"versionKeys":6520,"packageCount":32,"repositoryCount":4183},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[6499,6500,6501],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[219,6501],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[6506],{"type":3380,"score":3515},[6508,6510,6512,6514,6516,6518,6519],{"type":3455,"url":6509},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3361,"url":6511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3418,"url":6513},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3418,"url":6515},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3347,"url":6517},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3354,"url":4170},{"type":3361,"url":5121},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":220,"slug":6522,"dossier":47,"summary":6523,"aliases":6524,"sourceIds":6526,"published":6527,"modified":6528,"checkedAt":7,"severity":6529,"references":6532,"versionKeys":6541,"packageCount":32,"repositoryCount":105},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[6525],"CVE-2026-102266",[220],"2026-09-29T23:43:19Z","2026-09-30T00:00:04.438003579Z",[6530],{"type":3380,"score":6531},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6533,6535,6537,6539,6540],{"type":3347,"url":6534},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":3361,"url":6536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":3347,"url":6538},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":3354,"url":3584},{"type":3347,"url":3586},[3589],{"id":221,"slug":6543,"dossier":47,"summary":6544,"aliases":6545,"sourceIds":6548,"published":6549,"modified":6550,"checkedAt":7,"severity":6551,"references":6553,"versionKeys":6568,"packageCount":32,"repositoryCount":105},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[6546,6547],"CVE-2026-28804","PYSEC-2026-3014",[221,6547],"2026-03-02T22:03:45Z","2026-09-10T03:50:38.603469156Z",[6552],{"type":3343,"score":3911},[6554,6556,6558,6560,6562,6563,6565,6566],{"type":3347,"url":6555},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3361,"url":6557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3347,"url":6559},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3347,"url":6561},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3354,"url":3355},{"type":3347,"url":6564},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3354,"url":3359},{"type":3361,"url":6567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3366,3367],{"id":222,"slug":6570,"dossier":47,"summary":6571,"aliases":6572,"sourceIds":6575,"published":6576,"modified":6577,"checkedAt":7,"severity":6578,"references":6580,"versionKeys":6594,"packageCount":32,"repositoryCount":105},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[6573,6574],"CVE-2026-27026","PYSEC-2026-3015",[222,6574],"2026-02-18T22:41:24Z","2026-09-10T03:50:34.680998937Z",[6579],{"type":3343,"score":4578},[6581,6583,6585,6587,6589,6590,6591,6592],{"type":3347,"url":6582},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3361,"url":6584},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3347,"url":6586},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3347,"url":6588},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3354,"url":3355},{"type":3347,"url":6374},{"type":3354,"url":3359},{"type":3361,"url":6593},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3366,3367],{"id":223,"slug":6596,"dossier":47,"summary":6597,"aliases":6598,"sourceIds":6600,"published":6601,"modified":6602,"checkedAt":7,"severity":6603,"references":6605,"versionKeys":6614,"packageCount":32,"repositoryCount":669},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[6599],"CVE-2026-102267",[223],"2026-09-29T23:15:00Z","2026-09-29T23:30:03.872305369Z",[6604],{"type":3380,"score":6531},[6606,6608,6610,6612,6613],{"type":3347,"url":6607},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":3361,"url":6609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":3347,"url":6611},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":224,"slug":6616,"dossier":47,"summary":6617,"aliases":6618,"sourceIds":6621,"published":6622,"modified":6623,"checkedAt":7,"severity":6624,"references":6627,"versionKeys":6644,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[6619,6620],"CVE-2024-35195","PYSEC-2026-1873",[224,6620],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[6625],{"type":3380,"score":6626},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6628,6630,6632,6634,6636,6637,6639,6641,6642],{"type":3347,"url":6629},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3361,"url":6631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3347,"url":6633},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3418,"url":6635},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3354,"url":6483},{"type":3347,"url":6638},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3347,"url":6640},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3354,"url":6489},{"type":3361,"url":6643},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[6493],{"id":225,"slug":6646,"dossier":47,"summary":6647,"aliases":6648,"sourceIds":6651,"published":6652,"modified":6653,"checkedAt":7,"severity":6654,"references":6658,"versionKeys":6664,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[6649,6650],"CVE-2026-54280","PYSEC-2026-2113",[225,6650],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[6655,6657],{"type":3343,"score":6656},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":3515},[6659,6661,6663],{"type":3361,"url":6660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3418,"url":6662},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":226,"slug":6666,"dossier":47,"summary":6667,"aliases":6668,"sourceIds":6669,"published":6670,"modified":6671,"checkedAt":7,"severity":6672,"references":6675,"versionKeys":6685,"packageCount":32,"repositoryCount":42},"ghsa-c2m8-h5v5-343r-dd3a7510","Tornado: StaticFileHandler follows symlinks outside static root (path traversal)",[],[226],"2026-09-30T23:48:55Z","2026-10-01T00:00:05.755450749Z",[6673],{"type":3343,"score":6674},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6676,6678,6679,6681,6683,6684],{"type":3347,"url":6677},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c2m8-h5v5-343r",{"type":3347,"url":4038},{"type":3347,"url":6680},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F437ab5f76565403b3403438d2e555d11f8128d32",{"type":3347,"url":6682},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Ff9f50b8bab265a2abf9f2415a3d2da6264a5450b",{"type":3354,"url":4044},{"type":3347,"url":4046},[4048,4049,4050,4051,4052,4053,4054],{"id":227,"slug":6687,"dossier":47,"summary":6688,"aliases":6689,"sourceIds":6691,"published":6692,"modified":6693,"checkedAt":7,"severity":6694,"references":6698,"versionKeys":6710,"packageCount":32,"repositoryCount":32},"ghsa-c39v-8hrw-h448-85b2a8cc","Chainlit contains a session hijacking vulnerability",[6690],"CVE-2026-56104",[227],"2026-06-22T18:34:16Z","2026-09-21T22:30:12.894277651Z",[6695,6696],{"type":3380,"score":6531},{"type":3343,"score":6697},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6699,6701,6703,6705,6706,6708],{"type":3361,"url":6700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-56104",{"type":3347,"url":6702},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2857",{"type":3347,"url":6704},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F5effb664f1e0af4a4f0a42fe63ea979676039a7f",{"type":3354,"url":3553},{"type":3347,"url":6707},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.10.1",{"type":3347,"url":6709},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-session-hijacking-via-websocket-session-restoration",[3565],{"id":228,"slug":6712,"dossier":47,"summary":6713,"aliases":6714,"sourceIds":6717,"published":6718,"modified":6719,"checkedAt":7,"severity":6720,"references":6724,"versionKeys":6735,"packageCount":32,"repositoryCount":621},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[6715,6716],"CVE-2026-34525","PYSEC-2026-2103",[228,6716],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[6721,6723],{"type":3343,"score":6722},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3380,"score":3657},[6725,6727,6729,6731,6733,6734],{"type":3418,"url":6726},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3361,"url":6728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3418,"url":6730},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3418,"url":6732},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":229,"slug":6737,"dossier":47,"summary":6738,"aliases":6739,"sourceIds":6743,"published":6744,"modified":6745,"checkedAt":7,"severity":6746,"references":6751,"versionKeys":6767,"packageCount":32,"repositoryCount":105},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[6740,6741,6742],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[229],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[6747,6749],{"type":3380,"score":6748},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3343,"score":6750},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6752,6754,6756,6758,6759,6761,6763,6765],{"type":3361,"url":6753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":3347,"url":6755},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":3347,"url":6757},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":3354,"url":3785},{"type":3347,"url":6760},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":3347,"url":6762},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":3347,"url":6764},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":3347,"url":6766},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3797,3798],{"id":230,"slug":6769,"dossier":47,"summary":6770,"aliases":6771,"sourceIds":6774,"published":6775,"modified":6776,"checkedAt":7,"severity":6777,"references":6779,"versionKeys":6791,"packageCount":32,"repositoryCount":631},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[6772,6773],"CVE-2025-67725","PYSEC-2025-266",[230,6773],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[6778],{"type":3380,"score":3515},[6780,6782,6784,6786,6788,6789],{"type":3361,"url":6781},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3361,"url":6783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3418,"url":6785},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3347,"url":6787},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3354,"url":4044},{"type":3361,"url":6790},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[4048,4049,4050],{"id":231,"slug":6793,"dossier":47,"summary":6794,"aliases":6795,"sourceIds":6799,"published":6800,"modified":6801,"checkedAt":7,"severity":6802,"references":6806,"versionKeys":6844,"packageCount":32,"repositoryCount":4566},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[6796,6797,6798],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[231,6798],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[6803,6805],{"type":3343,"score":6804},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3380,"score":3515},[6807,6809,6811,6813,6815,6817,6818,6820,6822,6824,6825,6827,6829,6831,6832,6834,6836,6838,6840,6842],{"type":3347,"url":6808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3361,"url":6810},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3347,"url":6812},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3347,"url":6814},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3347,"url":6816},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3354,"url":4170},{"type":3347,"url":6819},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3347,"url":6821},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3347,"url":6823},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3361,"url":3879},{"type":3361,"url":6826},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3361,"url":6828},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3361,"url":6830},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3361,"url":4210},{"type":3361,"url":6833},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3361,"url":6835},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3361,"url":6837},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3361,"url":6839},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3361,"url":6841},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3361,"url":6843},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4174,4175,4176,4177,4178,4179,4180],{"id":232,"slug":6846,"dossier":47,"summary":6847,"aliases":6848,"sourceIds":6851,"published":6852,"modified":6853,"checkedAt":7,"severity":6854,"references":6856,"versionKeys":6867,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[6849,6850],"CVE-2026-48802","PYSEC-2026-3032",[232,6850],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[6855],{"type":3380,"score":3515},[6857,6859,6861,6863,6865],{"type":3347,"url":6858},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3354,"url":6860},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":3354,"url":6862},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":3361,"url":6864},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3361,"url":6866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[6868],"pypi:python-engineio@4.12.3",{"id":233,"slug":6870,"dossier":47,"summary":6871,"aliases":6872,"sourceIds":6873,"published":6874,"modified":6875,"checkedAt":7,"severity":6876,"references":6878,"versionKeys":6892,"packageCount":32,"repositoryCount":42},"ghsa-chx6-46f5-w4vp-dd54bdb8","tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM",[],[233],"2026-09-30T23:49:13Z","2026-10-01T00:00:05.755453229Z",[6877],{"type":3380,"score":3515},[6879,6881,6882,6884,6886,6888,6890,6891],{"type":3347,"url":6880},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-chx6-46f5-w4vp",{"type":3347,"url":4038},{"type":3347,"url":6883},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F15f056080d8e456f92cca8ad0c33e5a5480414ac",{"type":3347,"url":6885},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6564e0a0922c16f239d3a18adccd04736e380c89",{"type":3347,"url":6887},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Faa2eb0d989716ac00fe8d7a9919b81c1eccd6ec4",{"type":3347,"url":6889},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fe412435febba4569c552c5c9054f1bf92bd171a9",{"type":3354,"url":4044},{"type":3347,"url":4046},[4048,4049,4050,4051,4052,4053,4054],{"id":234,"slug":6894,"dossier":47,"summary":6895,"aliases":6896,"sourceIds":6899,"published":6900,"modified":6901,"checkedAt":7,"severity":6902,"references":6904,"versionKeys":6916,"packageCount":32,"repositoryCount":105},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[6897,6898],"CVE-2026-48155","PYSEC-2026-3016",[234,6898],"2026-06-12T18:29:15Z","2026-09-10T03:51:08.468487559Z",[6903],{"type":3343,"score":3344},[6905,6907,6909,6911,6912,6913,6914],{"type":3347,"url":6906},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3361,"url":6908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3347,"url":6910},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3354,"url":3355},{"type":3347,"url":3395},{"type":3354,"url":3359},{"type":3361,"url":6915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3366,3367],{"id":235,"slug":6918,"dossier":47,"summary":6919,"aliases":6920,"sourceIds":6923,"published":6924,"modified":6925,"checkedAt":7,"severity":6926,"references":6929,"versionKeys":6946,"packageCount":32,"repositoryCount":32},"ghsa-cjqg-rq2h-2fvj-04722096","Docling: Unsafe Zip Extraction in EasyOCR Model Download",[6921,6922],"CVE-2026-44017","PYSEC-2026-2143",[235,6922],"2026-06-03T20:02:42Z","2026-08-28T18:45:06.860507459Z",[6927],{"type":3380,"score":6928},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6930,6932,6934,6935,6937,6939,6940,6942,6944],{"type":3418,"url":6931},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cjqg-rq2h-2fvj",{"type":3361,"url":6933},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44017",{"type":3347,"url":5954},{"type":3347,"url":6936},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44017",{"type":3778,"url":6938},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492448",{"type":3354,"url":6394},{"type":3361,"url":6941},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.91.0",{"type":3347,"url":6943},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2143.yaml",{"type":3347,"url":6945},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44017.json",[6402],{"id":236,"slug":6948,"dossier":47,"summary":6949,"aliases":6950,"sourceIds":6953,"published":6954,"modified":6955,"checkedAt":7,"severity":6956,"references":6959,"versionKeys":6976,"packageCount":32,"repositoryCount":105},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[6951,6952],"CVE-2025-27516","PYSEC-2026-1471",[236,6952],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[6957],{"type":3343,"score":6958},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6960,6962,6964,6966,6968,6970,6972,6974],{"type":3347,"url":6961},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3361,"url":6963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3418,"url":6965},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3354,"url":6967},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3347,"url":6969},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3347,"url":6971},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3354,"url":6973},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3361,"url":6975},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[6977,6978],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":237,"slug":6980,"dossier":47,"summary":6981,"aliases":6982,"sourceIds":6985,"published":6986,"modified":6987,"checkedAt":7,"severity":6988,"references":6991,"versionKeys":7006,"packageCount":32,"repositoryCount":103},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[6983,6984],"CVE-2026-69244","PYSEC-2026-3545",[237,6984],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[6989],{"type":3343,"score":6990},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6992,6994,6996,6998,6999,7001,7002,7004],{"type":3347,"url":6993},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3347,"url":6995},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3347,"url":6997},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3354,"url":3520},{"type":3347,"url":7000},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3354,"url":4640},{"type":3361,"url":7003},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3361,"url":7005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3524,3525,3526,3527,3528,3529,3530,3531,3532,7007],"pypi:aiohttp@3.14.1",{"id":238,"slug":7009,"dossier":47,"summary":7010,"aliases":7011,"sourceIds":7014,"published":7015,"modified":7016,"checkedAt":7,"severity":7017,"references":7019,"versionKeys":7028,"packageCount":32,"repositoryCount":32},"ghsa-cr42-rg2m-mq4q-72336d81","Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks",[7012,7013],"CVE-2026-31247","PYSEC-2026-2455",[238,7013],"2026-05-11T18:31:43Z","2026-07-13T16:43:07.440539926Z",[7018],{"type":3380,"score":3515},[7020,7022,7023,7025,7026],{"type":3361,"url":7021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31247",{"type":3354,"url":6394},{"type":3347,"url":7024},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31247-35d1e1393188818fa654c116c6a470bb",{"type":3354,"url":6398},{"type":3361,"url":7027},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cr42-rg2m-mq4q",[6402],{"id":239,"slug":7030,"dossier":47,"summary":7031,"aliases":7032,"sourceIds":7035,"published":7036,"modified":7037,"checkedAt":7,"severity":7038,"references":7045,"versionKeys":7058,"packageCount":32,"repositoryCount":32},"ghsa-cv22-g7mw-8v73-34774163","NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure",[7033,7034],"CVE-2026-71514","PYSEC-2026-3790",[239,7034],"2026-08-22T14:16:33.560Z","2026-09-10T11:15:08.990306396Z",[7039,7041,7043],{"type":3380,"score":7040},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3343,"score":7042},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3380,"score":7044},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[7046,7048,7050,7051,7053,7054,7056],{"type":3361,"url":7047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71514",{"type":3418,"url":7049},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F10d34b3f4fe3fec74b76527a409eb0acbac2e8ab",{"type":3354,"url":3950},{"type":3418,"url":7052},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fcorpus\u002Freader\u002Fcrubadan.py#L90-L98",{"type":3347,"url":3952},{"type":3361,"url":7055},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-path-traversal-via-crubadancorpusreader-pathsec-bypass",{"type":3361,"url":7057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cv22-g7mw-8v73",[3958],{"id":240,"slug":7060,"dossier":47,"summary":7061,"aliases":7062,"sourceIds":7065,"published":7066,"modified":7067,"checkedAt":7,"severity":7068,"references":7073,"versionKeys":7086,"packageCount":32,"repositoryCount":669},"ghsa-cw6x-m8jw-qmrh-dd458a88","NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input",[7063,7064],"CVE-2026-81724","PYSEC-2026-3739",[240,7064],"2026-08-27T17:21:03.100Z","2026-09-10T03:51:15.361788366Z",[7069,7070,7071],{"type":3380,"score":3480},{"type":3343,"score":3911},{"type":3343,"score":7072},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7074,7076,7078,7080,7081,7082,7084],{"type":3455,"url":7075},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-cw6x-m8jw-qmrh",{"type":3361,"url":7077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81724",{"type":3347,"url":7079},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43c7b78cc8ea37e5cd3a129e27e32c415ea21cf1",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":7083},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3739.yaml",{"type":3361,"url":7085},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-denial-of-service-via-uncontrolled-recursion",[3958,3959,3960],{"id":241,"slug":7088,"dossier":47,"summary":7089,"aliases":7090,"sourceIds":7093,"published":7094,"modified":7095,"checkedAt":7,"severity":7096,"references":7099,"versionKeys":7110,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[7091,7092],"CVE-2026-49854","PYSEC-2026-3388",[241,7092],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[7097],{"type":3380,"score":7098},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[7100,7102,7103,7105,7106,7108],{"type":3347,"url":7101},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3354,"url":4044},{"type":3347,"url":7104},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3354,"url":4094},{"type":3361,"url":7107},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3361,"url":7109},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[4048,4049,4050,4051,4052],{"id":242,"slug":7112,"dossier":47,"summary":7113,"aliases":7114,"sourceIds":7118,"published":7119,"modified":7120,"checkedAt":7,"severity":7121,"references":7125,"versionKeys":7141,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[7115,7116,7117],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[242,7117],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[7122,7123],{"type":3380,"score":4803},{"type":3343,"score":7124},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7126,7128,7130,7132,7133,7135,7137,7139],{"type":3361,"url":7127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3347,"url":7129},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3347,"url":7131},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3354,"url":4930},{"type":3347,"url":7134},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3347,"url":7136},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3354,"url":7138},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3361,"url":7140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4936],{"id":243,"slug":7143,"dossier":47,"summary":7144,"aliases":7145,"sourceIds":7148,"published":7149,"modified":7150,"checkedAt":7,"severity":7151,"references":7153,"versionKeys":7168,"packageCount":32,"repositoryCount":105},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[7146,7147],"CVE-2026-28351","PYSEC-2026-3017",[243,7147],"2026-02-28T02:46:10Z","2026-09-10T03:50:34.825129703Z",[7152],{"type":3343,"score":3911},[7154,7156,7158,7160,7162,7163,7165,7166],{"type":3347,"url":7155},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3361,"url":7157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3347,"url":7159},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3347,"url":7161},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3354,"url":3355},{"type":3347,"url":7164},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3354,"url":3359},{"type":3361,"url":7167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3366,3367],{"id":244,"slug":7170,"dossier":47,"summary":7171,"aliases":7172,"sourceIds":7176,"published":7177,"modified":7178,"checkedAt":7,"severity":7179,"references":7183,"versionKeys":7201,"packageCount":32,"repositoryCount":105},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[7173,7174,7175],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[244],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[7180,7181],{"type":3380,"score":4520},{"type":3343,"score":7182},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[7184,7186,7188,7190,7192,7194,7195,7197,7199],{"type":3361,"url":7185},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":3347,"url":7187},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":3347,"url":7189},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":3347,"url":7191},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":3347,"url":7193},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":3354,"url":3785},{"type":3347,"url":7196},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":3347,"url":7198},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":3347,"url":7200},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3797,3798],{"id":245,"slug":7203,"dossier":47,"summary":7204,"aliases":7205,"sourceIds":7208,"published":7209,"modified":7210,"checkedAt":7,"severity":7211,"references":7218,"versionKeys":7233,"packageCount":32,"repositoryCount":669},"ghsa-f794-5jv7-7672-f614e21f","NLTK: Downloader.download follows hardlinks and overwrites outside-root files",[7206,7207],"CVE-2026-81727","PYSEC-2026-3741",[245,7207],"2026-08-27T17:21:03.533Z","2026-09-10T03:51:15.298800760Z",[7212,7214,7216],{"type":3380,"score":7213},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3343,"score":7215},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":7217},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7219,7221,7223,7225,7227,7228,7229,7231],{"type":3455,"url":7220},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f794-5jv7-7672",{"type":3361,"url":7222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81727",{"type":3347,"url":7224},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3797",{"type":3347,"url":7226},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9e6d5f05902b9aaa1221a0a565448d17a9c9b3e8",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":7230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3741.yaml",{"type":3361,"url":7232},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-hardlink-file-overwrite-via-downloader",[3958,3959,3960],{"id":246,"slug":7235,"dossier":47,"summary":7236,"aliases":7237,"sourceIds":7240,"published":7241,"modified":7242,"checkedAt":7,"severity":7243,"references":7247,"versionKeys":7262,"packageCount":32,"repositoryCount":32},"ghsa-f833-7jw8-xwrv-24f4d846","NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)",[7238,7239],"CVE-2026-62384","PYSEC-2026-3789",[246,7239],"2026-08-22T15:16:18.700Z","2026-09-08T16:45:03.613881599Z",[7244,7245,7246],{"type":3380,"score":4686},{"type":3343,"score":5489},{"type":3343,"score":5491},[7248,7250,7252,7254,7256,7257,7258,7260],{"type":3455,"url":7249},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f833-7jw8-xwrv",{"type":3361,"url":7251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62384",{"type":3347,"url":7253},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3726",{"type":3347,"url":7255},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F736d3212a47de2005b85b785dde6720556d3925d",{"type":3354,"url":3950},{"type":3347,"url":4019},{"type":3347,"url":7259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3789.yaml",{"type":3361,"url":7261},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-framenetcorpusreader-symlink-sandbox-bypass-before",[3958],{"id":247,"slug":7264,"dossier":47,"summary":7265,"aliases":7266,"sourceIds":7269,"published":7270,"modified":7271,"checkedAt":7,"severity":7272,"references":7276,"versionKeys":7287,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[7267,7268],"CVE-2024-47874","PYSEC-2026-1943",[247,7268],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[7273,7275],{"type":3380,"score":7274},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3343,"score":4753},[7277,7279,7281,7283,7284,7285],{"type":3347,"url":7278},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3361,"url":7280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3418,"url":7282},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3354,"url":3489},{"type":3354,"url":3495},{"type":3361,"url":7286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3499],{"id":248,"slug":7289,"dossier":47,"summary":7290,"aliases":7291,"sourceIds":7294,"published":7295,"modified":7296,"checkedAt":7,"severity":7297,"references":7299,"versionKeys":7314,"packageCount":32,"repositoryCount":697},"ghsa-fc8x-2rww-xw9m-a14a13c8","pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace",[7292,7293],"CVE-2026-82398","PYSEC-2026-3912",[248,7293],"2026-09-02T14:38:12Z","2026-09-10T12:25:53.327187326Z",[7298],{"type":3343,"score":3911},[7300,7302,7304,7306,7308,7309,7311,7312],{"type":3347,"url":7301},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",{"type":3361,"url":7303},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82398",{"type":3347,"url":7305},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3947",{"type":3347,"url":7307},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F4959848e057e37c218dccad7465259210923faaa",{"type":3354,"url":3355},{"type":3347,"url":7310},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3354,"url":3359},{"type":3361,"url":7313},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",[3366,3367,3368],{"id":249,"slug":7316,"dossier":47,"summary":7317,"aliases":7318,"sourceIds":7321,"published":7322,"modified":7323,"checkedAt":7,"severity":7324,"references":7326,"versionKeys":7340,"packageCount":32,"repositoryCount":669},"ghsa-ff5c-cp5c-9wjf-c6e516dd","NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars",[7319,7320],"CVE-2026-12876","PYSEC-2026-3869",[249,7320],"2026-09-02T14:33:38Z","2026-09-10T12:25:59.672261950Z",[7325],{"type":3343,"score":3911},[7327,7329,7331,7333,7334,7335,7336,7338],{"type":3347,"url":7328},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3347,"url":7330},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3649",{"type":3347,"url":7332},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43aaca1b9024138421c97f970bf13ee19ac8129d",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3354,"url":4817},{"type":3361,"url":7337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3361,"url":7339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12876",[3958,3959,3960],{"id":250,"slug":7342,"dossier":47,"summary":7343,"aliases":7344,"sourceIds":7346,"published":7347,"modified":7348,"checkedAt":7,"severity":7349,"references":7352,"versionKeys":7361,"packageCount":32,"repositoryCount":669},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[7345],"CVE-2026-102268",[250],"2026-09-29T23:17:33Z","2026-09-29T23:30:03.866776038Z",[7350],{"type":3380,"score":7351},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7353,7355,7357,7359,7360],{"type":3347,"url":7354},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":3361,"url":7356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":3347,"url":7358},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":251,"slug":7363,"dossier":47,"summary":7364,"aliases":7365,"sourceIds":7368,"published":7369,"modified":7370,"checkedAt":7,"severity":7371,"references":7373,"versionKeys":7382,"packageCount":32,"repositoryCount":34},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[7366,7367],"CVE-2026-12061","PYSEC-2026-3582",[251,7367],"2026-07-31T16:51:09Z","2026-09-10T03:50:51.940502717Z",[7372],{"type":3380,"score":3515},[7374,7376,7377,7378,7380],{"type":3347,"url":7375},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3354,"url":3950},{"type":3354,"url":4817},{"type":3361,"url":7379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3361,"url":7381},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3959,3960],{"id":252,"slug":7384,"dossier":47,"summary":7385,"aliases":7386,"sourceIds":7389,"published":7390,"modified":7391,"checkedAt":7,"severity":7392,"references":7397,"versionKeys":7420,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[7387,7388],"CVE-2026-5241","PYSEC-2026-2290",[252,7388],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[7393,7395],{"type":3380,"score":7394},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":3380,"score":7396},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7398,7400,7402,7404,7405,7407,7409,7411,7412,7414,7416,7418],{"type":3361,"url":7399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":3418,"url":7401},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":3361,"url":7403},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3361,"url":4212},{"type":3347,"url":7406},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3347,"url":7408},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3778,"url":7410},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":3354,"url":3453},{"type":3347,"url":7413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":3455,"url":7415},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":3347,"url":7417},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":3361,"url":7419},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[3460,3461,3462,3463,3464,3465,3466,3467,3468],{"id":253,"slug":7422,"dossier":47,"summary":7423,"aliases":7424,"sourceIds":7427,"published":7428,"modified":7429,"checkedAt":7,"severity":7430,"references":7433,"versionKeys":7444,"packageCount":32,"repositoryCount":631},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[7425,7426],"CVE-2025-69230","PYSEC-2026-1105",[253,7426],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[7431],{"type":3343,"score":7432},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7434,7436,7438,7440,7441,7442],{"type":3347,"url":7435},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3361,"url":7437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3418,"url":7439},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":7443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3524,3525,3526,3527,3528,3529,3530],{"id":254,"slug":7446,"dossier":47,"summary":7447,"aliases":7448,"sourceIds":7451,"published":7452,"modified":7453,"checkedAt":7,"severity":7454,"references":7457,"versionKeys":7467,"packageCount":32,"repositoryCount":697},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[7449,7450],"CVE-2026-48524","PYSEC-2026-177",[254,7450],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[7455],{"type":3380,"score":7456},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7458,7460,7462,7464,7465],{"type":3361,"url":7459},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3361,"url":7461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3347,"url":7463},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3354,"url":3584},{"type":3347,"url":7466},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[3588,3590],{"id":255,"slug":7469,"dossier":90,"summary":7470,"aliases":7471,"sourceIds":7475,"published":7476,"modified":7477,"checkedAt":7,"severity":7478,"references":7481,"versionKeys":7495,"packageCount":32,"repositoryCount":4183},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[7472,7473,7474],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[255,7474],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[7479],{"type":3380,"score":7480},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[7482,7484,7486,7488,7490,7491,7492,7493],{"type":3347,"url":7483},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3361,"url":7485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3347,"url":7487},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3347,"url":7489},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3354,"url":4170},{"type":3347,"url":5121},{"type":3354,"url":5123},{"type":3361,"url":7494},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":256,"slug":7497,"dossier":47,"summary":7498,"aliases":7499,"sourceIds":7502,"published":7503,"modified":7504,"checkedAt":7,"severity":7505,"references":7507,"versionKeys":7521,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[7500,7501],"CVE-2024-21503","PYSEC-2024-48",[256,7501],"2024-03-19T05:15:00Z","2026-09-10T03:50:10.486429507Z",[7506],{"type":3380,"score":3480},[7508,7510,7512,7513,7515,7517,7519],{"type":3361,"url":7509},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":3418,"url":7511},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":3354,"url":3889},{"type":3347,"url":7514},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":3347,"url":7516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":3347,"url":7518},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":3361,"url":7520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[3897],{"id":257,"slug":7523,"dossier":47,"summary":7524,"aliases":7525,"sourceIds":7528,"published":7529,"modified":7530,"checkedAt":7,"severity":7531,"references":7533,"versionKeys":7547,"packageCount":32,"repositoryCount":697},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[7526,7527],"CVE-2026-71870","PYSEC-2026-3655",[257,7527],"2026-08-07T19:29:09Z","2026-09-10T03:51:13.982103349Z",[7532],{"type":3343,"score":3344},[7534,7536,7538,7540,7541,7542,7543,7545],{"type":3347,"url":7535},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3347,"url":7537},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3347,"url":7539},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3354,"url":3355},{"type":3347,"url":7310},{"type":3354,"url":3359},{"type":3361,"url":7544},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3361,"url":7546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3366,3367,3368],{"id":258,"slug":7549,"dossier":47,"summary":5420,"aliases":7550,"sourceIds":7553,"published":7554,"modified":7555,"checkedAt":7,"severity":7556,"references":7559,"versionKeys":7570,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[7551,7552],"CVE-2025-1194","PYSEC-2026-1984",[258,7552],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[7557],{"type":3380,"score":7558},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7560,7562,7564,7565,7567,7568],{"type":3361,"url":7561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":3347,"url":7563},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":3354,"url":3453},{"type":3347,"url":7566},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":3354,"url":3822},{"type":3361,"url":7569},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[3460],{"id":259,"slug":7572,"dossier":47,"summary":7573,"aliases":7574,"sourceIds":7577,"published":7578,"modified":7579,"checkedAt":7,"severity":7580,"references":7582,"versionKeys":7596,"packageCount":32,"repositoryCount":697},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[7575,7576],"CVE-2026-71852","PYSEC-2026-3656",[259,7576],"2026-08-07T18:54:00Z","2026-09-10T03:51:13.932861945Z",[7581],{"type":3343,"score":3344},[7583,7585,7587,7589,7590,7591,7592,7594],{"type":3347,"url":7584},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3347,"url":7586},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3347,"url":7588},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3354,"url":3355},{"type":3347,"url":7310},{"type":3354,"url":3359},{"type":3361,"url":7593},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3361,"url":7595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3366,3367,3368],{"id":260,"slug":7598,"dossier":47,"summary":7599,"aliases":7600,"sourceIds":7603,"published":7604,"modified":7605,"checkedAt":7,"severity":7606,"references":7609,"versionKeys":7615,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[7601,7602],"CVE-2026-54278","PYSEC-2026-2111",[260,7602],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[7607,7608],{"type":3343,"score":4280},{"type":3380,"score":3515},[7610,7612,7613],{"type":3361,"url":7611},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3354,"url":3520},{"type":3418,"url":7614},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":261,"slug":7617,"dossier":47,"summary":7618,"aliases":7619,"sourceIds":7622,"published":7623,"modified":7624,"checkedAt":7,"severity":7625,"references":7628,"versionKeys":7647,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[7620,7621],"CVE-2024-34062","PYSEC-2026-1976",[261,7621],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[7626],{"type":3380,"score":7627},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7629,7631,7633,7635,7637,7639,7641,7643,7645],{"type":3347,"url":7630},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3361,"url":7632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3347,"url":7634},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3354,"url":7636},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3347,"url":7638},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3347,"url":7640},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3347,"url":7642},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3354,"url":7644},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3361,"url":7646},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[7648],"pypi:tqdm@4.66.2",{"id":262,"slug":7650,"dossier":47,"summary":7651,"aliases":7652,"sourceIds":7655,"published":7656,"modified":7657,"checkedAt":7,"severity":7658,"references":7660,"versionKeys":7673,"packageCount":32,"repositoryCount":631},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[7653,7654],"CVE-2025-69229","PYSEC-2026-1106",[262,7654],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[7659],{"type":3343,"score":4280},[7661,7663,7665,7667,7669,7670,7671],{"type":3347,"url":7662},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3361,"url":7664},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3347,"url":7666},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3347,"url":7668},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":7672},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3524,3525,3526,3527,3528,3529,3530],{"id":263,"slug":7675,"dossier":47,"summary":7676,"aliases":7677,"sourceIds":7680,"published":7681,"modified":7682,"checkedAt":7,"severity":7683,"references":7685,"versionKeys":7700,"packageCount":32,"repositoryCount":105},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[7678,7679],"CVE-2026-59935","PYSEC-2026-3613",[263,7679],"2026-07-23T16:37:07Z","2026-09-10T03:50:51.957724392Z",[7684],{"type":3343,"score":4753},[7686,7688,7690,7692,7694,7695,7697,7698],{"type":3347,"url":7687},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3361,"url":7689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3347,"url":7691},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3347,"url":7693},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3354,"url":3355},{"type":3347,"url":7696},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3354,"url":3359},{"type":3361,"url":7699},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3366,3367],{"id":264,"slug":7702,"dossier":47,"summary":7703,"aliases":7704,"sourceIds":7707,"published":7708,"modified":7709,"checkedAt":7,"severity":7710,"references":7712,"versionKeys":7725,"packageCount":32,"repositoryCount":105},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[7705,7706],"CVE-2026-54651","PYSEC-2026-3018",[264,7706],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[7711],{"type":3343,"score":4578},[7713,7715,7717,7719,7720,7722,7723],{"type":3347,"url":7714},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3361,"url":7716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3347,"url":7718},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3354,"url":3355},{"type":3347,"url":7721},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3354,"url":3359},{"type":3361,"url":7724},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3366,3367],{"id":265,"slug":7727,"dossier":90,"summary":7728,"aliases":7729,"sourceIds":7732,"published":7733,"modified":7734,"checkedAt":7,"severity":7735,"references":7740,"versionKeys":7750,"packageCount":32,"repositoryCount":7753},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[7730,7731],"CVE-2026-25645","PYSEC-2026-2275",[265,7731],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[7736,7738],{"type":3380,"score":7737},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3380,"score":7739},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[7741,7743,7745,7747,7748],{"type":3361,"url":7742},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3361,"url":7744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3418,"url":7746},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3354,"url":6483},{"type":3361,"url":7749},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[6493,6494,7751,7752],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":266,"slug":7755,"dossier":47,"summary":7756,"aliases":7757,"sourceIds":7760,"published":7761,"modified":7762,"checkedAt":7,"severity":7763,"references":7766,"versionKeys":7776,"packageCount":32,"repositoryCount":34},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[7758,7759],"CVE-2026-33230","PYSEC-2026-2235",[266,7759],"2026-03-18T20:23:33Z","2026-09-10T03:50:39.207692385Z",[7764],{"type":3380,"score":7765},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[7767,7769,7771,7773,7775],{"type":3455,"url":7768},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3361,"url":7770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3418,"url":7772},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3418,"url":7774},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3354,"url":3950},[3959,3960],{"id":267,"slug":7778,"dossier":47,"summary":7779,"aliases":7780,"sourceIds":7782,"published":7783,"modified":7784,"checkedAt":7,"severity":7785,"references":7787,"versionKeys":7796,"packageCount":32,"repositoryCount":4740},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[7781],"CVE-2026-97688",[267],"2026-09-30T15:00:38Z","2026-09-30T15:15:04.066660799Z",[7786],{"type":3343,"score":3911},[7788,7790,7792,7794,7795],{"type":3347,"url":7789},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":3361,"url":7791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":3347,"url":7793},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":3354,"url":3721},{"type":3347,"url":6053},[6055,6056],{"id":268,"slug":7798,"dossier":47,"summary":7799,"aliases":7800,"sourceIds":7802,"published":7803,"modified":7804,"checkedAt":7,"severity":7805,"references":7807,"versionKeys":7817,"packageCount":32,"repositoryCount":650},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[7801],"CVE-2026-86000",[268],"2026-09-17T20:32:58Z","2026-09-17T20:45:06.589610839Z",[7806],{"type":3380,"score":3480},[7808,7810,7812,7814,7815],{"type":3347,"url":7809},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":3361,"url":7811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":3347,"url":7813},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":3354,"url":3684},{"type":3347,"url":7816},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",[3692,3693,3694,7818],"pypi:soupsieve@2.8.4",{"id":269,"slug":7820,"dossier":47,"summary":7821,"aliases":7822,"sourceIds":7825,"published":7826,"modified":7827,"checkedAt":7,"severity":7828,"references":7830,"versionKeys":7841,"packageCount":32,"repositoryCount":611},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[7823,7824],"CVE-2025-66418","PYSEC-2026-1998",[269,7824],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[7829],{"type":3343,"score":3706},[7831,7833,7835,7837,7838,7839],{"type":3347,"url":7832},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3361,"url":7834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3418,"url":7836},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3354,"url":3721},{"type":3354,"url":3723},{"type":3361,"url":7840},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3725,3726,3727,3728,3729],{"id":270,"slug":7843,"dossier":47,"summary":7844,"aliases":7845,"sourceIds":7848,"published":7849,"modified":7850,"checkedAt":7,"severity":7851,"references":7854,"versionKeys":7869,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[7846,7847],"CVE-2024-56201","PYSEC-2026-1472",[270,7847],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[7852,7853],{"type":3380,"score":4917},{"type":3343,"score":6958},[7855,7857,7859,7861,7863,7864,7866,7867],{"type":3347,"url":7856},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3361,"url":7858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3347,"url":7860},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3418,"url":7862},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3354,"url":6967},{"type":3347,"url":7865},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3354,"url":6973},{"type":3361,"url":7868},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[6977],{"id":271,"slug":7871,"dossier":47,"summary":7872,"aliases":7873,"sourceIds":7876,"published":7877,"modified":7878,"checkedAt":7,"severity":7879,"references":7881,"versionKeys":7894,"packageCount":32,"repositoryCount":105},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[7874,7875],"CVE-2026-44209","PYSEC-2026-2390",[271,7875],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[7880],{"type":3380,"score":6928},[7882,7884,7886,7888,7890,7892],{"type":3347,"url":7883},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":3361,"url":7885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":3347,"url":7887},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":3354,"url":7889},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":3354,"url":7891},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":3361,"url":7893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[7895],"pypi:banks@2.2.0",{"id":272,"slug":7897,"dossier":47,"summary":7898,"aliases":7899,"sourceIds":7901,"published":7902,"modified":7903,"checkedAt":7,"severity":7904,"references":7906,"versionKeys":7912,"packageCount":32,"repositoryCount":105},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[7900],"CVE-2026-103001",[272],"2026-09-30T23:53:17Z","2026-10-01T00:00:04.690126325Z",[7905],{"type":3380,"score":5003},[7907,7909,7911],{"type":3347,"url":7908},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":3347,"url":7910},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":3354,"url":3584},[3589],{"id":273,"slug":7914,"dossier":90,"summary":7915,"aliases":7916,"sourceIds":7920,"published":7921,"modified":7922,"checkedAt":7,"severity":7923,"references":7926,"versionKeys":7938,"packageCount":32,"repositoryCount":7753},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[7917,7918,7919],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[273,7919],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[7924],{"type":3380,"score":7925},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7927,7929,7931,7933,7935,7936],{"type":3455,"url":7928},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3361,"url":7930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3418,"url":7932},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3347,"url":7934},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3354,"url":4930},{"type":3361,"url":7937},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4936,4937,4938,4939,7939,7940,7941,7942,7943,7944,7945,7946],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":274,"slug":7948,"dossier":47,"summary":7949,"aliases":7950,"sourceIds":7953,"published":7954,"modified":7955,"checkedAt":7,"severity":7956,"references":7958,"versionKeys":7979,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[7951,7952],"CVE-2024-34064","PYSEC-2026-1474",[274,7952],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[7957],{"type":3380,"score":5595},[7959,7961,7963,7965,7966,7968,7970,7972,7974,7976,7977],{"type":3347,"url":7960},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3361,"url":7962},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3418,"url":7964},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3354,"url":6967},{"type":3347,"url":7967},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3347,"url":7969},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3347,"url":7971},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3347,"url":7973},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3347,"url":7975},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3354,"url":6973},{"type":3361,"url":7978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[6977],{"id":275,"slug":7981,"dossier":47,"summary":7982,"aliases":7983,"sourceIds":7986,"published":7987,"modified":7988,"checkedAt":7,"severity":7989,"references":7992,"versionKeys":8006,"packageCount":32,"repositoryCount":34},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[7984,7985],"CVE-2026-0846","PYSEC-2026-97",[275,7985],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[7990,7991],{"type":3380,"score":5211},{"type":3380,"score":4686},[7993,7995,7997,7999,8000,8002,8004],{"type":3361,"url":7994},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3347,"url":7996},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3347,"url":7998},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3354,"url":3950},{"type":3347,"url":8001},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3455,"url":8003},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3361,"url":8005},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3959,3960],{"id":276,"slug":8008,"dossier":47,"summary":8009,"aliases":8010,"sourceIds":8013,"published":8014,"modified":8015,"checkedAt":7,"severity":8016,"references":8019,"versionKeys":8028,"packageCount":32,"repositoryCount":621},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[8011,8012],"CVE-2026-34513","PYSEC-2026-2095",[276,8012],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[8017,8018],{"type":3343,"score":4066},{"type":3380,"score":3515},[8020,8022,8024,8026,8027],{"type":3418,"url":8021},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3361,"url":8023},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3418,"url":8025},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":277,"slug":8030,"dossier":47,"summary":8031,"aliases":8032,"sourceIds":8035,"published":8036,"modified":8037,"checkedAt":7,"severity":8038,"references":8042,"versionKeys":8050,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[8033,8034],"CVE-2026-47265","PYSEC-2026-2105",[277,8034],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[8039,8041],{"type":3343,"score":8040},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3380,"score":4686},[8043,8045,8047,8049],{"type":3418,"url":8044},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3361,"url":8046},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3418,"url":8048},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":278,"slug":8052,"dossier":47,"summary":8053,"aliases":8054,"sourceIds":8057,"published":8058,"modified":8059,"checkedAt":7,"severity":8060,"references":8064,"versionKeys":8070,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[8055,8056],"CVE-2026-54276","PYSEC-2026-2109",[278,8056],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[8061,8063],{"type":3343,"score":8062},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3380,"score":7765},[8065,8067,8069],{"type":3361,"url":8066},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3418,"url":8068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":279,"slug":8072,"dossier":47,"summary":8073,"aliases":8074,"sourceIds":8077,"published":8078,"modified":8079,"checkedAt":7,"severity":8080,"references":8082,"versionKeys":8097,"packageCount":32,"repositoryCount":105},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[8075,8076],"CVE-2026-31826","PYSEC-2026-3019",[279,8076],"2026-03-11T00:14:02Z","2026-09-10T03:50:39.503255117Z",[8081],{"type":3343,"score":4381},[8083,8085,8087,8089,8091,8092,8094,8095],{"type":3347,"url":8084},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3361,"url":8086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3347,"url":8088},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3347,"url":8090},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3354,"url":3355},{"type":3347,"url":8093},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3354,"url":3359},{"type":3361,"url":8096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3366,3367],{"id":280,"slug":8099,"dossier":47,"summary":8100,"aliases":8101,"sourceIds":8104,"published":8105,"modified":8106,"checkedAt":7,"severity":8107,"references":8109,"versionKeys":8124,"packageCount":32,"repositoryCount":32},"ghsa-hvfh-5mj3-5f3j-627daf3f","Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access",[8102,8103],"CVE-2026-45019","PYSEC-2026-3811",[280,8103],"2026-08-25T19:21:40Z","2026-09-10T12:25:53.170074650Z",[8108],{"type":3380,"score":5597},[8110,8112,8114,8115,8117,8119,8120,8122],{"type":3347,"url":8111},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3347,"url":8113},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F0565fd0eccb915fce159929598b053ed79f6e0c9",{"type":3354,"url":3553},{"type":3347,"url":8116},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fblob\u002F2.12.0\u002Fdocs\u002Fsecurity-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse",{"type":3347,"url":8118},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.12.0",{"type":3354,"url":3561},{"type":3361,"url":8121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3361,"url":8123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45019",[3565],{"id":281,"slug":8126,"dossier":47,"summary":8127,"aliases":8128,"sourceIds":8131,"published":8132,"modified":8133,"checkedAt":7,"severity":8134,"references":8136,"versionKeys":8144,"packageCount":32,"repositoryCount":32},"ghsa-hw26-mmpg-fqfg-673c67e1","lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes",[8129,8130],"CVE-2026-28348","PYSEC-2026-2201",[281,8130],"2026-03-02T19:19:15Z","2026-09-10T03:50:39.674211658Z",[8135],{"type":3380,"score":7765},[8137,8139,8141,8143],{"type":3455,"url":8138},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-hw26-mmpg-fqfg",{"type":3361,"url":8140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28348",{"type":3418,"url":8142},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F2ef732667ddbc74ea59847bcf24b75809aaeed3b",{"type":3354,"url":4341},[4349],{"id":282,"slug":8146,"dossier":47,"summary":8147,"aliases":8148,"sourceIds":8150,"published":8151,"modified":8152,"checkedAt":7,"severity":8153,"references":8156,"versionKeys":8165,"packageCount":32,"repositoryCount":669},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[8149],"CVE-2026-102269",[282],"2026-09-29T23:17:55Z","2026-09-29T23:30:03.865434818Z",[8154],{"type":3380,"score":8155},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[8157,8159,8161,8163,8164],{"type":3347,"url":8158},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":3361,"url":8160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":3347,"url":8162},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":283,"slug":8167,"dossier":47,"summary":8168,"aliases":8169,"sourceIds":8172,"published":8173,"modified":8174,"checkedAt":7,"severity":8175,"references":8179,"versionKeys":8195,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[8170,8171],"CVE-2024-11394","PYSEC-2024-229",[283,8171],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[8176,8178],{"type":3380,"score":8177},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3380,"score":4803},[8180,8182,8184,8186,8187,8189,8191,8193],{"type":3361,"url":8181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":3347,"url":8183},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":3347,"url":8185},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":3354,"url":3453},{"type":3347,"url":8188},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":3347,"url":8190},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":3361,"url":8192},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":3361,"url":8194},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[3460],{"id":284,"slug":8197,"dossier":47,"summary":8198,"aliases":8199,"sourceIds":8202,"published":8203,"modified":8204,"checkedAt":7,"severity":8205,"references":8207,"versionKeys":8219,"packageCount":32,"repositoryCount":105},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[8200,8201],"CVE-2026-49461","PYSEC-2026-3020",[284,8201],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[8206],{"type":3343,"score":4578},[8208,8210,8212,8213,8214,8215,8217],{"type":3347,"url":8209},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3347,"url":8211},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3354,"url":3355},{"type":3347,"url":4839},{"type":3354,"url":3359},{"type":3361,"url":8216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3361,"url":8218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3366,3367],{"id":285,"slug":8221,"dossier":47,"summary":8222,"aliases":8223,"sourceIds":8226,"published":8227,"modified":8228,"checkedAt":7,"severity":8229,"references":8232,"versionKeys":8245,"packageCount":32,"repositoryCount":32},"ghsa-j5xp-7m2f-49jv-d5b13248","Docling Core: Insufficient validation of image reference URIs",[8224,8225],"CVE-2026-44019","PYSEC-2026-2456",[285,8225],"2026-06-03T21:15:31Z","2026-07-13T16:43:49.284243969Z",[8230],{"type":3380,"score":8231},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8233,8235,8237,8239,8241,8243],{"type":3347,"url":8234},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3354,"url":8236},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core",{"type":3347,"url":8238},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Freleases\u002Ftag\u002Fv2.74.1",{"type":3354,"url":8240},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling-core",{"type":3361,"url":8242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3361,"url":8244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44019",[8246],"pypi:docling-core@2.49.0",{"id":286,"slug":8248,"dossier":47,"summary":8249,"aliases":8250,"sourceIds":8252,"published":8253,"modified":8254,"checkedAt":7,"severity":8255,"references":8257,"versionKeys":8266,"packageCount":32,"repositoryCount":650},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[8251],"CVE-2026-85999",[286],"2026-09-17T20:32:53Z","2026-09-17T20:45:05.791958465Z",[8256],{"type":3380,"score":3480},[8258,8260,8262,8264,8265],{"type":3347,"url":8259},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":3361,"url":8261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":3347,"url":8263},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":3354,"url":3684},{"type":3347,"url":7816},[3692,3693,3694,7818],{"id":287,"slug":8268,"dossier":47,"summary":8269,"aliases":8270,"sourceIds":8273,"published":8274,"modified":8275,"checkedAt":7,"severity":8276,"references":8278,"versionKeys":8293,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[8271,8272],"CVE-2025-62708","PYSEC-2026-1831",[287,8272],"2025-10-22T19:40:50Z","2026-09-10T03:50:29.885611595Z",[8277],{"type":3343,"score":4280},[8279,8281,8283,8285,8287,8288,8290,8291],{"type":3347,"url":8280},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3361,"url":8282},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3347,"url":8284},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3347,"url":8286},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3354,"url":3355},{"type":3347,"url":8289},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3354,"url":3359},{"type":3361,"url":8292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3366],{"id":288,"slug":8295,"dossier":47,"summary":8296,"aliases":8297,"sourceIds":8300,"published":8301,"modified":8302,"checkedAt":7,"severity":8303,"references":8307,"versionKeys":8325,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[8298,8299],"CVE-2026-34993","PYSEC-2026-2104",[288,8299],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[8304,8306],{"type":3380,"score":8305},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3380,"score":3741},[8308,8310,8312,8314,8315,8317,8319,8321,8322,8323],{"type":3418,"url":8309},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3361,"url":8311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3418,"url":8313},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3354,"url":3520},{"type":3347,"url":8316},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3347,"url":8318},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3361,"url":8320},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3361,"url":7403},{"type":3361,"url":4212},{"type":3778,"url":8324},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":289,"slug":8327,"dossier":47,"summary":8328,"aliases":8329,"sourceIds":8332,"published":8333,"modified":8334,"checkedAt":7,"severity":8335,"references":8337,"versionKeys":8347,"packageCount":32,"repositoryCount":631},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[8330,8331],"CVE-2025-67726","PYSEC-2025-267",[289,8331],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[8336],{"type":3380,"score":3515},[8338,8340,8342,8343,8345,8346],{"type":3361,"url":8339},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3361,"url":8341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3418,"url":6785},{"type":3347,"url":8344},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3354,"url":4044},{"type":3361,"url":6790},[4048,4049,4050],{"id":290,"slug":8349,"dossier":47,"summary":8350,"aliases":8351,"sourceIds":8354,"published":8355,"modified":8356,"checkedAt":7,"severity":8357,"references":8359,"versionKeys":8370,"packageCount":32,"repositoryCount":631},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[8352,8353],"CVE-2025-69227","PYSEC-2026-1107",[290,8353],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[8358],{"type":3343,"score":4280},[8360,8362,8364,8366,8367,8368],{"type":3347,"url":8361},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3361,"url":8363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3347,"url":8365},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":8369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3524,3525,3526,3527,3528,3529,3530],{"id":291,"slug":8372,"dossier":47,"summary":8373,"aliases":8374,"sourceIds":8377,"published":8378,"modified":8379,"checkedAt":7,"severity":8380,"references":8383,"versionKeys":8398,"packageCount":32,"repositoryCount":105},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[8375,8376],"CVE-2026-41168","PYSEC-2026-3021",[291,8376],"2026-04-15T19:43:09Z","2026-09-10T03:50:44.569518277Z",[8381,8382],{"type":3380,"score":3480},{"type":3343,"score":3344},[8384,8386,8388,8390,8392,8393,8395,8396],{"type":3347,"url":8385},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3361,"url":8387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3347,"url":8389},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3347,"url":8391},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3354,"url":3355},{"type":3347,"url":8394},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3354,"url":3359},{"type":3361,"url":8397},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3366,3367],{"id":292,"slug":8400,"dossier":90,"summary":8401,"aliases":8402,"sourceIds":8406,"published":8407,"modified":8408,"checkedAt":7,"severity":8409,"references":8411,"versionKeys":8425,"packageCount":32,"repositoryCount":4183},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[8403,8404,8405],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[292,8405],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[8410],{"type":3380,"score":3515},[8412,8414,8416,8418,8420,8421,8422,8423],{"type":3347,"url":8413},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3361,"url":8415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3347,"url":8417},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3347,"url":8419},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3354,"url":4170},{"type":3347,"url":5121},{"type":3354,"url":5123},{"type":3361,"url":8424},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":293,"slug":8427,"dossier":47,"summary":8428,"aliases":8429,"sourceIds":8432,"published":8433,"modified":8434,"checkedAt":7,"severity":8435,"references":8437,"versionKeys":8450,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[8430,8431],"CVE-2025-3264","PYSEC-2026-1985",[293,8431],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[8436],{"type":3380,"score":4442},[8438,8440,8442,8444,8445,8447,8448],{"type":3361,"url":8439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":3347,"url":8441},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":3347,"url":8443},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":3354,"url":3453},{"type":3347,"url":8446},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":3354,"url":3822},{"type":3361,"url":8449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[3460],{"id":294,"slug":8452,"dossier":47,"summary":8453,"aliases":8454,"sourceIds":8457,"published":8458,"modified":8459,"checkedAt":7,"severity":8460,"references":8462,"versionKeys":8479,"packageCount":32,"repositoryCount":34},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[8455,8456],"CVE-2026-33231","PYSEC-2026-2236",[294,8456],"2026-03-19T12:42:20Z","2026-09-10T03:50:39.952342228Z",[8461],{"type":3380,"score":3515},[8463,8465,8467,8469,8470,8472,8474,8475,8476,8477],{"type":3455,"url":8464},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3361,"url":8466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3418,"url":8468},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3354,"url":3950},{"type":3347,"url":8471},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3347,"url":8473},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3361,"url":4210},{"type":3361,"url":8320},{"type":3361,"url":4212},{"type":3778,"url":8478},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3959,3960],{"id":295,"slug":8481,"dossier":47,"summary":8482,"aliases":8483,"sourceIds":8485,"published":8486,"modified":8487,"checkedAt":7,"severity":8488,"references":8490,"versionKeys":8498,"packageCount":32,"repositoryCount":105},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[8484],"CVE-2026-57204",[295],"2026-06-18T14:28:49Z","2026-09-10T03:51:08.790625588Z",[8489],{"type":3343,"score":4578},[8491,8493,8495,8496],{"type":3347,"url":8492},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3347,"url":8494},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3354,"url":3355},{"type":3347,"url":8497},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3366,3367],{"id":296,"slug":8500,"dossier":47,"summary":8501,"aliases":8502,"sourceIds":8505,"published":8506,"modified":8507,"checkedAt":7,"severity":8508,"references":8511,"versionKeys":8521,"packageCount":32,"repositoryCount":32},"ghsa-jmmv-h3mp-59v8-f42633c7","Docling Core: Unsafe remote filename resolution",[8503,8504],"CVE-2026-44023","PYSEC-2026-2457",[296,8504],"2026-06-03T21:16:25Z","2026-07-13T16:43:42.701865915Z",[8509],{"type":3380,"score":8510},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[8512,8514,8515,8516,8517,8519],{"type":3347,"url":8513},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3354,"url":8236},{"type":3347,"url":8238},{"type":3354,"url":8240},{"type":3361,"url":8518},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3361,"url":8520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44023",[8246],{"id":297,"slug":8523,"dossier":47,"summary":8524,"aliases":8525,"sourceIds":8528,"published":8529,"modified":8530,"checkedAt":7,"severity":8531,"references":8533,"versionKeys":8548,"packageCount":32,"repositoryCount":697},"ghsa-jp53-mhqp-8xcg-b1841e34","pypdf: Possible infinite loop for TreeObject.insert_child",[8526,8527],"CVE-2026-84309","PYSEC-2026-3913",[297,8527],"2026-09-01T21:20:20Z","2026-09-10T12:25:36.667036932Z",[8532],{"type":3343,"score":4578},[8534,8536,8538,8540,8541,8543,8544,8546],{"type":3347,"url":8535},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3347,"url":8537},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3964",{"type":3347,"url":8539},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9ba557d565d57c53a0b3a0be06c0a4c29b0559b",{"type":3354,"url":3355},{"type":3347,"url":8542},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.0",{"type":3354,"url":3359},{"type":3361,"url":8545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3361,"url":8547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84309",[3366,3367,3368],{"id":298,"slug":8550,"dossier":47,"summary":8551,"aliases":8552,"sourceIds":8555,"published":8556,"modified":8557,"checkedAt":7,"severity":8558,"references":8561,"versionKeys":8569,"packageCount":32,"repositoryCount":621},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[8553,8554],"CVE-2026-54282","PYSEC-2026-248",[298,8554],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[8559,8560],{"type":3380,"score":5358},{"type":3380,"score":3657},[8562,8564,8566,8567],{"type":3361,"url":8563},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3361,"url":8565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3354,"url":5659},{"type":3347,"url":8568},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3499,3500,3501,5666,5667,5668,5832,5833,5834],{"id":299,"slug":8571,"dossier":47,"summary":8572,"aliases":8573,"sourceIds":8576,"published":8577,"modified":8578,"checkedAt":7,"severity":8579,"references":8582,"versionKeys":8601,"packageCount":32,"repositoryCount":697},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[8574,8575],"CVE-2026-52869","PYSEC-2026-3482",[299,8575],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[8580],{"type":3380,"score":8581},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[8583,8585,8587,8589,8591,8593,8595,8596,8598,8599],{"type":3347,"url":8584},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3361,"url":8586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3347,"url":8588},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3347,"url":8590},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3347,"url":8592},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3347,"url":8594},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3354,"url":6424},{"type":3347,"url":8597},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3354,"url":6428},{"type":3361,"url":8600},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[6430,6431,6432],{"id":300,"slug":8603,"dossier":47,"summary":8604,"aliases":8605,"sourceIds":8608,"published":8609,"modified":8610,"checkedAt":7,"severity":8611,"references":8614,"versionKeys":8622,"packageCount":32,"repositoryCount":697},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[8606,8607],"CVE-2026-48523","PYSEC-2026-176",[300,8607],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[8612],{"type":3380,"score":8613},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[8615,8617,8619,8620],{"type":3455,"url":8616},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3361,"url":8618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3354,"url":3584},{"type":3347,"url":8621},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[3588,3590],{"id":301,"slug":8624,"dossier":47,"summary":8625,"aliases":8626,"sourceIds":8628,"published":8629,"modified":8630,"checkedAt":7,"severity":8631,"references":8634,"versionKeys":8642,"packageCount":32,"repositoryCount":669},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[8627],"CVE-2026-102270",[301],"2026-09-30T14:40:25Z","2026-09-30T14:45:04.897791001Z",[8632],{"type":3380,"score":8633},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[8635,8637,8639,8640,8641],{"type":3347,"url":8636},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":3361,"url":8638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":3347,"url":7358},{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":302,"slug":8644,"dossier":47,"summary":8645,"aliases":8646,"sourceIds":8649,"published":8650,"modified":8651,"checkedAt":7,"severity":8652,"references":8654,"versionKeys":8665,"packageCount":32,"repositoryCount":105},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[8647,8648],"CVE-2026-54531","PYSEC-2026-3022",[302,8648],"2026-06-16T14:05:57Z","2026-09-10T03:51:08.924739649Z",[8653],{"type":3343,"score":4578},[8655,8657,8658,8659,8660,8661,8663],{"type":3347,"url":8656},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3347,"url":4583},{"type":3354,"url":3355},{"type":3347,"url":4586},{"type":3354,"url":3359},{"type":3361,"url":8662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3361,"url":8664},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3366,3367],{"id":303,"slug":8667,"dossier":47,"summary":8668,"aliases":8669,"sourceIds":8672,"published":8673,"modified":8674,"checkedAt":7,"severity":8675,"references":8679,"versionKeys":8698,"packageCount":32,"repositoryCount":34},"ghsa-m42h-3232-vpv3-b30ccceb","nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences",[8670,8671],"CVE-2026-12243","PYSEC-2026-597",[303,8671],"2026-06-30T01:16:29.063Z","2026-08-19T12:15:03.321869900Z",[8676,8677],{"type":3380,"score":4686},{"type":3380,"score":8678},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8680,8682,8684,8686,8687,8689,8690,8692,8694,8696],{"type":3347,"url":8681},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",{"type":3361,"url":8683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12243",{"type":3347,"url":8685},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3504",{"type":3347,"url":5526},{"type":3347,"url":8688},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Faec4fce1b84ad725b8975f7365b23a4f626572a9",{"type":3354,"url":3950},{"type":3347,"url":8691},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-597.yaml",{"type":3455,"url":8693},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",{"type":3347,"url":8695},"https:\u002F\u002Fsecurityinfinity.com\u002Fresearch\u002Fpath-traversal-in-nltks-nltk-data-load-via-percent-encoded-sequences",{"type":3361,"url":8697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",[3959,3960],{"id":304,"slug":8700,"dossier":47,"summary":8701,"aliases":8702,"sourceIds":8705,"published":8706,"modified":8707,"checkedAt":7,"severity":8708,"references":8710,"versionKeys":8726,"packageCount":32,"repositoryCount":105},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[8703,8704],"CVE-2025-66019","PYSEC-2026-1832",[304,8704],"2025-11-24T22:42:07Z","2026-09-10T03:50:31.107367078Z",[8709],{"type":3343,"score":4280},[8711,8712,8714,8716,8718,8720,8721,8723,8724],{"type":3347,"url":8280},{"type":3347,"url":8713},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3361,"url":8715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3347,"url":8717},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3347,"url":8719},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3354,"url":3355},{"type":3347,"url":8722},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3354,"url":3359},{"type":3361,"url":8725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3366,3367],{"id":305,"slug":8728,"dossier":47,"summary":8729,"aliases":8730,"sourceIds":8733,"published":8734,"modified":8735,"checkedAt":7,"severity":8736,"references":8741,"versionKeys":8752,"packageCount":32,"repositoryCount":669},"ghsa-m4rf-3fr8-xwx3-ed835593","NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)",[8731,8732],"CVE-2026-79675","PYSEC-2026-3749",[305,8732],"2026-08-25T16:17:28.013Z","2026-09-10T03:51:15.444696867Z",[8737,8738,8739],{"type":3380,"score":4607},{"type":3343,"score":4605},{"type":3343,"score":8740},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8742,8744,8746,8748,8749,8750],{"type":3455,"url":8743},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m4rf-3fr8-xwx3",{"type":3361,"url":8745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79675",{"type":3347,"url":8747},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F8fa9650b6009aacfdebbc33d2a08d32c0858ea6c",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3361,"url":8751},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-jvm-argument-injection-via-per-call-options",[3958,3959,3960],{"id":306,"slug":8754,"dossier":47,"summary":8755,"aliases":8756,"sourceIds":8759,"published":8760,"modified":8761,"checkedAt":7,"severity":8762,"references":8767,"versionKeys":8776,"packageCount":32,"repositoryCount":621},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[8757,8758],"CVE-2026-34516","PYSEC-2026-2098",[306,8758],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[8763,8764,8765],{"type":3380,"score":3515},{"type":3343,"score":4280},{"type":3343,"score":8766},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8768,8770,8772,8774,8775],{"type":3418,"url":8769},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3361,"url":8771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3418,"url":8773},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":307,"slug":8778,"dossier":47,"summary":8779,"aliases":8780,"sourceIds":8783,"published":8784,"modified":8785,"checkedAt":7,"severity":8786,"references":8789,"versionKeys":8795,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[8781,8782],"CVE-2026-50269","PYSEC-2026-2106",[307,8782],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[8787,8788],{"type":3343,"score":3655},{"type":3380,"score":3515},[8790,8792,8794],{"type":3361,"url":8791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3418,"url":8793},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3354,"url":3520},[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":308,"slug":8797,"dossier":47,"summary":8798,"aliases":8799,"sourceIds":8802,"published":8803,"modified":8804,"checkedAt":7,"severity":8805,"references":8807,"versionKeys":8824,"packageCount":32,"repositoryCount":32},"ghsa-m88r-rg27-5xfg-642aa3a1","Docling: Unsafe XML Entity Expansion in USPTO Patent Backend",[8800,8801],"CVE-2026-44020","PYSEC-2026-240",[308,8801],"2026-06-03T21:14:15Z","2026-08-28T18:45:06.829347750Z",[8806],{"type":3380,"score":3515},[8808,8810,8812,8813,8815,8817,8818,8820,8822],{"type":3418,"url":8809},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-m88r-rg27-5xfg",{"type":3361,"url":8811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44020",{"type":3347,"url":5954},{"type":3347,"url":8814},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44020",{"type":3347,"url":8816},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492456",{"type":3354,"url":6394},{"type":3347,"url":8819},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.74.0",{"type":3347,"url":8821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-240.yaml",{"type":3347,"url":8823},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44020.json",[6402],{"id":309,"slug":8826,"dossier":47,"summary":8827,"aliases":8828,"sourceIds":8831,"published":8832,"modified":8833,"checkedAt":7,"severity":8834,"references":8836,"versionKeys":8845,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[8829,8830],"CVE-2026-48809","PYSEC-2026-3033",[309,8830],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[8835],{"type":3380,"score":3515},[8837,8839,8840,8841,8843],{"type":3347,"url":8838},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3354,"url":6860},{"type":3354,"url":6862},{"type":3361,"url":8842},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3361,"url":8844},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[6868],{"id":310,"slug":8847,"dossier":47,"summary":8848,"aliases":8849,"sourceIds":8852,"published":8853,"modified":8854,"checkedAt":7,"severity":8855,"references":8858,"versionKeys":8866,"packageCount":32,"repositoryCount":697},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[8850,8851],"CVE-2026-44432","PYSEC-2026-142",[310,8851],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[8856,8857],{"type":3380,"score":3515},{"type":3343,"score":3706},[8859,8861,8863,8865],{"type":3361,"url":8860},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3361,"url":8862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3347,"url":8864},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3354,"url":3721},[6055],{"id":311,"slug":8868,"dossier":47,"summary":8869,"aliases":8870,"sourceIds":8873,"published":8874,"modified":8875,"checkedAt":7,"severity":8876,"references":8879,"versionKeys":8892,"packageCount":32,"repositoryCount":103},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[8871,8872],"CVE-2026-28684","PYSEC-2026-2270",[311,8872],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[8877],{"type":3380,"score":8878},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8880,8882,8884,8886,8888,8890],{"type":3418,"url":8881},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3361,"url":8883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3418,"url":8885},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3347,"url":8887},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3354,"url":8889},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3361,"url":8891},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[8893,8894,8895,8896],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":312,"slug":8898,"dossier":47,"summary":8899,"aliases":8900,"sourceIds":8903,"published":8904,"modified":8905,"checkedAt":7,"severity":8906,"references":8909,"versionKeys":8924,"packageCount":32,"repositoryCount":103},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[8901,8902],"CVE-2026-69243","PYSEC-2026-3546",[312,8902],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[8907],{"type":3343,"score":8908},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8910,8912,8914,8916,8917,8919,8920,8922],{"type":3347,"url":8911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3347,"url":8913},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3347,"url":8915},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3354,"url":3520},{"type":3347,"url":8918},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3354,"url":4640},{"type":3361,"url":8921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3361,"url":8923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3524,3525,3526,3527,3528,3529,3530,3531,3532,7007],{"id":313,"slug":8926,"dossier":47,"summary":8927,"aliases":8928,"sourceIds":8931,"published":8932,"modified":8933,"checkedAt":7,"severity":8934,"references":8936,"versionKeys":8945,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[8929,8930],"CVE-2026-49855","PYSEC-2026-3389",[313,8930],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[8935],{"type":3380,"score":3515},[8937,8939,8940,8941,8943],{"type":3347,"url":8938},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3354,"url":4044},{"type":3354,"url":4094},{"type":3361,"url":8942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3361,"url":8944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[4048,4049,4050,4051,4052],{"id":314,"slug":8947,"dossier":47,"summary":8948,"aliases":8949,"sourceIds":8952,"published":8953,"modified":8954,"checkedAt":7,"severity":8955,"references":8957,"versionKeys":8968,"packageCount":32,"repositoryCount":650},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[8950,8951],"CVE-2026-40347","PYSEC-2026-3038",[314,8951],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[8956],{"type":3380,"score":3480},[8958,8960,8962,8963,8965,8966],{"type":3347,"url":8959},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3361,"url":8961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3354,"url":4762},{"type":3347,"url":8964},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3354,"url":4764},{"type":3361,"url":8967},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4961,4962,4768],{"id":315,"slug":8970,"dossier":47,"summary":8971,"aliases":8972,"sourceIds":8975,"published":8976,"modified":8977,"checkedAt":7,"severity":8978,"references":8980,"versionKeys":8993,"packageCount":32,"repositoryCount":621},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[8973,8974],"CVE-2026-82397","PYSEC-2026-3928",[315,8974],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[8979],{"type":3380,"score":3515},[8981,8983,8985,8986,8988,8989,8990,8991],{"type":3347,"url":8982},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":3361,"url":8984},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":3347,"url":5870},{"type":3347,"url":8987},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":3354,"url":4044},{"type":3347,"url":5877},{"type":3354,"url":4094},{"type":3361,"url":8992},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[4048,4049,4050,4051,4052,4053],{"id":316,"slug":8995,"dossier":47,"summary":8996,"aliases":8997,"sourceIds":9000,"published":9001,"modified":9002,"checkedAt":7,"severity":9003,"references":9005,"versionKeys":9018,"packageCount":32,"repositoryCount":103},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[8998,8999],"CVE-2026-59881","PYSEC-2026-3547",[316,8999],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[9004],{"type":3343,"score":3911},[9006,9008,9010,9012,9014,9015,9016],{"type":3347,"url":9007},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3361,"url":9009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3347,"url":9011},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3347,"url":9013},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":9017},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3524,3525,3526,3527,3528,3529,3530,3531,3532,7007],{"id":317,"slug":9020,"dossier":47,"summary":9021,"aliases":9022,"sourceIds":9025,"published":9026,"modified":9027,"checkedAt":7,"severity":9028,"references":9030,"versionKeys":9041,"packageCount":32,"repositoryCount":631},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[9023,9024],"CVE-2025-69225","PYSEC-2026-1109",[317,9024],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[9029],{"type":3343,"score":3655},[9031,9033,9035,9037,9038,9039],{"type":3347,"url":9032},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3361,"url":9034},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3418,"url":9036},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3354,"url":3520},{"type":3354,"url":4640},{"type":3361,"url":9040},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3524,3525,3526,3527,3528,3529,3530],{"id":318,"slug":9043,"dossier":47,"summary":9044,"aliases":9045,"sourceIds":9048,"published":9049,"modified":9050,"checkedAt":7,"severity":9051,"references":9054,"versionKeys":9063,"packageCount":32,"repositoryCount":621},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[9046,9047],"CVE-2026-34519","PYSEC-2026-2101",[318,9047],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[9052,9053],{"type":3343,"score":3655},{"type":3380,"score":3657},[9055,9057,9059,9061,9062],{"type":3418,"url":9056},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3361,"url":9058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3418,"url":9060},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":319,"slug":9065,"dossier":47,"summary":9066,"aliases":9067,"sourceIds":9070,"published":9071,"modified":9072,"checkedAt":7,"severity":9073,"references":9076,"versionKeys":9091,"packageCount":32,"repositoryCount":34},"ghsa-p3m8-78j2-g5p3-4d7419c0","NLTK: Default ENFORCE=False Disables All pathsec Security Controls",[9068,9069],"CVE-2026-62388","PYSEC-2026-3722",[319,9069],"2026-08-22T15:16:18.967Z","2026-09-02T16:00:17.572328596Z",[9074,9075],{"type":3343,"score":5489},{"type":3343,"score":5491},[9077,9079,9081,9083,9085,9086,9087,9089],{"type":3455,"url":9078},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p3m8-78j2-g5p3",{"type":3361,"url":9080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62388",{"type":3347,"url":9082},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3593",{"type":3347,"url":9084},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F155e40343cff0bf50d233e274a12e04d1428b1d9",{"type":3354,"url":3950},{"type":3347,"url":3986},{"type":3347,"url":9088},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3722.yaml",{"type":3361,"url":9090},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-insecure-default-configuration-pathsec",[3959,3960],{"id":320,"slug":9093,"dossier":47,"summary":9094,"aliases":9095,"sourceIds":9097,"published":9098,"modified":9099,"checkedAt":7,"severity":9100,"references":9102,"versionKeys":9111,"packageCount":32,"repositoryCount":669},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[9096],"CVE-2026-102271",[320],"2026-09-29T23:14:33Z","2026-09-29T23:30:03.853857825Z",[9101],{"type":3380,"score":6531},[9103,9105,9107,9109,9110],{"type":3347,"url":9104},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":3361,"url":9106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":3347,"url":9108},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":321,"slug":9113,"dossier":47,"summary":9114,"aliases":9115,"sourceIds":9118,"published":9119,"modified":9120,"checkedAt":7,"severity":9121,"references":9123,"versionKeys":9140,"packageCount":32,"repositoryCount":34},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[9116,9117],"CVE-2026-54293","PYSEC-2026-2078",[321,9117],"2026-06-16T14:34:15Z","2026-09-10T03:51:09.128527813Z",[9122],{"type":3380,"score":4686},[9124,9126,9128,9130,9131,9133,9135,9136,9138],{"type":3455,"url":9125},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3361,"url":9127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3418,"url":9129},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3347,"url":7406},{"type":3347,"url":9132},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3778,"url":9134},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3354,"url":3950},{"type":3347,"url":9137},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3347,"url":9139},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3959,3960],{"id":322,"slug":9142,"dossier":47,"summary":9143,"aliases":9144,"sourceIds":9147,"published":9148,"modified":9149,"checkedAt":7,"severity":9150,"references":9154,"versionKeys":9166,"packageCount":32,"repositoryCount":669},"ghsa-p4rw-rvv2-7xwr-ad10f74d","NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement",[9145,9146],"CVE-2026-79676","PYSEC-2026-3737",[322,9146],"2026-08-25T16:17:28.177Z","2026-09-08T17:00:04.101709807Z",[9151,9152],{"type":3343,"score":4684},{"type":3343,"score":9153},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9155,9157,9159,9160,9161,9162,9164],{"type":3455,"url":9156},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4rw-rvv2-7xwr",{"type":3361,"url":9158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79676",{"type":3347,"url":7049},{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":9163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3737.yaml",{"type":3361,"url":9165},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-path-traversal-via-symlink-bypass",[3958,3959,3960],{"id":323,"slug":9168,"dossier":47,"summary":9169,"aliases":9170,"sourceIds":9173,"published":9174,"modified":9175,"checkedAt":7,"severity":9176,"references":9179,"versionKeys":9188,"packageCount":32,"repositoryCount":621},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[9171,9172],"CVE-2026-34515","PYSEC-2026-2097",[323,9172],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[9177,9178],{"type":3343,"score":8040},{"type":3380,"score":4686},[9180,9182,9184,9186,9187],{"type":3418,"url":9181},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3361,"url":9183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3418,"url":9185},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":324,"slug":9190,"dossier":47,"summary":9191,"aliases":9192,"sourceIds":9196,"published":9197,"modified":9198,"checkedAt":7,"severity":9199,"references":9202,"versionKeys":9215,"packageCount":32,"repositoryCount":650},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[9193,9194,9195],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[324,9195],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[9200,9201],{"type":3380,"score":3480},{"type":3380,"score":3515},[9203,9205,9207,9209,9211,9213,9214],{"type":3455,"url":9204},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3361,"url":9206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3418,"url":9208},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3418,"url":9210},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3347,"url":9212},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3354,"url":4170},{"type":3361,"url":5121},[4179,4180,4181,4182],{"id":325,"slug":9217,"dossier":47,"summary":9218,"aliases":9219,"sourceIds":9222,"published":8433,"modified":9223,"checkedAt":7,"severity":9224,"references":9227,"versionKeys":9240,"packageCount":32,"repositoryCount":697},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[9220,9221],"CVE-2025-3777","PYSEC-2026-1986",[325,9221],"2026-09-10T03:50:26.198077196Z",[9225],{"type":3380,"score":9226},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[9228,9230,9232,9233,9235,9237,9238],{"type":3361,"url":9229},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":3347,"url":9231},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":3354,"url":3453},{"type":3347,"url":9234},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":3347,"url":9236},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":3354,"url":3822},{"type":3361,"url":9239},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[3460,3461,3462],{"id":326,"slug":9242,"dossier":90,"summary":9243,"aliases":9244,"sourceIds":9248,"published":9249,"modified":9250,"checkedAt":7,"severity":9251,"references":9253,"versionKeys":9264,"packageCount":32,"repositoryCount":4183},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[9245,9246,9247],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[326,9247],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[9252],{"type":3380,"score":3515},[9254,9256,9258,9260,9262,9263],{"type":3455,"url":9255},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3361,"url":9257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3418,"url":9259},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3347,"url":9261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3354,"url":4170},{"type":3361,"url":4172},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":327,"slug":9266,"dossier":47,"summary":9267,"aliases":9268,"sourceIds":9271,"published":9272,"modified":9273,"checkedAt":7,"severity":9274,"references":9276,"versionKeys":9285,"packageCount":32,"repositoryCount":650},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[9269,9270],"CVE-2026-42561","PYSEC-2026-3039",[327,9270],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[9275],{"type":3380,"score":3515},[9277,9279,9281,9282,9283],{"type":3347,"url":9278},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3361,"url":9280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3354,"url":4762},{"type":3354,"url":4764},{"type":3361,"url":9284},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4961,4962,4768],{"id":328,"slug":9287,"dossier":47,"summary":9288,"aliases":9289,"sourceIds":9292,"published":9293,"modified":9294,"checkedAt":7,"severity":9295,"references":9297,"versionKeys":9309,"packageCount":32,"repositoryCount":631},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[9290,9291],"CVE-2025-50181","PYSEC-2026-1999",[328,9291],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[9296],{"type":3380,"score":4227},[9298,9300,9302,9304,9305,9306,9307],{"type":3347,"url":9299},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3361,"url":9301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3418,"url":9303},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3354,"url":3721},{"type":3347,"url":4237},{"type":3354,"url":3723},{"type":3361,"url":9308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3725,3726,3727,3728],{"id":329,"slug":9311,"dossier":47,"summary":9312,"aliases":9313,"sourceIds":9316,"published":9317,"modified":9318,"checkedAt":7,"severity":9319,"references":9322,"versionKeys":9333,"packageCount":32,"repositoryCount":631},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[9314,9315],"CVE-2025-67724","PYSEC-2025-265",[329,9315],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[9320,9321],{"type":3380,"score":5595},{"type":3380,"score":7765},[9323,9325,9327,9329,9331,9332],{"type":3361,"url":9324},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3361,"url":9326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3418,"url":9328},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3347,"url":9330},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3354,"url":4044},{"type":3361,"url":6790},[4048,4049,4050],{"id":330,"slug":9335,"dossier":47,"summary":9336,"aliases":9337,"sourceIds":9339,"published":9340,"modified":9341,"checkedAt":7,"severity":9342,"references":9344,"versionKeys":9348,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[9338],"CVE-2026-91992",[330],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[9343],{"type":3380,"score":4682},[9345,9347],{"type":3347,"url":9346},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3354,"url":4044},[4048,4049,4050,4051,4052],{"id":331,"slug":9350,"dossier":47,"summary":9351,"aliases":9352,"sourceIds":9356,"published":9357,"modified":9358,"checkedAt":7,"severity":9359,"references":9362,"versionKeys":9374,"packageCount":32,"repositoryCount":611},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[9353,9354,9355],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[331,9355],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[9360,9361],{"type":3343,"score":6804},{"type":3380,"score":5260},[9363,9364,9366,9368,9370,9372,9373],{"type":3347,"url":6808},{"type":3418,"url":9365},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3361,"url":9367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3418,"url":9369},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3418,"url":9371},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3354,"url":4170},{"type":3361,"url":5095},[4174,4175,4176,4177,4178,4179,4180,4181],{"id":332,"slug":9376,"dossier":47,"summary":9377,"aliases":9378,"sourceIds":9381,"published":9382,"modified":9383,"checkedAt":7,"severity":9384,"references":9387,"versionKeys":9398,"packageCount":32,"repositoryCount":32},"ghsa-q29v-xc37-wh5m-9bf51ff7","Docling: Unsafe URI and Path Handling in HTML Backend",[9379,9380],"CVE-2026-47214","PYSEC-2026-2146",[332,9380],"2026-06-03T21:15:02Z","2026-07-21T15:15:50.289662168Z",[9385],{"type":3380,"score":9386},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[9388,9390,9392,9393,9394,9396],{"type":3418,"url":9389},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-q29v-xc37-wh5m",{"type":3361,"url":9391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47214",{"type":3354,"url":6394},{"type":3347,"url":6941},{"type":3418,"url":9395},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.94.0",{"type":3347,"url":9397},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2146.yaml",[6402],{"id":333,"slug":9400,"dossier":47,"summary":9401,"aliases":9402,"sourceIds":9405,"published":8433,"modified":9406,"checkedAt":7,"severity":9407,"references":9409,"versionKeys":9420,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[9403,9404],"CVE-2025-3263","PYSEC-2026-1987",[333,9404],"2026-07-07T17:56:57.889099913Z",[9408],{"type":3380,"score":4442},[9410,9412,9413,9414,9415,9417,9418],{"type":3361,"url":9411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":3347,"url":8441},{"type":3347,"url":8443},{"type":3354,"url":3453},{"type":3347,"url":9416},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":3354,"url":3822},{"type":3361,"url":9419},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[3460],{"id":334,"slug":9422,"dossier":47,"summary":9423,"aliases":9424,"sourceIds":9427,"published":9428,"modified":9429,"checkedAt":7,"severity":9430,"references":9433,"versionKeys":9446,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[9425,9426],"CVE-2024-56326","PYSEC-2026-1475",[334,9426],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[9431,9432],{"type":3380,"score":5306},{"type":3343,"score":6958},[9434,9436,9438,9440,9441,9442,9443,9444],{"type":3347,"url":9435},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3361,"url":9437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3418,"url":9439},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3354,"url":6967},{"type":3347,"url":7865},{"type":3347,"url":6969},{"type":3354,"url":6973},{"type":3361,"url":9445},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[6977],{"id":335,"slug":9448,"dossier":90,"summary":9449,"aliases":9450,"sourceIds":9453,"published":9454,"modified":9455,"checkedAt":7,"severity":9456,"references":9459,"versionKeys":9465,"packageCount":32,"repositoryCount":7753},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[9451,9452],"CVE-2026-44431","PYSEC-2026-141",[335,9452],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[9457,9458],{"type":3380,"score":6290},{"type":3343,"score":6674},[9460,9462,9464],{"type":3361,"url":9461},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3361,"url":9463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3354,"url":3721},[3725,3726,3727,3728,3729,6055],{"id":336,"slug":9467,"dossier":47,"summary":9468,"aliases":9469,"sourceIds":9473,"published":9474,"modified":9475,"checkedAt":7,"severity":9476,"references":9480,"versionKeys":9498,"packageCount":32,"repositoryCount":5709},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[9470,9471,9472],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[336],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[9477,9478],{"type":3380,"score":4520},{"type":3343,"score":9479},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[9481,9483,9485,9487,9489,9491,9492,9494,9496],{"type":3361,"url":9482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":3347,"url":9484},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":3347,"url":9486},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":3347,"url":9488},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":3347,"url":9490},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":3354,"url":3785},{"type":3347,"url":9493},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":3347,"url":9495},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":3347,"url":9497},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3797,3798,3799,6027,6028,9499,9500,9501,9502],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":337,"slug":9504,"dossier":47,"summary":9505,"aliases":9506,"sourceIds":9509,"published":9510,"modified":9511,"checkedAt":7,"severity":9512,"references":9515,"versionKeys":9528,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[9507,9508],"CVE-2026-31958","PYSEC-2026-140",[337,9508],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[9513,9514],{"type":3380,"score":3515},{"type":3343,"score":4753},[9516,9518,9520,9522,9524,9525,9526],{"type":3361,"url":9517},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3361,"url":9519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3347,"url":9521},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3347,"url":9523},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3354,"url":4044},{"type":3347,"url":5606},{"type":3347,"url":9527},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[4048,4049,4050,4051],{"id":338,"slug":9530,"dossier":47,"summary":9531,"aliases":9532,"sourceIds":9535,"published":9536,"modified":9537,"checkedAt":7,"severity":9538,"references":9541,"versionKeys":9556,"packageCount":32,"repositoryCount":5709},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[9533,9534],"CVE-2026-22701","PYSEC-2026-1374",[338,9534],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[9539],{"type":3380,"score":9540},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9542,9544,9546,9548,9550,9552,9554],{"type":3347,"url":9543},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3361,"url":9545},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3347,"url":9547},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3347,"url":9549},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3354,"url":9551},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3354,"url":9553},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3361,"url":9555},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[9557,9558,9559,9560],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":339,"slug":9562,"dossier":47,"summary":9563,"aliases":9564,"sourceIds":9567,"published":9568,"modified":9569,"checkedAt":7,"severity":9570,"references":9572,"versionKeys":9585,"packageCount":32,"repositoryCount":105},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[9565,9566],"CVE-2026-33123","PYSEC-2026-3023",[339,9566],"2026-03-18T16:17:31Z","2026-09-10T03:51:00.643708515Z",[9571],{"type":3343,"score":3383},[9573,9575,9577,9579,9580,9582,9583],{"type":3347,"url":9574},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3361,"url":9576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3347,"url":9578},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3354,"url":3355},{"type":3347,"url":9581},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3354,"url":3359},{"type":3361,"url":9584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3366,3367],{"id":340,"slug":9587,"dossier":47,"summary":9588,"aliases":9589,"sourceIds":9592,"published":9593,"modified":9594,"checkedAt":7,"severity":9595,"references":9598,"versionKeys":9612,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[9590,9591],"CVE-2025-2099","PYSEC-2025-40",[340,9591],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[9596,9597],{"type":3380,"score":4442},{"type":3380,"score":3515},[9599,9601,9603,9605,9606,9608,9610],{"type":3361,"url":9600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":3347,"url":9602},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":3418,"url":9604},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":3354,"url":3453},{"type":3347,"url":9607},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":3347,"url":9609},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":3361,"url":9611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[3460],{"id":341,"slug":9614,"dossier":47,"summary":9615,"aliases":9616,"sourceIds":9619,"published":9620,"modified":9621,"checkedAt":7,"severity":9622,"references":9625,"versionKeys":9634,"packageCount":32,"repositoryCount":34},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[9617,9618],"CVE-2026-12075","PYSEC-2026-3583",[341,9618],"2026-07-31T16:51:29Z","2026-09-10T03:50:53.081739885Z",[9623],{"type":3380,"score":9624},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[9626,9628,9629,9630,9632],{"type":3347,"url":9627},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3354,"url":3950},{"type":3354,"url":4817},{"type":3361,"url":9631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3361,"url":9633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3959,3960],{"id":342,"slug":9636,"dossier":47,"summary":9637,"aliases":9638,"sourceIds":9641,"published":9642,"modified":9643,"checkedAt":7,"severity":9644,"references":9647,"versionKeys":9666,"packageCount":32,"repositoryCount":669},"ghsa-qx2g-xrx7-vfh8-91db951d","NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking",[9639,9640],"CVE-2026-72818","PYSEC-2026-3870",[342,9640],"2026-08-21T00:31:23Z","2026-09-10T12:25:44.300334208Z",[9645,9646],{"type":3380,"score":3515},{"type":3343,"score":4753},[9648,9650,9652,9654,9656,9657,9659,9661,9663,9664],{"type":3361,"url":9649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-72818",{"type":3347,"url":9651},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3704",{"type":3347,"url":9653},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3701",{"type":3347,"url":9655},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe092ed52eccae642304448bffc8d23cb301f85c1",{"type":3354,"url":3950},{"type":3347,"url":9658},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F3.9.4\u002Fnltk\u002Ftokenize\u002Fcasual.py",{"type":3347,"url":9660},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.1",{"type":3347,"url":9662},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input",{"type":3354,"url":4817},{"type":3361,"url":9665},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qx2g-xrx7-vfh8",[3958,3959,3960],{"id":343,"slug":9668,"dossier":47,"summary":8168,"aliases":9669,"sourceIds":9672,"published":9673,"modified":9674,"checkedAt":7,"severity":9675,"references":9679,"versionKeys":9693,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[9670,9671],"CVE-2024-11392","PYSEC-2024-227",[343,9671],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[9676,9678],{"type":3380,"score":9677},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3380,"score":4803},[9680,9682,9683,9684,9685,9687,9689,9691],{"type":3361,"url":9681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":3347,"url":8183},{"type":3347,"url":8185},{"type":3354,"url":3453},{"type":3347,"url":9686},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":3347,"url":9688},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":3361,"url":9690},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":3361,"url":9692},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[3460],{"id":344,"slug":9695,"dossier":47,"summary":9696,"aliases":9697,"sourceIds":9700,"published":9701,"modified":9702,"checkedAt":7,"severity":9703,"references":9707,"versionKeys":9716,"packageCount":32,"repositoryCount":32},"ghsa-r3xg-rg9j-67fv-878d1feb","Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend",[9698,9699],"CVE-2026-44018","PYSEC-2026-2144",[344,9699],"2026-06-03T21:13:32Z","2026-07-21T15:15:50.260072276Z",[9704,9706],{"type":3380,"score":9705},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3380,"score":4300},[9708,9710,9712,9713,9714],{"type":3418,"url":9709},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-r3xg-rg9j-67fv",{"type":3361,"url":9711},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44018",{"type":3354,"url":6394},{"type":3361,"url":6941},{"type":3347,"url":9715},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2144.yaml",[6402],{"id":345,"slug":9718,"dossier":47,"summary":9719,"aliases":9720,"sourceIds":9723,"published":9724,"modified":9725,"checkedAt":7,"severity":9726,"references":9732,"versionKeys":9747,"packageCount":32,"repositoryCount":34},"ghsa-r6gq-whwq-mvg9-34c83a12","NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root",[9721,9722],"CVE-2026-70626","PYSEC-2026-3732",[345,9722],"2026-08-22T15:16:21.100Z","2026-09-08T15:30:07.726015360Z",[9727,9729,9730],{"type":3380,"score":9728},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3343,"score":6804},{"type":3343,"score":9731},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9733,9735,9737,9738,9740,9741,9743,9745],{"type":3455,"url":9734},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r6gq-whwq-mvg9",{"type":3361,"url":9736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-70626",{"type":3347,"url":5526},{"type":3347,"url":9739},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1b0e519e2324bc1a273d56edee63e44d0ad85b48",{"type":3354,"url":3950},{"type":3347,"url":9742},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.4",{"type":3347,"url":9744},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3732.yaml",{"type":3361,"url":9746},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-symlink-escape-via-corpusreader",[3959,3960],{"id":346,"slug":9749,"dossier":47,"summary":9750,"aliases":9751,"sourceIds":9753,"published":9754,"modified":9755,"checkedAt":7,"severity":9756,"references":9758,"versionKeys":9767,"packageCount":32,"repositoryCount":105},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[9752],"CVE-2026-102272",[346],"2026-09-29T23:14:00Z","2026-09-29T23:30:03.855539261Z",[9757],{"type":3380,"score":6531},[9759,9761,9763,9765,9766],{"type":3347,"url":9760},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":3361,"url":9762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":3347,"url":9764},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":3354,"url":3584},{"type":3347,"url":3586},[3589],{"id":347,"slug":9769,"dossier":47,"summary":9770,"aliases":9771,"sourceIds":9775,"published":9776,"modified":9777,"checkedAt":7,"severity":9778,"references":9781,"versionKeys":9795,"packageCount":32,"repositoryCount":611},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[9772,9773,9774],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[347,9774],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[9779,9780],{"type":3380,"score":3773},{"type":3343,"score":3383},[9782,9784,9786,9788,9790,9791,9792,9793],{"type":3347,"url":9783},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3361,"url":9785},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3347,"url":9787},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3347,"url":9789},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3354,"url":4170},{"type":3347,"url":5095},{"type":3354,"url":5123},{"type":3361,"url":9794},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4174,4175,4176,4177,4178,4179,4180,4181],{"id":348,"slug":9797,"dossier":47,"summary":9798,"aliases":9799,"sourceIds":9802,"published":9803,"modified":9804,"checkedAt":7,"severity":9805,"references":9807,"versionKeys":9822,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[9800,9801],"CVE-2025-6051","PYSEC-2026-1988",[348,9801],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[9806],{"type":3380,"score":4442},[9808,9810,9812,9814,9816,9817,9819,9820],{"type":3361,"url":9809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":3347,"url":9811},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":3347,"url":9813},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":3347,"url":9815},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":3354,"url":3453},{"type":3347,"url":9818},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":3354,"url":3822},{"type":3361,"url":9821},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[3460,3461,3462,3463],{"id":349,"slug":9824,"dossier":47,"summary":9825,"aliases":9826,"sourceIds":9829,"published":9830,"modified":9831,"checkedAt":7,"severity":9832,"references":9835,"versionKeys":9847,"packageCount":32,"repositoryCount":34},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[9827,9828],"CVE-2026-66393","PYSEC-2026-3724",[349,9828],"2026-03-18T20:17:43Z","2026-09-10T03:50:40.818763364Z",[9833,9834],{"type":3343,"score":3383},{"type":3343,"score":6314},[9836,9838,9840,9842,9843,9845],{"type":3455,"url":9837},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3361,"url":9839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-66393",{"type":3347,"url":9841},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F00cdcd392142e6c745e7120c8d50a24127df5fad",{"type":3354,"url":3950},{"type":3347,"url":9844},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3724.yaml",{"type":3361,"url":9846},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-denial-of-service-via-jsontaggeddecoder",[3959,3960],{"id":350,"slug":9849,"dossier":47,"summary":9850,"aliases":9851,"sourceIds":9854,"published":9855,"modified":9856,"checkedAt":7,"severity":9857,"references":9860,"versionKeys":9873,"packageCount":32,"repositoryCount":5709},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[9852,9853],"CVE-2026-25087","PYSEC-2026-113",[350,9853],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[9858],{"type":3380,"score":9859},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[9861,9863,9865,9867,9869,9871],{"type":3361,"url":9862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":3418,"url":9864},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":3354,"url":9866},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":3347,"url":9868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":3361,"url":9870},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":3361,"url":9872},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[9874,9875,9876,9877],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":351,"slug":9879,"dossier":47,"summary":9880,"aliases":9881,"sourceIds":9884,"published":9885,"modified":9886,"checkedAt":7,"severity":9887,"references":9892,"versionKeys":9907,"packageCount":32,"repositoryCount":34},"ghsa-rhp5-r9x4-f5g2-737c7e67","NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",[9882,9883],"CVE-2026-78683","PYSEC-2026-3734",[351,9883],"2026-08-25T02:16:53.033Z","2026-09-08T16:45:04.193165862Z",[9888,9890],{"type":3343,"score":9889},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":3343,"score":9891},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9893,9895,9897,9899,9901,9902,9903,9905],{"type":3455,"url":9894},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rhp5-r9x4-f5g2",{"type":3361,"url":9896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78683",{"type":3347,"url":9898},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3631",{"type":3347,"url":9900},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ff26b3753038d937b68145daf15e9636f8451053c",{"type":3354,"url":3950},{"type":3347,"url":3986},{"type":3347,"url":9904},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3734.yaml",{"type":3361,"url":9906},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-remote-code-execution-via-unsafe-pickle-deserialization",[3959,3960],{"id":352,"slug":9909,"dossier":47,"summary":9910,"aliases":9911,"sourceIds":9915,"published":7177,"modified":9916,"checkedAt":7,"severity":9917,"references":9920,"versionKeys":9938,"packageCount":32,"repositoryCount":611},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[9912,9913,9914],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[352],"2026-09-10T03:49:48.419046410Z",[9918,9919],{"type":3380,"score":4520},{"type":3343,"score":9479},[9921,9923,9925,9927,9929,9931,9932,9934,9936],{"type":3361,"url":9922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":3347,"url":9924},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":3347,"url":9926},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":3347,"url":9928},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":3347,"url":9930},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":3354,"url":3785},{"type":3347,"url":9933},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":3347,"url":9935},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":3347,"url":9937},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[9939,9940,9941,3797,3798,3799,6027,6028,9499,9500,9501,9502],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":353,"slug":9943,"dossier":47,"summary":9944,"aliases":9945,"sourceIds":9948,"published":9949,"modified":9950,"checkedAt":7,"severity":9951,"references":9955,"versionKeys":9970,"packageCount":32,"repositoryCount":34},"ghsa-rrv8-h7p8-rx55-b07785af","NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions",[9946,9947],"CVE-2026-80205","PYSEC-2026-3750",[353,9947],"2026-08-26T11:16:39.950Z","2026-09-08T20:45:04.338061792Z",[9952,9953,9954],{"type":3380,"score":3515},{"type":3343,"score":4753},{"type":3343,"score":6314},[9956,9958,9960,9962,9964,9965,9966,9968],{"type":3455,"url":9957},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rrv8-h7p8-rx55",{"type":3361,"url":9959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80205",{"type":3347,"url":9961},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3674",{"type":3347,"url":9963},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fd8e47539317b571ab1422981f5b9653d5eae1249",{"type":3354,"url":3950},{"type":3347,"url":3986},{"type":3347,"url":9967},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3750.yaml",{"type":3361,"url":9969},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.0-redos-via-text-findall-unvalidated-regex",[3959,3960],{"id":354,"slug":9972,"dossier":47,"summary":9973,"aliases":9974,"sourceIds":9977,"published":9978,"modified":9979,"checkedAt":7,"severity":9980,"references":9985,"versionKeys":10002,"packageCount":32,"repositoryCount":32},"ghsa-v492-6xx2-p57g-b1729313","Chainlit contains an authorization bypass vulnerability",[9975,9976],"CVE-2025-68492","PYSEC-2026-1238",[354,9976],"2026-01-14T09:31:21Z","2026-07-07T17:56:13.167928474Z",[9981,9983],{"type":3380,"score":9982},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3343,"score":9984},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9986,9988,9990,9992,9993,9995,9997,9999,10000],{"type":3361,"url":9987},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68492",{"type":3347,"url":9989},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2637",{"type":3347,"url":9991},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F8f1153db439eca58ae5c50c8276ba6fdd311448e",{"type":3354,"url":3553},{"type":3347,"url":9994},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases",{"type":3347,"url":9996},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.8.5",{"type":3347,"url":9998},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN34964581",{"type":3354,"url":3561},{"type":3361,"url":10001},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v492-6xx2-p57g",[3565],{"id":355,"slug":10004,"dossier":47,"summary":10005,"aliases":10006,"sourceIds":10009,"published":10010,"modified":10011,"checkedAt":7,"severity":10012,"references":10014,"versionKeys":10023,"packageCount":32,"repositoryCount":4740},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[10007,10008],"CVE-2026-53540","PYSEC-2026-3040",[355,10008],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[10013],{"type":3380,"score":7456},[10015,10017,10018,10019,10021],{"type":3347,"url":10016},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3354,"url":4762},{"type":3354,"url":4764},{"type":3361,"url":10020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3361,"url":10022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4961,4962,4963,4768],{"id":356,"slug":10025,"dossier":47,"summary":10026,"aliases":10027,"sourceIds":10030,"published":10031,"modified":10032,"checkedAt":7,"severity":10033,"references":10035,"versionKeys":10046,"packageCount":32,"repositoryCount":4740},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[10028,10029],"CVE-2026-53537","PYSEC-2026-3041",[356,10029],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[10034],{"type":3380,"score":5358},[10036,10038,10040,10041,10043,10045],{"type":3347,"url":10037},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3361,"url":10039},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3354,"url":4762},{"type":3361,"url":10042},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3347,"url":10044},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3354,"url":4764},[4961,4962,4963,4768],{"id":357,"slug":10048,"dossier":47,"summary":10049,"aliases":10050,"sourceIds":10053,"published":10054,"modified":10055,"checkedAt":7,"severity":10056,"references":10058,"versionKeys":10071,"packageCount":32,"repositoryCount":650},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[10051,10052],"CVE-2026-41066","PYSEC-2026-87",[357,10052],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[10057],{"type":3380,"score":4686},[10059,10061,10063,10065,10067,10069],{"type":3361,"url":10060},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3361,"url":10062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3778,"url":10064},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3354,"url":10066},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3347,"url":10068},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3347,"url":10070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[10072,10073,10074],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":358,"slug":10076,"dossier":47,"summary":10077,"aliases":10078,"sourceIds":10082,"published":7177,"modified":10083,"checkedAt":7,"severity":10084,"references":10087,"versionKeys":10102,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[10079,10080,10081],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[358],"2026-06-10T17:41:15.774477397Z",[10085,10086],{"type":3380,"score":4520},{"type":3343,"score":7182},[10088,10090,10091,10092,10093,10095,10096,10098,10100],{"type":3361,"url":10089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":3347,"url":7187},{"type":3347,"url":7189},{"type":3347,"url":7191},{"type":3347,"url":10094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":3354,"url":3785},{"type":3347,"url":10097},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":3347,"url":10099},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":3347,"url":10101},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3797,3798,3799,6027,6028,9499,9500],{"id":359,"slug":10104,"dossier":47,"summary":10105,"aliases":10106,"sourceIds":10109,"published":10110,"modified":10111,"checkedAt":7,"severity":10112,"references":10114,"versionKeys":10129,"packageCount":32,"repositoryCount":697},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[10107,10108],"CVE-2026-59950","PYSEC-2026-3483",[359,10108],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[10113],{"type":3343,"score":6039},[10115,10117,10119,10121,10123,10124,10126,10127],{"type":3347,"url":10116},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3361,"url":10118},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3347,"url":10120},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3347,"url":10122},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3354,"url":6424},{"type":3347,"url":10125},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3354,"url":6428},{"type":3361,"url":10128},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[6430,6431,6432],{"id":360,"slug":10131,"dossier":90,"summary":10132,"aliases":10133,"sourceIds":10137,"published":10138,"modified":10139,"checkedAt":7,"severity":10140,"references":10142,"versionKeys":10156,"packageCount":32,"repositoryCount":4183},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[10134,10135,10136],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[360,10136],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[10141],{"type":3343,"score":4753},[10143,10145,10147,10149,10151,10152,10153,10154],{"type":3347,"url":10144},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3361,"url":10146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3347,"url":10148},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3347,"url":10150},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3354,"url":4170},{"type":3347,"url":5121},{"type":3354,"url":5123},{"type":3361,"url":10155},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":361,"slug":10158,"dossier":47,"summary":10159,"aliases":10160,"sourceIds":10163,"published":10164,"modified":10165,"checkedAt":7,"severity":10166,"references":10170,"versionKeys":10183,"packageCount":32,"repositoryCount":669},"ghsa-vp2x-qp44-57v7-6098fc6a","NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`",[10161,10162],"CVE-2026-81723","PYSEC-2026-3871",[361,10162],"2026-09-02T14:34:11Z","2026-09-10T12:25:42.010688905Z",[10167,10168],{"type":3380,"score":7456},{"type":3343,"score":10169},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[10171,10173,10175,10176,10177,10178,10180,10181],{"type":3347,"url":10172},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",{"type":3361,"url":10174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81723",{"type":3347,"url":6116},{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":10179},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-quadratic-cpu-exhaustion-via-xmlcorpusview",{"type":3354,"url":4817},{"type":3361,"url":10182},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",[3958,3959,3960],{"id":362,"slug":10185,"dossier":47,"summary":10186,"aliases":10187,"sourceIds":10190,"published":10191,"modified":10192,"checkedAt":7,"severity":10193,"references":10195,"versionKeys":10208,"packageCount":32,"repositoryCount":697},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[10188,10189],"CVE-2025-43859","PYSEC-2026-348",[362,10189],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[10194],{"type":3380,"score":7351},[10196,10198,10200,10202,10204,10206],{"type":3347,"url":10197},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3361,"url":10199},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3347,"url":10201},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3354,"url":10203},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3354,"url":10205},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3361,"url":10207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[10209],"pypi:h11@0.14.0",{"id":363,"slug":10211,"dossier":47,"summary":10212,"aliases":10213,"sourceIds":10216,"published":10217,"modified":10218,"checkedAt":7,"severity":10219,"references":10221,"versionKeys":10235,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[10214,10215],"CVE-2025-62707","PYSEC-2026-1833",[363,10215],"2025-10-22T19:40:47Z","2026-09-10T03:50:58.424138377Z",[10220],{"type":3343,"score":4280},[10222,10224,10226,10228,10230,10231,10232,10233],{"type":3347,"url":10223},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3361,"url":10225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3347,"url":10227},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3347,"url":10229},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3354,"url":3355},{"type":3347,"url":8289},{"type":3354,"url":3359},{"type":3361,"url":10234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3366],{"id":364,"slug":10237,"dossier":90,"summary":10238,"aliases":10239,"sourceIds":10241,"published":10242,"modified":10243,"checkedAt":7,"severity":10244,"references":10246,"versionKeys":10255,"packageCount":32,"repositoryCount":104},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[10240],"CVE-2026-97689",[364],"2026-09-30T14:46:18Z","2026-09-30T15:00:05.904945330Z",[10245],{"type":3343,"score":3706},[10247,10249,10251,10253,10254],{"type":3347,"url":10248},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":3361,"url":10250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":3347,"url":10252},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":3354,"url":3721},{"type":3347,"url":6053},[3725,3726,3727,3728,3729,6055,6056],{"id":365,"slug":10257,"dossier":47,"summary":10258,"aliases":10259,"sourceIds":10261,"published":10262,"modified":10263,"checkedAt":7,"severity":10264,"references":10266,"versionKeys":10275,"packageCount":32,"repositoryCount":105},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[10260],"CVE-2026-102273",[365],"2026-09-29T23:16:55Z","2026-09-29T23:30:03.873701729Z",[10265],{"type":3380,"score":6531},[10267,10269,10271,10273,10274],{"type":3347,"url":10268},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":3361,"url":10270},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":3347,"url":10272},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":3354,"url":3584},{"type":3347,"url":3586},[3589],{"id":366,"slug":10277,"dossier":47,"summary":10278,"aliases":10279,"sourceIds":10282,"published":10283,"modified":10284,"checkedAt":7,"severity":10285,"references":10288,"versionKeys":10297,"packageCount":32,"repositoryCount":621},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[10280,10281],"CVE-2026-22815","PYSEC-2026-2094",[366,10281],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[10286,10287],{"type":3343,"score":3911},{"type":3343,"score":7072},[10289,10291,10293,10295,10296],{"type":3418,"url":10290},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3361,"url":10292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3418,"url":10294},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3354,"url":3520},{"type":3361,"url":3667},[3524,3525,3526,3527,3528,3529,3530,3531],{"id":367,"slug":10299,"dossier":47,"summary":10300,"aliases":10301,"sourceIds":10304,"published":10305,"modified":10306,"checkedAt":7,"severity":10307,"references":10309,"versionKeys":10320,"packageCount":32,"repositoryCount":32},"ghsa-w3fx-mc44-mf6j-8eb1f0ed","Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution",[10302,10303],"CVE-2026-45018","PYSEC-2026-3812",[367,10303],"2026-08-25T19:19:28Z","2026-09-10T12:26:01.565580392Z",[10308],{"type":3380,"score":4607},[10310,10312,10313,10314,10315,10316,10318],{"type":3347,"url":10311},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3347,"url":8113},{"type":3354,"url":3553},{"type":3347,"url":8118},{"type":3354,"url":3561},{"type":3361,"url":10317},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3361,"url":10319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45018",[3565],{"id":368,"slug":10322,"dossier":47,"summary":10323,"aliases":10324,"sourceIds":10327,"published":10328,"modified":10329,"checkedAt":7,"severity":10330,"references":10335,"versionKeys":10348,"packageCount":32,"repositoryCount":669},"ghsa-w3v8-gmh9-3wv7-b77729c9","NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions",[10325,10326],"CVE-2026-80206","PYSEC-2026-3751",[368,10326],"2026-08-26T11:16:40.103Z","2026-09-08T20:45:04.333988177Z",[10331,10333],{"type":3343,"score":10332},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3343,"score":10334},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[10336,10338,10340,10342,10343,10344,10346],{"type":3455,"url":10337},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-w3v8-gmh9-3wv7",{"type":3361,"url":10339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80206",{"type":3347,"url":10341},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0072ea2fb8be22e038a36e887b7061bb6b9339d9",{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":10345},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3751.yaml",{"type":3361,"url":10347},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.2-regular-expression-denial-of-service-via-tgrep",[3958,3959,3960],{"id":369,"slug":10350,"dossier":47,"summary":10351,"aliases":10352,"sourceIds":10354,"published":10355,"modified":10356,"checkedAt":7,"severity":10357,"references":10360,"versionKeys":10369,"packageCount":32,"repositoryCount":669},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[10353],"CVE-2026-102274",[369],"2026-09-29T18:23:01Z","2026-09-29T18:30:41.171809330Z",[10358],{"type":3380,"score":10359},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[10361,10363,10365,10367,10368],{"type":3347,"url":10362},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":3361,"url":10364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":3347,"url":10366},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":3354,"url":3584},{"type":3347,"url":3586},[3588,3589,3590],{"id":370,"slug":10371,"dossier":47,"summary":10372,"aliases":10373,"sourceIds":10376,"published":10377,"modified":10378,"checkedAt":7,"severity":10379,"references":10381,"versionKeys":10389,"packageCount":32,"repositoryCount":697},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[10374,10375],"CVE-2026-48525","PYSEC-2026-178",[370,10375],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[10380],{"type":3380,"score":3480},[10382,10384,10386,10387],{"type":3455,"url":10383},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3361,"url":10385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3354,"url":3584},{"type":3347,"url":10388},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[3588,3590],{"id":371,"slug":10391,"dossier":47,"summary":10392,"aliases":10393,"sourceIds":10396,"published":10397,"modified":10398,"checkedAt":7,"severity":10399,"references":10402,"versionKeys":10419,"packageCount":32,"repositoryCount":5709},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[10394,10395],"CVE-2025-68146","PYSEC-2026-1375",[371,10395],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[10400],{"type":3380,"score":10401},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[10403,10405,10407,10408,10410,10412,10414,10415,10417],{"type":3347,"url":10404},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3347,"url":10406},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3354,"url":9551},{"type":3347,"url":10409},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3347,"url":10411},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3347,"url":10413},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3354,"url":9553},{"type":3361,"url":10416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3361,"url":10418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[9557,9558,9559,9560],{"id":372,"slug":10421,"dossier":47,"summary":10422,"aliases":10423,"sourceIds":10426,"published":10427,"modified":10428,"checkedAt":7,"severity":10429,"references":10431,"versionKeys":10445,"packageCount":32,"repositoryCount":105},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[10424,10425],"CVE-2026-27025","PYSEC-2026-3024",[372,10425],"2026-02-18T22:41:13Z","2026-09-10T03:50:36.045929384Z",[10430],{"type":3343,"score":4578},[10432,10434,10436,10438,10440,10441,10442,10443],{"type":3347,"url":10433},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3361,"url":10435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3347,"url":10437},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3347,"url":10439},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3354,"url":3355},{"type":3347,"url":6374},{"type":3354,"url":3359},{"type":3361,"url":10444},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3366,3367],{"id":373,"slug":10447,"dossier":47,"summary":10448,"aliases":10449,"sourceIds":10453,"published":10454,"modified":10455,"checkedAt":7,"severity":10456,"references":10459,"versionKeys":10497,"packageCount":32,"repositoryCount":611},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[10450,10451,10452],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[373,10452],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[10457,10458],{"type":3380,"score":3515},{"type":3343,"score":4753},[10460,10462,10464,10466,10468,10469,10471,10473,10475,10477,10479,10481,10482,10484,10486,10488,10489,10491,10493,10495],{"type":3347,"url":10461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3361,"url":10463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3347,"url":10465},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3347,"url":10467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3354,"url":4170},{"type":3347,"url":10470},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3347,"url":10472},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3347,"url":10474},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3361,"url":10476},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3361,"url":10478},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3361,"url":10480},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3361,"url":6830},{"type":3361,"url":10483},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3361,"url":10485},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3361,"url":10487},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3361,"url":4210},{"type":3361,"url":10490},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3361,"url":10492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3361,"url":10494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3361,"url":10496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4174,4175,4176,4177,4178,4179,4180,4181],{"id":374,"slug":10499,"dossier":47,"summary":10500,"aliases":10501,"sourceIds":10504,"published":10505,"modified":10506,"checkedAt":7,"severity":10507,"references":10509,"versionKeys":10522,"packageCount":32,"repositoryCount":105},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[10502,10503],"CVE-2026-48735","PYSEC-2026-3025",[374,10503],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[10508],{"type":3343,"score":4578},[10510,10512,10514,10516,10517,10519,10520],{"type":3347,"url":10511},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3361,"url":10513},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3347,"url":10515},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3354,"url":3355},{"type":3347,"url":10518},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3354,"url":3359},{"type":3361,"url":10521},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3366,3367],{"id":375,"slug":10524,"dossier":47,"summary":10525,"aliases":10526,"sourceIds":10530,"published":10531,"modified":10532,"checkedAt":7,"severity":10533,"references":10536,"versionKeys":10545,"packageCount":32,"repositoryCount":611},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[10527,10528,10529],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[375,10529],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[10534,10535],{"type":3380,"score":3773},{"type":3343,"score":3383},[10537,10539,10541,10543,10544],{"type":3361,"url":10538},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3361,"url":10540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3347,"url":10542},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3354,"url":4170},{"type":3361,"url":5095},[4174,4175,4176,4177,4178,4179,4180,4181],{"id":376,"slug":10547,"dossier":47,"summary":10548,"aliases":10549,"sourceIds":10552,"published":10553,"modified":10554,"checkedAt":7,"severity":10555,"references":10558,"versionKeys":10571,"packageCount":32,"repositoryCount":650},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[10550,10551],"CVE-2026-24486","PYSEC-2026-1852",[376,10551],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[10556],{"type":3380,"score":10557},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[10559,10561,10563,10565,10566,10568,10569],{"type":3347,"url":10560},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3361,"url":10562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3347,"url":10564},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3354,"url":4762},{"type":3347,"url":10567},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3354,"url":4764},{"type":3361,"url":10570},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4961,4962,4768],{"id":377,"slug":10573,"dossier":47,"summary":10574,"aliases":10575,"sourceIds":10578,"published":10579,"modified":10580,"checkedAt":7,"severity":10581,"references":10583,"versionKeys":10605,"packageCount":32,"repositoryCount":621},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[10576,10577],"CVE-2026-48818","PYSEC-2026-2281",[377,10577],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[10582],{"type":3380,"score":4686},[10584,10586,10587,10589,10591,10593,10595,10597,10599,10601,10603],{"type":3361,"url":10585},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3354,"url":5659},{"type":3347,"url":10588},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3347,"url":10590},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3361,"url":10592},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3361,"url":10594},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3361,"url":10596},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3361,"url":10598},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3778,"url":10600},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3418,"url":10602},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3418,"url":10604},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3499,3500,3501,5666,5667,5668,5832,5833,5834],{"id":378,"slug":10607,"dossier":47,"summary":8168,"aliases":10608,"sourceIds":10611,"published":8173,"modified":10612,"checkedAt":7,"severity":10613,"references":10616,"versionKeys":10630,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[10609,10610],"CVE-2024-11393","PYSEC-2024-228",[378,10610],"2026-09-10T03:50:55.987633957Z",[10614,10615],{"type":3380,"score":8177},{"type":3380,"score":4803},[10617,10619,10620,10621,10622,10624,10626,10628],{"type":3361,"url":10618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":3347,"url":8183},{"type":3347,"url":8185},{"type":3354,"url":3453},{"type":3347,"url":10623},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":3347,"url":10625},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":3361,"url":10627},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":3361,"url":10629},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[3460],{"id":379,"slug":10632,"dossier":47,"summary":10633,"aliases":10634,"sourceIds":10637,"published":10638,"modified":10639,"checkedAt":7,"severity":10640,"references":10643,"versionKeys":10655,"packageCount":32,"repositoryCount":669},"ghsa-ww6m-cw3f-q94g-c2ac9639","NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'",[10635,10636],"CVE-2026-81722","PYSEC-2026-3738",[379,10636],"2026-08-27T17:21:02.800Z","2026-09-10T03:50:54.572733114Z",[10641,10642],{"type":3343,"score":3911},{"type":3343,"score":6314},[10644,10646,10648,10649,10650,10651,10653],{"type":3455,"url":10645},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ww6m-cw3f-q94g",{"type":3361,"url":10647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81722",{"type":3347,"url":6116},{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":10652},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3738.yaml",{"type":3361,"url":10654},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-porterstemmer-before-3.10.3-quadratic-time-dos",[3958,3959,3960],{"id":380,"slug":10657,"dossier":47,"summary":10658,"aliases":10659,"sourceIds":10661,"published":10662,"modified":10663,"checkedAt":7,"severity":10664,"references":10667,"versionKeys":10679,"packageCount":32,"repositoryCount":105},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[10660],"CVE-2026-91991",[380],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[10665],{"type":3343,"score":10666},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10668,10670,10671,10673,10675,10677,10678],{"type":3347,"url":10669},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":3347,"url":5870},{"type":3347,"url":10672},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":3347,"url":10674},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":3347,"url":10676},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":3354,"url":4044},{"type":3347,"url":5877},[4052,4053],{"id":381,"slug":10681,"dossier":47,"summary":10682,"aliases":10683,"sourceIds":10686,"published":10687,"modified":10688,"checkedAt":7,"severity":10689,"references":10692,"versionKeys":10704,"packageCount":32,"repositoryCount":105},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[10684,10685],"CVE-2026-41314","PYSEC-2026-3026",[381,10685],"2026-04-16T21:30:25Z","2026-09-10T03:51:03.926113177Z",[10690,10691],{"type":3380,"score":4379},{"type":3343,"score":4381},[10693,10695,10697,10698,10699,10700,10701,10702],{"type":3347,"url":10694},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3361,"url":10696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3347,"url":5728},{"type":3347,"url":5730},{"type":3354,"url":3355},{"type":3347,"url":4393},{"type":3354,"url":3359},{"type":3361,"url":10703},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3366,3367],{"id":382,"slug":10706,"dossier":47,"summary":10707,"aliases":10708,"sourceIds":10712,"published":10713,"modified":10714,"checkedAt":7,"severity":10715,"references":10720,"versionKeys":10736,"packageCount":32,"repositoryCount":105},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[10709,10710,10711],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[382],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[10716,10718],{"type":3380,"score":10717},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":3343,"score":10719},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10721,10723,10725,10727,10729,10730,10732,10734],{"type":3361,"url":10722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":3347,"url":10724},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":3347,"url":10726},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":3347,"url":10728},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":3354,"url":3785},{"type":3347,"url":10731},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":3347,"url":10733},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":3347,"url":10735},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3797,3798],{"id":383,"slug":10738,"dossier":47,"summary":10739,"aliases":10740,"sourceIds":10743,"published":10744,"modified":10745,"checkedAt":7,"severity":10746,"references":10749,"versionKeys":10764,"packageCount":32,"repositoryCount":34},"ghsa-x5ph-mj9p-rfr8-05f43684","NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read",[10741,10742],"CVE-2026-63312","PYSEC-2026-3730",[383,10742],"2026-08-22T15:16:19.367Z","2026-09-08T15:46:56.600781081Z",[10747,10748],{"type":3343,"score":5489},{"type":3343,"score":5491},[10750,10752,10754,10756,10758,10759,10760,10762],{"type":3455,"url":10751},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x5ph-mj9p-rfr8",{"type":3361,"url":10753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63312",{"type":3347,"url":10755},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3588",{"type":3347,"url":10757},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F674ea75accdf08eca3782dee0a9c4ed7e0d0025b",{"type":3354,"url":3950},{"type":3347,"url":3986},{"type":3347,"url":10761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3730.yaml",{"type":3361,"url":10763},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-streambackedcorpusview-bypasses-pathsec-enforce-arbitrary-file-read",[3959,3960],{"id":384,"slug":10766,"dossier":47,"summary":10767,"aliases":10768,"sourceIds":10771,"published":10772,"modified":10773,"checkedAt":7,"severity":10774,"references":10776,"versionKeys":10783,"packageCount":32,"repositoryCount":621},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[10769,10770],"CVE-2026-48817","PYSEC-2026-2280",[384,10770],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[10775],{"type":3380,"score":3657},[10777,10779,10781,10782],{"type":3361,"url":10778},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3361,"url":10780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3354,"url":5659},{"type":3361,"url":10598},[3499,3500,3501,5666,5667,5668,5832,5833,5834],{"id":385,"slug":10785,"dossier":47,"summary":10786,"aliases":10787,"sourceIds":10790,"published":10791,"modified":10792,"checkedAt":7,"severity":10793,"references":10795,"versionKeys":10810,"packageCount":32,"repositoryCount":105},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[10788,10789],"CVE-2026-27888","PYSEC-2026-3027",[385,10789],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[10794],{"type":3343,"score":4280},[10796,10798,10800,10802,10804,10805,10807,10808],{"type":3347,"url":10797},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3361,"url":10799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3347,"url":10801},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3347,"url":10803},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3354,"url":3355},{"type":3347,"url":10806},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3354,"url":3359},{"type":3361,"url":10809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3366,3367],{"id":386,"slug":10812,"dossier":47,"summary":10813,"aliases":10814,"sourceIds":10817,"published":10818,"modified":10819,"checkedAt":7,"severity":10820,"references":10823,"versionKeys":10838,"packageCount":32,"repositoryCount":105},"ghsa-x8wg-4xgc-vr54-f9dfa3b4","Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root",[10815,10816],"CVE-2026-71492","PYSEC-2026-3810",[386,10816],"2026-09-02T14:38:24Z","2026-09-10T12:25:29.001076918Z",[10821],{"type":3343,"score":10822},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10824,10826,10828,10830,10832,10833,10835,10836],{"type":3347,"url":10825},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",{"type":3361,"url":10827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71492",{"type":3347,"url":10829},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F77",{"type":3347,"url":10831},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fa215f6d779966945c56e0af5abed1ae5916fd9d3",{"type":3354,"url":7889},{"type":3347,"url":10834},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.5",{"type":3354,"url":7891},{"type":3361,"url":10837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",[7895],{"id":387,"slug":10840,"dossier":47,"summary":10841,"aliases":10842,"sourceIds":10845,"published":10846,"modified":10847,"checkedAt":7,"severity":10848,"references":10851,"versionKeys":10863,"packageCount":32,"repositoryCount":669},"ghsa-x99w-6fgc-pmfw-512b3e4e","NLTK: Allowlisted pickle loaders still permit code execution in current source",[10843,10844],"CVE-2026-79657","PYSEC-2026-3735",[387,10844],"2026-08-25T12:16:28.870Z","2026-09-08T17:00:04.111203038Z",[10849,10850],{"type":3343,"score":4605},{"type":3343,"score":8740},[10852,10854,10856,10857,10858,10859,10861],{"type":3455,"url":10853},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x99w-6fgc-pmfw",{"type":3361,"url":10855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79657",{"type":3347,"url":4810},{"type":3354,"url":3950},{"type":3347,"url":3952},{"type":3347,"url":10860},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3735.yaml",{"type":3361,"url":10862},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization",[3958,3959,3960],{"id":388,"slug":10865,"dossier":47,"summary":10866,"aliases":10867,"sourceIds":10869,"published":10870,"modified":10871,"checkedAt":7,"severity":10872,"references":10874,"versionKeys":10886,"packageCount":32,"repositoryCount":42},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[10868],"CVE-2026-80047",[388],"2026-09-01T15:31:13Z","2026-10-01T00:00:04.718526734Z",[10873],{"type":3380,"score":5306},[10875,10877,10879,10881,10882,10884],{"type":3361,"url":10876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":3347,"url":10878},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":3347,"url":10880},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":3354,"url":3453},{"type":3347,"url":10883},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":3347,"url":10885},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",[3461,3462,3463,3464,3465,3466,3467,3468,10887],"pypi:transformers@5.8.0",{"id":389,"slug":10889,"dossier":47,"summary":10890,"aliases":10891,"sourceIds":10894,"published":10895,"modified":10896,"checkedAt":7,"severity":10897,"references":10900,"versionKeys":10906,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[10892,10893],"CVE-2026-54274","PYSEC-2026-2108",[389,10893],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[10898,10899],{"type":3343,"score":4280},{"type":3380,"score":3515},[10901,10903,10904],{"type":3361,"url":10902},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3354,"url":3520},{"type":3418,"url":10905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3524,3525,3526,3527,3528,3529,3530,3531,3532],{"id":390,"slug":10908,"dossier":47,"summary":10909,"aliases":10910,"sourceIds":10914,"published":10915,"modified":10916,"checkedAt":7,"severity":10917,"references":10919,"versionKeys":10933,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[10911,10912,10913],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[390,10913],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[10918],{"type":3380,"score":7213},[10920,10922,10924,10926,10928,10930,10931],{"type":3361,"url":10921},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3361,"url":10923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3347,"url":10925},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3418,"url":10927},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3347,"url":10929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3354,"url":4170},{"type":3347,"url":10932},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[4177],{"id":391,"slug":10935,"dossier":47,"summary":10936,"aliases":10937,"sourceIds":10940,"published":10941,"modified":10942,"checkedAt":7,"severity":10943,"references":10945,"versionKeys":10953,"packageCount":32,"repositoryCount":697},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[10938,10939],"CVE-2026-48526","PYSEC-2026-179",[391,10939],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[10944],{"type":3380,"score":6531},[10946,10948,10950,10951],{"type":3455,"url":10947},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3361,"url":10949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3354,"url":3584},{"type":3347,"url":10952},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[3588,3590],{"id":392,"slug":10955,"dossier":47,"summary":10956,"aliases":10957,"sourceIds":10960,"published":10961,"modified":10962,"checkedAt":7,"severity":10963,"references":10965,"versionKeys":10974,"packageCount":32,"repositoryCount":34},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[10958,10959],"CVE-2026-12074","PYSEC-2026-3584",[392,10959],"2026-07-31T16:50:41Z","2026-09-10T03:50:53.172593126Z",[10964],{"type":3380,"score":4686},[10966,10968,10969,10970,10972],{"type":3347,"url":10967},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3354,"url":3950},{"type":3354,"url":4817},{"type":3361,"url":10971},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3361,"url":10973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3959,3960],{"id":393,"slug":10976,"dossier":90,"summary":10977,"aliases":10978,"sourceIds":10982,"published":10983,"modified":10984,"checkedAt":7,"severity":10985,"references":10988,"versionKeys":10999,"packageCount":32,"repositoryCount":4183},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[10979,10980,10981],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[393,10981],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[10986],{"type":3380,"score":10987},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[10989,10991,10993,10995,10997,10998],{"type":3455,"url":10990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3361,"url":10992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3418,"url":10994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3418,"url":10996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3354,"url":4170},{"type":3361,"url":5121},[4174,4175,4176,4177,4178,4179,4180,4181,4182],{"id":394,"slug":11001,"dossier":47,"summary":11002,"aliases":11003,"sourceIds":11006,"published":11007,"modified":11008,"checkedAt":7,"severity":11009,"references":11012,"versionKeys":11025,"packageCount":32,"repositoryCount":103},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[11004,11005],"CVE-2026-9856","PYSEC-2026-3929",[394,11005],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[11010],{"type":3380,"score":11011},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[11013,11015,11017,11019,11020,11022,11023],{"type":3361,"url":11014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":3347,"url":11016},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":3347,"url":11018},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":3354,"url":3453},{"type":3347,"url":11021},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":3354,"url":3822},{"type":3361,"url":11024},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[3460,3461,3462,3463,3464,3465,3466,3467,3468,10887],{"id":395,"slug":11027,"dossier":47,"summary":11028,"aliases":11029,"sourceIds":11032,"published":11033,"modified":11034,"checkedAt":7,"severity":11035,"references":11037,"versionKeys":11045,"packageCount":32,"repositoryCount":32},"ghsa-xvp8-3mhv-424c-5f064018","lxml-html-clean has \u003Cbase> tag injection through default Cleaner configuration",[11030,11031],"CVE-2026-28350","PYSEC-2026-2202",[395,11031],"2026-03-02T19:35:52Z","2026-09-10T03:50:41.927155700Z",[11036],{"type":3380,"score":7765},[11038,11040,11042,11044],{"type":3455,"url":11039},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-xvp8-3mhv-424c",{"type":3361,"url":11041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28350",{"type":3418,"url":11043},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F9c5612ca33b941eec4178abf8a5294b103403f34",{"type":3354,"url":4341},[4349],{"id":396,"slug":11047,"dossier":47,"summary":83,"aliases":11048,"sourceIds":11050,"published":11051,"modified":11052,"checkedAt":7,"severity":11053,"references":11055,"versionKeys":11061,"packageCount":32,"repositoryCount":697},"pysec-2025-183-08217171",[11049],"CVE-2025-45768",[396],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[11054],{"type":3380,"score":9859},[11056,11058,11060],{"type":3347,"url":11057},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3778,"url":11059},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3354,"url":3584},[3588,3590],{"id":397,"slug":11063,"dossier":47,"summary":83,"aliases":11064,"sourceIds":11067,"published":11068,"modified":11069,"checkedAt":7,"severity":11070,"references":11072,"versionKeys":11081,"packageCount":32,"repositoryCount":105},"pysec-2025-198-62b25ed4",[11065,11066],"BIT-pytorch-2025-46148","CVE-2025-46148",[397],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[11071],{"type":3380,"score":6290},[11073,11075,11077,11079],{"type":3361,"url":11074},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":3361,"url":11076},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3778,"url":11078},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":3418,"url":11080},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3797,3798],{"id":398,"slug":11083,"dossier":47,"summary":83,"aliases":11084,"sourceIds":11087,"published":11088,"modified":11089,"checkedAt":7,"severity":11090,"references":11092,"versionKeys":11098,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[11085,11086],"BIT-pytorch-2025-46149","CVE-2025-46149",[398],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[11091],{"type":3380,"score":6290},[11093,11094,11096],{"type":3361,"url":11074},{"type":3778,"url":11095},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":3418,"url":11097},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3798],{"id":399,"slug":11100,"dossier":47,"summary":83,"aliases":11101,"sourceIds":11104,"published":11105,"modified":11106,"checkedAt":7,"severity":11107,"references":11109,"versionKeys":11117,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[11102,11103],"BIT-pytorch-2025-46150","CVE-2025-46150",[399],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[11108],{"type":3380,"score":6290},[11110,11111,11113,11115],{"type":3361,"url":11074},{"type":3778,"url":11112},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3778,"url":11114},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":3418,"url":11116},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3798],{"id":400,"slug":11119,"dossier":47,"summary":83,"aliases":11120,"sourceIds":11123,"published":11124,"modified":11125,"checkedAt":7,"severity":11126,"references":11128,"versionKeys":11134,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[11121,11122],"BIT-pytorch-2025-46152","CVE-2025-46152",[400],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[11127],{"type":3380,"score":3480},[11129,11130,11132],{"type":3361,"url":11074},{"type":3778,"url":11131},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":3418,"url":11133},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3798],{"id":401,"slug":11136,"dossier":47,"summary":83,"aliases":11137,"sourceIds":11140,"published":11141,"modified":11142,"checkedAt":7,"severity":11143,"references":11145,"versionKeys":11155,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[11138,11139],"BIT-pytorch-2025-46153","CVE-2025-46153",[401],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[11144],{"type":3380,"score":6290},[11146,11148,11149,11151,11153],{"type":3347,"url":11147},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":3361,"url":11074},{"type":3361,"url":11150},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3778,"url":11152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":3418,"url":11154},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3798],{"id":402,"slug":11157,"dossier":47,"summary":83,"aliases":11158,"sourceIds":11161,"published":11162,"modified":11163,"checkedAt":7,"severity":11164,"references":11166,"versionKeys":11171,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[11159,11160],"BIT-pytorch-2025-55551","CVE-2025-55551",[402],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[11165],{"type":3380,"score":3515},[11167,11169],{"type":3361,"url":11168},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3778,"url":11170},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3797,3798,3799,6027,6028,9499],{"id":403,"slug":11173,"dossier":47,"summary":83,"aliases":11174,"sourceIds":11177,"published":11178,"modified":11179,"checkedAt":7,"severity":11180,"references":11182,"versionKeys":11186,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[11175,11176],"BIT-pytorch-2025-55552","CVE-2025-55552",[403],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[11181],{"type":3380,"score":3515},[11183,11184],{"type":3361,"url":11168},{"type":3778,"url":11185},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3797,3798,3799,6027,6028,9499],{"id":404,"slug":11188,"dossier":47,"summary":83,"aliases":11189,"sourceIds":11192,"published":11193,"modified":11194,"checkedAt":7,"severity":11195,"references":11197,"versionKeys":11203,"packageCount":32,"repositoryCount":697},"pysec-2025-205-fd5e58fd",[11190,11191],"BIT-pytorch-2025-55553","CVE-2025-55553",[404],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[11196],{"type":3380,"score":3515},[11198,11199,11201],{"type":3361,"url":11168},{"type":3778,"url":11200},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":3418,"url":11202},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3797,3798,3799],{"id":405,"slug":11205,"dossier":47,"summary":83,"aliases":11206,"sourceIds":11209,"published":11210,"modified":11211,"checkedAt":7,"severity":11212,"references":11214,"versionKeys":11218,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[11207,11208],"BIT-pytorch-2025-55554","CVE-2025-55554",[405],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[11213],{"type":3380,"score":3480},[11215,11216],{"type":3361,"url":11168},{"type":3778,"url":11217},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3797,3798,3799,6027,6028,9499],{"id":406,"slug":11220,"dossier":47,"summary":83,"aliases":11221,"sourceIds":11224,"published":11225,"modified":11226,"checkedAt":7,"severity":11227,"references":11229,"versionKeys":11235,"packageCount":32,"repositoryCount":697},"pysec-2025-207-2abef3fc",[11222,11223],"BIT-pytorch-2025-55557","CVE-2025-55557",[406],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[11228],{"type":3380,"score":3515},[11230,11231,11233],{"type":3361,"url":11168},{"type":3778,"url":11232},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":3418,"url":11234},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3797,3798,3799],{"id":407,"slug":11237,"dossier":47,"summary":83,"aliases":11238,"sourceIds":11241,"published":11242,"modified":11243,"checkedAt":7,"severity":11244,"references":11246,"versionKeys":11252,"packageCount":32,"repositoryCount":697},"pysec-2025-208-6e93fe9d",[11239,11240],"BIT-pytorch-2025-55558","CVE-2025-55558",[407],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[11245],{"type":3380,"score":3515},[11247,11248,11250],{"type":3361,"url":11168},{"type":3778,"url":11249},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":3418,"url":11251},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3797,3798,3799],{"id":408,"slug":11254,"dossier":47,"summary":83,"aliases":11255,"sourceIds":11258,"published":11259,"modified":11260,"checkedAt":7,"severity":11261,"references":11263,"versionKeys":11269,"packageCount":32,"repositoryCount":697},"pysec-2025-209-e6f352b0",[11256,11257],"BIT-pytorch-2025-55560","CVE-2025-55560",[408],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[11262],{"type":3380,"score":3515},[11264,11265,11267],{"type":3361,"url":11168},{"type":3778,"url":11266},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":3418,"url":11268},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3797,3798,3799],{"id":409,"slug":11271,"dossier":47,"summary":83,"aliases":11272,"sourceIds":11274,"published":11275,"modified":11276,"checkedAt":7,"severity":11277,"references":11279,"versionKeys":11282,"packageCount":32,"repositoryCount":669},"pysec-2025-211-d8bd15de",[11273],"CVE-2025-14920",[409],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[11278],{"type":3380,"score":3446},[11280],{"type":3361,"url":11281},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[3460,3461,3462,3463,3464],{"id":410,"slug":11284,"dossier":47,"summary":83,"aliases":11285,"sourceIds":11287,"published":11288,"modified":11289,"checkedAt":7,"severity":11290,"references":11292,"versionKeys":11295,"packageCount":32,"repositoryCount":669},"pysec-2025-212-a011b97d",[11286],"CVE-2025-14921",[410],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[11291],{"type":3380,"score":3446},[11293],{"type":3361,"url":11294},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[3460,3461,3462,3463,3464],{"id":411,"slug":11297,"dossier":47,"summary":83,"aliases":11298,"sourceIds":11300,"published":11301,"modified":11302,"checkedAt":7,"severity":11303,"references":11305,"versionKeys":11308,"packageCount":32,"repositoryCount":669},"pysec-2025-213-9043dc9b",[11299],"CVE-2025-14924",[411],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[11304],{"type":3380,"score":3446},[11306],{"type":3361,"url":11307},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[3460,3461,3462,3463,3464],{"id":412,"slug":11310,"dossier":47,"summary":83,"aliases":11311,"sourceIds":11313,"published":11314,"modified":11315,"checkedAt":7,"severity":11316,"references":11318,"versionKeys":11321,"packageCount":32,"repositoryCount":669},"pysec-2025-214-eb241255",[11312],"CVE-2025-14926",[412],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[11317],{"type":3380,"score":3446},[11319],{"type":3361,"url":11320},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[3460,3461,3462,3463,3464],{"id":413,"slug":11323,"dossier":47,"summary":83,"aliases":11324,"sourceIds":11326,"published":11327,"modified":11328,"checkedAt":7,"severity":11329,"references":11331,"versionKeys":11334,"packageCount":32,"repositoryCount":669},"pysec-2025-215-6064f491",[11325],"CVE-2025-14927",[413],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[11330],{"type":3380,"score":3446},[11332],{"type":3361,"url":11333},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[3460,3461,3462,3463,3464],{"id":414,"slug":11336,"dossier":47,"summary":83,"aliases":11337,"sourceIds":11339,"published":11340,"modified":11341,"checkedAt":7,"severity":11342,"references":11344,"versionKeys":11347,"packageCount":32,"repositoryCount":669},"pysec-2025-216-5708ed01",[11338],"CVE-2025-14928",[414],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[11343],{"type":3380,"score":3446},[11345],{"type":3361,"url":11346},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[3460,3461,3462,3463,3464],{"id":415,"slug":11349,"dossier":47,"summary":83,"aliases":11350,"sourceIds":11352,"published":11353,"modified":11354,"checkedAt":7,"severity":11355,"references":11357,"versionKeys":11360,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[11351],"CVE-2025-14929",[415],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[11356],{"type":3380,"score":3446},[11358],{"type":3361,"url":11359},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[3460,3461,3462,3463,3464,3465,3466,3467,3468],{"id":416,"slug":11362,"dossier":47,"summary":83,"aliases":11363,"sourceIds":11365,"published":11366,"modified":11367,"checkedAt":7,"severity":11368,"references":11370,"versionKeys":11373,"packageCount":32,"repositoryCount":631},"pysec-2025-218-39811fc3",[11364],"CVE-2025-14930",[416],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[11369],{"type":3380,"score":3446},[11371],{"type":3361,"url":11372},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[3460,3461,3462,3463,3464,3465],{"id":417,"slug":11375,"dossier":47,"summary":83,"aliases":11376,"sourceIds":11379,"published":11380,"modified":11381,"checkedAt":7,"severity":11382,"references":11384,"versionKeys":11395,"packageCount":32,"repositoryCount":11396},"pysec-2026-139-96951ff6",[11377,11378],"BIT-pytorch-2026-4538","CVE-2026-4538",[417],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[11383],{"type":3380,"score":5306},[11385,11387,11389,11391,11393],{"type":3347,"url":11386},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":3361,"url":11388},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":3361,"url":11390},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3778,"url":11392},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":3418,"url":11394},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[9939,3797,3798,3799,6027,6028,9499,9500,9501,9502],14,{"id":418,"slug":11398,"dossier":47,"summary":83,"aliases":11399,"sourceIds":11401,"published":11402,"modified":11403,"checkedAt":7,"severity":11404,"references":11406,"versionKeys":11409,"packageCount":32,"repositoryCount":34},"pysec-2026-2085-e081ac1d",[11400],"CVE-2026-12252",[418],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[11405],{"type":3380,"score":3446},[11407],{"type":3455,"url":11408},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3959,3960],{"id":419,"slug":11411,"dossier":47,"summary":83,"aliases":11412,"sourceIds":11415,"published":11416,"modified":11417,"checkedAt":7,"severity":11418,"references":11420,"versionKeys":11425,"packageCount":32,"repositoryCount":105},"pysec-2026-2120-174938a3",[11413,11414],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[419],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[11419],{"type":3380,"score":4607},[11421,11423],{"type":3361,"url":11422},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":3418,"url":11424},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[3897,3898],{"id":420,"slug":11427,"dossier":90,"summary":83,"aliases":11428,"sourceIds":11431,"published":11432,"modified":11433,"checkedAt":7,"severity":11434,"references":11437,"versionKeys":11452,"packageCount":32,"repositoryCount":4183},"pysec-2026-2132-627bf7c7",[11429,11430],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[420],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[11435],{"type":3380,"score":11436},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[11438,11440,11442,11444,11446,11448,11450],{"type":3347,"url":11439},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":3347,"url":11441},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":3361,"url":11443},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":3361,"url":11445},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3778,"url":11447},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":3418,"url":11449},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3455,"url":11451},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[11453,11454,11455,11456,11457,11458],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":421,"slug":11460,"dossier":47,"summary":83,"aliases":11461,"sourceIds":11466,"published":11467,"modified":11468,"checkedAt":7,"severity":11469,"references":11471,"versionKeys":11487,"packageCount":32,"repositoryCount":5709},"pysec-2026-2286-8795b007",[11462,11463,11464,11465],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[421],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[11470],{"type":3380,"score":4803},[11472,11474,11476,11477,11479,11481,11483,11485],{"type":3347,"url":11473},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":3347,"url":11475},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":3361,"url":8320},{"type":3361,"url":11478},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":3361,"url":11480},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3778,"url":11482},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3778,"url":11484},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":3418,"url":11486},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3797,3798,3799,6027,6028,9499,9500,9501,9502],{"id":422,"slug":11489,"dossier":47,"summary":83,"aliases":11490,"sourceIds":11492,"published":11493,"modified":11494,"checkedAt":7,"severity":11495,"references":11498,"versionKeys":11501,"packageCount":32,"repositoryCount":34},"pysec-2026-3954-37000510",[11491],"CVE-2026-12261",[422],"2026-08-07T07:16:26.377Z","2026-09-10T13:00:04.157935205Z",[11496],{"type":3380,"score":11497},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[11499],{"type":3778,"url":11500},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8b8c381e-08a8-4e4f-bb46-a320c96a364f",[3959,3960],{"id":423,"slug":11503,"dossier":47,"summary":83,"aliases":11504,"sourceIds":11506,"published":11507,"modified":11508,"checkedAt":7,"severity":11509,"references":11512,"versionKeys":11515,"packageCount":32,"repositoryCount":34},"pysec-2026-3955-281f9a73",[11505],"CVE-2026-12372",[423],"2026-08-09T23:16:35.793Z","2026-09-10T13:00:03.318185640Z",[11510],{"type":3380,"score":11511},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11513],{"type":3778,"url":11514},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2911b643-571c-42e4-b0c2-9a1fa6f491db",[3959,3960],{"id":424,"slug":11517,"dossier":47,"summary":11518,"aliases":11519,"sourceIds":11522,"published":11523,"modified":11524,"checkedAt":7,"severity":11525,"references":11527,"versionKeys":11538,"packageCount":32,"repositoryCount":66},"pysec-2026-4013-c111658c","virtualenv bash and fish activation scripts execute commands embedded in paths",[11520,11521],"CVE-2026-102925","GHSA-p58f-9548-mpm2",[424],"2026-09-18T04:37:14Z","2026-09-30T16:45:02.556138982Z",[11526],{"type":3380,"score":5260},[11528,11530,11532,11534,11536,11537],{"type":3347,"url":11529},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":3347,"url":11531},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":3418,"url":11533},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":3347,"url":11535},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":3354,"url":4730},{"type":3354,"url":4732},[4736,4737,4738,4739,6252,6253,6254],{"id":425,"slug":11540,"dossier":47,"summary":11541,"aliases":11542,"sourceIds":11545,"published":6231,"modified":11546,"checkedAt":7,"severity":11547,"references":11548,"versionKeys":11558,"packageCount":32,"repositoryCount":66},"pysec-2026-4014-0a5c8171","Command injection via --prompt in activate.bat (batch activator)",[11543,11544],"CVE-2026-102937","GHSA-x78j-v8h9-3j2q",[425],"2026-09-30T16:45:02.570148666Z",[],[11549,11551,11553,11555,11556,11557],{"type":3347,"url":11550},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":3347,"url":11552},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":3418,"url":11554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":3347,"url":6249},{"type":3354,"url":4730},{"type":3354,"url":4732},[4736,4737,4738,4739,6252,6253,6254],{"id":426,"slug":11560,"dossier":47,"summary":83,"aliases":11561,"sourceIds":11563,"published":11564,"modified":11565,"checkedAt":7,"severity":11566,"references":11568,"versionKeys":11573,"packageCount":32,"repositoryCount":32},"pysec-2026-598-ff2a157b",[11562],"CVE-2026-22218",[426],"2026-01-20T00:15:48.910Z","2026-07-02T08:45:06.090293533Z",[11567],{"type":3380,"score":5517},[11569,11570,11572],{"type":3361,"url":3555},{"type":3361,"url":11571},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-arbitrary-file-read-via-project-element",{"type":3455,"url":3559},[3565],{"id":427,"slug":11575,"dossier":47,"summary":83,"aliases":11576,"sourceIds":11578,"published":11579,"modified":11580,"checkedAt":7,"severity":11581,"references":11583,"versionKeys":11586,"packageCount":32,"repositoryCount":34},"pysec-2026-99-2c63e84f",[11577],"CVE-2026-0848",[427],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[11582],{"type":3380,"score":5777},[11584],{"type":3455,"url":11585},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3959,3960],1790829719500]