[{"data":1,"prerenderedAt":5256},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11301":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":264,"related":267},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-10-01T04:34:15.142Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-10-01T04:32:18.676Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},44,43,1,24,4,27,41,39,38,0,4135,4124,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2467,50,7265,9,55,2433,34,852,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5454545454545454,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":262,"providers":263},"opencode:11301","opencode-11301",11301,"URBAN.KI AirGuardAI","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai","363d2a9d9e13db101242ed39bc94a5524509eb1f","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fcommit\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f","2026-09-15T12:42:44.969Z","2026-09-14T08:20:54.000Z",{"complete":90,"entryCount":91,"truncated":47},true,95,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","d8e9658e0c9c7ed8859da5223f957aa8010f39de","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fblob\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f\u002Fuv.lock","59cb0231b92ede8e7f9c5ef5b78867b9fa36e7a4e0fc2600956a5c532b08c9e0",313514,"parsed",102,[102],"pypi",7,17,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-768j-98cg-p3fv","GHSA-7f5h-v6xp-fcq8","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gh4c-6fx4-qh6g","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jw8x-6495-233v","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vxq7-64xx-v4gw","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3716",156,[],{"files":265,"occurrenceCount":100},[266],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":268,"vulnerabilities":1204},[269,282,293,303,313,322,331,340,351,363,374,384,393,402,412,421,431,440,450,459,468,477,486,497,506,516,525,535,545,554,563,572,581,590,599,608,617,626,635,644,652,661,670,679,688,697,706,715,724,732,741,750,759,768,777,786,795,804,814,823,832,841,850,859,868,877,886,895,904,913,922,930,939,947,957,965,974,982,991,1000,1009,1018,1027,1036,1046,1055,1064,1073,1081,1090,1098,1107,1116,1124,1132,1141,1150,1159,1168,1177,1186,1195],{"id":270,"slug":271,"identity":272,"label":273,"aiRelevant":90,"provider":274,"advisoryCount":35,"licenseExpressions":277,"versions":279,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":281},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":275,"label":276},"hugging-face","Hugging Face",[278],"Apache-2.0",[280],"5.8.0",[56],{"id":283,"slug":284,"identity":285,"label":286,"aiRelevant":90,"provider":83,"advisoryCount":287,"licenseExpressions":288,"versions":290,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":292},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[289],"BSD-3-Clause",[291],"2.11.0",[56],{"id":294,"slug":295,"identity":296,"label":297,"aiRelevant":90,"provider":298,"advisoryCount":32,"licenseExpressions":299,"versions":300,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":302},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":275,"label":276},[278],[301],"4.8.5",[56],{"id":304,"slug":305,"identity":306,"label":307,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":308,"versions":310,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":312},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[309],"non-standard",[311],"1.13.0",[56],{"id":314,"slug":315,"identity":316,"label":317,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":318,"versions":319,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":321},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[289,309],[320],"1.8.0",[56],{"id":323,"slug":324,"identity":325,"label":326,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":327,"versions":328,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":330},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[309],[329],"0.22.2",[56],{"id":332,"slug":333,"identity":334,"label":335,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":336,"versions":337,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":339},"package:pypi:lightgbm","lightgbm-da1283c4","pypi:lightgbm","LightGBM",[309],[338],"4.6.0",[56],{"id":341,"slug":342,"identity":343,"label":344,"aiRelevant":47,"provider":83,"advisoryCount":345,"licenseExpressions":346,"versions":348,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":350},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[278,347],"Apache-2.0 AND MIT",[349],"3.13.5",[56],{"id":352,"slug":353,"identity":354,"label":355,"aiRelevant":47,"provider":83,"advisoryCount":356,"licenseExpressions":357,"versions":360,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":362},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[358,359],"HPND","MIT-CMU",[361],"12.2.0",[56],{"id":364,"slug":365,"identity":366,"label":367,"aiRelevant":47,"provider":83,"advisoryCount":368,"licenseExpressions":369,"versions":371,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":373},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[370],"MIT",[372],"2.7.0",[56],{"id":375,"slug":376,"identity":377,"label":378,"aiRelevant":47,"provider":83,"advisoryCount":379,"licenseExpressions":380,"versions":381,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":383},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[278],[382],"0.0.28",[56],{"id":385,"slug":386,"identity":387,"label":388,"aiRelevant":47,"provider":83,"advisoryCount":379,"licenseExpressions":389,"versions":390,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":392},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[289],[391],"1.0.0",[56],{"id":394,"slug":395,"identity":396,"label":397,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":398,"versions":399,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":401},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[289,309],[400],"3.1.6",[56],{"id":403,"slug":404,"identity":405,"label":406,"aiRelevant":47,"provider":83,"advisoryCount":407,"licenseExpressions":408,"versions":409,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":411},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[278],[410],"2.34.0",[56],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":47,"provider":83,"advisoryCount":407,"licenseExpressions":417,"versions":418,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":420},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[370],[419],"81.0.0",[56],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":47,"provider":83,"advisoryCount":426,"licenseExpressions":427,"versions":428,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":430},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",2,[370],[429],"4.13.0",[56],{"id":432,"slug":433,"identity":434,"label":435,"aiRelevant":47,"provider":83,"advisoryCount":426,"licenseExpressions":436,"versions":438,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":439},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[370,437],"Unlicense",[27],[56],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":445,"versions":447,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":449},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[446],"MPL-2.0",[448],"2026.4.22",[56],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":455,"versions":456,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":458},"package:pypi:click","click-ef97f731","pypi:click","click",[289,309],[457],"8.3.3",[56],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":464,"versions":465,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":467},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[370],[466],"4.62.1",[56],{"id":469,"slug":470,"identity":471,"label":472,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":473,"versions":474,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":476},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[370],[475],"0.16.0",[56],{"id":478,"slug":479,"identity":480,"label":481,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":482,"versions":483,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":485},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[289,309],[484],"3.14",[56],{"id":487,"slug":488,"identity":489,"label":490,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":491,"versions":494,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":496},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[492,493],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[495],"3.11.9",[56],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":502,"versions":503,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":505},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[278,309],[504],"24.0.0",[56],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":511,"versions":513,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":515},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[512],"BSD-2-Clause",[514],"2.20.0",[56],{"id":517,"slug":518,"identity":519,"label":520,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":521,"versions":522,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":524},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[289],[523],"1.2.2",[56],{"id":526,"slug":527,"identity":528,"label":529,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":530,"versions":532,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":534},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[531],"MIT AND MPL-2.0",[533],"4.67.3",[56],{"id":536,"slug":537,"identity":538,"label":539,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":540,"versions":542,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":544},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[541],"PSF-2.0",[543],"2.6.1",[56],{"id":546,"slug":547,"identity":548,"label":549,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":550,"versions":551,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":553},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[278],[552],"1.4.0",[56],{"id":555,"slug":556,"identity":557,"label":558,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":559,"versions":560,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":562},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[370],[561],"0.0.4",[56],{"id":564,"slug":565,"identity":566,"label":567,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":568,"versions":569,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":571},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[370],[570],"26.1.0",[56],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":577,"versions":578,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":580},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[370],[579],"3.4.7",[56],{"id":582,"slug":583,"identity":584,"label":585,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":586,"versions":587,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":589},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[309],[588],"0.4.6",[56],{"id":591,"slug":592,"identity":593,"label":594,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":595,"versions":596,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":598},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[309],[597],"1.3.3",[56],{"id":600,"slug":601,"identity":602,"label":603,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":604,"versions":605,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":607},"package:pypi:cuda-bindings","cuda-bindings-63e94baa","pypi:cuda-bindings","cuda-bindings",[309],[606],"13.2.0",[56],{"id":609,"slug":610,"identity":611,"label":612,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":613,"versions":614,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":616},"package:pypi:cuda-pathfinder","cuda-pathfinder-6d2ddb13","pypi:cuda-pathfinder","cuda-pathfinder",[278],[615],"1.5.4",[56],{"id":618,"slug":619,"identity":620,"label":621,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":622,"versions":623,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":625},"package:pypi:cuda-toolkit","cuda-toolkit-96ffd01e","pypi:cuda-toolkit","cuda-toolkit",[],[624],"13.0.2",[56],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":631,"versions":632,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":634},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[309],[633],"0.12.1",[56],{"id":636,"slug":637,"identity":638,"label":639,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":640,"versions":641,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":643},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[289],[642],"0.4.1",[56],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":649,"versions":650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":651},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[278],[320],[56],{"id":653,"slug":654,"identity":655,"label":656,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":657,"versions":658,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":660},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[289,309],[659],"2026.2.0",[56],{"id":662,"slug":663,"identity":664,"label":665,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":666,"versions":667,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":669},"package:pypi:gradio-client","gradio-client-f28a3144","pypi:gradio-client","gradio-client",[278],[668],"2.5.0",[56],{"id":671,"slug":672,"identity":673,"label":674,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":675,"versions":676,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":678},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[278],[677],"1.5.0",[56],{"id":680,"slug":681,"identity":682,"label":683,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":684,"versions":685,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":687},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[289],[686],"1.0.9",[56],{"id":689,"slug":690,"identity":691,"label":692,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":693,"versions":694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":696},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[370],[695],"0.7.1",[56],{"id":698,"slug":699,"identity":700,"label":701,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":702,"versions":703,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":705},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[289],[704],"0.28.1",[56],{"id":707,"slug":708,"identity":709,"label":710,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":711,"versions":712,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":714},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[278,309],[713],"1.14.0",[56],{"id":716,"slug":717,"identity":718,"label":719,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":720,"versions":721,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":723},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[289],[722],"1.5.3",[56],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":729,"versions":730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":731},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[309],[677],[56],{"id":733,"slug":734,"identity":735,"label":736,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":737,"versions":738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":740},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[370],[739],"4.2.0",[56],{"id":742,"slug":743,"identity":744,"label":745,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":746,"versions":747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":749},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[289,309],[748],"3.0.3",[56],{"id":751,"slug":752,"identity":753,"label":754,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":755,"versions":756,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":758},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[309],[757],"3.10.9",[56],{"id":760,"slug":761,"identity":762,"label":763,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":764,"versions":765,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":767},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[370],[766],"0.1.2",[56],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":773,"versions":774,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":776},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[309],[775],"1.3.0",[56],{"id":778,"slug":779,"identity":780,"label":781,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":782,"versions":783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":785},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[278],[784],"6.7.1",[56],{"id":787,"slug":788,"identity":789,"label":790,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":791,"versions":792,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":794},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[289],[793],"0.70.19",[56],{"id":796,"slug":797,"identity":798,"label":799,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":800,"versions":801,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":803},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[289,309],[802],"3.6.1",[56],{"id":805,"slug":806,"identity":807,"label":808,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":809,"versions":811,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":813},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[810,309],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[812],"2.4.4",[56],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":819,"versions":820,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":822},"package:pypi:nvidia-cublas","nvidia-cublas-6a0535be","pypi:nvidia-cublas","nvidia-cublas",[309],[821],"13.1.0.3",[56],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":828,"versions":829,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":831},"package:pypi:nvidia-cuda-cupti","nvidia-cuda-cupti-28886b51","pypi:nvidia-cuda-cupti","nvidia-cuda-cupti",[309],[830],"13.0.85",[56],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":837,"versions":838,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":840},"package:pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc-79a057fb","pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc",[309],[839],"13.0.88",[56],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":846,"versions":847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":849},"package:pypi:nvidia-cuda-runtime","nvidia-cuda-runtime-55699b1c","pypi:nvidia-cuda-runtime","nvidia-cuda-runtime",[309],[848],"13.0.96",[56],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":855,"versions":856,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":858},"package:pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13-2486f81c","pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13",[309],[857],"9.19.0.56",[56],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":864,"versions":865,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":867},"package:pypi:nvidia-cufft","nvidia-cufft-b2cd0527","pypi:nvidia-cufft","nvidia-cufft",[309],[866],"12.0.0.61",[56],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":873,"versions":874,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":876},"package:pypi:nvidia-cufile","nvidia-cufile-52c06111","pypi:nvidia-cufile","nvidia-cufile",[309],[875],"1.15.1.6",[56],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":882,"versions":883,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":885},"package:pypi:nvidia-curand","nvidia-curand-05859d58","pypi:nvidia-curand","nvidia-curand",[309],[884],"10.4.0.35",[56],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":891,"versions":892,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":894},"package:pypi:nvidia-cusolver","nvidia-cusolver-6f33f83d","pypi:nvidia-cusolver","nvidia-cusolver",[309],[893],"12.0.4.66",[56],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":900,"versions":901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":903},"package:pypi:nvidia-cusparse","nvidia-cusparse-6ffaf037","pypi:nvidia-cusparse","nvidia-cusparse",[309],[902],"12.6.3.3",[56],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":909,"versions":910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":912},"package:pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13-bf1c94c0","pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13",[309],[911],"0.8.0",[56],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":918,"versions":919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":921},"package:pypi:nvidia-nccl-cu13","nvidia-nccl-cu13-e883df84","pypi:nvidia-nccl-cu13","nvidia-nccl-cu13",[309],[920],"2.28.9",[56],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":927,"versions":928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":929},"package:pypi:nvidia-nvjitlink","nvidia-nvjitlink-c5d1771c","pypi:nvidia-nvjitlink","nvidia-nvjitlink",[309],[839],[56],{"id":931,"slug":932,"identity":933,"label":934,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":935,"versions":936,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":938},"package:pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13-8f04166d","pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13",[309],[937],"3.4.5",[56],{"id":940,"slug":941,"identity":942,"label":943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":944,"versions":945,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":946},"package:pypi:nvidia-nvtx","nvidia-nvtx-2bf32610","pypi:nvidia-nvtx","nvidia-nvtx",[278],[830],[56],{"id":948,"slug":949,"identity":950,"label":951,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":952,"versions":954,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":956},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[953,309],"Apache-2.0 OR BSD-2-Clause",[955],"26.2",[56],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":962,"versions":963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":964},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[309],[748],[56],{"id":966,"slug":967,"identity":968,"label":969,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":970,"versions":971,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":973},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[370,309],[972],"1.40.1",[56],{"id":975,"slug":976,"identity":977,"label":978,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":979,"versions":980,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":981},"package:pypi:polars-runtime-32","polars-runtime-32-7674b461","pypi:polars-runtime-32","polars-runtime-32",[370],[972],[56],{"id":983,"slug":984,"identity":985,"label":986,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":987,"versions":988,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":990},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[278],[989],"0.5.2",[56],{"id":992,"slug":993,"identity":994,"label":995,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":996,"versions":997,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":999},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[289],[998],"7.2.2",[56],{"id":1001,"slug":1002,"identity":1003,"label":1004,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1005,"versions":1006,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1008},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[370],[1007],"3.3.2",[56],{"id":1010,"slug":1011,"identity":1012,"label":1013,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1014,"versions":1015,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1017},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[370],[1016],"3.7.2",[56],{"id":1019,"slug":1020,"identity":1021,"label":1022,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1023,"versions":1024,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1026},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[309],[1025],"2.9.0.post0",[56],{"id":1028,"slug":1029,"identity":1030,"label":1031,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1032,"versions":1033,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1035},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[370],[1034],"6.0.3",[56],{"id":1037,"slug":1038,"identity":1039,"label":1040,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1041,"versions":1043,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1045},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1042,309],"Apache-2.0 AND CNRI-Python",[1044],"2026.5.9",[56],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1051,"versions":1052,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1054},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[370],[1053],"15.0.0",[56],{"id":1056,"slug":1057,"identity":1058,"label":1059,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1060,"versions":1061,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1063},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[309],[1062],"0.7.0",[56],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1069,"versions":1070,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1072},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[309],[1071],"1.17.1",[56],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1078,"versions":1079,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1080},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[309],[615],[56],{"id":1082,"slug":1083,"identity":1084,"label":1085,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1086,"versions":1087,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1089},"package:pypi:six","six-3c3888bd","pypi:six","six",[370],[1088],"1.17.0",[56],{"id":1091,"slug":1092,"identity":1093,"label":1094,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1095,"versions":1096,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1097},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[309],[713],[56],{"id":1099,"slug":1100,"identity":1101,"label":1102,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1103,"versions":1104,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1106},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[289],[1105],"3.6.0",[56],{"id":1108,"slug":1109,"identity":1110,"label":1111,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1112,"versions":1113,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1115},"package:pypi:trackio","trackio-de70160f","pypi:trackio","trackio",[370],[1114],"0.25.1",[56],{"id":1117,"slug":1118,"identity":1119,"label":1120,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1121,"versions":1122,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1123},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[370],[1105],[56],{"id":1125,"slug":1126,"identity":1127,"label":1128,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1129,"versions":1130,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1131},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[370],[1114],[56],{"id":1133,"slug":1134,"identity":1135,"label":1136,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1137,"versions":1138,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1140},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[541,309],[1139],"4.15.0",[56],{"id":1142,"slug":1143,"identity":1144,"label":1145,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1146,"versions":1147,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1149},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[278],[1148],"2026.2",[56],{"id":1151,"slug":1152,"identity":1153,"label":1154,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1155,"versions":1156,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1158},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[289],[1157],"0.46.0",[56],{"id":1160,"slug":1161,"identity":1162,"label":1163,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1164,"versions":1165,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1167},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[370],[1166],"0.22.1",[56],{"id":1169,"slug":1170,"identity":1171,"label":1172,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1173,"versions":1174,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1176},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[370],[1175],"1.1.1",[56],{"id":1178,"slug":1179,"identity":1180,"label":1181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1182,"versions":1183,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1185},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[289],[1184],"16.0",[56],{"id":1187,"slug":1188,"identity":1189,"label":1190,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1191,"versions":1192,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1194},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[512,309],[1193],"3.7.0",[56],{"id":1196,"slug":1197,"identity":1198,"label":1199,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1200,"versions":1201,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1203},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[278],[1202],"1.23.0",[56],[1205,1244,1278,1311,1343,1368,1404,1447,1473,1499,1522,1557,1583,1603,1639,1657,1683,1712,1751,1777,1802,1830,1853,1884,1921,1945,1968,1992,2022,2049,2068,2096,2119,2146,2169,2191,2214,2240,2263,2295,2328,2349,2368,2419,2458,2487,2510,2535,2559,2582,2616,2642,2672,2692,2717,2749,2804,2836,2865,2897,2931,2956,2995,3019,3047,3070,3089,3122,3147,3175,3195,3218,3246,3280,3314,3336,3359,3380,3415,3445,3478,3501,3528,3553,3574,3603,3627,3646,3667,3697,3725,3748,3773,3796,3818,3840,3867,3892,3916,3937,3961,3987,4009,4036,4056,4094,4126,4153,4180,4208,4235,4265,4299,4321,4344,4372,4399,4426,4446,4469,4499,4551,4574,4600,4634,4659,4691,4710,4734,4753,4781,4806,4832,4852,4869,4888,4905,4926,4942,4957,4974,4989,5006,5023,5040,5054,5067,5080,5093,5106,5119,5132,5145,5168,5201,5230],{"id":106,"slug":1206,"dossier":47,"summary":1207,"aliases":1208,"sourceIds":1211,"published":1212,"modified":1213,"checkedAt":7,"severity":1214,"references":1218,"versionKeys":1242,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1209,1210],"CVE-2024-39689","PYSEC-2024-230",[106,1210],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1215],{"type":1216,"score":1217},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1219,1222,1224,1227,1230,1233,1236,1238,1240],{"type":1220,"url":1221},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1220,"url":1223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1225,"url":1226},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1228,"url":1229},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1231,"url":1232},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1234,"url":1235},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1231,"url":1237},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1220,"url":1239},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1220,"url":1241},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1243],"pypi:certifi@2024.6.2",{"id":107,"slug":1245,"dossier":47,"summary":1246,"aliases":1247,"sourceIds":1250,"published":1251,"modified":1252,"checkedAt":7,"severity":1253,"references":1256,"versionKeys":1268,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1248,1249],"CVE-2026-4372","PYSEC-2026-2289",[107,1249],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[1254],{"type":1216,"score":1255},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1257,1259,1261,1263,1266],{"type":1220,"url":1258},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1225,"url":1260},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1228,"url":1262},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1264,"url":1265},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1220,"url":1267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1269,1270,1271,1272,1273,1274,1275,1276,1277],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":108,"slug":1279,"dossier":47,"summary":1280,"aliases":1281,"sourceIds":1284,"published":1285,"modified":1286,"checkedAt":7,"severity":1287,"references":1290,"versionKeys":1307,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1282,1283],"CVE-2025-54121","PYSEC-2026-1941",[108,1283],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[1288],{"type":1216,"score":1289},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1291,1293,1295,1297,1299,1301,1303,1305],{"type":1231,"url":1292},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1220,"url":1294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1225,"url":1296},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1228,"url":1298},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1231,"url":1300},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1231,"url":1302},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1228,"url":1304},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1220,"url":1306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1308,1309,1310],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":1312,"dossier":47,"summary":1313,"aliases":1314,"sourceIds":1317,"published":1318,"modified":1319,"checkedAt":7,"severity":1320,"references":1326,"versionKeys":1333,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1315,1316],"CVE-2026-54279","PYSEC-2026-2112",[109,1316],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[1321,1324],{"type":1322,"score":1323},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1325},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1327,1329,1331],{"type":1220,"url":1328},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1228,"url":1330},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1225,"url":1332},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1334,1335,1336,1337,1338,1339,1340,1341,1342],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":110,"slug":1344,"dossier":47,"summary":1345,"aliases":1346,"sourceIds":1349,"published":1350,"modified":1351,"checkedAt":7,"severity":1352,"references":1357,"versionKeys":1367,"packageCount":32,"repositoryCount":368},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1347,1348],"CVE-2026-34514","PYSEC-2026-2096",[110,1348],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[1353,1355],{"type":1322,"score":1354},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1356},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1358,1360,1362,1364,1365],{"type":1225,"url":1359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1220,"url":1361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1225,"url":1363},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1228,"url":1330},{"type":1220,"url":1366},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1334,1335,1336,1337,1338,1339,1340,1341],{"id":111,"slug":1369,"dossier":90,"summary":1370,"aliases":1371,"sourceIds":1374,"published":1375,"modified":1376,"checkedAt":7,"severity":1377,"references":1380,"versionKeys":1397,"packageCount":32,"repositoryCount":1403},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1372,1373],"CVE-2025-66471","PYSEC-2026-1994",[111,1373],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1378],{"type":1322,"score":1379},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1381,1383,1385,1387,1389,1391,1393,1395],{"type":1231,"url":1382},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1220,"url":1384},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1225,"url":1386},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1231,"url":1388},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":1220,"url":1390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1231,"url":1392},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":1228,"url":1394},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1228,"url":1396},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1398,1399,1400,1401,1402],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":112,"slug":1405,"dossier":47,"summary":1406,"aliases":1407,"sourceIds":1411,"published":1412,"modified":1413,"checkedAt":7,"severity":1414,"references":1421,"versionKeys":1443,"packageCount":32,"repositoryCount":407},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1408,1409,1410],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[112,1410],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1415,1417,1419],{"type":1216,"score":1416},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1322,"score":1418},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1216,"score":1420},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1422,1424,1427,1429,1431,1433,1435,1437,1439,1441],{"type":1220,"url":1423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1425,"url":1426},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1425,"url":1428},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1231,"url":1430},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1228,"url":1432},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1231,"url":1434},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1425,"url":1436},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1220,"url":1438},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1220,"url":1440},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1220,"url":1442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1444,1445,1446],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":113,"slug":1448,"dossier":47,"summary":1449,"aliases":1450,"sourceIds":1453,"published":1454,"modified":1455,"checkedAt":7,"severity":1456,"references":1458,"versionKeys":1472,"packageCount":32,"repositoryCount":407},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1451,1452],"CVE-2025-3933","PYSEC-2026-1977",[113,1452],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[1457],{"type":1216,"score":1289},[1459,1461,1463,1465,1466,1468,1470],{"type":1220,"url":1460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1231,"url":1462},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1231,"url":1464},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1228,"url":1262},{"type":1231,"url":1467},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1228,"url":1469},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1220,"url":1471},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1269,1270,1271],{"id":114,"slug":1474,"dossier":47,"summary":1475,"aliases":1476,"sourceIds":1479,"published":1480,"modified":1481,"checkedAt":7,"severity":1482,"references":1485,"versionKeys":1498,"packageCount":32,"repositoryCount":1403},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1477,1478],"CVE-2026-21441","PYSEC-2026-1996",[114,1478],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1483,1484],{"type":1216,"score":1325},{"type":1322,"score":1379},[1486,1488,1490,1492,1493,1495,1496],{"type":1231,"url":1487},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1220,"url":1489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1225,"url":1491},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1228,"url":1394},{"type":1231,"url":1494},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1228,"url":1396},{"type":1220,"url":1497},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1398,1399,1400,1401,1402],{"id":115,"slug":1500,"dossier":47,"summary":1501,"aliases":1502,"sourceIds":1505,"published":1506,"modified":1507,"checkedAt":7,"severity":1508,"references":1512,"versionKeys":1521,"packageCount":32,"repositoryCount":368},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1503,1504],"CVE-2026-34517","PYSEC-2026-2099",[115,1504],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[1509,1511],{"type":1322,"score":1510},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1289},[1513,1515,1517,1519,1520],{"type":1225,"url":1514},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1220,"url":1516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1225,"url":1518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":116,"slug":1523,"dossier":90,"summary":1524,"aliases":1525,"sourceIds":1529,"published":1530,"modified":1531,"checkedAt":7,"severity":1532,"references":1534,"versionKeys":1547,"packageCount":32,"repositoryCount":104},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1526,1527,1528],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[116,1528],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1533],{"type":1216,"score":1325},[1535,1537,1539,1541,1543,1545],{"type":1264,"url":1536},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1220,"url":1538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1225,"url":1540},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1231,"url":1542},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1228,"url":1544},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1220,"url":1546},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1548,1549,1550,1551,1552,1553,1554,1555,1556],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",{"id":117,"slug":1558,"dossier":47,"summary":1559,"aliases":1560,"sourceIds":1563,"published":1564,"modified":1565,"checkedAt":7,"severity":1566,"references":1569,"versionKeys":1582,"packageCount":32,"repositoryCount":379},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1561,1562],"CVE-2025-50182","PYSEC-2026-1997",[117,1562],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1567],{"type":1216,"score":1568},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1570,1572,1574,1576,1577,1579,1580],{"type":1231,"url":1571},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1220,"url":1573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1225,"url":1575},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1228,"url":1394},{"type":1231,"url":1578},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1228,"url":1396},{"type":1220,"url":1581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1398,1399,1400,1401],{"id":118,"slug":1584,"dossier":47,"summary":1585,"aliases":1586,"sourceIds":1589,"published":1590,"modified":1591,"checkedAt":7,"severity":1592,"references":1596,"versionKeys":1602,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1587,1588],"CVE-2026-54273","PYSEC-2026-2107",[118,1588],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[1593,1595],{"type":1322,"score":1594},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1325},[1597,1599,1601],{"type":1220,"url":1598},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1225,"url":1600},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":119,"slug":1604,"dossier":47,"summary":1605,"aliases":1606,"sourceIds":1609,"published":1610,"modified":1611,"checkedAt":7,"severity":1612,"references":1617,"versionKeys":1634,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[1607,1608],"CVE-2026-69112","PYSEC-2026-3804",[119,1608],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[1613,1615],{"type":1216,"score":1614},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":1322,"score":1616},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1618,1620,1622,1624,1626,1628,1630,1632],{"type":1220,"url":1619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":1231,"url":1621},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":1231,"url":1623},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":1231,"url":1625},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":1228,"url":1627},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":1231,"url":1629},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":1228,"url":1631},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":1220,"url":1633},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[1635,1636,1637,1638],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":120,"slug":1640,"dossier":47,"summary":1641,"aliases":1642,"sourceIds":1645,"published":1646,"modified":1647,"checkedAt":7,"severity":1648,"references":1652,"versionKeys":1656,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1643,1644],"CVE-2026-54275","PYSEC-2026-237",[120,1644],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[1649,1651],{"type":1322,"score":1650},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1325},[1653,1655],{"type":1220,"url":1654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":121,"slug":1658,"dossier":47,"summary":1659,"aliases":1660,"sourceIds":1663,"published":1664,"modified":1665,"checkedAt":7,"severity":1666,"references":1669,"versionKeys":1682,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[1661,1662],"CVE-2025-6921","PYSEC-2026-1980",[121,1662],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[1667],{"type":1216,"score":1668},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1670,1672,1674,1676,1677,1679,1680],{"type":1220,"url":1671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1231,"url":1673},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1231,"url":1675},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1228,"url":1262},{"type":1231,"url":1678},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1228,"url":1469},{"type":1220,"url":1681},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1269,1270,1271,1272],{"id":122,"slug":1684,"dossier":90,"summary":1685,"aliases":1686,"sourceIds":1690,"published":1691,"modified":1692,"checkedAt":7,"severity":1693,"references":1696,"versionKeys":1711,"packageCount":32,"repositoryCount":104},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1687,1688,1689],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[122,1689],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1694],{"type":1216,"score":1695},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1697,1699,1701,1703,1705,1707,1709,1710],{"type":1264,"url":1698},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1220,"url":1700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1225,"url":1702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1225,"url":1704},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1225,"url":1706},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1231,"url":1708},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1228,"url":1544},{"type":1220,"url":1546},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":123,"slug":1713,"dossier":47,"summary":1714,"aliases":1715,"sourceIds":1718,"published":1719,"modified":1720,"checkedAt":7,"severity":1721,"references":1724,"versionKeys":1747,"packageCount":32,"repositoryCount":1750},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1716,1717],"CVE-2026-4539","PYSEC-2026-2987",[123,1717],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1722,1723],{"type":1216,"score":1416},{"type":1322,"score":1418},[1725,1727,1729,1731,1733,1735,1737,1739,1741,1743,1745],{"type":1220,"url":1726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1231,"url":1728},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1231,"url":1730},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1231,"url":1732},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1228,"url":1734},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1231,"url":1736},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1231,"url":1738},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1231,"url":1740},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1231,"url":1742},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1228,"url":1744},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1220,"url":1746},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1748,1749],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":124,"slug":1752,"dossier":47,"summary":1753,"aliases":1754,"sourceIds":1758,"published":1759,"modified":1760,"checkedAt":7,"severity":1761,"references":1766,"versionKeys":1776,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1755,1756,1757],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[124,1757],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1762,1764],{"type":1322,"score":1763},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1216,"score":1765},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1767,1769,1771,1773,1775],{"type":1220,"url":1768},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1220,"url":1770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1231,"url":1772},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1231,"url":1774},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1228,"url":1432},[1444],{"id":125,"slug":1778,"dossier":47,"summary":1779,"aliases":1780,"sourceIds":1783,"published":1784,"modified":1785,"checkedAt":7,"severity":1786,"references":1789,"versionKeys":1801,"packageCount":32,"repositoryCount":379},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1781,1782],"CVE-2025-69226","PYSEC-2026-1097",[125,1782],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[1787],{"type":1322,"score":1788},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1790,1792,1794,1796,1797,1799],{"type":1231,"url":1791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1220,"url":1793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1225,"url":1795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1228,"url":1330},{"type":1228,"url":1798},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1220,"url":1800},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1334,1335,1336,1337,1338,1339,1340],{"id":126,"slug":1803,"dossier":47,"summary":1804,"aliases":1805,"sourceIds":1808,"published":1809,"modified":1810,"checkedAt":7,"severity":1811,"references":1815,"versionKeys":1828,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[1806,1807],"CVE-2024-53981","PYSEC-2026-1851",[126,1807],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[1812,1813],{"type":1216,"score":1325},{"type":1322,"score":1814},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1816,1818,1820,1822,1824,1826],{"type":1231,"url":1817},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1220,"url":1819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1231,"url":1821},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1228,"url":1823},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1228,"url":1825},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1220,"url":1827},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[1829],"pypi:python-multipart@0.0.9",{"id":127,"slug":1831,"dossier":47,"summary":1832,"aliases":1833,"sourceIds":1836,"published":1837,"modified":1838,"checkedAt":7,"severity":1839,"references":1841,"versionKeys":1852,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[1834,1835],"CVE-2025-6638","PYSEC-2026-1981",[127,1835],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[1840],{"type":1216,"score":1668},[1842,1844,1845,1846,1847,1849,1850],{"type":1220,"url":1843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1231,"url":1673},{"type":1231,"url":1675},{"type":1228,"url":1262},{"type":1231,"url":1848},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1228,"url":1469},{"type":1220,"url":1851},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1269,1270,1271,1272],{"id":128,"slug":1854,"dossier":47,"summary":1855,"aliases":1856,"sourceIds":1858,"published":1859,"modified":1860,"checkedAt":7,"severity":1861,"references":1864,"versionKeys":1875,"packageCount":32,"repositoryCount":1403},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[1857],"CVE-2026-64847",[128],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[1862],{"type":1322,"score":1863},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1865,1867,1869,1871,1873],{"type":1231,"url":1866},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":1231,"url":1868},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":1231,"url":1870},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":1228,"url":1872},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":1231,"url":1874},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[1876,1877,1878,1879,1880,1881,1882,1883],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":129,"slug":1885,"dossier":47,"summary":1886,"aliases":1887,"sourceIds":1891,"published":1892,"modified":1893,"checkedAt":7,"severity":1894,"references":1899,"versionKeys":1916,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1888,1889,1890],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[129,1890],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1895,1897],{"type":1322,"score":1896},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1216,"score":1898},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1900,1902,1904,1906,1908,1910,1912,1914],{"type":1264,"url":1901},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1220,"url":1903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1425,"url":1905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1225,"url":1907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1231,"url":1909},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1228,"url":1911},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1231,"url":1913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1234,"url":1915},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1917,1918,1919,1920],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":130,"slug":1922,"dossier":47,"summary":1923,"aliases":1924,"sourceIds":1927,"published":1928,"modified":1929,"checkedAt":7,"severity":1930,"references":1932,"versionKeys":1941,"packageCount":32,"repositoryCount":103},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[1925,1926],"CVE-2026-53539","PYSEC-2026-3036",[130,1926],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[1931],{"type":1216,"score":1325},[1933,1935,1936,1937,1939],{"type":1231,"url":1934},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1228,"url":1823},{"type":1228,"url":1825},{"type":1220,"url":1938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1220,"url":1940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[1942,1943,1944,1829],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":131,"slug":1946,"dossier":90,"summary":1947,"aliases":1948,"sourceIds":1952,"published":1953,"modified":1954,"checkedAt":7,"severity":1955,"references":1957,"versionKeys":1967,"packageCount":32,"repositoryCount":104},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1949,1950,1951],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[131,1951],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1956],{"type":1216,"score":1325},[1958,1960,1962,1963,1965,1966],{"type":1264,"url":1959},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1220,"url":1961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1225,"url":1540},{"type":1231,"url":1964},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1228,"url":1544},{"type":1220,"url":1546},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":132,"slug":1969,"dossier":47,"summary":1970,"aliases":1971,"sourceIds":1975,"published":1976,"modified":1977,"checkedAt":7,"severity":1978,"references":1982,"versionKeys":1990,"packageCount":32,"repositoryCount":1991},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1972,1973,1974],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[132,1974],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1979,1980],{"type":1216,"score":1420},{"type":1322,"score":1981},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1983,1985,1987,1988],{"type":1220,"url":1984},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1220,"url":1986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1228,"url":1544},{"type":1220,"url":1989},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1551,1552,1553,1554,1555],12,{"id":133,"slug":1993,"dossier":90,"summary":1994,"aliases":1995,"sourceIds":1999,"published":2000,"modified":2001,"checkedAt":7,"severity":2002,"references":2005,"versionKeys":2021,"packageCount":32,"repositoryCount":104},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1996,1997,1998],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[133,1998],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[2003],{"type":1322,"score":2004},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2006,2008,2010,2012,2014,2015,2017,2019],{"type":1231,"url":2007},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1220,"url":2009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1231,"url":2011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1231,"url":2013},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1228,"url":1544},{"type":1231,"url":2016},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1228,"url":2018},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1220,"url":2020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":134,"slug":2023,"dossier":47,"summary":2024,"aliases":2025,"sourceIds":2028,"published":2029,"modified":2030,"checkedAt":7,"severity":2031,"references":2037,"versionKeys":2048,"packageCount":32,"repositoryCount":368},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2026,2027],"CVE-2026-34520","PYSEC-2026-2102",[134,2027],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[2032,2034,2035],{"type":1216,"score":2033},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1322,"score":1354},{"type":1322,"score":2036},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2038,2040,2042,2044,2045,2046],{"type":1225,"url":2039},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1220,"url":2041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1225,"url":2043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1228,"url":1330},{"type":1220,"url":1366},{"type":1231,"url":2047},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1334,1335,1336,1337,1338,1339,1340,1341],{"id":135,"slug":2050,"dossier":47,"summary":2051,"aliases":2052,"sourceIds":2055,"published":2056,"modified":2057,"checkedAt":7,"severity":2058,"references":2061,"versionKeys":2067,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2053,2054],"CVE-2026-54277","PYSEC-2026-2110",[135,2054],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[2059,2060],{"type":1322,"score":1594},{"type":1216,"score":1325},[2062,2064,2066],{"type":1220,"url":2063},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1225,"url":2065},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":136,"slug":2069,"dossier":90,"summary":2070,"aliases":2071,"sourceIds":2074,"published":2075,"modified":2076,"checkedAt":7,"severity":2077,"references":2081,"versionKeys":2090,"packageCount":32,"repositoryCount":2095},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2072,2073],"CVE-2026-45409","PYSEC-2026-215",[136,2073],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[2078,2079],{"type":1216,"score":1289},{"type":1322,"score":2080},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2082,2084,2086,2088],{"type":1220,"url":2083},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1220,"url":2085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1228,"url":2087},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1231,"url":2089},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2091,2092,2093,2094],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":137,"slug":2097,"dossier":47,"summary":2098,"aliases":2099,"sourceIds":2102,"published":2103,"modified":2104,"checkedAt":7,"severity":2105,"references":2107,"versionKeys":2118,"packageCount":32,"repositoryCount":379},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2100,2101],"CVE-2025-69224","PYSEC-2026-1099",[137,2101],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[2106],{"type":1322,"score":1354},[2108,2110,2112,2114,2115,2116],{"type":1231,"url":2109},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1220,"url":2111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1225,"url":2113},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":2117},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1334,1335,1336,1337,1338,1339,1340],{"id":138,"slug":2120,"dossier":47,"summary":2121,"aliases":2122,"sourceIds":2125,"published":2126,"modified":2127,"checkedAt":7,"severity":2128,"references":2133,"versionKeys":2145,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2123,2124],"CVE-2026-1839","PYSEC-2026-2288",[138,2124],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[2129,2131],{"type":1216,"score":2130},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1216,"score":2132},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2134,2136,2138,2139,2141,2143],{"type":1220,"url":2135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1225,"url":2137},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1228,"url":1262},{"type":1231,"url":2140},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1264,"url":2142},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1220,"url":2144},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1269,1270,1271,1272,1273,1274,1275,1276,1277],{"id":139,"slug":2147,"dossier":47,"summary":2148,"aliases":2149,"sourceIds":2152,"published":2153,"modified":2154,"checkedAt":7,"severity":2155,"references":2157,"versionKeys":2168,"packageCount":32,"repositoryCount":379},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2150,2151],"CVE-2025-69228","PYSEC-2026-1100",[139,2151],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[2156],{"type":1322,"score":1594},[2158,2160,2162,2164,2165,2166],{"type":1231,"url":2159},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1220,"url":2161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1225,"url":2163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":2167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1334,1335,1336,1337,1338,1339,1340],{"id":140,"slug":2170,"dossier":47,"summary":2171,"aliases":2172,"sourceIds":2175,"published":2176,"modified":2177,"checkedAt":7,"severity":2178,"references":2181,"versionKeys":2190,"packageCount":32,"repositoryCount":103},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[2173,2174],"CVE-2026-53538","PYSEC-2026-3037",[140,2174],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[2179],{"type":1216,"score":2180},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2182,2184,2185,2186,2188],{"type":1231,"url":2183},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1228,"url":1823},{"type":1228,"url":1825},{"type":1220,"url":2187},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1220,"url":2189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[1942,1943,1944,1829],{"id":141,"slug":2192,"dossier":47,"summary":2193,"aliases":2194,"sourceIds":2197,"published":2198,"modified":2199,"checkedAt":7,"severity":2200,"references":2202,"versionKeys":2213,"packageCount":32,"repositoryCount":379},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2195,2196],"CVE-2025-69223","PYSEC-2026-1101",[141,2196],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[2201],{"type":1216,"score":1325},[2203,2205,2207,2209,2210,2211],{"type":1231,"url":2204},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1220,"url":2206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1225,"url":2208},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":2212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1334,1335,1336,1337,1338,1339,1340],{"id":142,"slug":2215,"dossier":90,"summary":2216,"aliases":2217,"sourceIds":2221,"published":2222,"modified":2223,"checkedAt":7,"severity":2224,"references":2226,"versionKeys":2239,"packageCount":32,"repositoryCount":104},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2218,2219,2220],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[142,2220],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[2225],{"type":1216,"score":1325},[2227,2229,2231,2233,2235,2237,2238],{"type":1264,"url":2228},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1220,"url":2230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1225,"url":2232},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1225,"url":2234},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1231,"url":2236},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1228,"url":1544},{"type":1220,"url":2016},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":143,"slug":2241,"dossier":47,"summary":2242,"aliases":2243,"sourceIds":2246,"published":2247,"modified":2248,"checkedAt":7,"severity":2249,"references":2251,"versionKeys":2262,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2244,2245],"CVE-2024-12720","PYSEC-2026-1982",[143,2245],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[2250],{"type":1216,"score":1668},[2252,2254,2256,2257,2259,2260],{"type":1220,"url":2253},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1231,"url":2255},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1228,"url":1262},{"type":1231,"url":2258},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1228,"url":1469},{"type":1220,"url":2261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1269],{"id":144,"slug":2264,"dossier":47,"summary":2265,"aliases":2266,"sourceIds":2269,"published":2270,"modified":2271,"checkedAt":7,"severity":2272,"references":2275,"versionKeys":2288,"packageCount":32,"repositoryCount":103},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[2267,2268],"CVE-2025-66034","PYSEC-2026-1389",[144,2268],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[2273],{"type":1216,"score":2274},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[2276,2278,2280,2282,2284,2286],{"type":1231,"url":2277},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1220,"url":2279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1231,"url":2281},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1228,"url":2283},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1228,"url":2285},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1220,"url":2287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[2289,2290,2291,2292,2293,2294],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":145,"slug":2296,"dossier":47,"summary":2297,"aliases":2298,"sourceIds":2301,"published":2302,"modified":2303,"checkedAt":7,"severity":2304,"references":2306,"versionKeys":2323,"packageCount":32,"repositoryCount":2327},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[2299,2300],"CVE-2025-62727","PYSEC-2026-1942",[145,2300],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[2305],{"type":1216,"score":1325},[2307,2309,2311,2313,2316,2318,2320,2321],{"type":1231,"url":2308},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1220,"url":2310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1225,"url":2312},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":2314,"url":2315},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1228,"url":2317},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1231,"url":2319},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1228,"url":1304},{"type":1220,"url":2322},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1309,1310,2324,2325,2326],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",6,{"id":146,"slug":2329,"dossier":47,"summary":2330,"aliases":2331,"sourceIds":2333,"published":2334,"modified":2335,"checkedAt":7,"severity":2336,"references":2339,"versionKeys":2348,"packageCount":32,"repositoryCount":1403},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[2332],"CVE-2026-63374",[146],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[2337],{"type":1322,"score":2338},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2340,2342,2344,2346,2347],{"type":1231,"url":2341},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":1231,"url":2343},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":1231,"url":2345},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":1228,"url":1872},{"type":1231,"url":1874},[1876,1877,1878,1879,1880,1881,1882,1883],{"id":147,"slug":2350,"dossier":47,"summary":2351,"aliases":2352,"sourceIds":2355,"published":2356,"modified":2357,"checkedAt":7,"severity":2358,"references":2360,"versionKeys":2364,"packageCount":32,"repositoryCount":368},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[2353,2354],"CVE-2026-54283","PYSEC-2026-249",[147,2354],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[2359],{"type":1216,"score":1325},[2361,2363],{"type":1220,"url":2362},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1228,"url":2317},[1308,1309,1310,2324,2325,2326,2365,2366,2367],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":148,"slug":2369,"dossier":47,"summary":2370,"aliases":2371,"sourceIds":2375,"published":2376,"modified":2377,"checkedAt":7,"severity":2378,"references":2381,"versionKeys":2418,"packageCount":32,"repositoryCount":368},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[2372,2373,2374],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[148,2373],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[2379],{"type":1216,"score":2380},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2382,2384,2386,2388,2390,2392,2394,2396,2398,2400,2401,2403,2406,2408,2410,2412,2414,2416],{"type":1220,"url":2383},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1220,"url":2385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1225,"url":2387},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1231,"url":2389},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1234,"url":2391},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1231,"url":2393},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1231,"url":2395},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1231,"url":2397},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1231,"url":2399},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1228,"url":2317},{"type":1231,"url":2402},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":2404,"url":2405},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1231,"url":2407},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1231,"url":2409},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":1231,"url":2411},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":1231,"url":2413},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":1234,"url":2415},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1220,"url":2417},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1308,1309,1310,2324,2325,2326,2365,2366,2367],{"id":149,"slug":2420,"dossier":47,"summary":2421,"aliases":2422,"sourceIds":2426,"published":2427,"modified":2428,"checkedAt":7,"severity":2429,"references":2433,"versionKeys":2455,"packageCount":32,"repositoryCount":379},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2423,2424,2425],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[149,2425],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[2430,2431],{"type":1216,"score":1416},{"type":1322,"score":2432},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2434,2436,2438,2440,2442,2444,2445,2447,2449,2451,2453],{"type":1220,"url":2435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1231,"url":2437},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1231,"url":2439},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1231,"url":2441},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1231,"url":2443},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1228,"url":1432},{"type":1231,"url":2446},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1231,"url":2448},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1231,"url":2450},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1228,"url":2452},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1220,"url":2454},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1444,1445,1446,2456,2457],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":150,"slug":2459,"dossier":90,"summary":2460,"aliases":2461,"sourceIds":2463,"published":2464,"modified":2465,"checkedAt":7,"severity":2466,"references":2469,"versionKeys":2483,"packageCount":32,"repositoryCount":2486},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[2462],"CVE-2026-97687",[150],"2026-09-30T14:46:04Z","2026-09-30T15:00:05.369237042Z",[2467],{"type":1322,"score":2468},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2470,2472,2474,2476,2478,2480,2481],{"type":1231,"url":2471},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":1220,"url":2473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":1231,"url":2475},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":1231,"url":2477},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":1231,"url":2479},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":1228,"url":1394},{"type":1231,"url":2482},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",[1398,1399,1400,1401,1402,2484,2485],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",22,{"id":151,"slug":2488,"dossier":90,"summary":2489,"aliases":2490,"sourceIds":2494,"published":2495,"modified":2496,"checkedAt":7,"severity":2497,"references":2499,"versionKeys":2509,"packageCount":32,"repositoryCount":104},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2491,2492,2493],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[151,2493],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2498],{"type":1216,"score":1325},[2500,2502,2504,2505,2507,2508],{"type":1264,"url":2501},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1220,"url":2503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1225,"url":1540},{"type":1231,"url":2506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1228,"url":1544},{"type":1220,"url":1546},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":152,"slug":2511,"dossier":47,"summary":2512,"aliases":2513,"sourceIds":2516,"published":2517,"modified":2518,"checkedAt":7,"severity":2519,"references":2521,"versionKeys":2534,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2514,2515],"CVE-2025-5197","PYSEC-2026-1983",[152,2515],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[2520],{"type":1216,"score":1668},[2522,2524,2526,2528,2529,2531,2532],{"type":1220,"url":2523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1231,"url":2525},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1231,"url":2527},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1228,"url":1262},{"type":1231,"url":2530},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1228,"url":1469},{"type":1220,"url":2533},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1269,1270,1271,1272],{"id":153,"slug":2536,"dossier":47,"summary":2537,"aliases":2538,"sourceIds":2541,"published":2542,"modified":2543,"checkedAt":7,"severity":2544,"references":2547,"versionKeys":2558,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[2539,2540],"CVE-2025-53643","PYSEC-2026-1104",[153,2540],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[2545],{"type":1322,"score":2546},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2548,2550,2552,2554,2555,2556],{"type":1231,"url":2549},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1220,"url":2551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1225,"url":2553},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":2557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1334,1335,1336,1337],{"id":154,"slug":2560,"dossier":47,"summary":2561,"aliases":2562,"sourceIds":2565,"published":2566,"modified":2567,"checkedAt":7,"severity":2568,"references":2572,"versionKeys":2581,"packageCount":32,"repositoryCount":368},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[2563,2564],"CVE-2026-34518","PYSEC-2026-2100",[154,2564],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[2569,2571],{"type":1216,"score":2570},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1322,"score":1788},[2573,2575,2577,2579,2580],{"type":1225,"url":2574},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1220,"url":2576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1225,"url":2578},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":155,"slug":2583,"dossier":47,"summary":2584,"aliases":2585,"sourceIds":2588,"published":2589,"modified":2590,"checkedAt":7,"severity":2591,"references":2594,"versionKeys":2613,"packageCount":32,"repositoryCount":379},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2586,2587],"CVE-2024-47081","PYSEC-2026-1872",[155,2587],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2592],{"type":1216,"score":2593},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2595,2597,2599,2601,2603,2605,2607,2609,2611],{"type":1231,"url":2596},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1220,"url":2598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1231,"url":2600},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1225,"url":2602},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1228,"url":2604},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1231,"url":2606},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1231,"url":2608},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1228,"url":2610},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1220,"url":2612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2614,2615],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":156,"slug":2617,"dossier":90,"summary":2618,"aliases":2619,"sourceIds":2623,"published":2624,"modified":2625,"checkedAt":7,"severity":2626,"references":2628,"versionKeys":2641,"packageCount":32,"repositoryCount":104},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2620,2621,2622],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[156,2622],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2627],{"type":1216,"score":1325},[2629,2631,2633,2635,2637,2639,2640],{"type":1264,"url":2630},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1220,"url":2632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1225,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1225,"url":2636},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1231,"url":2638},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1228,"url":1544},{"type":1220,"url":2016},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":157,"slug":2643,"dossier":47,"summary":2644,"aliases":2645,"sourceIds":2648,"published":2649,"modified":2650,"checkedAt":7,"severity":2651,"references":2654,"versionKeys":2671,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2646,2647],"CVE-2024-35195","PYSEC-2026-1873",[157,2647],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2652],{"type":1216,"score":2653},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2655,2657,2659,2661,2663,2664,2666,2668,2669],{"type":1231,"url":2656},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1220,"url":2658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1231,"url":2660},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1225,"url":2662},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1228,"url":2604},{"type":1231,"url":2665},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1231,"url":2667},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1228,"url":2610},{"type":1220,"url":2670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2614],{"id":158,"slug":2673,"dossier":47,"summary":2674,"aliases":2675,"sourceIds":2678,"published":2679,"modified":2680,"checkedAt":7,"severity":2681,"references":2685,"versionKeys":2691,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[2676,2677],"CVE-2026-54280","PYSEC-2026-2113",[158,2677],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[2682,2684],{"type":1322,"score":2683},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":1325},[2686,2688,2690],{"type":1220,"url":2687},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1225,"url":2689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":159,"slug":2693,"dossier":47,"summary":2694,"aliases":2695,"sourceIds":2698,"published":2699,"modified":2700,"checkedAt":7,"severity":2701,"references":2705,"versionKeys":2716,"packageCount":32,"repositoryCount":368},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[2696,2697],"CVE-2026-34525","PYSEC-2026-2103",[159,2697],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[2702,2704],{"type":1322,"score":2703},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1216,"score":1356},[2706,2708,2710,2712,2714,2715],{"type":1225,"url":2707},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1220,"url":2709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1225,"url":2711},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1225,"url":2713},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":160,"slug":2718,"dossier":47,"summary":2719,"aliases":2720,"sourceIds":2724,"published":2725,"modified":2726,"checkedAt":7,"severity":2727,"references":2732,"versionKeys":2748,"packageCount":32,"repositoryCount":426},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2721,2722,2723],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[160],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2728,2730],{"type":1216,"score":2729},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1322,"score":2731},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2733,2735,2737,2739,2740,2742,2744,2746],{"type":1220,"url":2734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1231,"url":2736},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1231,"url":2738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1228,"url":1432},{"type":1231,"url":2741},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1231,"url":2743},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1231,"url":2745},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1231,"url":2747},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1444,1445],{"id":161,"slug":2750,"dossier":47,"summary":2751,"aliases":2752,"sourceIds":2756,"published":2757,"modified":2758,"checkedAt":7,"severity":2759,"references":2763,"versionKeys":2803,"packageCount":32,"repositoryCount":1750},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2753,2754,2755],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[161,2755],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2760,2762],{"type":1322,"score":2761},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1216,"score":1325},[2764,2766,2768,2770,2772,2774,2775,2777,2779,2781,2783,2785,2787,2789,2791,2793,2795,2797,2799,2801],{"type":1231,"url":2765},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1220,"url":2767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1231,"url":2769},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1231,"url":2771},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1231,"url":2773},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1228,"url":1544},{"type":1231,"url":2776},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1231,"url":2778},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1231,"url":2780},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1220,"url":2782},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1220,"url":2784},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1220,"url":2786},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1220,"url":2788},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1220,"url":2790},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1220,"url":2792},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1220,"url":2794},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1220,"url":2796},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1220,"url":2798},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1220,"url":2800},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1220,"url":2802},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1548,1549,1550,1551,1552,1553,1554],{"id":162,"slug":2805,"dossier":47,"summary":2806,"aliases":2807,"sourceIds":2810,"published":2811,"modified":2812,"checkedAt":7,"severity":2813,"references":2816,"versionKeys":2833,"packageCount":32,"repositoryCount":426},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2808,2809],"CVE-2025-27516","PYSEC-2026-1471",[162,2809],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2814],{"type":1322,"score":2815},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2817,2819,2821,2823,2825,2827,2829,2831],{"type":1231,"url":2818},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1220,"url":2820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1225,"url":2822},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1228,"url":2824},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1231,"url":2826},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1231,"url":2828},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1228,"url":2830},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1220,"url":2832},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2834,2835],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":163,"slug":2837,"dossier":47,"summary":2838,"aliases":2839,"sourceIds":2842,"published":2843,"modified":2844,"checkedAt":7,"severity":2845,"references":2848,"versionKeys":2863,"packageCount":32,"repositoryCount":1991},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[2840,2841],"CVE-2026-69244","PYSEC-2026-3545",[163,2841],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[2846],{"type":1322,"score":2847},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2849,2851,2853,2855,2856,2858,2859,2861],{"type":1231,"url":2850},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1231,"url":2852},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1231,"url":2854},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1228,"url":1330},{"type":1231,"url":2857},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1228,"url":1798},{"type":1220,"url":2860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1220,"url":2862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[1334,1335,1336,1337,1338,1339,1340,1341,1342,2864],"pypi:aiohttp@3.14.1",{"id":164,"slug":2866,"dossier":47,"summary":2867,"aliases":2868,"sourceIds":2872,"published":2873,"modified":2874,"checkedAt":7,"severity":2875,"references":2880,"versionKeys":2896,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2869,2870,2871],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[164,2871],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2876,2878],{"type":1216,"score":2877},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1322,"score":2879},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2881,2883,2885,2887,2888,2890,2892,2894],{"type":1220,"url":2882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1231,"url":2884},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1231,"url":2886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1228,"url":1911},{"type":1231,"url":2889},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1231,"url":2891},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1228,"url":2893},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1220,"url":2895},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1917],{"id":165,"slug":2898,"dossier":47,"summary":2899,"aliases":2900,"sourceIds":2904,"published":2905,"modified":2906,"checkedAt":7,"severity":2907,"references":2912,"versionKeys":2930,"packageCount":32,"repositoryCount":426},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2901,2902,2903],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[165],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2908,2910],{"type":1216,"score":2909},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1322,"score":2911},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2913,2915,2917,2919,2921,2923,2924,2926,2928],{"type":1220,"url":2914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1231,"url":2916},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1231,"url":2918},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1231,"url":2920},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1231,"url":2922},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1228,"url":1432},{"type":1231,"url":2925},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1231,"url":2927},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1231,"url":2929},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1444,1445],{"id":166,"slug":2932,"dossier":47,"summary":2933,"aliases":2934,"sourceIds":2937,"published":2938,"modified":2939,"checkedAt":7,"severity":2940,"references":2944,"versionKeys":2955,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[2935,2936],"CVE-2024-47874","PYSEC-2026-1943",[166,2936],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[2941,2943],{"type":1216,"score":2942},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1322,"score":1814},[2945,2947,2949,2951,2952,2953],{"type":1231,"url":2946},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1220,"url":2948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1225,"url":2950},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1228,"url":1298},{"type":1228,"url":1304},{"type":1220,"url":2954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1308],{"id":167,"slug":2957,"dossier":47,"summary":2958,"aliases":2959,"sourceIds":2962,"published":2963,"modified":2964,"checkedAt":7,"severity":2965,"references":2970,"versionKeys":2994,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[2960,2961],"CVE-2026-5241","PYSEC-2026-2290",[167,2961],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[2966,2968],{"type":1216,"score":2967},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1216,"score":2969},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2971,2973,2975,2977,2979,2981,2983,2985,2986,2988,2990,2992],{"type":1220,"url":2972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1225,"url":2974},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1220,"url":2976},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1220,"url":2978},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1231,"url":2980},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1231,"url":2982},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1425,"url":2984},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1228,"url":1262},{"type":1231,"url":2987},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1264,"url":2989},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1231,"url":2991},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1220,"url":2993},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1269,1270,1271,1272,1273,1274,1275,1276,1277],{"id":168,"slug":2996,"dossier":47,"summary":2997,"aliases":2998,"sourceIds":3001,"published":3002,"modified":3003,"checkedAt":7,"severity":3004,"references":3007,"versionKeys":3018,"packageCount":32,"repositoryCount":379},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[2999,3000],"CVE-2025-69230","PYSEC-2026-1105",[168,3000],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[3005],{"type":1322,"score":3006},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3008,3010,3012,3014,3015,3016],{"type":1231,"url":3009},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1220,"url":3011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1225,"url":3013},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":3017},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1334,1335,1336,1337,1338,1339,1340],{"id":169,"slug":3020,"dossier":90,"summary":3021,"aliases":3022,"sourceIds":3026,"published":3027,"modified":3028,"checkedAt":7,"severity":3029,"references":3032,"versionKeys":3046,"packageCount":32,"repositoryCount":104},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[3023,3024,3025],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[169,3025],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[3030],{"type":1216,"score":3031},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[3033,3035,3037,3039,3041,3042,3043,3044],{"type":1231,"url":3034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1220,"url":3036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1231,"url":3038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1231,"url":3040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1228,"url":1544},{"type":1231,"url":2016},{"type":1228,"url":2018},{"type":1220,"url":3045},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":170,"slug":3048,"dossier":47,"summary":2242,"aliases":3049,"sourceIds":3052,"published":3053,"modified":3054,"checkedAt":7,"severity":3055,"references":3058,"versionKeys":3069,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[3050,3051],"CVE-2025-1194","PYSEC-2026-1984",[170,3051],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[3056],{"type":1216,"score":3057},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3059,3061,3063,3064,3066,3067],{"type":1220,"url":3060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1231,"url":3062},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1228,"url":1262},{"type":1231,"url":3065},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1228,"url":1469},{"type":1220,"url":3068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1269],{"id":171,"slug":3071,"dossier":47,"summary":3072,"aliases":3073,"sourceIds":3076,"published":3077,"modified":3078,"checkedAt":7,"severity":3079,"references":3082,"versionKeys":3088,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[3074,3075],"CVE-2026-54278","PYSEC-2026-2111",[171,3075],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[3080,3081],{"type":1322,"score":1594},{"type":1216,"score":1325},[3083,3085,3086],{"type":1220,"url":3084},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1228,"url":1330},{"type":1225,"url":3087},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":172,"slug":3090,"dossier":47,"summary":3091,"aliases":3092,"sourceIds":3095,"published":3096,"modified":3097,"checkedAt":7,"severity":3098,"references":3101,"versionKeys":3120,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3093,3094],"CVE-2024-34062","PYSEC-2026-1976",[172,3094],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[3099],{"type":1216,"score":3100},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3102,3104,3106,3108,3110,3112,3114,3116,3118],{"type":1231,"url":3103},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1220,"url":3105},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1231,"url":3107},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1228,"url":3109},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1231,"url":3111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1231,"url":3113},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1231,"url":3115},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1228,"url":3117},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1220,"url":3119},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3121],"pypi:tqdm@4.66.2",{"id":173,"slug":3123,"dossier":47,"summary":3124,"aliases":3125,"sourceIds":3128,"published":3129,"modified":3130,"checkedAt":7,"severity":3131,"references":3133,"versionKeys":3146,"packageCount":32,"repositoryCount":379},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3126,3127],"CVE-2025-69229","PYSEC-2026-1106",[173,3127],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[3132],{"type":1322,"score":1594},[3134,3136,3138,3140,3142,3143,3144],{"type":1231,"url":3135},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1220,"url":3137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1231,"url":3139},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1231,"url":3141},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":3145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1334,1335,1336,1337,1338,1339,1340],{"id":174,"slug":3148,"dossier":90,"summary":3149,"aliases":3150,"sourceIds":3153,"published":3154,"modified":3155,"checkedAt":7,"severity":3156,"references":3161,"versionKeys":3171,"packageCount":32,"repositoryCount":3174},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3151,3152],"CVE-2026-25645","PYSEC-2026-2275",[174,3152],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[3157,3159],{"type":1216,"score":3158},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1216,"score":3160},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3162,3164,3166,3168,3169],{"type":1220,"url":3163},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1220,"url":3165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1225,"url":3167},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1228,"url":2604},{"type":1220,"url":3170},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2614,2615,3172,3173],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":175,"slug":3176,"dossier":47,"summary":3177,"aliases":3178,"sourceIds":3180,"published":3181,"modified":3182,"checkedAt":7,"severity":3183,"references":3185,"versionKeys":3194,"packageCount":32,"repositoryCount":103},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[3179],"CVE-2026-97688",[175],"2026-09-30T15:00:38Z","2026-09-30T15:15:04.066660799Z",[3184],{"type":1322,"score":2080},[3186,3188,3190,3192,3193],{"type":1231,"url":3187},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":1220,"url":3189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":1231,"url":3191},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":1228,"url":1394},{"type":1231,"url":2482},[2484,2485],{"id":176,"slug":3196,"dossier":47,"summary":3197,"aliases":3198,"sourceIds":3201,"published":3202,"modified":3203,"checkedAt":7,"severity":3204,"references":3206,"versionKeys":3217,"packageCount":32,"repositoryCount":1403},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3199,3200],"CVE-2025-66418","PYSEC-2026-1998",[176,3200],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[3205],{"type":1322,"score":1379},[3207,3209,3211,3213,3214,3215],{"type":1231,"url":3208},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1220,"url":3210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1225,"url":3212},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1228,"url":1394},{"type":1228,"url":1396},{"type":1220,"url":3216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1398,1399,1400,1401,1402],{"id":177,"slug":3219,"dossier":47,"summary":3220,"aliases":3221,"sourceIds":3224,"published":3225,"modified":3226,"checkedAt":7,"severity":3227,"references":3230,"versionKeys":3245,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3222,3223],"CVE-2024-56201","PYSEC-2026-1472",[177,3223],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3228,3229],{"type":1216,"score":1898},{"type":1322,"score":2815},[3231,3233,3235,3237,3239,3240,3242,3243],{"type":1231,"url":3232},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1220,"url":3234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1231,"url":3236},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1225,"url":3238},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1228,"url":2824},{"type":1231,"url":3241},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1228,"url":2830},{"type":1220,"url":3244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2834],{"id":178,"slug":3247,"dossier":90,"summary":3248,"aliases":3249,"sourceIds":3253,"published":3254,"modified":3255,"checkedAt":7,"severity":3256,"references":3259,"versionKeys":3271,"packageCount":32,"repositoryCount":3174},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[3250,3251,3252],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[178,3252],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[3257],{"type":1216,"score":3258},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3260,3262,3264,3266,3268,3269],{"type":1264,"url":3261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1220,"url":3263},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1225,"url":3265},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1231,"url":3267},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1228,"url":1911},{"type":1220,"url":3270},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1917,1918,1919,1920,3272,3273,3274,3275,3276,3277,3278,3279],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":179,"slug":3281,"dossier":47,"summary":3282,"aliases":3283,"sourceIds":3286,"published":3287,"modified":3288,"checkedAt":7,"severity":3289,"references":3292,"versionKeys":3313,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3284,3285],"CVE-2024-34064","PYSEC-2026-1474",[179,3285],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3290],{"type":1216,"score":3291},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3293,3295,3297,3299,3300,3302,3304,3306,3308,3310,3311],{"type":1231,"url":3294},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1220,"url":3296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1225,"url":3298},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1228,"url":2824},{"type":1231,"url":3301},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1231,"url":3303},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1231,"url":3305},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1231,"url":3307},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1231,"url":3309},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1228,"url":2830},{"type":1220,"url":3312},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2834],{"id":180,"slug":3315,"dossier":47,"summary":3316,"aliases":3317,"sourceIds":3320,"published":3321,"modified":3322,"checkedAt":7,"severity":3323,"references":3326,"versionKeys":3335,"packageCount":32,"repositoryCount":368},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3318,3319],"CVE-2026-34513","PYSEC-2026-2095",[180,3319],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[3324,3325],{"type":1322,"score":1510},{"type":1216,"score":1325},[3327,3329,3331,3333,3334],{"type":1225,"url":3328},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1220,"url":3330},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1225,"url":3332},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":181,"slug":3337,"dossier":47,"summary":3338,"aliases":3339,"sourceIds":3342,"published":3343,"modified":3344,"checkedAt":7,"severity":3345,"references":3350,"versionKeys":3358,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3340,3341],"CVE-2026-47265","PYSEC-2026-2105",[181,3341],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[3346,3348],{"type":1322,"score":3347},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1216,"score":3349},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3351,3353,3355,3357],{"type":1225,"url":3352},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1220,"url":3354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1225,"url":3356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":182,"slug":3360,"dossier":47,"summary":3361,"aliases":3362,"sourceIds":3365,"published":3366,"modified":3367,"checkedAt":7,"severity":3368,"references":3373,"versionKeys":3379,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3363,3364],"CVE-2026-54276","PYSEC-2026-2109",[182,3364],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[3369,3371],{"type":1322,"score":3370},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1216,"score":3372},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3374,3376,3378],{"type":1220,"url":3375},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1225,"url":3377},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":183,"slug":3381,"dossier":47,"summary":3382,"aliases":3383,"sourceIds":3386,"published":3387,"modified":3388,"checkedAt":7,"severity":3389,"references":3393,"versionKeys":3410,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[3384,3385],"CVE-2025-67221","PYSEC-2026-107",[183,3385],"2026-01-22T17:16:01.433Z","2026-09-10T03:50:33.258377926Z",[3390,3392],{"type":1322,"score":3391},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1216,"score":1325},[3394,3396,3398,3400,3402,3404,3406,3408],{"type":1220,"url":3395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":1231,"url":3397},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":1231,"url":3399},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":1231,"url":3401},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":1228,"url":3403},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1264,"url":3405},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":1231,"url":3407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":1220,"url":3409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[3411,3412,3413,3414],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":184,"slug":3416,"dossier":47,"summary":3417,"aliases":3418,"sourceIds":3421,"published":3422,"modified":3423,"checkedAt":7,"severity":3424,"references":3428,"versionKeys":3444,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[3419,3420],"CVE-2024-11394","PYSEC-2024-229",[184,3420],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[3425,3427],{"type":1216,"score":3426},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1216,"score":2877},[3429,3431,3433,3435,3436,3438,3440,3442],{"type":1220,"url":3430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1231,"url":3432},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1231,"url":3434},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1228,"url":1262},{"type":1231,"url":3437},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1231,"url":3439},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1220,"url":3441},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1220,"url":3443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1269],{"id":185,"slug":3446,"dossier":47,"summary":3447,"aliases":3448,"sourceIds":3451,"published":3452,"modified":3453,"checkedAt":7,"severity":3454,"references":3459,"versionKeys":3477,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[3449,3450],"CVE-2026-34993","PYSEC-2026-2104",[185,3450],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[3455,3457],{"type":1216,"score":3456},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1216,"score":3458},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3460,3462,3464,3466,3467,3469,3471,3473,3474,3475],{"type":1225,"url":3461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1220,"url":3463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1225,"url":3465},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1228,"url":1330},{"type":1231,"url":3468},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1231,"url":3470},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1220,"url":3472},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1220,"url":2976},{"type":1220,"url":2978},{"type":1425,"url":3476},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":186,"slug":3479,"dossier":47,"summary":3480,"aliases":3481,"sourceIds":3484,"published":3485,"modified":3486,"checkedAt":7,"severity":3487,"references":3489,"versionKeys":3500,"packageCount":32,"repositoryCount":379},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[3482,3483],"CVE-2025-69227","PYSEC-2026-1107",[186,3483],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[3488],{"type":1322,"score":1594},[3490,3492,3494,3496,3497,3498],{"type":1231,"url":3491},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1220,"url":3493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1231,"url":3495},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":3499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1334,1335,1336,1337,1338,1339,1340],{"id":187,"slug":3502,"dossier":90,"summary":3503,"aliases":3504,"sourceIds":3508,"published":3509,"modified":3510,"checkedAt":7,"severity":3511,"references":3513,"versionKeys":3527,"packageCount":32,"repositoryCount":104},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[3505,3506,3507],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[187,3507],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[3512],{"type":1216,"score":1325},[3514,3516,3518,3520,3522,3523,3524,3525],{"type":1231,"url":3515},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1220,"url":3517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1231,"url":3519},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1231,"url":3521},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1228,"url":1544},{"type":1231,"url":2016},{"type":1228,"url":2018},{"type":1220,"url":3526},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":188,"slug":3529,"dossier":47,"summary":3530,"aliases":3531,"sourceIds":3534,"published":3535,"modified":3536,"checkedAt":7,"severity":3537,"references":3539,"versionKeys":3552,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[3532,3533],"CVE-2025-3264","PYSEC-2026-1985",[188,3533],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[3538],{"type":1216,"score":1668},[3540,3542,3544,3546,3547,3549,3550],{"type":1220,"url":3541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1231,"url":3543},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1231,"url":3545},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1228,"url":1262},{"type":1231,"url":3548},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1228,"url":1469},{"type":1220,"url":3551},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1269],{"id":189,"slug":3554,"dossier":47,"summary":3555,"aliases":3556,"sourceIds":3559,"published":3560,"modified":3561,"checkedAt":7,"severity":3562,"references":3565,"versionKeys":3573,"packageCount":32,"repositoryCount":368},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[3557,3558],"CVE-2026-54282","PYSEC-2026-248",[189,3558],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[3563,3564],{"type":1216,"score":2180},{"type":1216,"score":1356},[3566,3568,3570,3571],{"type":1220,"url":3567},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1220,"url":3569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1228,"url":2317},{"type":1231,"url":3572},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1308,1309,1310,2324,2325,2326,2365,2366,2367],{"id":190,"slug":3575,"dossier":47,"summary":3576,"aliases":3577,"sourceIds":3580,"published":3581,"modified":3582,"checkedAt":7,"severity":3583,"references":3588,"versionKeys":3601,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[3578,3579],"CVE-2024-5206","PYSEC-2024-110",[190,3579],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[3584,3586],{"type":1216,"score":3585},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1216,"score":3587},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3589,3591,3593,3595,3597,3599],{"type":1220,"url":3590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":1225,"url":3592},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":1231,"url":3594},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":1228,"url":3596},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":1231,"url":3598},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":1220,"url":3600},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[3602],"pypi:scikit-learn@1.3.2",{"id":191,"slug":3604,"dossier":47,"summary":3605,"aliases":3606,"sourceIds":3609,"published":3610,"modified":3611,"checkedAt":7,"severity":3612,"references":3617,"versionKeys":3626,"packageCount":32,"repositoryCount":368},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[3607,3608],"CVE-2026-34516","PYSEC-2026-2098",[191,3608],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[3613,3614,3615],{"type":1216,"score":1325},{"type":1322,"score":1594},{"type":1322,"score":3616},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3618,3620,3622,3624,3625],{"type":1225,"url":3619},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1220,"url":3621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1225,"url":3623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":192,"slug":3628,"dossier":47,"summary":3629,"aliases":3630,"sourceIds":3633,"published":3634,"modified":3635,"checkedAt":7,"severity":3636,"references":3639,"versionKeys":3645,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[3631,3632],"CVE-2026-50269","PYSEC-2026-2106",[192,3632],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[3637,3638],{"type":1322,"score":1354},{"type":1216,"score":1325},[3640,3642,3644],{"type":1220,"url":3641},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1225,"url":3643},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1228,"url":1330},[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":193,"slug":3647,"dossier":47,"summary":3648,"aliases":3649,"sourceIds":3652,"published":3653,"modified":3654,"checkedAt":7,"severity":3655,"references":3658,"versionKeys":3666,"packageCount":32,"repositoryCount":407},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3650,3651],"CVE-2026-44432","PYSEC-2026-142",[193,3651],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3656,3657],{"type":1216,"score":1325},{"type":1322,"score":1379},[3659,3661,3663,3665],{"type":1220,"url":3660},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1220,"url":3662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1231,"url":3664},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1228,"url":1394},[2484],{"id":194,"slug":3668,"dossier":47,"summary":3669,"aliases":3670,"sourceIds":3673,"published":3674,"modified":3675,"checkedAt":7,"severity":3676,"references":3679,"versionKeys":3692,"packageCount":32,"repositoryCount":1991},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3671,3672],"CVE-2026-28684","PYSEC-2026-2270",[194,3672],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[3677],{"type":1216,"score":3678},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3680,3682,3684,3686,3688,3690],{"type":1225,"url":3681},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1220,"url":3683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1225,"url":3685},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1231,"url":3687},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1228,"url":3689},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1220,"url":3691},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3693,3694,3695,3696],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":195,"slug":3698,"dossier":47,"summary":3699,"aliases":3700,"sourceIds":3703,"published":3704,"modified":3705,"checkedAt":7,"severity":3706,"references":3709,"versionKeys":3724,"packageCount":32,"repositoryCount":1991},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[3701,3702],"CVE-2026-69243","PYSEC-2026-3546",[195,3702],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[3707],{"type":1322,"score":3708},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3710,3712,3714,3716,3717,3719,3720,3722],{"type":1231,"url":3711},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1231,"url":3713},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1231,"url":3715},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1228,"url":1330},{"type":1231,"url":3718},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1228,"url":1798},{"type":1220,"url":3721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1220,"url":3723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[1334,1335,1336,1337,1338,1339,1340,1341,1342,2864],{"id":196,"slug":3726,"dossier":47,"summary":3727,"aliases":3728,"sourceIds":3731,"published":3732,"modified":3733,"checkedAt":7,"severity":3734,"references":3736,"versionKeys":3747,"packageCount":32,"repositoryCount":2327},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[3729,3730],"CVE-2026-40347","PYSEC-2026-3038",[196,3730],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[3735],{"type":1216,"score":1289},[3737,3739,3741,3742,3744,3745],{"type":1231,"url":3738},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1220,"url":3740},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1228,"url":1823},{"type":1231,"url":3743},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1228,"url":1825},{"type":1220,"url":3746},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[1942,1943,1829],{"id":197,"slug":3749,"dossier":47,"summary":3750,"aliases":3751,"sourceIds":3754,"published":3755,"modified":3756,"checkedAt":7,"severity":3757,"references":3759,"versionKeys":3772,"packageCount":32,"repositoryCount":1991},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[3752,3753],"CVE-2026-59881","PYSEC-2026-3547",[197,3753],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[3758],{"type":1322,"score":2080},[3760,3762,3764,3766,3768,3769,3770],{"type":1231,"url":3761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1220,"url":3763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1231,"url":3765},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1231,"url":3767},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":3771},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[1334,1335,1336,1337,1338,1339,1340,1341,1342,2864],{"id":198,"slug":3774,"dossier":47,"summary":3775,"aliases":3776,"sourceIds":3779,"published":3780,"modified":3781,"checkedAt":7,"severity":3782,"references":3784,"versionKeys":3795,"packageCount":32,"repositoryCount":379},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[3777,3778],"CVE-2025-69225","PYSEC-2026-1109",[198,3778],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[3783],{"type":1322,"score":1354},[3785,3787,3789,3791,3792,3793],{"type":1231,"url":3786},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1220,"url":3788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1225,"url":3790},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1228,"url":1330},{"type":1228,"url":1798},{"type":1220,"url":3794},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1334,1335,1336,1337,1338,1339,1340],{"id":199,"slug":3797,"dossier":47,"summary":3798,"aliases":3799,"sourceIds":3802,"published":3803,"modified":3804,"checkedAt":7,"severity":3805,"references":3808,"versionKeys":3817,"packageCount":32,"repositoryCount":368},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[3800,3801],"CVE-2026-34519","PYSEC-2026-2101",[199,3801],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[3806,3807],{"type":1322,"score":1354},{"type":1216,"score":1356},[3809,3811,3813,3815,3816],{"type":1225,"url":3810},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1220,"url":3812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1225,"url":3814},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":200,"slug":3819,"dossier":47,"summary":3820,"aliases":3821,"sourceIds":3824,"published":3825,"modified":3826,"checkedAt":7,"severity":3827,"references":3830,"versionKeys":3839,"packageCount":32,"repositoryCount":368},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[3822,3823],"CVE-2026-34515","PYSEC-2026-2097",[200,3823],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[3828,3829],{"type":1322,"score":3347},{"type":1216,"score":3349},[3831,3833,3835,3837,3838],{"type":1225,"url":3832},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1220,"url":3834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1225,"url":3836},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":201,"slug":3841,"dossier":47,"summary":3842,"aliases":3843,"sourceIds":3847,"published":3848,"modified":3849,"checkedAt":7,"severity":3850,"references":3853,"versionKeys":3866,"packageCount":32,"repositoryCount":2327},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3844,3845,3846],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[201,3846],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3851,3852],{"type":1216,"score":1289},{"type":1216,"score":1325},[3854,3856,3858,3860,3862,3864,3865],{"type":1264,"url":3855},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1220,"url":3857},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1225,"url":3859},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1225,"url":3861},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1231,"url":3863},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1228,"url":1544},{"type":1220,"url":2016},[1553,1554,1555,1556],{"id":202,"slug":3868,"dossier":47,"summary":3869,"aliases":3870,"sourceIds":3873,"published":3535,"modified":3874,"checkedAt":7,"severity":3875,"references":3878,"versionKeys":3891,"packageCount":32,"repositoryCount":407},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[3871,3872],"CVE-2025-3777","PYSEC-2026-1986",[202,3872],"2026-09-10T03:50:26.198077196Z",[3876],{"type":1216,"score":3877},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3879,3881,3883,3884,3886,3888,3889],{"type":1220,"url":3880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1231,"url":3882},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1228,"url":1262},{"type":1231,"url":3885},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1231,"url":3887},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1228,"url":1469},{"type":1220,"url":3890},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1269,1270,1271],{"id":203,"slug":3893,"dossier":90,"summary":3894,"aliases":3895,"sourceIds":3899,"published":3900,"modified":3901,"checkedAt":7,"severity":3902,"references":3904,"versionKeys":3915,"packageCount":32,"repositoryCount":104},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3896,3897,3898],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[203,3898],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3903],{"type":1216,"score":1325},[3905,3907,3909,3911,3913,3914],{"type":1264,"url":3906},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1220,"url":3908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1225,"url":3910},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1231,"url":3912},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1228,"url":1544},{"type":1220,"url":1546},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":204,"slug":3917,"dossier":47,"summary":3918,"aliases":3919,"sourceIds":3922,"published":3923,"modified":3924,"checkedAt":7,"severity":3925,"references":3927,"versionKeys":3936,"packageCount":32,"repositoryCount":2327},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[3920,3921],"CVE-2026-42561","PYSEC-2026-3039",[204,3921],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[3926],{"type":1216,"score":1325},[3928,3930,3932,3933,3934],{"type":1231,"url":3929},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1220,"url":3931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1228,"url":1823},{"type":1228,"url":1825},{"type":1220,"url":3935},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[1942,1943,1829],{"id":205,"slug":3938,"dossier":47,"summary":3939,"aliases":3940,"sourceIds":3943,"published":3944,"modified":3945,"checkedAt":7,"severity":3946,"references":3948,"versionKeys":3960,"packageCount":32,"repositoryCount":379},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3941,3942],"CVE-2025-50181","PYSEC-2026-1999",[205,3942],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3947],{"type":1216,"score":1568},[3949,3951,3953,3955,3956,3957,3958],{"type":1231,"url":3950},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1220,"url":3952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1225,"url":3954},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1228,"url":1394},{"type":1231,"url":1578},{"type":1228,"url":1396},{"type":1220,"url":3959},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1398,1399,1400,1401],{"id":206,"slug":3962,"dossier":47,"summary":3963,"aliases":3964,"sourceIds":3968,"published":3969,"modified":3970,"checkedAt":7,"severity":3971,"references":3974,"versionKeys":3986,"packageCount":32,"repositoryCount":1403},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3965,3966,3967],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[206,3967],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3972,3973],{"type":1322,"score":2761},{"type":1216,"score":2132},[3975,3976,3978,3980,3982,3984,3985],{"type":1231,"url":2765},{"type":1225,"url":3977},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1220,"url":3979},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1225,"url":3981},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1225,"url":3983},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1228,"url":1544},{"type":1220,"url":1989},[1548,1549,1550,1551,1552,1553,1554,1555],{"id":207,"slug":3988,"dossier":47,"summary":3989,"aliases":3990,"sourceIds":3993,"published":3535,"modified":3994,"checkedAt":7,"severity":3995,"references":3997,"versionKeys":4008,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[3991,3992],"CVE-2025-3263","PYSEC-2026-1987",[207,3992],"2026-07-07T17:56:57.889099913Z",[3996],{"type":1216,"score":1668},[3998,4000,4001,4002,4003,4005,4006],{"type":1220,"url":3999},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1231,"url":3543},{"type":1231,"url":3545},{"type":1228,"url":1262},{"type":1231,"url":4004},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1228,"url":1469},{"type":1220,"url":4007},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1269],{"id":208,"slug":4010,"dossier":47,"summary":4011,"aliases":4012,"sourceIds":4015,"published":4016,"modified":4017,"checkedAt":7,"severity":4018,"references":4022,"versionKeys":4035,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[4013,4014],"CVE-2024-56326","PYSEC-2026-1475",[208,4014],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[4019,4021],{"type":1216,"score":4020},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1322,"score":2815},[4023,4025,4027,4029,4030,4031,4032,4033],{"type":1231,"url":4024},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1220,"url":4026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1225,"url":4028},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1228,"url":2824},{"type":1231,"url":3241},{"type":1231,"url":2826},{"type":1228,"url":2830},{"type":1220,"url":4034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2834],{"id":209,"slug":4037,"dossier":90,"summary":4038,"aliases":4039,"sourceIds":4042,"published":4043,"modified":4044,"checkedAt":7,"severity":4045,"references":4049,"versionKeys":4055,"packageCount":32,"repositoryCount":3174},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[4040,4041],"CVE-2026-44431","PYSEC-2026-141",[209,4041],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[4046,4047],{"type":1216,"score":2570},{"type":1322,"score":4048},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4050,4052,4054],{"type":1220,"url":4051},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1220,"url":4053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1228,"url":1394},[1398,1399,1400,1401,1402,2484],{"id":210,"slug":4057,"dossier":47,"summary":4058,"aliases":4059,"sourceIds":4063,"published":4064,"modified":4065,"checkedAt":7,"severity":4066,"references":4070,"versionKeys":4088,"packageCount":32,"repositoryCount":4093},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[4060,4061,4062],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[210],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[4067,4068],{"type":1216,"score":2909},{"type":1322,"score":4069},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4071,4073,4075,4077,4079,4081,4082,4084,4086],{"type":1220,"url":4072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1231,"url":4074},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1231,"url":4076},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1231,"url":4078},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1231,"url":4080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1228,"url":1432},{"type":1231,"url":4083},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1231,"url":4085},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1231,"url":4087},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1444,1445,1446,2456,2457,4089,4090,4091,4092],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",13,{"id":211,"slug":4095,"dossier":47,"summary":4096,"aliases":4097,"sourceIds":4100,"published":4101,"modified":4102,"checkedAt":7,"severity":4103,"references":4106,"versionKeys":4121,"packageCount":32,"repositoryCount":4093},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4098,4099],"CVE-2026-22701","PYSEC-2026-1374",[211,4099],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[4104],{"type":1216,"score":4105},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4107,4109,4111,4113,4115,4117,4119],{"type":1231,"url":4108},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1220,"url":4110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1231,"url":4112},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1231,"url":4114},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1228,"url":4116},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1228,"url":4118},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1220,"url":4120},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4122,4123,4124,4125],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":212,"slug":4127,"dossier":47,"summary":4128,"aliases":4129,"sourceIds":4132,"published":4133,"modified":4134,"checkedAt":7,"severity":4135,"references":4138,"versionKeys":4152,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[4130,4131],"CVE-2025-2099","PYSEC-2025-40",[212,4131],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[4136,4137],{"type":1216,"score":1668},{"type":1216,"score":1325},[4139,4141,4143,4145,4146,4148,4150],{"type":1220,"url":4140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1231,"url":4142},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1225,"url":4144},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1228,"url":1262},{"type":1231,"url":4147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1231,"url":4149},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1220,"url":4151},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1269],{"id":213,"slug":4154,"dossier":47,"summary":3417,"aliases":4155,"sourceIds":4158,"published":4159,"modified":4160,"checkedAt":7,"severity":4161,"references":4165,"versionKeys":4179,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[4156,4157],"CVE-2024-11392","PYSEC-2024-227",[213,4157],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[4162,4164],{"type":1216,"score":4163},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1216,"score":2877},[4166,4168,4169,4170,4171,4173,4175,4177],{"type":1220,"url":4167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1231,"url":3432},{"type":1231,"url":3434},{"type":1228,"url":1262},{"type":1231,"url":4172},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1231,"url":4174},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1220,"url":4176},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1220,"url":4178},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1269],{"id":214,"slug":4181,"dossier":47,"summary":4182,"aliases":4183,"sourceIds":4187,"published":4188,"modified":4189,"checkedAt":7,"severity":4190,"references":4193,"versionKeys":4207,"packageCount":32,"repositoryCount":1403},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4184,4185,4186],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[214,4186],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[4191,4192],{"type":1216,"score":1420},{"type":1322,"score":1981},[4194,4196,4198,4200,4202,4203,4204,4205],{"type":1231,"url":4195},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1220,"url":4197},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1231,"url":4199},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1231,"url":4201},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1228,"url":1544},{"type":1231,"url":1989},{"type":1228,"url":2018},{"type":1220,"url":4206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1548,1549,1550,1551,1552,1553,1554,1555],{"id":215,"slug":4209,"dossier":47,"summary":4210,"aliases":4211,"sourceIds":4214,"published":4215,"modified":4216,"checkedAt":7,"severity":4217,"references":4219,"versionKeys":4234,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4212,4213],"CVE-2025-6051","PYSEC-2026-1988",[215,4213],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[4218],{"type":1216,"score":1668},[4220,4222,4224,4226,4228,4229,4231,4232],{"type":1220,"url":4221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1231,"url":4223},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1231,"url":4225},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1231,"url":4227},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1228,"url":1262},{"type":1231,"url":4230},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1228,"url":1469},{"type":1220,"url":4233},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1269,1270,1271,1272],{"id":216,"slug":4236,"dossier":47,"summary":4237,"aliases":4238,"sourceIds":4241,"published":4242,"modified":4243,"checkedAt":7,"severity":4244,"references":4247,"versionKeys":4260,"packageCount":32,"repositoryCount":4093},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4239,4240],"CVE-2026-25087","PYSEC-2026-113",[216,4240],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[4245],{"type":1216,"score":4246},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4248,4250,4252,4254,4256,4258],{"type":1220,"url":4249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1225,"url":4251},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1228,"url":4253},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1231,"url":4255},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1220,"url":4257},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1220,"url":4259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4261,4262,4263,4264],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":217,"slug":4266,"dossier":47,"summary":4267,"aliases":4268,"sourceIds":4272,"published":2905,"modified":4273,"checkedAt":7,"severity":4274,"references":4277,"versionKeys":4295,"packageCount":32,"repositoryCount":1403},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4269,4270,4271],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[217],"2026-09-10T03:49:48.419046410Z",[4275,4276],{"type":1216,"score":2909},{"type":1322,"score":4069},[4278,4280,4282,4284,4286,4288,4289,4291,4293],{"type":1220,"url":4279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1231,"url":4281},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1231,"url":4283},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1231,"url":4285},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1231,"url":4287},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1228,"url":1432},{"type":1231,"url":4290},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1231,"url":4292},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1231,"url":4294},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4296,4297,4298,1444,1445,1446,2456,2457,4089,4090,4091,4092],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":218,"slug":4300,"dossier":47,"summary":4301,"aliases":4302,"sourceIds":4305,"published":4306,"modified":4307,"checkedAt":7,"severity":4308,"references":4311,"versionKeys":4320,"packageCount":32,"repositoryCount":103},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[4303,4304],"CVE-2026-53540","PYSEC-2026-3040",[218,4304],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[4309],{"type":1216,"score":4310},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4312,4314,4315,4316,4318],{"type":1231,"url":4313},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1228,"url":1823},{"type":1228,"url":1825},{"type":1220,"url":4317},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1220,"url":4319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[1942,1943,1944,1829],{"id":219,"slug":4322,"dossier":47,"summary":4323,"aliases":4324,"sourceIds":4327,"published":4328,"modified":4329,"checkedAt":7,"severity":4330,"references":4332,"versionKeys":4343,"packageCount":32,"repositoryCount":103},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[4325,4326],"CVE-2026-53537","PYSEC-2026-3041",[219,4326],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[4331],{"type":1216,"score":2180},[4333,4335,4337,4338,4340,4342],{"type":1231,"url":4334},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1220,"url":4336},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1228,"url":1823},{"type":1220,"url":4339},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1231,"url":4341},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1228,"url":1825},[1942,1943,1944,1829],{"id":220,"slug":4345,"dossier":47,"summary":4346,"aliases":4347,"sourceIds":4351,"published":2905,"modified":4352,"checkedAt":7,"severity":4353,"references":4356,"versionKeys":4371,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4348,4349,4350],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[220],"2026-06-10T17:41:15.774477397Z",[4354,4355],{"type":1216,"score":2909},{"type":1322,"score":2911},[4357,4359,4360,4361,4362,4364,4365,4367,4369],{"type":1220,"url":4358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1231,"url":2916},{"type":1231,"url":2918},{"type":1231,"url":2920},{"type":1231,"url":4363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1228,"url":1432},{"type":1231,"url":4366},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1231,"url":4368},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1231,"url":4370},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1444,1445,1446,2456,2457,4089,4090],{"id":221,"slug":4373,"dossier":90,"summary":4374,"aliases":4375,"sourceIds":4379,"published":4380,"modified":4381,"checkedAt":7,"severity":4382,"references":4384,"versionKeys":4398,"packageCount":32,"repositoryCount":104},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[4376,4377,4378],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[221,4378],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[4383],{"type":1322,"score":1814},[4385,4387,4389,4391,4393,4394,4395,4396],{"type":1231,"url":4386},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1220,"url":4388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1231,"url":4390},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1231,"url":4392},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1228,"url":1544},{"type":1231,"url":2016},{"type":1228,"url":2018},{"type":1220,"url":4397},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":222,"slug":4400,"dossier":47,"summary":4401,"aliases":4402,"sourceIds":4405,"published":4406,"modified":4407,"checkedAt":7,"severity":4408,"references":4411,"versionKeys":4424,"packageCount":32,"repositoryCount":407},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[4403,4404],"CVE-2025-43859","PYSEC-2026-348",[222,4404],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[4409],{"type":1216,"score":4410},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4412,4414,4416,4418,4420,4422],{"type":1231,"url":4413},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1220,"url":4415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1231,"url":4417},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1228,"url":4419},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1228,"url":4421},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1220,"url":4423},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[4425],"pypi:h11@0.14.0",{"id":223,"slug":4427,"dossier":90,"summary":4428,"aliases":4429,"sourceIds":4431,"published":4432,"modified":4433,"checkedAt":7,"severity":4434,"references":4436,"versionKeys":4445,"packageCount":32,"repositoryCount":2486},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[4430],"CVE-2026-97689",[223],"2026-09-30T14:46:18Z","2026-09-30T15:00:05.904945330Z",[4435],{"type":1322,"score":1379},[4437,4439,4441,4443,4444],{"type":1231,"url":4438},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":1220,"url":4440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":1231,"url":4442},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":1228,"url":1394},{"type":1231,"url":2482},[1398,1399,1400,1401,1402,2484,2485],{"id":224,"slug":4447,"dossier":47,"summary":4448,"aliases":4449,"sourceIds":4452,"published":4453,"modified":4454,"checkedAt":7,"severity":4455,"references":4459,"versionKeys":4468,"packageCount":32,"repositoryCount":368},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[4450,4451],"CVE-2026-22815","PYSEC-2026-2094",[224,4451],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[4456,4457],{"type":1322,"score":2080},{"type":1322,"score":4458},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4460,4462,4464,4466,4467],{"type":1225,"url":4461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1220,"url":4463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1225,"url":4465},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1228,"url":1330},{"type":1220,"url":1366},[1334,1335,1336,1337,1338,1339,1340,1341],{"id":225,"slug":4470,"dossier":47,"summary":4471,"aliases":4472,"sourceIds":4475,"published":4476,"modified":4477,"checkedAt":7,"severity":4478,"references":4481,"versionKeys":4498,"packageCount":32,"repositoryCount":4093},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4473,4474],"CVE-2025-68146","PYSEC-2026-1375",[225,4474],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[4479],{"type":1216,"score":4480},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4482,4484,4486,4487,4489,4491,4493,4494,4496],{"type":1231,"url":4483},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1231,"url":4485},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1228,"url":4116},{"type":1231,"url":4488},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1231,"url":4490},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1231,"url":4492},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1228,"url":4118},{"type":1220,"url":4495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1220,"url":4497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4122,4123,4124,4125],{"id":226,"slug":4500,"dossier":47,"summary":4501,"aliases":4502,"sourceIds":4506,"published":4507,"modified":4508,"checkedAt":7,"severity":4509,"references":4512,"versionKeys":4550,"packageCount":32,"repositoryCount":1403},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4503,4504,4505],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[226,4505],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[4510,4511],{"type":1216,"score":1325},{"type":1322,"score":1814},[4513,4515,4517,4519,4521,4522,4524,4526,4528,4530,4532,4534,4535,4537,4539,4541,4542,4544,4546,4548],{"type":1231,"url":4514},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1220,"url":4516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1231,"url":4518},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1231,"url":4520},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1228,"url":1544},{"type":1231,"url":4523},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1231,"url":4525},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1231,"url":4527},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1220,"url":4529},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1220,"url":4531},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1220,"url":4533},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1220,"url":2788},{"type":1220,"url":4536},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1220,"url":4538},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1220,"url":4540},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1220,"url":2790},{"type":1220,"url":4543},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1220,"url":4545},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1220,"url":4547},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1220,"url":4549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1548,1549,1550,1551,1552,1553,1554,1555],{"id":227,"slug":4552,"dossier":47,"summary":4553,"aliases":4554,"sourceIds":4558,"published":4559,"modified":4560,"checkedAt":7,"severity":4561,"references":4564,"versionKeys":4573,"packageCount":32,"repositoryCount":1403},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4555,4556,4557],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[227,4557],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[4562,4563],{"type":1216,"score":1420},{"type":1322,"score":1981},[4565,4567,4569,4571,4572],{"type":1220,"url":4566},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1220,"url":4568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1231,"url":4570},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1228,"url":1544},{"type":1220,"url":1989},[1548,1549,1550,1551,1552,1553,1554,1555],{"id":228,"slug":4575,"dossier":47,"summary":4576,"aliases":4577,"sourceIds":4580,"published":4581,"modified":4582,"checkedAt":7,"severity":4583,"references":4586,"versionKeys":4599,"packageCount":32,"repositoryCount":2327},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[4578,4579],"CVE-2026-24486","PYSEC-2026-1852",[228,4579],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[4584],{"type":1216,"score":4585},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4587,4589,4591,4593,4594,4596,4597],{"type":1231,"url":4588},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1220,"url":4590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1231,"url":4592},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1228,"url":1823},{"type":1231,"url":4595},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1228,"url":1825},{"type":1220,"url":4598},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[1942,1943,1829],{"id":229,"slug":4601,"dossier":47,"summary":4602,"aliases":4603,"sourceIds":4606,"published":4607,"modified":4608,"checkedAt":7,"severity":4609,"references":4611,"versionKeys":4633,"packageCount":32,"repositoryCount":368},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[4604,4605],"CVE-2026-48818","PYSEC-2026-2281",[229,4605],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[4610],{"type":1216,"score":3349},[4612,4614,4615,4617,4619,4621,4623,4625,4627,4629,4631],{"type":1220,"url":4613},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1228,"url":2317},{"type":1231,"url":4616},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1231,"url":4618},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1220,"url":4620},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1220,"url":4622},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1220,"url":4624},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1220,"url":4626},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":1425,"url":4628},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1225,"url":4630},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1225,"url":4632},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1308,1309,1310,2324,2325,2326,2365,2366,2367],{"id":230,"slug":4635,"dossier":47,"summary":3417,"aliases":4636,"sourceIds":4639,"published":3422,"modified":4640,"checkedAt":7,"severity":4641,"references":4644,"versionKeys":4658,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[4637,4638],"CVE-2024-11393","PYSEC-2024-228",[230,4638],"2026-09-10T03:50:55.987633957Z",[4642,4643],{"type":1216,"score":3426},{"type":1216,"score":2877},[4645,4647,4648,4649,4650,4652,4654,4656],{"type":1220,"url":4646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1231,"url":3432},{"type":1231,"url":3434},{"type":1228,"url":1262},{"type":1231,"url":4651},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1231,"url":4653},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1220,"url":4655},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1220,"url":4657},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1269],{"id":231,"slug":4660,"dossier":47,"summary":4661,"aliases":4662,"sourceIds":4666,"published":4667,"modified":4668,"checkedAt":7,"severity":4669,"references":4674,"versionKeys":4690,"packageCount":32,"repositoryCount":426},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[4663,4664,4665],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[231],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[4670,4672],{"type":1216,"score":4671},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1322,"score":4673},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4675,4677,4679,4681,4683,4684,4686,4688],{"type":1220,"url":4676},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1231,"url":4678},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1231,"url":4680},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1231,"url":4682},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1228,"url":1432},{"type":1231,"url":4685},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1231,"url":4687},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1231,"url":4689},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1444,1445],{"id":232,"slug":4692,"dossier":47,"summary":4693,"aliases":4694,"sourceIds":4697,"published":4698,"modified":4699,"checkedAt":7,"severity":4700,"references":4702,"versionKeys":4709,"packageCount":32,"repositoryCount":368},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[4695,4696],"CVE-2026-48817","PYSEC-2026-2280",[232,4696],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[4701],{"type":1216,"score":1356},[4703,4705,4707,4708],{"type":1220,"url":4704},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1220,"url":4706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1228,"url":2317},{"type":1220,"url":4626},[1308,1309,1310,2324,2325,2326,2365,2366,2367],{"id":233,"slug":4711,"dossier":47,"summary":4712,"aliases":4713,"sourceIds":4715,"published":4716,"modified":4717,"checkedAt":7,"severity":4718,"references":4720,"versionKeys":4732,"packageCount":32,"repositoryCount":42},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[4714],"CVE-2026-80047",[233],"2026-09-01T15:31:13Z","2026-10-01T00:00:04.718526734Z",[4719],{"type":1216,"score":4020},[4721,4723,4725,4727,4728,4730],{"type":1220,"url":4722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":1231,"url":4724},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":1231,"url":4726},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":1228,"url":1262},{"type":1231,"url":4729},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":1231,"url":4731},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",[1270,1271,1272,1273,1274,1275,1276,1277,4733],"pypi:transformers@5.8.0",{"id":234,"slug":4735,"dossier":47,"summary":4736,"aliases":4737,"sourceIds":4740,"published":4741,"modified":4742,"checkedAt":7,"severity":4743,"references":4746,"versionKeys":4752,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[4738,4739],"CVE-2026-54274","PYSEC-2026-2108",[234,4739],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[4744,4745],{"type":1322,"score":1594},{"type":1216,"score":1325},[4747,4749,4750],{"type":1220,"url":4748},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1228,"url":1330},{"type":1225,"url":4751},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1334,1335,1336,1337,1338,1339,1340,1341,1342],{"id":235,"slug":4754,"dossier":47,"summary":4755,"aliases":4756,"sourceIds":4760,"published":4761,"modified":4762,"checkedAt":7,"severity":4763,"references":4766,"versionKeys":4780,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4757,4758,4759],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[235,4759],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[4764],{"type":1216,"score":4765},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4767,4769,4771,4773,4775,4777,4778],{"type":1220,"url":4768},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1220,"url":4770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1231,"url":4772},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1225,"url":4774},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1231,"url":4776},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1228,"url":1544},{"type":1231,"url":4779},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1551],{"id":236,"slug":4782,"dossier":90,"summary":4783,"aliases":4784,"sourceIds":4788,"published":4789,"modified":4790,"checkedAt":7,"severity":4791,"references":4794,"versionKeys":4805,"packageCount":32,"repositoryCount":104},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[4785,4786,4787],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[236,4787],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[4792],{"type":1216,"score":4793},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4795,4797,4799,4801,4803,4804],{"type":1264,"url":4796},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1220,"url":4798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1225,"url":4800},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1225,"url":4802},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1228,"url":1544},{"type":1220,"url":2016},[1548,1549,1550,1551,1552,1553,1554,1555,1556],{"id":237,"slug":4807,"dossier":47,"summary":4808,"aliases":4809,"sourceIds":4812,"published":4813,"modified":4814,"checkedAt":7,"severity":4815,"references":4818,"versionKeys":4831,"packageCount":32,"repositoryCount":1991},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[4810,4811],"CVE-2026-9856","PYSEC-2026-3929",[237,4811],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[4816],{"type":1216,"score":4817},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4819,4821,4823,4825,4826,4828,4829],{"type":1220,"url":4820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":1231,"url":4822},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":1231,"url":4824},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":1228,"url":1262},{"type":1231,"url":4827},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":1228,"url":1469},{"type":1220,"url":4830},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[1269,1270,1271,1272,1273,1274,1275,1276,1277,4733],{"id":238,"slug":4833,"dossier":47,"summary":83,"aliases":4834,"sourceIds":4837,"published":4838,"modified":4839,"checkedAt":7,"severity":4840,"references":4842,"versionKeys":4851,"packageCount":32,"repositoryCount":426},"pysec-2025-198-62b25ed4",[4835,4836],"BIT-pytorch-2025-46148","CVE-2025-46148",[238],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[4841],{"type":1216,"score":2570},[4843,4845,4847,4849],{"type":1220,"url":4844},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1220,"url":4846},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1425,"url":4848},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1225,"url":4850},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1444,1445],{"id":239,"slug":4853,"dossier":47,"summary":83,"aliases":4854,"sourceIds":4857,"published":4858,"modified":4859,"checkedAt":7,"severity":4860,"references":4862,"versionKeys":4868,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[4855,4856],"BIT-pytorch-2025-46149","CVE-2025-46149",[239],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[4861],{"type":1216,"score":2570},[4863,4864,4866],{"type":1220,"url":4844},{"type":1425,"url":4865},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1225,"url":4867},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1445],{"id":240,"slug":4870,"dossier":47,"summary":83,"aliases":4871,"sourceIds":4874,"published":4875,"modified":4876,"checkedAt":7,"severity":4877,"references":4879,"versionKeys":4887,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[4872,4873],"BIT-pytorch-2025-46150","CVE-2025-46150",[240],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4878],{"type":1216,"score":2570},[4880,4881,4883,4885],{"type":1220,"url":4844},{"type":1425,"url":4882},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1425,"url":4884},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1225,"url":4886},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1445],{"id":241,"slug":4889,"dossier":47,"summary":83,"aliases":4890,"sourceIds":4893,"published":4894,"modified":4895,"checkedAt":7,"severity":4896,"references":4898,"versionKeys":4904,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4891,4892],"BIT-pytorch-2025-46152","CVE-2025-46152",[241],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4897],{"type":1216,"score":1289},[4899,4900,4902],{"type":1220,"url":4844},{"type":1425,"url":4901},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1225,"url":4903},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1445],{"id":242,"slug":4906,"dossier":47,"summary":83,"aliases":4907,"sourceIds":4910,"published":4911,"modified":4912,"checkedAt":7,"severity":4913,"references":4915,"versionKeys":4925,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4908,4909],"BIT-pytorch-2025-46153","CVE-2025-46153",[242],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4914],{"type":1216,"score":2570},[4916,4918,4919,4921,4923],{"type":1231,"url":4917},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1220,"url":4844},{"type":1220,"url":4920},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1425,"url":4922},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1225,"url":4924},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1445],{"id":243,"slug":4927,"dossier":47,"summary":83,"aliases":4928,"sourceIds":4931,"published":4932,"modified":4933,"checkedAt":7,"severity":4934,"references":4936,"versionKeys":4941,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[4929,4930],"BIT-pytorch-2025-55551","CVE-2025-55551",[243],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4935],{"type":1216,"score":1325},[4937,4939],{"type":1220,"url":4938},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1425,"url":4940},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1444,1445,1446,2456,2457,4089],{"id":244,"slug":4943,"dossier":47,"summary":83,"aliases":4944,"sourceIds":4947,"published":4948,"modified":4949,"checkedAt":7,"severity":4950,"references":4952,"versionKeys":4956,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[4945,4946],"BIT-pytorch-2025-55552","CVE-2025-55552",[244],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4951],{"type":1216,"score":1325},[4953,4954],{"type":1220,"url":4938},{"type":1425,"url":4955},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1444,1445,1446,2456,2457,4089],{"id":245,"slug":4958,"dossier":47,"summary":83,"aliases":4959,"sourceIds":4962,"published":4963,"modified":4964,"checkedAt":7,"severity":4965,"references":4967,"versionKeys":4973,"packageCount":32,"repositoryCount":407},"pysec-2025-205-fd5e58fd",[4960,4961],"BIT-pytorch-2025-55553","CVE-2025-55553",[245],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4966],{"type":1216,"score":1325},[4968,4969,4971],{"type":1220,"url":4938},{"type":1425,"url":4970},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1225,"url":4972},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1444,1445,1446],{"id":246,"slug":4975,"dossier":47,"summary":83,"aliases":4976,"sourceIds":4979,"published":4980,"modified":4981,"checkedAt":7,"severity":4982,"references":4984,"versionKeys":4988,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[4977,4978],"BIT-pytorch-2025-55554","CVE-2025-55554",[246],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4983],{"type":1216,"score":1289},[4985,4986],{"type":1220,"url":4938},{"type":1425,"url":4987},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1444,1445,1446,2456,2457,4089],{"id":247,"slug":4990,"dossier":47,"summary":83,"aliases":4991,"sourceIds":4994,"published":4995,"modified":4996,"checkedAt":7,"severity":4997,"references":4999,"versionKeys":5005,"packageCount":32,"repositoryCount":407},"pysec-2025-207-2abef3fc",[4992,4993],"BIT-pytorch-2025-55557","CVE-2025-55557",[247],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4998],{"type":1216,"score":1325},[5000,5001,5003],{"type":1220,"url":4938},{"type":1425,"url":5002},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1225,"url":5004},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1444,1445,1446],{"id":248,"slug":5007,"dossier":47,"summary":83,"aliases":5008,"sourceIds":5011,"published":5012,"modified":5013,"checkedAt":7,"severity":5014,"references":5016,"versionKeys":5022,"packageCount":32,"repositoryCount":407},"pysec-2025-208-6e93fe9d",[5009,5010],"BIT-pytorch-2025-55558","CVE-2025-55558",[248],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[5015],{"type":1216,"score":1325},[5017,5018,5020],{"type":1220,"url":4938},{"type":1425,"url":5019},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1225,"url":5021},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1444,1445,1446],{"id":249,"slug":5024,"dossier":47,"summary":83,"aliases":5025,"sourceIds":5028,"published":5029,"modified":5030,"checkedAt":7,"severity":5031,"references":5033,"versionKeys":5039,"packageCount":32,"repositoryCount":407},"pysec-2025-209-e6f352b0",[5026,5027],"BIT-pytorch-2025-55560","CVE-2025-55560",[249],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[5032],{"type":1216,"score":1325},[5034,5035,5037],{"type":1220,"url":4938},{"type":1425,"url":5036},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1225,"url":5038},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1444,1445,1446],{"id":250,"slug":5041,"dossier":47,"summary":83,"aliases":5042,"sourceIds":5044,"published":5045,"modified":5046,"checkedAt":7,"severity":5047,"references":5049,"versionKeys":5052,"packageCount":32,"repositoryCount":5053},"pysec-2025-211-d8bd15de",[5043],"CVE-2025-14920",[250],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[5048],{"type":1216,"score":1255},[5050],{"type":1220,"url":5051},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1269,1270,1271,1272,1273],5,{"id":251,"slug":5055,"dossier":47,"summary":83,"aliases":5056,"sourceIds":5058,"published":5059,"modified":5060,"checkedAt":7,"severity":5061,"references":5063,"versionKeys":5066,"packageCount":32,"repositoryCount":5053},"pysec-2025-212-a011b97d",[5057],"CVE-2025-14921",[251],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[5062],{"type":1216,"score":1255},[5064],{"type":1220,"url":5065},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1269,1270,1271,1272,1273],{"id":252,"slug":5068,"dossier":47,"summary":83,"aliases":5069,"sourceIds":5071,"published":5072,"modified":5073,"checkedAt":7,"severity":5074,"references":5076,"versionKeys":5079,"packageCount":32,"repositoryCount":5053},"pysec-2025-213-9043dc9b",[5070],"CVE-2025-14924",[252],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[5075],{"type":1216,"score":1255},[5077],{"type":1220,"url":5078},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1269,1270,1271,1272,1273],{"id":253,"slug":5081,"dossier":47,"summary":83,"aliases":5082,"sourceIds":5084,"published":5085,"modified":5086,"checkedAt":7,"severity":5087,"references":5089,"versionKeys":5092,"packageCount":32,"repositoryCount":5053},"pysec-2025-214-eb241255",[5083],"CVE-2025-14926",[253],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[5088],{"type":1216,"score":1255},[5090],{"type":1220,"url":5091},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1269,1270,1271,1272,1273],{"id":254,"slug":5094,"dossier":47,"summary":83,"aliases":5095,"sourceIds":5097,"published":5098,"modified":5099,"checkedAt":7,"severity":5100,"references":5102,"versionKeys":5105,"packageCount":32,"repositoryCount":5053},"pysec-2025-215-6064f491",[5096],"CVE-2025-14927",[254],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[5101],{"type":1216,"score":1255},[5103],{"type":1220,"url":5104},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1269,1270,1271,1272,1273],{"id":255,"slug":5107,"dossier":47,"summary":83,"aliases":5108,"sourceIds":5110,"published":5111,"modified":5112,"checkedAt":7,"severity":5113,"references":5115,"versionKeys":5118,"packageCount":32,"repositoryCount":5053},"pysec-2025-216-5708ed01",[5109],"CVE-2025-14928",[255],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[5114],{"type":1216,"score":1255},[5116],{"type":1220,"url":5117},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1269,1270,1271,1272,1273],{"id":256,"slug":5120,"dossier":47,"summary":83,"aliases":5121,"sourceIds":5123,"published":5124,"modified":5125,"checkedAt":7,"severity":5126,"references":5128,"versionKeys":5131,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[5122],"CVE-2025-14929",[256],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[5127],{"type":1216,"score":1255},[5129],{"type":1220,"url":5130},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1269,1270,1271,1272,1273,1274,1275,1276,1277],{"id":257,"slug":5133,"dossier":47,"summary":83,"aliases":5134,"sourceIds":5136,"published":5137,"modified":5138,"checkedAt":7,"severity":5139,"references":5141,"versionKeys":5144,"packageCount":32,"repositoryCount":379},"pysec-2025-218-39811fc3",[5135],"CVE-2025-14930",[257],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[5140],{"type":1216,"score":1255},[5142],{"type":1220,"url":5143},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1269,1270,1271,1272,1273,1274],{"id":258,"slug":5146,"dossier":47,"summary":83,"aliases":5147,"sourceIds":5150,"published":5151,"modified":5152,"checkedAt":7,"severity":5153,"references":5155,"versionKeys":5166,"packageCount":32,"repositoryCount":5167},"pysec-2026-139-96951ff6",[5148,5149],"BIT-pytorch-2026-4538","CVE-2026-4538",[258],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[5154],{"type":1216,"score":4020},[5156,5158,5160,5162,5164],{"type":1231,"url":5157},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1220,"url":5159},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1220,"url":5161},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1425,"url":5163},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1225,"url":5165},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4296,1444,1445,1446,2456,2457,4089,4090,4091,4092],14,{"id":259,"slug":5169,"dossier":90,"summary":83,"aliases":5170,"sourceIds":5173,"published":5174,"modified":5175,"checkedAt":7,"severity":5176,"references":5179,"versionKeys":5194,"packageCount":32,"repositoryCount":104},"pysec-2026-2132-627bf7c7",[5171,5172],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[259],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5177],{"type":1216,"score":5178},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5180,5182,5184,5186,5188,5190,5192],{"type":1231,"url":5181},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1231,"url":5183},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1220,"url":5185},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1220,"url":5187},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1425,"url":5189},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1225,"url":5191},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1264,"url":5193},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5195,5196,5197,5198,5199,5200],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":260,"slug":5202,"dossier":47,"summary":83,"aliases":5203,"sourceIds":5208,"published":5209,"modified":5210,"checkedAt":7,"severity":5211,"references":5213,"versionKeys":5229,"packageCount":32,"repositoryCount":4093},"pysec-2026-2286-8795b007",[5204,5205,5206,5207],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[260],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5212],{"type":1216,"score":2877},[5214,5216,5218,5219,5221,5223,5225,5227],{"type":1231,"url":5215},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1231,"url":5217},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1220,"url":3472},{"type":1220,"url":5220},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1220,"url":5222},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1425,"url":5224},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1425,"url":5226},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1225,"url":5228},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1444,1445,1446,2456,2457,4089,4090,4091,4092],{"id":261,"slug":5231,"dossier":47,"summary":83,"aliases":5232,"sourceIds":5234,"published":5235,"modified":5236,"checkedAt":7,"severity":5237,"references":5240,"versionKeys":5249,"packageCount":32,"repositoryCount":2327},"pysec-2026-3716-664d8bb8",[5233],"CVE-2026-66007",[261],"2026-07-24T15:19:07.493Z","2026-08-19T13:45:02.994125715Z",[5238],{"type":1322,"score":5239},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5241,5243,5245,5247],{"type":1425,"url":5242},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fissues\u002F8324",{"type":1225,"url":5244},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fcommit\u002Ff989ef9b4cc6c0039a7a82458eebca49e2b58b4b",{"type":1225,"url":5246},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fpull\u002F8325",{"type":1225,"url":5248},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdatasets-path-traversal-via-unsanitized-file-name-metadata",[5250,5251,5252,5253,5254,5255],"pypi:datasets@3.2.0","pypi:datasets@3.5.1","pypi:datasets@3.6.0","pypi:datasets@4.3.0","pypi:datasets@4.4.1","pypi:datasets@4.8.5",1790829721612]